Report Overview

  1. Visited public
    2025-05-28 17:40:32
    Submit Tags
  2. URL

    redirect.viglink.com/?format=go&jsonp=vglnk_1528334718170259&key=172579b97fa4d5e8c1a3c2918a03e499&libId=ji37348e01012xfz000DA40uyjt16&loc=jamestowndeals.com/rq3dv?q=Blumenau&btnG=Pesquisar&v=1&out=jannanddl.com/aadmin/860387255806435580421707015687330a07771e19894b0a8aea2ea73c17f929/ZGF2ZS5idXJrYXJkQHNsdXJwbWFpbC5uZXQ=

  3. Finishing URL

    otpurn.com/mail/

  4. IP / ASN
    34.251.214.4

    #16509 AMAZON-02

    Title
    sr2bdq9gvb
  5. Phishing - NakedPages Phishing Kit

Detections
urlquery
9
Network Intrusion Detection
3
Threat Detection Systems
2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
login.microsoftonline.com252002-07-092017-02-192025-05-28
res-1.cdn.office.net10931994-11-142020-12-082025-05-22
challenges.cloudflare.comunknown2009-02-172021-10-202025-05-28
otpurn.comunknownunknownNo dataNo data
jannanddl.comunknownunknownNo dataNo data
5f3050f6.1a90ef4bd33032bbd4554830.workers.devunknown2019-02-082025-05-282025-05-28
praivosecurity.comunknown2025-03-122025-05-282025-05-28
res.public.onecdn.static.microsoftunknown2023-05-052024-03-212025-05-22
redirect.viglink.com372472008-12-172012-09-092025-05-24

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP 172.67.154.102
medium 196.251.85.17Client IP
lowClient IP 192.0.78.27

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumres.public.onecdn.static.microsoft/owamail/20250516009.14/resources/suiteux-shell/js/suiteux.shell.plus.jsDetect files is `SliverFox` malware

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (61)

HTTP Transactions (49)

URLIPResponseSize
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/946f88a70d9d56b1/1748453992155/edf3c279ef9a553a3e8d7ec4b75c69182412510d047ad7521d3f28c2eefb0663/XPcJ7B6487T9gCX
104.18.95.41401 Unauthorized1 B
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1970388246:1748453621:ABdzdO3DuHZ_-pCFSMGHde5bY6gm8S49a785nUEvDTQ/946f88a70d9d56b1/axdg1A6w71fOvQfAOuYBaLBMzyOYmpoS10.cuF7Yh_4-1748453991-1.2.1.1-LzdlZqYUE7sDF.dwou8p3_el1sEfXNFx59L_Ko4YUg66OejTQXAmozq8qhkewPt2
104.18.95.41200 OK28 kB
GET res.public.onecdn.static.microsoft/assets/framework/microsoft.svg
23.36.76.179200 OK3.2 kB
GET challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.18.95.41302 Found48 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/nydbz/0x4AAAAAABewge3pt3p2SHwo/auto/fbE/new/normal/auto/
104.18.95.41200 OK28 kB
GET otpurn.com/?qrc=dave.burkard%40slurpmail.net
196.251.85.17302 Moved Temporarily13 kB
GET res.public.onecdn.static.microsoft/assets/mail/fonts/v1/fonts/segoeui-westeuropean/segoeui-regular.woff2
23.36.76.179200 OK36 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.AppBoot.m.2deeea90.css
23.36.76.179200 OK107 kB
GET res.public.onecdn.static.microsoft/assets/mail/fonts/v1/fonts/segoeui-semilight.woff
23.36.76.179200 OK30 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.36078.m.e76f2ec9.js
23.36.76.179200 OK2.8 MB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1970388246:1748453621:ABdzdO3DuHZ_-pCFSMGHde5bY6gm8S49a785nUEvDTQ/946f88a70d9d56b1/axdg1A6w71fOvQfAOuYBaLBMzyOYmpoS10.cuF7Yh_4-1748453991-1.2.1.1-LzdlZqYUE7sDF.dwou8p3_el1sEfXNFx59L_Ko4YUg66OejTQXAmozq8qhkewPt2
104.18.95.41200 OK4.8 kB
GET otpurn.com/mail/?login_hint=dave.burkard%40slurpmail.net
196.251.85.17200 OK13 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mail.runtime.ca7dc427.js
23.36.76.179200 OK228 kB
GET otpurn.com/mail/favicon.ico
0.0.0.0 0 B
GET res.public.onecdn.static.microsoft/assets/mail/pwa/v1/pngs/apple-touch-icon.png
23.36.76.179200 OK11 kB
GET login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=https://otpurn.com/organizations/oauth2/v2.0/authorize
20.190.181.6400 Bad Request452 B
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/946f88a70d9d56b1/1748453992160/bxA1jEs8xsO_5YV
104.18.95.41200 OK147 B
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.36078.m.e76f2ec9.js
23.36.76.179200 OK2.8 MB
GET res.public.onecdn.static.microsoft/assets/mail/fonts/v1/fonts/segoeui-light.woff
23.36.76.179200 OK25 kB
GET res.public.onecdn.static.microsoft/assets/mail/fonts/v1/fonts/segoeui-regular.woff
23.36.76.179200 OK35 kB
GET res.public.onecdn.static.microsoft/assets/mail/fonts/v1/fonts/segoeui-semibold.woff
23.36.76.179200 OK32 kB
GET redirect.viglink.com/?format=go&jsonp=vglnk_1528334718170259&key=172579b97fa4d5e8c1a3c2918a03e499&libId=ji37348e01012xfz000DA40uyjt16&loc=jamestowndeals.com/rq3dv?q=Blumenau&btnG=Pesquisar&v=1&out=jannanddl.com/aadmin/860387255806435580421707015687330a07771e19894b0a8aea2ea73c17f929/ZGF2ZS5idXJrYXJkQHNsdXJwbWFpbC5uZXQ=
52.16.229.40302 0 B
GET jannanddl.com/aadmin/860387255806435580421707015687330a07771e19894b0a8aea2ea73c17f929/ZGF2ZS5idXJrYXJkQHNsdXJwbWFpbC5uZXQ=
51.79.72.226200 OK0 B
GET res.public.onecdn.static.microsoft/owamail/20250516009.14/resources/suiteux-shell/js/suiteux.shell.plus.js
23.36.76.179200 OK283 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.m.4006ac62.js
23.36.76.179200 OK23 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.27755.m.d33f0608.js
23.36.76.179200 OK19 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.AppBoot.m.2deeea90.css
23.36.76.179200 OK107 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.36255.m.85592bef.js
23.36.76.179200 OK18 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.MsalAuth.m.4006ac62.js
23.36.76.179200 OK23 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.36255.m.85592bef.js
23.36.76.179200 OK18 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.94868.m.95e1be97.js
23.36.76.179200 OK301 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.27755.m.d33f0608.js
23.36.76.179200 OK19 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.worker.data.62998d7f.js
23.36.76.179200 OK286 kB
GET login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=https://otpurn.com/common/oauth2/v2.0/authorize
20.190.181.6400 Bad Request452 B
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.AppBoot.m.41f7c64e.js
23.36.76.179200 OK1.9 MB
GET res.public.onecdn.static.microsoft/owamail/20250516009.14/resources/suiteux-shell/js/suiteux.shell.core.js
23.36.76.179200 OK207 kB
GET 5f3050f6.1a90ef4bd33032bbd4554830.workers.dev/?email=dave.burkard@slurpmail.net
172.67.154.102200 OK6.8 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
104.18.95.41200 OK86 B
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1970388246:1748453621:ABdzdO3DuHZ_-pCFSMGHde5bY6gm8S49a785nUEvDTQ/946f88a70d9d56b1/axdg1A6w71fOvQfAOuYBaLBMzyOYmpoS10.cuF7Yh_4-1748453991-1.2.1.1-LzdlZqYUE7sDF.dwou8p3_el1sEfXNFx59L_Ko4YUg66OejTQXAmozq8qhkewPt2
104.18.95.41200 OK227 kB
OPTIONS praivosecurity.com/?ghrvvves&qrc=dave.burkard@slurpmail.net
196.251.85.17200 OK0 B
GET praivosecurity.com/?ghrvvves&qrc=dave.burkard@slurpmail.net
196.251.85.17200 OK320 B
GET otpurn.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL290cHVybi5jb20vIiwiZG9tYWluIjoib3RwdXJuLmNvbSIsImtleSI6InlNTHBaR1pqeEtqayIsInFyYyI6ImRhdmUuYnVya2FyZEBzbHVycG1haWwubmV0IiwiaWF0IjoxNzQ4NDU0MDA2LCJleHAiOjE3NDg0NTQxMjZ9.JQSl--c1WdyE8EG8Nl2vsVDxQQf5WURVfCvns4GjKO4
196.251.85.17302 Found13 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.mailindex.487dd620.js
23.36.76.179200 OK369 kB
GET challenges.cloudflare.com/turnstile/v0/g/6fab0cec561d/api.js
104.18.95.41200 OK48 kB
GET 5f3050f6.1a90ef4bd33032bbd4554830.workers.dev/favicon.ico
172.67.154.102200 OK6.8 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=946f88a70d9d56b1&lang=auto
104.18.95.41200 OK114 kB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.AppBoot.m.41f7c64e.js
23.36.76.179200 OK1.9 MB
GET res.public.onecdn.static.microsoft/owamail/hashed-v1/scripts/owa.94868.m.95e1be97.js
23.36.76.179200 OK301 kB
GET res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets/fonts/segoeui-westeuropean/segoeui-regular.woff2
23.36.76.120200 OK36 kB