Report Overview

  1. Visited public
    2023-12-05 13:53:31
  2. URL

    www.richelieu.com/newsflash/redirect.php?code=7OW516fmfNDxMzA2OTgz&urlRedirect=https://fajralramla.com/%23%23_nathan@slurpmail.net

  3. Finishing URL

    cphpva40x7rl-1322892769.cos.na-ashburn.myqcloud.com/cphpva40x7rl.html?e=nathan@slurpmail.net

  4. IP / ASN
    206.162.132.224

    #852 TELUS Communications

    Title
    Sign in to your account
  5. Phishing - Microsoft

    Phishing - Microsoft Outlook

Detections
urlquery
6
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
code.jquery.com6342005-12-102012-05-21 19:28:022023-12-05 05:09:20
cdnjs.cloudflare.com2352009-02-172015-04-17 22:46:332023-12-05 05:09:58
fonts.googleapis.com88772005-01-252013-06-10 22:14:262023-12-05 07:37:50
espdepot.biz.idunknown2023-09-012023-09-04 06:34:342023-12-04 18:46:51
aadcdn.msauth.net14212018-10-252018-11-19 11:50:032023-12-04 18:12:12
maxcdn.bootstrapcdn.com7242012-05-252014-06-18 02:37:312023-12-05 05:18:59
www.richelieu.com4312031996-02-242013-01-18 17:56:582023-12-04 12:22:04
ajax.googleapis.com129052005-01-252013-08-16 11:51:312023-12-05 08:15:49
c.s-microsoft.com101662012-02-072013-11-06 16:56:272023-12-04 18:32:06
aadcdn.msftauth.net14552018-10-252018-11-19 11:50:322023-12-05 07:34:10
fajralramla.comunknown2023-02-232023-02-25 23:17:092023-08-22 12:08:55
cphpva40x7rl-1322892769.cos.na-ashburn.myqcloud.comunknownunknownNo dataNo data
use.fontawesome.com9422012-10-182017-01-30 05:43:252023-12-05 05:14:35
myeverything750411-1322272810.cos.na-toronto.myqcloud.comunknown2013-04-242023-11-14 16:41:512023-12-04 18:46:49

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (12)

HTTP Transactions (20)

URLIPResponseSize
www.richelieu.com/newsflash/redirect.php?code=7OW516fmfNDxMzA2OTgz&urlRedirect=https://fajralramla.com/%23%23_nathan@slurpmail.net
206.162.132.224 0 B
fajralramla.com/favicon.ico
172.67.175.144 0 B
GET cphpva40x7rl-1322892769.cos.na-ashburn.myqcloud.com/cphpva40x7rl.html?e=nathan@slurpmail.net
49.51.77.119200 OK7.9 kB
GET code.jquery.com/jquery-3.1.1.min.js
151.101.194.137200 OK30 kB
GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
104.17.24.14200 OK6.2 kB
GET code.jquery.com/jquery-3.3.1.js
151.101.194.137200 OK80 kB
GET code.jquery.com/jquery-3.2.1.slim.min.js
151.101.194.137200 OK24 kB
GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.138200 OK30 kB
GET fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
142.250.74.106200 OK938 B
GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.138200 OK30 kB
fajralramla.com/
172.67.175.144 1.9 kB
GET c.s-microsoft.com/favicon.ico?v2
2.18.173.151 540 B
GET myeverything750411-1322272810.cos.na-toronto.myqcloud.com/bootstrap.min.js
49.51.54.104200 OK620 kB
POST espdepot.biz.id/next.php
162.241.71.126200 OK16 B
GET aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
152.199.23.37200 OK673 B
GET aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
13.107.246.53200 OK621 B
GET aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
13.107.246.53200 OK17 kB
POST espdepot.biz.id/next.php
162.241.71.126200 OK99 B
GET use.fontawesome.com/releases/v5.8.1/css/all.css
172.64.141.13200 OK55 kB
GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
104.18.11.207200 OK49 kB