Report - brandequity.economictimes.indiatimes.com/etlr.php?url=https://nancysupo.com/New/Auth//60pdxb////fmuriello@slurpmail.net

Report Overview

Submitted URL
brandequity.economictimes.indiatimes.com/etlr.php?url=https://nancysupo.com/New/Auth//60pdxb////fmuriello@slurpmail.net
IP
96.6.16.163
ASN
#16625 AKAMAI-AS
Submitted
2023-06-06 13:08:15
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
brandequity.economictimes.indiatimes.com	734553	1996-11-22	2015-06-26	2023-06-06	593 B	998 B	96.6.16.163
nancysupo.com	unknown	2010-04-10	2019-08-26	2023-06-01	566 B	278 B	108.167.143.73
ocsp.r2m01.amazontrust.com	unknown	2007-05-11	2022-10-12	2023-06-06	340 B	942 B	54.230.80.227
s3.amazonaws.com	unknown	2005-08-18	2020-05-13	2023-06-02	1.6 kB	1.5 kB	52.217.199.248

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2023-03-23	medium	s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html
2023-03-23	medium	s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

URL IP Response Size

brandequity.economictimes.indiatimes.com/etlr.php?url=https://nancysupo.com/New/Auth//60pdxb////fmuriello@slurpmail.net

96.6.16.163

0 B

URL
brandequity.economictimes.indiatimes.com/etlr.php?url=https://nancysupo.com/New/Auth//60pdxb////fmuriello@slurpmail.net
IP
96.6.16.163:0
ASN
#16625 AKAMAI-AS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /etlr.php?url=https://nancysupo.com/New/Auth//60pdxb////fmuriello@slurpmail.net HTTP/1.1
Host: brandequity.economictimes.indiatimes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: optout=1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: Bhoot
content-type: text/html; charset=UTF-8
content-length: 0
access-control-allow-origin: *
pragma: no-cache
location: https://nancysupo.com/New/Auth//60pdxb////fmuriello@slurpmail.net?utm_source=promotions&utm_medium=email&utm_campaign=
x-cool: 22.59
content-language: en
access-control-allow-credentials: true
strict-transport-security: max-age=25920000; includeSubdomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: no-cache, no-store, must-revalidate
expires: Tue, 06 Jun 2023 13:07:58 GMT
date: Tue, 06 Jun 2023 13:07:58 GMT
set-cookie: PHPSESSID=ac1fd5b2dc21e15977eb31084b4b4af8; expires=Tue, 13-Jun-2023 13:07:58 GMT; Max-Age=604800; path=/; secure; HttpOnly
brandequity_subscription_source=email; expires=Tue, 13-Jun-2023 13:07:58 GMT; Max-Age=604800; path=/
brandequity_pop_user_sub=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
x-frame-options: sameorigin, SAMEORIGIN
X-Firefox-Spdy: h2

nancysupo.com/New/Auth//60pdxb////fmuriello@slurpmail.net?utm_source=promotions&utm_medium=email&utm_campaign=

108.167.143.73

0 B

URL
nancysupo.com/New/Auth//60pdxb////fmuriello@slurpmail.net?utm_source=promotions&utm_medium=email&utm_campaign=
IP
108.167.143.73:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /New/Auth//60pdxb////fmuriello@slurpmail.net?utm_source=promotions&utm_medium=email&utm_campaign= HTTP/1.1
Host: nancysupo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
refresh: 0;url=https://s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html#fmuriello@slurpmail.net
content-length: 0
content-type: text/html; charset=UTF-8
date: Tue, 06 Jun 2023 13:07:58 GMT
server: Apache
X-Firefox-Spdy: h2

ocsp.r2m01.amazontrust.com/

54.230.80.227

471 B

URL
ocsp.r2m01.amazontrust.com/
IP
54.230.80.227:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
8516e282bb74d77885fd451511d8e35f
429b2ce4f4390a084f08ac04808cb774cd9ebb13
eee54fb77e51efc273b3a394e6f30ca75bf312537450757bc93ad527f6d0a5f4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 06 Jun 2023 13:07:59 GMT
Last-Modified: Tue, 06 Jun 2023 11:49:22 GMT
Server: ECAcc (nya/7946)
X-Cache: Miss from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IjJn2nf-FmKZWAqwoWZFi8h5LhhlaiRkxjUu6G8Nov2QDGwPziUNUQ==
Age: 4717

s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html

52.217.199.248

243 B

URL
s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html
IP
52.217.199.248:0
ASN
#16509 AMAZON-02

File type
XML 1.0 document text\012- XML document, ASCII text
Size
243 B (243 bytes)
Hash
e1c41e53eb8b5b458161c162cfe3d408
c22f43d54a009af794c8a041e645e78c57e13bd9
59b03981c51693b3060304d4520ecc48d9c32f9e801731bbb54b3053cfda561d

Detections

Analyzer	Verdict	Alert
phishtank	Other

HTTP Headers

GET /appforest_uf/f1679410731851x295358009011027700/passwordreset.html HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
x-amz-request-id: KY9GYDQQ8K4JVX8F
x-amz-id-2: rykS+pzbGmdBo7p1zvgUinwuecYA03FUvaTm/vDtjOGbk4gHBq0/FNM9rao4a3KsATdgcxFmTR0=
Content-Type: application/xml
Transfer-Encoding: chunked
Date: Tue, 06 Jun 2023 13:07:58 GMT
Server: AmazonS3

s3.amazonaws.com/favicon.ico

52.217.199.248

403 Forbidden

243 B

URL GET HTTP/1.1
s3.amazonaws.com/favicon.ico
IP
52.217.199.248:443
ASN
#16509 AMAZON-02

Requested by
https://s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html#fmuriello@slurpmail.net
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint94:B9:7C:21:8C:A0:94:8C:1A:34:F7:CB:48:59:A4:A2:B4:E5:81:03
ValidityTue, 11 Apr 2023 00:00:00 GMT - Wed, 20 Dec 2023 23:59:59 GMT

File type
XML 1.0 document text\012- XML document, ASCII text
Size
243 B (243 bytes)
Hash
e0aa97cd64801aa6eb6d1a6768671b5b
3db3d54b5febb922fdc39677151f54bcec9cf55a
7d95c09448e755559eb57d0617b30ef388af79e32c7ed760b55617d70fc6ce02

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
x-amz-request-id: X3DSZG9GE3RE99A3
x-amz-id-2: iGZkIB51gd6aStPeYHpVprUdyri3L4tvg10vaHVfBcr5k6HKsYDxex+sMO27qxxyvJEFGn9UvqE=
Content-Type: application/xml
Transfer-Encoding: chunked
Date: Tue, 06 Jun 2023 13:07:59 GMT
Server: AmazonS3

s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html

52.217.199.248

403 Forbidden

243 B

URL User Request GET HTTP/1.1
s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html
IP
52.217.199.248:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint94:B9:7C:21:8C:A0:94:8C:1A:34:F7:CB:48:59:A4:A2:B4:E5:81:03
ValidityTue, 11 Apr 2023 00:00:00 GMT - Wed, 20 Dec 2023 23:59:59 GMT

File type
XML document, ASCII text, with no line terminators
Size
243 B (243 bytes)
Hash
a8eec4bce2c560bd2249b6fb078a8bfe
8ae52d96054b1e9670fbc21516e67c02766696ca
d678939547030a9d75cff5c4c4fd97266ab7e7e9a512fdc4ebec2bbef5958f56

Detections

Analyzer	Verdict	Alert
phishtank	Other

HTTP Headers

GET /appforest_uf/f1679410731851x295358009011027700/passwordreset.html HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
x-amz-request-id: KY9GYDQQ8K4JVX8F
x-amz-id-2: rykS+pzbGmdBo7p1zvgUinwuecYA03FUvaTm/vDtjOGbk4gHBq0/FNM9rao4a3KsATdgcxFmTR0=
Content-Type: application/xml
Transfer-Encoding: chunked
Date: Tue, 06 Jun 2023 13:07:58 GMT
Server: AmazonS3

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (6)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers