Report Overview

  1. Submitted URL

    ad.doubleclick.net/clk;265186560;90846275;t;pc%5C=%5BTPAS_ID%5D?///expansiveaffiliate.com/Rabiens/Rabinxz/rgh6br/aGFzYW4ua2FyYWtvY0Bpc25ldC5pc2JhbmsuY29tLnRy

  2. IP

    142.250.74.166

    ASN

    #15169 GOOGLE

  3. Submitted

    2024-04-25 16:54:25

    Access

    public

  4. Website Title

    Webmail Portal Login

  5. Final URL

    cloudflare-ipfs.com/ipfs/QmbBskoom2NQebVkoBPfQ8VeGR73RYDjVszPYjTm1ibHBd/shalipopi.html#hasan.karakoc@isnet.isbank.com.tr

  6. urlquery detections

    Phishing - Generic phishing

Detections

  1. urlquery

    2

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    6

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ad.doubleclick.net1861996-01-162012-05-242024-04-25
ajax.googleapis.com129052005-01-252013-08-162024-04-25
stackpath.bootstrapcdn.com24672012-05-252018-06-152024-04-25
cloudflare-ipfs.com751472018-05-302021-01-202024-03-15
www.google.com71997-09-152015-05-102024-03-23
t1.gstatic.comunknown2008-02-112013-05-072024-04-24
ka-f.fontawesome.com35982012-10-182019-12-172024-04-24
www.isnet.isbank.com.trunknownunknownNo dataNo data
expansiveaffiliate.comunknownunknownNo dataNo data
kit.fontawesome.com18682012-10-182019-12-162024-04-24
fonts.googleapis.com88772005-01-252013-06-102024-04-25

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP 104.17.64.14

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank
SeverityIndicatorAlert
mediumcloudflare-ipfs.com/favicon.icoOther
mediumcloudflare-ipfs.com/ipfs/QmbBskoom2NQebVkoBPfQ8VeGR73RYDjVszPYjTm1ibHBd/jquery-1.jsOther
mediumcloudflare-ipfs.com/ipfs/QmbBskoom2NQebVkoBPfQ8VeGR73RYDjVszPYjTm1ibHBd/shalipopi.htmlOther

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (10)

HTTP Transactions (20)

URLIPResponseSize
ad.doubleclick.net/clk;265186560;90846275;t;pc%5C=%5BTPAS_ID%5D?///expansiveaffiliate.com/Rabiens/Rabinxz/rgh6br/aGFzYW4ua2FyYWtvY0Bpc25ldC5pc2JhbmsuY29tLnRy
142.250.74.166 0 B
expansiveaffiliate.com/Rabiens/Rabinxz/rgh6br/aGFzYW4ua2FyYWtvY0Bpc25ldC5pc2JhbmsuY29tLnRy
162.241.120.242 0 B
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
216.58.207.202200 OK30 kB
stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
104.18.11.207200 OK22 kB
cloudflare-ipfs.com/ipfs/QmbBskoom2NQebVkoBPfQ8VeGR73RYDjVszPYjTm1ibHBd/bootstrap.min.css?1422585379
104.17.64.14404 Not Found6.4 kB
cloudflare-ipfs.com/favicon.ico
104.17.64.14404 Not Found14 B
cloudflare-ipfs.com/ipfs/QmbBskoom2NQebVkoBPfQ8VeGR73RYDjVszPYjTm1ibHBd/jquery-1.js
104.17.64.14404 Not Found82 kB
www.google.com/s2/favicons?domain=isnet.isbank.com.tr
142.250.74.164301 Moved Permanently339 B
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://isnet.isbank.com.tr&size=16
142.250.74.68 726 B
cloudflare-ipfs.com/ipfs/QmbBskoom2NQebVkoBPfQ8VeGR73RYDjVszPYjTm1ibHBd/shalipopi.html
104.17.64.14200 OK12 kB
kit.fontawesome.com/585b051251.js
172.64.147.188200 OK12 kB
t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&url=http://isnet.isbank.com.tr&size=16
142.250.74.68404 Not Found726 B
fonts.googleapis.com/css?family=Yellowtail%26display=swap
142.250.74.106400 Bad Request0 B
stackpath.bootstrapcdn.com/bootstrap/4.4.1/js/bootstrap.min.js
104.18.11.207200 OK60 kB
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251
104.21.26.223200 OK60 kB
www.isnet.isbank.com.tr/
0.0.0.0 0 B
ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
104.21.26.223200 OK78 kB
stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css
104.18.11.207200 OK160 kB
fonts.googleapis.com/css?family=Yellowtail%26display=swap
142.250.74.106400 Bad Request0 B
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251
104.21.26.223200 OK27 kB