Report Overview

  1. Visited public
    2025-03-27 02:21:28
  2. URL

    sites.ziftsolutions.com/siemens.ziftsolutions.com/ff8081815ca9992a015cc0e672466cab?cid=8a9982a96d2b95e1016d3b241df85937&url=https://authswedloginpilot.s3.eu-north-1.amazonaws.com/M365auth.html

  3. Finishing URL

    4dey.aleonanob.ru/vqnkkbvlxcdqixxsjfwcvgK35LYSJQ4CGGHF6N6VZRUZB9S4QSD?MVXGIAVGCVXYGOOCWVOVGCUXBOWNSX

  4. IP / ASN
    108.157.229.9

    #16509 AMAZON-02

    Title
  5. Phishing - Generic phishing

    Suspicious - Anti-debugging code

    Phishing - Tycoon Phishing Kit

Detections
urlquery
19
Network Intrusion Detection
1
Threat Detection Systems
14

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
dynamic.ziftsolutions.com6215992007-11-202016-07-022025-03-20
authswedloginpilot.s3.eu-north-1.amazonaws.comunknown2005-08-182025-03-272025-03-27
widgets.ziftsolutions.com5850842007-11-202016-07-022025-03-20
analytics.ziftsolutions.com316872007-11-202012-08-212025-03-26
www.gstatic.comunknown2008-02-112012-05-292025-03-26
static.ziftsolutions.com602112007-11-202016-08-252025-03-20
4dey.aleonanob.ruunknown2024-12-122025-02-182025-03-27
fonts.gstatic.comunknown2008-02-112014-04-022025-03-26
sites.ziftsolutions.comunknown2007-11-202012-12-142025-03-14
siemens.ziftsolutions.comunknown2007-11-202025-02-072025-03-27
cdnjs.cloudflare.com2352009-02-172012-05-232025-03-26
6sul.nmpjkg.ruunknown2025-02-262025-03-272025-03-27
code.jquery.com6342005-12-102012-05-212025-03-26

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IP 192.169.69.26

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumaleonanob.ruSinkholed
mediumaleonanob.ruSinkholed
mediumaleonanob.ruSinkholed
mediumaleonanob.ruSinkholed
mediumaleonanob.ruSinkholed
mediumaleonanob.ruSinkholed
mediumaleonanob.ruSinkholed

ThreatFox

No alerts detected


JavaScript (25)

HTTP Transactions (26)

URLIPResponseSize
GET www.gstatic.com/recaptcha/api2/logo_48.png
142.250.74.99200 OK2.2 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
GET static.ziftsolutions.com/widgets/js/zpanel_20170605.js
54.240.174.95200 OK18 kB
POST 4dey.aleonanob.ru/hwytfEk0whFsBplDOkSdZg5lpzalVgq1tr
188.114.97.1200 OK20 B
GET dynamic.ziftsolutions.com/8a104ee650d22d330150d92ab13f7147/Default/ff8081815ca9992a015cc0e672466cab/0
54.240.174.8200 OK317 B
GET authswedloginpilot.s3.eu-north-1.amazonaws.com/M365auth.html
16.12.9.46200 OK371 kB
POST 4dey.aleonanob.ru/rqzL4j6RBcfNTtwCaNwl4SSgtklIKxUfr3gHQxfw
188.114.97.1200 OK312 B
GET static.ziftsolutions.com/widgets/js/zsizzle.20110528.js
54.240.174.95200 OK21 kB
GET static.ziftsolutions.com/widgets/js/ztrack.20170214.js
54.240.174.95200 OK9.2 kB
GET 6sul.nmpjkg.ru/chai!uknfe5c
104.21.32.1200 OK1 B
GET 4dey.aleonanob.ru/favicon.ico
188.114.97.1404 Not Found0 B
GET 4dey.aleonanob.ru/vqnkkbvlxcdqixxsjfwcvgK35LYSJQ4CGGHF6N6VZRUZB9S4QSD?MVXGIAVGCVXYGOOCWVOVGCUXBOWNSX
188.114.97.1200 OK152 kB
GET 4dey.aleonanob.ru/CqUns/#Dtest123@gmail.com
188.114.97.1200 OK25 kB
GET widgets.ziftsolutions.com/siemens.ziftsolutions.com/js/ff8081815ca9992a015cc0e672466cab
143.204.55.72200 OK11 kB
GET analytics.ziftsolutions.com/trk/v?id=ff8081815ca9992a015cc0e672466cab&clid=8a104ee650d22d330150d92aad9c710e&u=null&ekey=&p=ff8081815c617025015c694654b24470&uuid_holder=zt_W73OFHIE&fr=true&refurl=
0.0.0.0 0 B
GET authswedloginpilot.s3.eu-north-1.amazonaws.com/favicon.ico
16.12.9.46403 Forbidden243 B
GET code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK90 kB
GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.35200 OK15 kB
GET sites.ziftsolutions.com/siemens.ziftsolutions.com/ff8081815ca9992a015cc0e672466cab?cid=8a9982a96d2b95e1016d3b241df85937&url=https://authswedloginpilot.s3.eu-north-1.amazonaws.com/M365auth.html
54.240.174.8200 OK544 B
GET siemens.ziftsolutions.com/uuid/v?s=https%3A%2F%2Fdynamic.ziftsolutions.com%2Fsiemens.ziftsolutions.com%2Fff8081815c617025015c694654b24470%2F
54.240.174.103200 OK0 B
GET code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK90 kB
GET sites.ziftsolutions.com/favicon.ico
0.0.0.0 0 B
GET analytics.ziftsolutions.com/trk/c?id=ff8081815ca9992a015cc0e672466cab&clid=8a104ee650d22d330150d92aad9c710e&u=null&ekey=&p=ff8081815c617025015c694654b24470&uuid_holder=zt_W73OFHIE&url=https%3A//authswedloginpilot.s3.eu-north-1.amazonaws.com/M365auth.html&refurl=&random=0.36477931876078007
0.0.0.0 0 B
GET 4dey.aleonanob.ru/CqUns/#Dtest123@gmail.com
188.114.97.1200 OK1.1 MB
GET 4dey.aleonanob.ru/favicon.ico
188.114.97.1404 Not Found0 B
GET code.jquery.com/jquery-3.6.0.min.js
151.101.130.137200 OK90 kB