Report Overview
URL
consultorianfp.com/home?email=3mail@slurpmail.net
Finishing URL
pub-cd4423a1a6fa4551a99262921e24b7f3.r2.dev/Home/c09754553c2c88492d5973e7f4829e8cc.html?3mail@slurpmail.net
IP / ASN
66.225.221.86
Title
Proceed To Secure Account
Phishing - Microsoft
Suspicious - Anti-debugging code
Phishing - Tycoon Phishing Kit
Detections
urlquery
4
Network Intrusion Detection
2
Threat Detection Systems
5
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
aadcdn.msauth.net | 5248 | 2018-10-25 | 2018-11-19 | 2026-03-25 | 3.7 kB | 68 kB | 13.107.246.53 |  |
consultorianfp.com 4 alert(s) on this Host | unknown | 2024-03-16 | 2026-03-30 | 2026-03-30 | 1.0 kB | 897 kB | 66.225.221.86 |  |
code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-03-29 | 451 B | 90 kB | 151.101.194.137 |   |
release-assets.githubusercontent.com | 67648 | 2014-02-06 | 2025-05-11 | 2026-03-26 | 1.3 kB | 11 kB | 185.199.110.133 |  |
get.geojs.io | 99948 | 2017-02-18 | 2017-03-30 | 2026-03-25 | 543 B | 1.2 kB |  104.26.0.100 |  |
ptkf5k3g77gz88ca7qcotdwa4p6pjb7zdo4s3e6bdykdtq6xtj0edvc.troshiowio.com 2 alert(s) on this Host | unknown | 2026-03-27 | 2026-03-30 | 2026-03-30 | 729 B | 1.1 kB |  194.242.11.186 |  |
github.com | 40 | 2007-10-09 | 2016-07-13 | 2026-03-25 | 482 B | 15 kB |  140.82.121.3 |    |
logincdn.msauth.net | 23083 | 2018-10-25 | 2019-04-23 | 2026-03-25 | 517 B | 968 B | 13.107.246.53 | |
pub-cd4423a1a6fa4551a99262921e24b7f3.r2.dev 8 alert(s) on this Host | unknown | 2022-08-23 | 2026-03-30 | 2026-03-30 | 1.1 kB | 476 kB | 104.18.50.34 | |
cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-03-29 | 479 B | 49 kB | 104.17.25.14 | |
Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.LiteSpeed (Web servers)
LiteSpeed is a high-scalability web server.Varnish (Caching)
Varnish is a reverse caching proxy.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Microsoft HTTPAPI:2.0 (Web servers)
Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Bunny (CDN)
GitHub Pages (PaaS)
GitHub Pages is a static site hosting service.Amazon S3 (CDN)
Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 104.18.50.34 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI | |
| medium | Client IP | 104.26.0.100 | ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | consultorianfp.com | phishing | Phishing Block |
| DNS4EU | consultorianfp.com | malicious | Sinkholed |
| DNS4EU | pub-cd4423a1a6fa4551a99262921e24b7f3.r2.dev | malicious | Sinkholed |
| OpenDNS | pub-cd4423a1a6fa4551a99262921e24b7f3.r2.dev | phishing | Phishing Block |
| Quad9 DNS | ptkf5k3g77gz88ca7qcotdwa4p6pjb7zdo4s3e6bdykdtq6xtj0edvc.troshiowio.com | malicious | Sinkholed |
JavaScript (9)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| 19f89d514326f3af79dd312f52043fd8 | DocumentWrite | 334 kB | 2026-03-30 | 2026-03-31 | |
Introduced by DocumentWrite First Seen 2026-03-30 Last Seen 2026-03-31 Times Seen 6 Size 334 kB (333991 bytes) MD5 19f89d514326f3af79dd312f52043fd8 SHA1 6542d6c090685d298447bcf58d7986c345620b86 Loading... | |||||
HTTP Transactions (18)
| URL | IP | Response | Size |
|---|