Report Overview
Visitedpublic
2024-02-05 09:04:37
Tags
Submit Tags
URL
cl.s51.exct.net/?qs=59d192e1409463eb49f4c9c5c8df1d269291f5e078c504df16a23730dde5fad81a2d6345da27dcf5a363d474afd4747c396f7cca27497dda
Finishing URL
jemi.so/no-assur
IP / ASN
159.92.152.8
#14340 SALESFORCE
Title
My

Detections

urlquery
0
Network Intrusion Detection
23
Threat Detection Systems
2

Host Summary

HostRankRegisteredFirst SeenLast Seen
o467631.ingest.sentry.io
unknown2012-04-072022-07-18 19:53:472024-02-02 21:21:00
fonts.gstatic.com
unknown2008-02-112014-09-09 02:40:212024-02-04 18:15:12
app.posthog.com
927462020-01-232020-01-24 00:46:512024-02-04 07:30:17
cl.s51.exct.net
unknown2004-09-242021-12-16 05:12:282024-02-02 11:55:13
jemi.so
unknown2021-07-312021-07-31 21:06:022024-02-04 09:00:57
cdn.jsdelivr.net
4392012-05-162012-09-30 02:15:092024-02-04 18:13:27
www.googletagmanager.com
752011-11-112013-05-22 04:07:372024-02-04 18:33:17
firebasestorage.googleapis.com
99372005-01-252017-01-30 03:42:502024-02-04 21:44:27
fonts.googleapis.com
88772005-01-252013-06-10 22:14:262024-02-04 18:15:57
abreai.link
unknown2021-05-062021-05-06 23:26:262024-01-31 07:58:42

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IP
76.76.21.98
ET INFO Observed Domain used for Phishing in TLS SNI (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)
lowClient IPInternal IPET INFO DNS Query to Domain used for Phishing (jemi .so)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumabreai.linkSinkholed

ThreatFox

No alerts detected


JavaScript (28)

HTTP Transactions (47)

URLIPResponseSize
GET cl.s51.exct.net/?qs=59d192e1409463eb49f4c9c5c8df1d269291f5e078c504df16a23730dde5fad81a2d6345da27dcf5a363d474afd4747c396f7cca27497dda
159.92.152.8302 Found142 B
GET jemi.so/fonts/PlusJakartaSans-Medium.woff2
76.76.21.98200 OK41 kB
GET jemi.so/fonts/fonts.css
76.76.21.98200 OK657 B
GET jemi.so/fonts/PlusJakartaSans-Bold.woff2
76.76.21.98200 OK41 kB
GET jemi.so/_next/image?url=https%3A%2F%2Ffirebasestorage.googleapis.com%2Fv0%2Fb%2Fjemi-testing.appspot.com%2Fo%2Fuploads%252FY3gs6qZXptX7LNoaRkP2IfqoIyo1%252F8zzundr8iqn1z4rvo69mvo-1705673278648.jpeg%3Falt%3Dmedia%26token%3Dad0ba0ed-b502-4339-9786-4ae09f2f36c9&w=1920&q=75
76.76.21.98200 OK34 kB
GET cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css
151.101.65.229200 OK26 kB
GET www.googletagmanager.com/gtag/js?id=UA-158661454-5
142.250.74.168200 OK52 kB
GET www.googletagmanager.com/gtm.js?id=GTM-5XNKWSK
142.250.74.168200 OK84 kB
POST o467631.ingest.sentry.io/api/5494296/envelope/?sentry_key=7a464dcf9e1a4530b4950fc23c9aa337&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.13.0
34.120.195.249200 OK2 B
GET jemi.so/_next/static/chunks/main-4421775ead306739.js
76.76.21.98200 OK107 kB
GET fonts.gstatic.com/s/newsreader/v20/cY9VfjOCX1hbuyalUrK49dLac06G1ZGsZBtoBAbNJYQ.woff2
216.58.207.227200 OK57 kB
GET fonts.gstatic.com/s/newsreader/v20/cY9VfjOCX1hbuyalUrK49dLac06G1ZGsZBtoBAbNJYQ.woff2
216.58.207.227200 OK57 kB
GET jemi.so/_next/static/chunks/170-1cbcffea1cd951ad.js
76.76.21.98200 OK97 kB
GET www.googletagmanager.com/gtag/js?id=G-D4VQTX6J04&l=dataLayer&cx=c
142.250.74.168200 OK93 kB
GET jemi.so/_next/static/chunks/8764-86ee4dec8701906d.js
76.76.21.98200 OK8.1 kB
GET jemi.so/apple-touch-icon.png
76.76.21.98200 OK23 kB
GET jemi.so/_next/static/chunks/5933.f2f57e0652c48536.js
76.76.21.98200 OK5.4 kB
GET firebasestorage.googleapis.com/v0/b/jemi-testing.appspot.com/o/blocks%2Fn5boC2DJypSWVAq804ZW%2F0324h84hr7yj01qy0ryyllrx--RGB-Neg.png?alt=media&token=45a29e1d-de7f-4c68-8837-2c9662034540
142.250.74.74200 OK39 kB
GET jemi.so/_next/static/chunks/pages/_app-64661cb84870842a.js
76.76.21.98200 OK155 kB
GET jemi.so/_next/static/chunks/4474-5e5b3c270d0d0f4e.js
76.76.21.98200 OK109 kB
GET jemi.so/_next/static/g0PE8f_wbZr8vYEYSmJ1N/_ssgManifest.js
76.76.21.98200 OK3.0 kB
GET jemi.so/_next/static/chunks/5675-59dde0e98cb22e67.js
76.76.21.98200 OK9.2 kB
GET jemi.so/_next/static/chunks/7758-4197ef430fa4064e.js
76.76.21.98200 OK28 kB
GET jemi.so/_next/static/chunks/5558-155e0b3da56e3635.js
76.76.21.98200 OK25 kB
GET jemi.so/_next/static/chunks/pages/_site/%5Busername%5D-5b20a92d610723ad.js
76.76.21.98200 OK4.7 kB
GET jemi.so/_next/static/chunks/5720-b4ce86a272a7def2.js
76.76.21.98200 OK28 kB
GET fonts.googleapis.com/css2?display=swap&family=Newsreader:ital,wght@0,400;0,700;1,400;1,700&family=Newsreader:ital,wght@0,400;0,700;1,400;1,700
142.250.74.74200 OK5.0 kB
GET jemi.so/favicon-16x16.png
76.76.21.98200 OK667 B
GET abreai.link/ruol5
187.108.207.224301 Moved Permanently52 kB
GET jemi.so/_next/static/chunks/9119-1773690144b435e3.js
76.76.21.98200 OK33 kB
GET jemi.so/_next/static/g0PE8f_wbZr8vYEYSmJ1N/_buildManifest.js
76.76.21.98200 OK20 kB
GET jemi.so/_next/static/css/ec35c2edb97e1c77.css
76.76.21.98200 OK12 kB
GET jemi.so/_next/static/css/ec35c2edb97e1c77.css
76.76.21.98200 OK12 kB
GET jemi.so/_next/static/chunks/1370-85102a4a15630c01.js
76.76.21.98200 OK23 kB
GET jemi.so/_next/static/chunks/framework-640bc13ca36d2ce7.js
76.76.21.98200 OK150 kB
GET jemi.so/_next/static/chunks/500f6f06-04aadfe60e3aace1.js
76.76.21.98200 OK81 kB
GET jemi.so/_next/static/chunks/1767.d802771f63489659.js
76.76.21.98200 OK3.8 kB
HEAD jemi.so/_next/data/g0PE8f_wbZr8vYEYSmJ1N/no-assur.json?username=no-assur
76.76.21.98200 OK0 B
GET jemi.so/_next/static/chunks/3197-844c8163e526cc23.js
76.76.21.98200 OK72 kB
POST app.posthog.com/e/?ip=1&_=1707123856820
104.22.58.181200 OK13 B
POST app.posthog.com/decide/?v=2&ip=1&_=1707123856821
104.22.58.181200 OK427 B
GET jemi.so/no-assur
76.76.21.98200 OK52 kB
GET jemi.so/_next/static/chunks/webpack-5ee85024fb4420f2.js
76.76.21.98200 OK11 kB
GET fonts.googleapis.com/css?family=Newsreader:ital,wght@0,400;0,700;1,400;1,700
142.250.74.74200 OK3.6 kB
GET jemi.so/_next/static/css/51e946ef9a7721c1.css
76.76.21.98200 OK58 kB
GET jemi.so/_next/static/chunks/8929-fdb4f64c0b4ec8f8.js
76.76.21.98200 OK112 kB
GET jemi.so/_next/data/g0PE8f_wbZr8vYEYSmJ1N/no-assur.json?username=no-assur
76.76.21.98200 OK33 kB