Report Overview

  1. Visited public
    2025-05-06 21:16:16
  2. URL

    005.free-counters.co.uk/count-072.pl?count=reg22&type=microblack&prog=hit&cmd=link&url=royalleaffashion.com/c/409098/c21vcmdhbkBzbHVycG1haWwubmV0

  3. Finishing URL

    offhz.vestusiab.com/abkiicyrvmgttmnxcktltonzxvm4y3wpquym2vwartmikr1n?YEWNZWIEWPAPSDRGUP

  4. IP / ASN
    37.187.24.74

    #16276 OVH SAS

    Title
    Profile Security Login
  5. Phishing - Generic phishing

    Suspicious - Anti-debugging code

    Phishing - Tycoon Phishing Kit

Detections
urlquery
38
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
github.com1423unknownNo dataNo data
objects.githubusercontent.com134060unknownNo dataNo data
developers.cloudflare.com592034unknownNo dataNo data
code.jquery.com634unknownNo dataNo data
ok4static.oktacdn.com16592unknownNo dataNo data
get.geojs.io17418unknownNo dataNo data
offhz.vestusiab.comunknownunknownNo dataNo data
challenges.cloudflare.comunknownunknownNo dataNo data
eoq4s.smjaskgdtoyq.esunknownunknownNo dataNo data
cloudmasonry.com345419unknownNo dataNo data
res-1.cdn.office.net1093unknownNo dataNo data
addins.verityrms.comunknownunknownNo dataNo data
royalleaffashion.comunknownunknownNo dataNo data
cdnjs.cloudflare.com235unknownNo dataNo data
pzlc8ebolevtd2t93chvh0fpzco0pjgaeix6dj2pnyxfgfr1fvdjxclt2kh.tvbmys.esunknownunknownNo dataNo data
aadcdn.msauth.net1421unknownNo dataNo data
005.free-counters.co.ukunknownunknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IP 104.26.1.100

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (31)

HTTP Transactions (53)

URLIPResponseSize
offhz.vestusiab.com/GDSherpa-bold.woff
104.21.96.1200 OK36 kB
offhz.vestusiab.com/GDSherpa-regular.woff2
104.21.96.1200 OK29 kB
royalleaffashion.com/c/409098/c21vcmdhbkBzbHVycG1haWwubmV0
103.159.36.91200 OK0 B
offhz.vestusiab.com/klRP2XxAf25ccVHrrtWiZSRpFTH5GWfhdHEZvMwxBSNewC3lr5HnAcUmKVPo1Q78170
104.21.96.1200 OK7.4 kB
developers.cloudflare.com/favicon.png
104.16.2.189200 OK937 B
challenges.cloudflare.com/turnstile/v0/b/701fd2559006/api.js
104.18.94.41200 OK48 kB
offhz.vestusiab.com/iZth3V2uyphCyUg!h/*c21vcmdhbkBzbHVycG1haWwubmV0
104.21.96.1200 OK15 kB
code.jquery.com/jquery-3.6.0.min.js
151.101.194.137200 OK90 kB
offhz.vestusiab.com/favicon.ico
0.0.0.0 0 B
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
offhz.vestusiab.com/34XPlG1QQCXkWOTabEJUoUT6717
104.21.96.1200 OK28 kB
offhz.vestusiab.com/efBt0VymAcBJQVBLH1pZMUxmqkljKeA4L1A6WcaxP90150
104.21.96.1200 OK270 B
offhz.vestusiab.com/iZth3V2uyphCyUg!h/*c21vcmdhbkBzbHVycG1haWwubmV0
104.21.96.1200 OK25 kB
ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
3.167.2.112200 OK223 kB
offhz.vestusiab.com/qrmGHwDKLYFDuiNDJjjTL73bYiXkAkMwPJ9YHozyY412hCOmKkz7zzojVKm7ZOb0D3YRjgx1vbuvhcd240
104.21.96.1200 OK9.6 kB
offhz.vestusiab.com/rsJjCGpj3CWOGVlmpqWP97x13ijqzfyqJL0nAATD1IpO8ywJ6UsGsyPucd192
104.21.96.1200 OK268 B
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
code.jquery.com/jquery-3.6.0.min.js
151.101.194.137200 OK90 kB
github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js
140.82.121.4302 Found10 kB
offhz.vestusiab.com/GDSherpa-bold.woff2
104.21.96.1200 OK28 kB
ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
3.167.2.112200 OK11 kB
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
offhz.vestusiab.com/mnbfbzu4su6YvZ2wBmgFppEPNFcc6nS62zijxIxUPtPymRFXTA84Kf2C0aqFHlDw4JEIuv220
104.21.96.1200 OK1.9 kB
offhz.vestusiab.com/GDSherpa-regular.woff
104.21.96.1200 OK37 kB
eoq4s.smjaskgdtoyq.es/bhanchod!ashi03t
172.67.188.38200 OK1 B
get.geojs.io/v1/ip/geo.json
104.26.1.100200 OK337 B
offhz.vestusiab.com/kfnyDT6Iylf4KwKFk9cAtk9q7aHglIKWe6hpmZjy
104.21.96.1200 OK287 B
offhz.vestusiab.com/ijWvh2OLTqcdb0EfW2kYnItPTPQGkkYHpgiwYZKAmnBHE2s47qWxPdWn1aeSn4ejBnqxP12208
104.21.96.1200 OK25 kB
offhz.vestusiab.com/zu06f0Rz7WtFdDIGrgF5FF6mX1zfq9TCxKAHW815yo
104.21.96.1200 OK20 B
ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
3.167.2.112200 OK10 kB
aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
13.107.246.53200 OK3.6 kB
offhz.vestusiab.com/qrmxFLy7wQfqTS3v4RTFMHcuHWXRlWmn6JYtTO21ynqSEr45140
104.21.96.1200 OK892 B
objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250506%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250506T211359Z&X-Amz-Expires=300&X-Amz-Signature=e9b230cced4524fd3ae59bb14a4f183da4c0f8e76cd1a97ad86e7aa4067882ce&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
185.199.110.133200 OK10 kB
offhz.vestusiab.com/abkiicyrvmgttmnxcktltonzxvm4y3wpquym2vwartmikr1n?YEWNZWIEWPAPSDRGUP
104.21.96.1200 OK1.3 MB
offhz.vestusiab.com/uv9AGInIXuCIHOpI7RuYkBsta7Q88ZNrqq12124
104.21.96.1200 OK644 B
pzlc8ebolevtd2t93chvh0fpzco0pjgaeix6dj2pnyxfgfr1fvdjxclt2kh.tvbmys.es/6473284663501235954203zwmNBmSGDZSWGYNKETTNJYQPMUBKSAPFGFQIDOYKFLFpqdvRwS5GPgyfCXtWl3k12RAwx40
104.21.23.197200 OK536 B
offhz.vestusiab.com/GDSherpa-vf.woff2
104.21.96.1200 OK44 kB
code.jquery.com/jquery-3.6.0.min.js
151.101.194.137200 OK90 kB
offhz.vestusiab.com/yz7q42YD9AuzUV1I0g2zLtJUBvNOthL0foprrunV2hnarEoHBvgPb190172
104.21.96.1200 OK2.9 kB
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
005.free-counters.co.uk/count-072.pl?count=reg22&type=microblack&prog=hit&cmd=link&url=royalleaffashion.com/c/409098/c21vcmdhbkBzbHVycG1haWwubmV0
37.187.24.74302 Redirect0 B
offhz.vestusiab.com/favicon.ico
104.21.96.1404 Not Found0 B
offhz.vestusiab.com/34ZNIypSshYXHQZE4GRxmeOMghTRFTYcmquiWgwjMI67110
104.21.96.1200 OK291 kB
offhz.vestusiab.com/xymovGx4QQpirslcd28
104.21.96.1200 OK36 kB
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.18.94.41302 Found48 kB
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
offhz.vestusiab.com/GDSherpa-vf2.woff2
104.21.96.1200 OK93 kB
cloudmasonry.com/wp-content/uploads/2020/06/DocuSign-Logo.png
192.124.249.161403 Forbidden0 B
offhz.vestusiab.com/stH0LzoxBCGj2NwMGWFvlGjg8fmMAstScwy8Y673lewWjtofq46I3Ic4DzmgWn42RMgh260
104.21.96.1200 OK18 kB
005.free-counters.co.uk/count-072.pl?count=reg22&type=microblack&prog=hit&cmd=link&url=royalleaffashion.com/c/409098/c21vcmdhbkBzbHVycG1haWwubmV0
0.0.0.0 0 B
res-1.cdn.office.net/officeonline/hashed/83987e0f63d43f20/we_version2.png
23.36.76.120200 OK25 kB
cloudmasonry.com/wp-content/uploads/2020/06/DocuSign-Logo.png
192.124.249.161403 Forbidden0 B
addins.verityrms.com/assets/icon-80.png
52.70.72.151200 OK4.9 kB