Report Overview

  1. Visited public
    2023-11-27 18:26:54
  2. URL

    click.sleadtrack.com/link?messageId=<sw-c9de2ca6-4f60-4941-a3ac-0229d57f514b@tristenlarsen.com>&url=https://theflowertalk.com/New/Auth/lzrt1k////anBpc3RpbGxvQGtybWRldi5jb20=

  3. Finishing URL

    pub-d408424a0772453a85b2a3f6a9dc09f6.r2.dev/passwordauthenticity.html#jpistillo@krmdev.com

  4. IP / ASN
    54.79.187.227

    #16509 AMAZON-02

    Title
    Microsoft | Login
  5. Phishing - Microsoft Outlook

Detections
urlquery
4
Network Intrusion Detection
2
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
click.sleadtrack.comunknown2022-04-292022-04-30 00:16:392023-11-27 11:40:09
pub-d408424a0772453a85b2a3f6a9dc09f6.r2.devunknown2022-08-232023-11-27 17:04:302023-11-27 17:04:30
use.fontawesome.com9422012-10-182017-01-30 05:43:252023-11-27 05:11:40
logo.clearbit.com273442003-07-042015-06-30 18:39:452023-11-26 23:24:51
maxcdn.bootstrapcdn.com7242012-05-252014-06-18 02:37:312023-11-27 08:05:55
firebasestorage.googleapis.com99372005-01-252017-01-30 03:42:502023-11-27 17:04:31
fonts.googleapis.com88772005-01-252013-06-10 22:14:262023-11-27 07:17:39
theflowertalk.comunknown2023-02-062023-11-15 12:50:152023-11-27 17:04:29
cdnjs.cloudflare.com2352009-02-172015-04-17 22:46:332023-11-27 07:34:07
code.jquery.com6342005-12-102012-05-21 19:28:022023-11-27 08:05:54
ajax.googleapis.com129052005-01-252013-08-16 11:51:312023-11-27 07:45:33
aadcdn.msauth.net14212018-10-252018-11-19 11:50:032023-11-27 10:44:56

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IPInternal IP
lowClient IPInternal IP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (8)

HTTP Transactions (20)

URLIPResponseSize
click.sleadtrack.com/link?messageId=%3Csw-c9de2ca6-4f60-4941-a3ac-0229d57f514b@tristenlarsen.com%3E&url=https://theflowertalk.com/New/Auth/lzrt1k////anBpc3RpbGxvQGtybWRldi5jb20=
54.79.187.227 190 B
theflowertalk.com/New/Auth/lzrt1k////anBpc3RpbGxvQGtybWRldi5jb20=
68.65.120.146 0 B
pub-d408424a0772453a85b2a3f6a9dc09f6.r2.dev/passwordauthenticity.html
104.18.2.35 28 kB
cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
104.17.24.14200 OK6.2 kB
code.jquery.com/jquery-3.1.1.min.js
151.101.194.137200 OK30 kB
code.jquery.com/jquery-3.3.1.js
151.101.194.137200 OK80 kB
code.jquery.com/jquery-3.2.1.slim.min.js
151.101.194.137200 OK24 kB
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.42200 OK30 kB
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.42200 OK30 kB
use.fontawesome.com/releases/v5.7.0/webfonts/fa-solid-900.woff2
172.64.140.13200 OK74 kB
aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
13.107.213.53200 OK17 kB
pub-d408424a0772453a85b2a3f6a9dc09f6.r2.dev/favicon.ico
104.18.2.35404 Not Found6.5 kB
firebasestorage.googleapis.com/v0/b/offautolog.appspot.com/o/images%2Fbg.jpg?alt=media&token=0d59c1ff-2c3c-411f-9a51-1faaff649ae7
142.250.74.106402 Payment Required150 B
logo.clearbit.com/krmdev.com
143.204.55.61200 OK945 B
logo.clearbit.com/krmdev.com
143.204.55.61200 OK945 B
logo.clearbit.com/krmdev.com
143.204.55.61200 OK945 B
fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
142.250.74.106200 OK1.3 kB
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
104.18.10.207200 OK49 kB
use.fontawesome.com/releases/v5.7.0/css/all.css
172.64.140.13200 OK55 kB
pub-d408424a0772453a85b2a3f6a9dc09f6.r2.dev/passwordauthenticity.html
104.18.2.35200 OK254 kB