Report Overview

  1. Visited public
    2025-06-18 11:28:31
  2. URL

    expodais.com/wp-includes/re/?

  3. Finishing URL

    expodais.com/wp-includes/re/?

  4. IP / ASN
    172.67.211.165

    #13335 CLOUDFLARENET

    Title
    Securely Proceed To Sign-In
  5. Phishing - Microsoft

    Suspicious - Anti-debugging code

    Phishing - Tycoon Phishing Kit

Detections
urlquery
20
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
expodais.comunknown2024-01-152025-06-172025-06-17
aadcdn.msauth.net14212018-10-252018-11-192025-06-12
objects.githubusercontent.com1340602014-02-062021-11-012025-06-11
code.jquery.com6342005-12-102012-05-212025-06-11
img1.wsimg.com98932008-03-172012-06-202025-06-11
logincdn.msauth.net23302018-10-252019-04-232025-06-12
csp.secureserver.netunknown1998-03-302022-12-182025-06-12
cdnjs.cloudflare.com2352009-02-172012-05-232025-06-11
github.com14232007-10-092016-07-132025-06-11

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (13)

HTTP Transactions (25)

URLIPResponseSize
GET expodais.com/cdn-cgi/styles/cf.errors.css
104.21.23.143200 OK24 kB
GET aadcdn.msauth.net/shared/1.0/content/images/picker_verify_call_c2616792e1950f83fdef6e72dab97293.svg
13.107.246.53200 OK2.9 kB
GET logincdn.msauth.net/shared/5/images/picker_verify_email_59759b80e24a89c8cd02.svg
13.107.246.53200 OK268 B
GET objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250618%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250618T112808Z&X-Amz-Expires=300&X-Amz-Signature=36c4a249a7a0bb3fa20190003059878d73f635882bbd11c81bbd75076e3e7390&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
185.199.108.133200 OK10 kB
POST csp.secureserver.net/eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3
23.44.47.70202 Accepted2 B
GET expodais.com/cdn-cgi/images/icon-exclamation.png?1376755637
104.21.23.143200 OK452 B
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK48 kB
GET aadcdn.msauth.net/shared/1.0/content/images/close_790189870c9543725dc3f5a15fb25e46.svg
13.107.246.53200 OK270 B
GET aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
13.107.246.53200 OK3.7 kB
GET expodais.com/cdn-cgi/phish-bypass?atok=e9MGWWvbK4iA4sLwQBqeuV9Fhquvy.rj5lSu1tCl9rs-1750246090-0.0.1.1-%2Fwp-includes%2Fre%2F%3F
104.21.23.143301 Moved Permanently423 kB
GET github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js
140.82.121.3302 Found10 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK48 kB
GET expodais.com/favicon.ico
104.21.23.143200 OK0 B
GET expodais.com/favicon.ico
104.21.23.143200 OK0 B
GET aadcdn.msauth.net/shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg
13.107.246.53200 OK513 B
GET code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK90 kB
GET aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
13.107.246.53200 OK1.6 kB
POST csp.secureserver.net/eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb
23.44.47.70202 Accepted2 B
GET expodais.com/wp-includes/re/?
172.67.211.165403 Forbidden5.0 kB
GET expodais.com/wp-includes/re/?
104.21.23.143403 Forbidden4.6 kB
GET expodais.com/wp-includes/re/?
104.21.23.143200 OK423 kB
GET aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
13.107.246.53200 OK1.9 kB
GET img1.wsimg.com/traffic-assets/js/tccl.min.js
95.101.10.129301 Moved Permanently102 kB
GET img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js
95.101.10.129200 OK102 kB
GET aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg
13.107.246.53200 OK7.4 kB