Report Overview

  1. Visited public
    2025-01-30 02:56:21
  2. URL

    redirect.viglink.com/?format=go&jsonp=vglnk_1528334718170259&key=172579b97fa4d5e8c1a3c2918a03e499&libId=ji37348e01012xfz000DA40uyjt16&loc=jamestowndeals.com/rq3dv?q=Blumenau&btnG=Pesquisar&v=1&out=https://conceptsinwoodwork.com/pp/ppp/kwi4t5TVQsJWppmqXjkwA/Y3BhbGRpbm9Ac2x1cnBtYWlsLm5ldA==

  3. Finishing URL

    flin.zelidarne.ru/s3u3uho/#Mcpaldino@slurpmail.net

  4. IP / ASN
    54.154.93.172

    #16509 AMAZON-02

    Title
    secure profile access portal
  5. Phishing - Microsoft

    Phishing - Generic phishing

    Suspicious - Anti-debugging code

Detections
urlquery
25
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
redirect.viglink.com372472008-12-172012-09-092025-01-23
developers.cloudflare.com5920342009-02-172012-09-072025-01-28
objects.githubusercontent.com1340602014-02-062021-11-012025-01-29
conceptsinwoodwork.comunknown2010-10-062013-09-082024-09-22
challenges.cloudflare.comunknown2009-02-172021-10-202025-01-29
cdnjs.cloudflare.com2352009-02-172012-05-232025-01-29
code.jquery.com6342005-12-102012-05-212025-01-29
flin.zelidarne.ruunknown2025-01-162025-01-232025-01-23
ok4static.oktacdn.com165922014-11-112018-06-152025-01-28
github.com14232007-10-092016-07-132025-01-29

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IP 172.67.70.233

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (17)

HTTP Transactions (28)

URLIPResponseSize
redirect.viglink.com/?format=go&jsonp=vglnk_1528334718170259&key=172579b97fa4d5e8c1a3c2918a03e499&libId=ji37348e01012xfz000DA40uyjt16&loc=jamestowndeals.com/rq3dv?q=Blumenau&btnG=Pesquisar&v=1&out=https://conceptsinwoodwork.com/pp/ppp/kwi4t5TVQsJWppmqXjkwA/Y3BhbGRpbm9Ac2x1cnBtYWlsLm5ldA==
34.247.240.19302 0 B
conceptsinwoodwork.com/pp/ppp/kwi4t5TVQsJWppmqXjkwA/Y3BhbGRpbm9Ac2x1cnBtYWlsLm5ldA==
98.142.106.2200 OK0 B
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.18.95.41302 Found0 B
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK14 kB
code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK31 kB
developers.cloudflare.com/favicon.png
104.16.6.189200 OK937 B
code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK31 kB
flin.zelidarne.ru/xuv0QlatGZDTDgaDY5XEettCPe3hmcAgEV6Jj8uer
172.67.217.181200 OK25 kB
flin.zelidarne.ru/wvfahohqutgqupehymre834jaskmz1xvmrceojfdj?XVVVDVJOWVRDABYA
172.67.217.181200 OK91 kB
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK14 kB
flin.zelidarne.ru/GDSherpa-bold.woff2
172.67.217.181200 OK28 kB
challenges.cloudflare.com/turnstile/v0/g/dc9b2fe37153/api.js
104.18.95.41200 OK52 kB
flin.zelidarne.ru/GDSherpa-regular.woff2
172.67.217.181200 OK29 kB
flin.zelidarne.ru/GDSherpa-regular.woff
172.67.217.181200 OK37 kB
flin.zelidarne.ru/GDSherpa-vf.woff2
172.67.217.181200 OK44 kB
flin.zelidarne.ru/GDSherpa-vf2.woff2
172.67.217.181200 OK93 kB
ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
143.204.55.81200 OK11 kB
flin.zelidarne.ru/oppUXC6FOxBBIXLSyWin5VSI0YMiCefpx07j8otXEhOsTscl645140
172.67.217.181200 OK892 B
flin.zelidarne.ru/uvkMOBYG9V4ttwsGFFoue7T4LNJPUiAAqrxQNttVICD6drRVf34125
172.67.217.181200 OK644 B
github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js
140.82.121.3302 Found0 B
flin.zelidarne.ru/uvq4wwVesouhXabpM1TfJFebJc5Vuad21RrDemn0oekGloaepwMkAMqxiJNnQzzpGK7Ui4aRgh260
172.67.217.181200 OK18 kB
flin.zelidarne.ru/qrSAicSnBZlG15cfx7N8ZW4KekQCJwWn9nQi12O2kQ1lPfCmvdBI0Hhp3bCUEAef240
172.67.217.181200 OK9.6 kB
flin.zelidarne.ru/ghwmrbp4rmS6fumZoF1gn90kl9zlyWsybtYSaCecLeMrf12210
172.67.217.181200 OK25 kB
objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250130%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250130T025415Z&X-Amz-Expires=300&X-Amz-Signature=65271993f75645a7fa8a2a1a126237da5768a02264a345ca9feebc8d3ccfa556&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
185.199.109.133200 OK10 kB
ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2
143.204.55.81200 OK20 kB
flin.zelidarne.ru/klWwX5WCb5oEtx5Yl714ErEeMWxFPv5895v84H3I2BBGaRUPHFNgZgEABLCwDpdIw4ab230
172.67.217.181200 OK1.3 kB
flin.zelidarne.ru/tfZQGPUYcr37Ri4S7OJVYGUtX0fTqgFqDwwnQqx1pnodk9QdFrRMaBz8WbeRqp2Lgz
172.67.217.181200 OK4.5 kB
flin.zelidarne.ru/rsaNaBkhbtQKolWIvSKdkeYPNEMGtzijfTIiuqoseBl2Dj82txcd200
172.67.217.181200 OK268 B