Report Overview

  1. Visited public
    2023-12-05 03:16:48
  2. URL

    pub-166b904ae438414b90587eff4ad1e897.r2.dev/2fait.html?30.YmtlbHRvbkBidWVzaW5nY29ycC5jb20=/

  3. Finishing URL

    pub-166b904ae438414b90587eff4ad1e897.r2.dev/2fait.html?30.YmtlbHRvbkBidWVzaW5nY29ycC5jb20=/

  4. IP / ASN
    104.18.2.35

    #13335 CLOUDFLARENET

    Title
    DocuSign Login - Enter your password to sign in
  5. Suspicious - Suspicious Javascript code

Detections
urlquery
2
Network Intrusion Detection
2
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
pub-166b904ae438414b90587eff4ad1e897.r2.devunknown2022-08-232023-12-04 18:11:342023-12-05 01:49:52
ajax.googleapis.com129052005-01-252013-08-16 11:51:312023-12-04 08:14:01
logo.clearbit.com273442003-07-042015-06-30 18:39:452023-12-04 06:57:59

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IPInternal IP
lowClient IPInternal IP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (4)

HTTP Transactions (3)

URLIPResponseSize
pub-166b904ae438414b90587eff4ad1e897.r2.dev/2fait.html?30.YmtlbHRvbkBidWVzaW5nY29ycC5jb20=/
104.18.3.35200 OK165 kB
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.106200 OK30 kB
logo.clearbit.com/
54.230.111.26400 Bad Request23 B