Report Overview

  1. Submitted URL

    travellink.onelink.me/6W7x?pid=TransactionalEmails&af_adset=ConfirmationEmail&af_ad=ConfirmationEmail_ICE_ICE3171_A_PRIME_KEEP1792_A&is_retargeting=true&af_web_dp=https://tukix.net/qp9sKz1A43Pt/news/e66d1110b8d492a239aeeb3ea4c8363c////bWV3aW5nQG9ha3ZpZXdiYW5rLmNvbQ==

  2. IP

    95.101.11.186

    ASN

    #20940 Akamai International B.V.

  3. Submitted

    2024-04-16 15:19:12

    Access

    public

  4. Website Title

    Redirecting...

  5. Final URL

    k3ed.icu/main/

  6. urlquery detections

    Suspicious - Anti-debugging code

Detections

  1. urlquery

    2

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
cdnjs.cloudflare.com2352009-02-172015-04-172024-04-16
outlook.office.com771999-04-202018-12-212019-01-03
travellink.onelink.meunknown2014-11-262019-12-192024-04-15
tukix.netunknown2008-09-092015-06-192024-04-16
k3ed.icuunknown2024-04-122024-04-122024-04-16
challenges.cloudflare.comunknown2009-02-172021-10-202024-04-16

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (45)

HTTP Transactions (18)

URLIPResponseSize
travellink.onelink.me/6W7x?pid=TransactionalEmails&af_adset=ConfirmationEmail&af_ad=ConfirmationEmail_ICE_ICE3171_A_PRIME_KEEP1792_A&is_retargeting=true&af_web_dp=https://tukix.net/qp9sKz1A43Pt/news/e66d1110b8d492a239aeeb3ea4c8363c////bWV3aW5nQG9ha3ZpZXdiYW5rLmNvbQ==
95.101.11.25 0 B
tukix.net/qp9sKz1A43Pt/news/e66d1110b8d492a239aeeb3ea4c8363c////bWV3aW5nQG9ha3ZpZXdiYW5rLmNvbQ==?pid=TransactionalEmails&af_adset=ConfirmationEmail&af_ad=ConfirmationEmail_ICE_ICE3171_A_PRIME_KEEP1792_A&is_retargeting=true
183.181.83.141 0 B
k3ed.icu/?e=mewing@oakviewbank.com
194.5.212.157302 Found0 B
k3ed.icu/main/
194.5.212.157200 OK3.5 kB
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.17.2.184302 Found0 B
k3ed.icu/favicon.ico
194.5.212.157200 OK135 B
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/324204134:1713278426:egFrdmcsAkOksN6BDaC7MvRm4oWLi_ncqAR6fm0fy5w/875526650c775689/d323bc8977da388
104.17.2.184 81 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1515894015:1713278200:wInIyNpxWnVg5Q74Wi7Z7rp43VLvZBCgaUxZn-hVXPM/875526c60c9c5689/790bc349580a652
104.17.2.184200 OK23 kB
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
104.17.24.14 28 kB
outlook.office.com/mail/favicon.ico
40.99.202.50 7.9 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/lcadk/0x4AAAAAAAW0WK3FVyMLGCYF/auto/normal
104.17.2.184200 OK78 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=875526c60c9c5689
104.17.2.184200 OK426 kB
k3ed.icu/main/main.php
0.0.0.0 0 B
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv1/toL804vmeDYrjlL/lcadk/0x4AAAAAAAW0WK3FVyMLGCYF/auto/normal
104.17.2.184200 OK78 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D
104.17.2.184200 OK61 B
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/875526c60c9c5689/1713280743628/D5lJHGkHJH2EB3K
104.17.2.184200 OK61 B
challenges.cloudflare.com/turnstile/v0/b/bcc5fb0a8815/api.js?onload=onloadTurnstileCallback
104.17.2.184200 OK41 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/875526c60c9c5689/1713280743632/8d6ce0129fda6410f6fd23b289a8ba06da16b2fcb65a311d7a4adaa2debc3523/b2-Q9cATa19F1u1
104.17.2.184401 Unauthorized1 B