Report Overview
Visitedpublic
2025-04-23 17:19:07
URL
legounda.com/QaeVj/.g9v52/nzs0r/ZHJld0BzbHVycG1haWwubmV0
Finishing URL
shifacai.cloud/?ymryh337a=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
IP / ASN
111.90.146.230
#45839 Shinjiru Technology Sdn Bhd
Title
0emj4119sa

Phishing - Microsoft Outlook

Phishing - NakedPages Phishing Kit

Detections

urlquery
34
Network Intrusion Detection
1
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
csp.microsoft.com
79511991-05-022021-03-092025-04-22
shifacai.cloud
unknown2025-04-012025-04-102025-04-23
sumanglajain.cloud
unknown2025-04-012025-04-102025-04-23
legounda.com
unknown2024-08-282025-03-272025-04-23
c534b942.3dd57bad9f9f894567a368e4.workers.dev
unknown2019-02-082025-04-102025-04-18
challenges.cloudflare.com
unknown2009-02-172021-10-202025-04-23

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP
104.21.10.207
ET INFO Observed Cloudflare workers.dev Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (110)

HTTP Transactions (39)

URLIPResponseSize
GET challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js
104.18.94.41200 OK48 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=934f053f9b0c0b41&lang=auto
104.18.94.41200 OK120 kB
POST csp.microsoft.com/report/ESTS-UX-All
13.107.246.53504 Gateway Timeout0 B
POST csp.microsoft.com/report/ESTS-UX-All
13.107.246.53504 Gateway Timeout0 B
GET challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.18.94.41302 Found48 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/934f056959b9569b/1745428717506/nM1GmrSFPufSWuE
104.18.94.41200 OK61 B
GET shifacai.cloud/?ymryh337a=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmbG9naW5faGludD1kcmV3JTQwc2x1cnBtYWlsLm5ldCZjbGllbnQtcmVxdWVzdC1pZD1iZTY4YjY0NC1iNDNhLWEyNjYtODZjMS03NjM5NmU3MmRiZGEmcHJvdGVjdGVkdG9rZW49dHJ1ZSZjbGFpbXM9JTdiJTIyaWRfdG9rZW4lMjIlM2ElN2IlMjJ4bXNfY2MlMjIlM2ElN2IlMjJ2YWx1ZXMlMjIlM2ElNWIlMjJDUDElMjIlNWQlN2QlN2QlN2Qmbm9uY2U9NjM4ODEwMjU1MjI2MTEyOTUwLmJmMzAwZWJiLTRmYjAtNGRmYS05ZWI3LWE3YjU2NDE5MDY3MCZzdGF0ZT1EY3U5RG9Jd0ZFQmgwR2VSRGJpdHROQ0JPSmdZQmx6UVJNTmllbWxSQ0g4cEZlTGJ5X0NkN2JpTzQtdzN1NDBMVzV5WUg1T0VBR1dNVWs0SUZRd0NySThBR3RHUGFnUV9VclgwaGNiWWx6RXlIaEVCUEFaM2UxVTRyakk4ZGVPN0dWNmZackNwTW5vOVJEQjNYelAxc3VtQ1FWdHZ0dExxbEhoR3E4Ym95dDdIVkdZRlZObVY1ei14cUdjeEl4VW03MFZmOWwxYjNsaUxGQlo4WENZOEozOA==
146.190.230.219200 OK43 kB
GET shifacai.cloud/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
146.190.230.219200 OK113 kB
OPTIONS sumanglajain.cloud/?lpriqlwh&qrc=ZHJld0BzbHVycG1haWwubmV0
146.190.230.219200 OK0 B
GET shifacai.cloud/owa/?login_hint=drew%40slurpmail.net&state=1&redirectTo=aHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vbWFpbC8
146.190.230.219302 Found43 kB
POST csp.microsoft.com/report/ESTS-UX-All
13.107.246.53504 Gateway Timeout0 B
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
104.18.94.41200 OK61 B
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/369739170:1745425677:PexozzKBACZoF81U2OkbZC4jKb8KdqpnlPoHQdzJP5Q/934f053f9b0c0b41/1QtO1al4_VRaq9Htf.AwedKrofN3h_cwL.0i8isbeNY-1745428710-1.1.1.1-Lux1ZRdF3TR1h5i3N0_9WGpflOl3FLaRBGozqmBlJUzoa.FJOAxmU9S5MS4llwpy
104.18.94.41200 OK228 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/934f053f9b0c0b41/1745428710840/wUgshE9r8GZLFgX
104.18.94.41200 OK61 B
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
104.18.94.41200 OK61 B
GET shifacai.cloud/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3NoaWZhY2FpLmNsb3VkLyIsImRvbWFpbiI6InNoaWZhY2FpLmNsb3VkIiwia2V5IjoiOVdQb1pmb3VFNWJoIiwicXJjIjoiZHJld0BzbHVycG1haWwubmV0IiwiaWF0IjoxNzQ1NDI4NzIyLCJleHAiOjE3NDU0Mjg4NDJ9.34IOs_QszHvsMCDw9fFbWRX9CXg9iB0PSjqoMu79DyU
146.190.230.219302 Found43 kB
GET shifacai.cloud/aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
146.190.230.219200 OK17 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/369739170:1745425677:PexozzKBACZoF81U2OkbZC4jKb8KdqpnlPoHQdzJP5Q/934f053f9b0c0b41/1QtO1al4_VRaq9Htf.AwedKrofN3h_cwL.0i8isbeNY-1745428710-1.1.1.1-Lux1ZRdF3TR1h5i3N0_9WGpflOl3FLaRBGozqmBlJUzoa.FJOAxmU9S5MS4llwpy
104.18.94.41200 OK4.7 kB
POST legounda.com/QaeVj/.g9v52/nzs0r/ZHJld0BzbHVycG1haWwubmV0
111.90.146.230302 Found6.8 kB
GET challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js
104.18.94.41200 OK48 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/934f056959b9569b/1745428717509/1ad5f2b67dd70fc72ee445659b628d107b366517f48a1fda3ce3a90fca752916/bkIYV1Iit1YvAYC
104.18.94.41401 Unauthorized1 B
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/y39qn/0x4AAAAAABCdWighJ9bsenok/auto/fbE/new/normal/auto/
104.18.94.41200 OK28 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9migk/0x4AAAAAABDXW8VWrAn_P4LP/auto/fbE/new/normal/auto/
104.18.94.41200 OK28 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/413196958:1745425686:Kbmvu9l1lpU81BTMVExsAH4NzpfmC7KfDIpLysO8278/934f056959b9569b/ZzXENrkmoSM8ypCKUJpHwX2g9ErfahJEC8fZpR5.Erc-1745428717-1.1.1.1-4s9w1rXDx0NXFnOaZR.CYBb.ie2n1gGH6sqWdnmH6.c9FsvnAwBoY6XU2bQyhcCz
104.18.94.41200 OK4.9 kB
GET sumanglajain.cloud/?lpriqlwh&qrc=ZHJld0BzbHVycG1haWwubmV0
146.190.230.219200 OK324 B
GET shifacai.cloud/?qrc=drew%40slurpmail.net
146.190.230.219302 Moved Temporarily43 kB
GET shifacai.cloud/mail/?login_hint=drew%40slurpmail.net
146.190.230.219302 Found43 kB
GET legounda.com/favicon.ico
111.90.146.230404 Not Found315 B
GET challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.18.94.41302 Found48 kB
GET c534b942.3dd57bad9f9f894567a368e4.workers.dev/favicon.ico
104.21.10.207200 OK6.8 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=934f056959b9569b&lang=auto
104.18.94.41200 OK114 kB
GET shifacai.cloud/aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js
146.190.230.219200 OK190 kB
POST csp.microsoft.com/report/ESTS-UX-All
13.107.246.53200 OK2 B
GET legounda.com/QaeVj/.g9v52/nzs0r/ZHJld0BzbHVycG1haWwubmV0
111.90.146.230200 OK3.3 kB
GET c534b942.3dd57bad9f9f894567a368e4.workers.dev/?email=ZHJld0BzbHVycG1haWwubmV0
104.21.10.207200 OK6.8 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/413196958:1745425686:Kbmvu9l1lpU81BTMVExsAH4NzpfmC7KfDIpLysO8278/934f056959b9569b/ZzXENrkmoSM8ypCKUJpHwX2g9ErfahJEC8fZpR5.Erc-1745428717-1.1.1.1-4s9w1rXDx0NXFnOaZR.CYBb.ie2n1gGH6sqWdnmH6.c9FsvnAwBoY6XU2bQyhcCz
104.18.94.41200 OK241 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/934f053f9b0c0b41/1745428710833/7000629bb661cc54e642fad2285572a18111f9a5e1c1ef95d3a5dd0a0e65ae4b/WntFZ-siKxCgWWb
104.18.94.41401 Unauthorized1 B
GET shifacai.cloud/aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_JXiTFACSOROsZgtGRJo1aA2.js
146.190.230.219200 OK689 kB
GET shifacai.cloud/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_cwzkvppibgumnhupu2wjoa2.js
146.190.230.219200 OK59 kB