Report Overview

  1. Submitted URL

    secure.adnxs.com/clktrb?id=704169&redir=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=

  2. IP

    185.89.210.141

    ASN

    #29990 ASN-APPNEX

  3. Submitted

    2024-04-23 11:31:59

    Access

    public

  4. Website Title

    a1a57284.b7109115dcf087f0e7eb8004.workers.dev/?qrc=thomas.klinglhuber@cargomind.com

  5. Final URL

    a1a57284.b7109115dcf087f0e7eb8004.workers.dev/?qrc=thomas.klinglhuber@cargomind.com

  6. urlquery detections

    Phishing - Microsoft Outlook

Detections

  1. urlquery

    8

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
secure.adnxs.com3962008-05-272012-05-222024-04-21
cargomindregeg33.energycomercio.com.brunknownunknownNo dataNo data
mrbatatacolombia.comunknown2020-10-162020-10-172024-04-17
challenges.cloudflare.comunknown2009-02-172021-10-202024-04-22
a1a57284.b7109115dcf087f0e7eb8004.workers.devunknownunknownNo dataNo data
mewilson.netunknown2024-01-172024-02-022024-04-11

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


JavaScript (21)

HTTP Transactions (18)

URLIPResponseSize
secure.adnxs.com/clktrb?id=704169&redir=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=
185.89.210.90 0 B
secure.adnxs.com/bounce?%2Fclktrb%3Fid%3D704169%26redir%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D%2F%2FCargomindregeg33.energycomercio.com.br%2Fx2%2Fv23%2FCargomind%2FdGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20%3D
185.89.210.90 0 B
cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=//Cargomindregeg33.energycomercio.com.br/x2/v23/Cargomind/dGhvbWFzLmtsaW5nbGh1YmVyQGNhcmdvbWluZC5jb20=
192.185.214.195 0 B
mrbatatacolombia.com/REDIRECT/9KHWFL/thomas.klinglhuber@cargomind.com
192.211.56.74 1.8 kB
challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.17.2.184 0 B
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/aovr5/0x4AAAAAAAX80MqSa7RLZ8nn/auto/normal
104.17.2.184 26 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/878d873d28a3b503/1713871897564/4209db62a6ae23d7659481f06bad0bfc10daf804e704b8d20ecc2593daaae5d8/3SXsi9H9RKRKcF2
104.17.2.184 1 B
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/878d873d28a3b503/1713871897566/a770WyXmfD25cGr
104.17.2.184 61 B
a1a57284.b7109115dcf087f0e7eb8004.workers.dev/favicon.ico
104.21.83.250200 OK4.7 kB
challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?onload=onloadTurnstileCallback
104.17.2.184 19 kB
mewilson.net/?qrc=thomas.klinglhuber%40cargomind.com
5.230.73.24302 Moved Temporarily0 B
mewilson.net/owa/?login_hint=thomas.klinglhuber%40cargomind.com
5.230.73.24302 Found1.4 kB
mewilson.net/?dnmi7lfy0=aHR0cHM6Ly9hZGZzLmNhcmdvbWluZC5jb20vYWRmcy9scy8/bG9naW5faGludD10aG9tYXMua2xpbmdsaHViZXIlNDBjYXJnb21pbmQuY29tJmNsaWVudC1yZXF1ZXN0LWlkPTRhMDNjN2Q3LTg4MTItNTliNC02NGE2LWU0ZTFiOTdkNTc5NCZ1c2VybmFtZT10aG9tYXMua2xpbmdsaHViZXIlNDBjYXJnb21pbmQuY29tJndhPXdzaWduaW4xLjAmd3RyZWFsbT11cm4lM2FmZWRlcmF0aW9uJTNhTWljcm9zb2Z0T25saW5lJndjdHg9ZXN0c3JlZGlyZWN0JTNkMiUyNmVzdHNyZXF1ZXN0JTNkclFRSUFSQUFqWkdfYXhOeEFNWHp6YVZuVTMtVi1BY29oMVBMSmQtNzNNLUFxR2swbDEtMXpUVkppMGk4M09fbUx0X2s3dkxEbE94MXNvaERjWFFRcVVzUkZlMGtJZ2lkdWduRlFjR2hPSWc2RlZ4TWNISFR6X0I0eTN2RGUzTVlGYWRTRi1FZmFIS2lKRFFNaWxUMWlmc0xMell6LS1FOWxvOXRQbF9USG5fNV9IcFVlN0FEemx0QjBQWlRpUVRxQmc1Q3pUZ3lERnZWNHlweUU2aXZKRjRCY0FEQUVRRDN3eGNDQzdtS0gyODZkc3Qwckc1RDk2Nm9pbWNpMTI1cGs4Qk9tT2VTQWlNeW5NQkRsbVZGZ1JiNXVDNUEyR0EwaHVScGtTTVpOYW1URFlabFNJYmxPSmlFaG1Cd3dtSDQ3STJyM2NDaUo0SThlNmpfREVjTjVMbjFOdktEaDlnMnlLaEJNZVBuek92WDBtVllyREJXa2FzTWFORmN6YUcwaktSY25uYThaSkVwRGR1VUpwczJ1OExyLWI0NUxNdVdEVHU1ZnJhZ1ZLaU9XQkd5NXNKU2RsZ1FhMzZsYjVkTVFYYVhrYk9jUzNkRnQ0cU1VdlZPM1diWmFsVXE5R2hONWttOU91QVhXOFpnUllZQ1pTU2hJSm5yYWFubVFyaXU2dVdlbjluQl9tdjhaeGctSHNoRnJYME1SMjI5WldzSEVmQXBBcjVHd25ENk9BSWVUWTNmT1NmOUtsUS1Sb3QzZDVuTHQ1LS1ETzFQSlV6VTZLeDVpa3FWVjVYUzBGd1Myd2xwTWFuMHZEWE9VczFCSmk5MzVyM3NfREpkOHk5eEtXb0xCMXM0dm9kSHA3SFpFSUV0TEZGSE9QaU9nODBUb2Izb3Y2NC1PQWtPVHpFenVPb290dXZINWpZSVc2c0hxS20zaU5RR01YRDl1cXBPWEU5eHVycFBwRzRTNDM3aTFtZzBlbk02ZEh6bTNkc1hULTc5MlA0bTdjNkdmZ00xIw==
5.230.73.24200 OK25 kB
mewilson.net/adfs/portal/css/style.css?id=3B1A0C704CDAE8ECD48AA8F0D50409D981CEF21D7AE6DC85B0797D270101B151
5.230.73.24200 OK10 kB
mewilson.net/adfs/portal/illustration/illustration.png?id=183128A3C941EDE3D9199FA37D6AA90E0A7DFE101B37D10B4FEDA0CF35E11AFD
5.230.73.24200 OK117 kB
a1a57284.b7109115dcf087f0e7eb8004.workers.dev/?qrc=thomas.klinglhuber@cargomind.com
104.21.83.250200 OK1.2 kB
mewilson.net/?dnmi7lfy0=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
5.230.73.24302 Found25 kB
mewilson.net/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL21ld2lsc29uLm5ldCIsImRvbWFpbiI6Im1ld2lsc29uLm5ldCIsImtleSI6ImpmSDNTRnVTWld5NyIsInFyYyI6InRob21hcy5rbGluZ2xodWJlckBjYXJnb21pbmQuY29tIiwiaWF0IjoxNzEzODcxOTAyLCJleHAiOjE3MTM4NzIwMjJ9.ECxY0hiqWqc6TkU8icbArerlq9VmN8vHlAoFqCcvZtE
5.230.73.24302 Found25 kB