Report Overview
Visitedpublic
2025-07-30 06:03:27
URL
aknxat.vrncmwsk.es/MKe6GuF6TmQ@7/$noreply@slurpmail.net
Finishing URL
aknxat.vrncmwsk.es/ipr5m4ksuv?id=8ac006d9ad88286f46-927432c9e30f0f7-3649aab7-84e4901dc7-c8b5a96bc-a39b7faedf1-61e6c160bbc4409-3cb45ffd8b18-7294036db-c24d8e6ad8256d-d0d27187692-fd3639e17b0c8dea77cef6e
IP / ASN
104.21.36.5
#13335 CLOUDFLARENET
Title
Enter Account For Security

Phishing - Microsoft

Suspicious - Anti-debugging code

Phishing - Tycoon Phishing Kit

Detections

urlquery
92
Network Intrusion Detection
1
Threat Detection Systems
2

Host Summary

HostRankRegisteredFirst SeenLast Seen
get.geojs.io
174182017-02-182017-03-302025-07-24
github.com
14232007-10-092016-07-132025-07-23
blb6f9xihnntcfqbj3xmf5thhorzfxitwyxwrvui2lpnfawasjj8mq.neoltz.es
unknownunknown2025-07-302025-07-30
cdn.jsdelivr.net
4392012-05-162012-09-302025-07-23
aknxat.vrncmwsk.es
unknownunknown2025-07-222025-07-22
q3w54.pyfao.es
unknownunknown2025-07-302025-07-30
aadcdn.msauth.net
14212018-10-252018-11-192025-07-24
challenges.cloudflare.com
unknown2009-02-172021-10-202025-07-23
release-assets.githubusercontent.com
unknown2014-02-062025-05-112025-07-23
ok4static.oktacdn.com
165922014-11-112018-06-152025-07-23
cdnjs.cloudflare.com
2352009-02-172012-05-232025-07-23
code.jquery.com
6342005-12-102012-05-212025-07-23

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IP
104.26.0.100
ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI

JavaScript (143)

HTTP Transactions (67)

URLIPResponseSize
GET aknxat.vrncmwsk.es/MKe6GuF6TmQ@7/$noreply@slurpmail.net
188.114.96.1200 OK39 kB
GET ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
3.167.2.112200 OK223 kB
GET ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-light-webfont.aba797dabec6686294a9.woff2
3.167.2.112200 OK20 kB
GET cdnjs.cloudflare.com/ajax/libs/lz-string/1.4.4/lz-string.min.js
104.17.24.14200 OK4.7 kB
GET aknxat.vrncmwsk.es/ijBvLEm7bQ37PJEZMmOit9MBsiKrZNQgbdaeRlKbjRmnRoxiEijt3XLoa1UOn3ef210
188.114.96.1200 OK25 kB
GET code.jquery.com/jquery-3.6.0.min.js
151.101.194.137200 OK90 kB
GET aknxat.vrncmwsk.es/favicon.ico
188.114.96.1404 Not Found0 B
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/431259144:1753852536:AsbDAKqb3ffGS58EYEq2fNz0XYGlpHTOTDrzwqSJk9U/9672a61abaef0afe/Mi3OsWFT2K2B4S9cnuvove9SNyyNkmntGH4mBln9LjE-1753855364-1.2.1.1-Jp7MJPPiUswV8n1vAHoLGBBXb_kAV5js2M2VpXA_YCVXWm7ZSI9Sovsue90NmPZX
104.18.95.41200 OK4.9 kB
GET q3w54.pyfao.es/chod!wi9g1
188.114.96.1200 OK1 B
GET aknxat.vrncmwsk.es/kltCtLgmRhx9fOxKM8QSRWLoo83kyzrGRlnud7rGOVNLN78168
188.114.96.1200 OK7.4 kB
GET aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
13.107.246.53200 OK1.9 kB
GET aknxat.vrncmwsk.es/MKe6GuF6TmQ@7/$noreply@slurpmail.net
188.114.96.1200 OK7.2 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/enlfj/0x4AAAAAABgGCBHb8bHN3wvy/auto/fbE/new/normal/en/
104.18.95.41200 OK27 kB
GET aknxat.vrncmwsk.es/GDSherpa-regular.woff2
188.114.96.1200 OK29 kB
GET ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/img/ui/forms/checkbox-sign-in-widget.png
3.167.2.112200 OK3.1 kB
GET get.geojs.io/v1/ip/geo.json
104.26.0.100200 OK335 B
GET challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
104.18.95.41302 Found49 kB
GET challenges.cloudflare.com/turnstile/v0/b/8359bcf47b68/api.js
104.18.95.41200 OK49 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
GET release-assets.githubusercontent.com/github-production-release-asset/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?sp=r&sv=2018-11-09&sr=b&spr=https&se=2025-07-30T06%3A39%3A31Z&rscd=attachment%3B+filename%3Drandexp.min.js&rsct=application%2Foctet-stream&skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skt=2025-07-30T05%3A39%3A07Z&ske=2025-07-30T06%3A39%3A31Z&sks=b&skv=2018-11-09&sig=JAZpkqkHMqO8Yu1VnvadkZqMPGc26tjVYDrPTyFaOjU%3D&jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc1Mzg1NTU3MSwibmJmIjoxNzUzODU1MjcxLCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.lhqMOS5uIPKymEjwfL29hsm33LCN9cmqqLzDNoFsOmg&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
185.199.108.133200 OK10 kB
GET ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-sbold-webfont.41acb8650115f83780fc.woff2
3.167.2.112200 OK20 kB
GET aknxat.vrncmwsk.es/favicon.ico
188.114.96.1404 Not Found0 B
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/9672a61abaef0afe/1753855364850/90a31f4ab68a5c385cbff84e2386515424b856bc4d54ac46057a7d10620ae79b/IjaRs422Nf7CG7Y
104.18.95.41401 Unauthorized1 B
GET github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js
140.82.121.4302 Found10 kB
GET aknxat.vrncmwsk.es/GDSherpa-regular.woff
188.114.96.1200 OK37 kB
GET aknxat.vrncmwsk.es/GDSherpa-vf2.woff2
188.114.96.1200 OK93 kB
GET aknxat.vrncmwsk.es/mnZoDQdgoBGUczMbxfWsPLGgYSb3VBhbUBskllASCMaa2cNCH3YEKEu34k90147
188.114.96.1200 OK270 B
GET ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
3.167.2.112200 OK11 kB
GET ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
3.167.2.112200 OK10 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
GET aknxat.vrncmwsk.es/34aTt7sJWHgg1AEtNabpmW6720
188.114.96.1200 OK28 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/9672a61abaef0afe/1753855364855/wZJ0OewwpWdEP7F
104.18.95.41200 OK304 B
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/431259144:1753852536:AsbDAKqb3ffGS58EYEq2fNz0XYGlpHTOTDrzwqSJk9U/9672a61abaef0afe/Mi3OsWFT2K2B4S9cnuvove9SNyyNkmntGH4mBln9LjE-1753855364-1.2.1.1-Jp7MJPPiUswV8n1vAHoLGBBXb_kAV5js2M2VpXA_YCVXWm7ZSI9Sovsue90NmPZX
104.18.95.41200 OK30 kB
GET aknxat.vrncmwsk.es/stDtpvBntAjbhqGBcymf4c3iMRh4n2G67sSql0ydLn3qiUipF7z6PCgh260
188.114.96.1200 OK18 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/431259144:1753852536:AsbDAKqb3ffGS58EYEq2fNz0XYGlpHTOTDrzwqSJk9U/9672a61abaef0afe/Mi3OsWFT2K2B4S9cnuvove9SNyyNkmntGH4mBln9LjE-1753855364-1.2.1.1-Jp7MJPPiUswV8n1vAHoLGBBXb_kAV5js2M2VpXA_YCVXWm7ZSI9Sovsue90NmPZX
104.18.95.41200 OK296 kB
GET code.jquery.com/jquery-3.6.0.min.js
151.101.194.137200 OK90 kB
GET aknxat.vrncmwsk.es/ijcaIMGCHDfKY3o4OkLKKPKKGB6f5EJoVpF89ceFxJF1btds5EZpBo21TesKgQuViOImyz230
188.114.96.1200 OK1.3 kB
POST blb6f9xihnntcfqbj3xmf5thhorzfxitwyxwrvui2lpnfawasjj8mq.neoltz.es/77905173197239991SQbXAIHsLXMPAZWTVVNKSABBIOXIESQWZBTJMBLGYLDICABXEBVDULDZBpqCZwaiBZKx74WjGYN5ZyzwCkUuv32
104.21.84.199200 OK536 B
GET cdn.jsdelivr.net/npm/lz-string@1.4.4/libs/lz-string.min.js
151.101.129.229200 OK4.7 kB
GET code.jquery.com/jquery-3.6.0.min.js
151.101.194.137200 OK90 kB
GET aknxat.vrncmwsk.es/oprQMAAUZqyNySiBBfCzuykwNv812canzcRLBY8bklHwnLuKkXu0pfQ8rf4Qef240
188.114.96.1200 OK9.6 kB
GET aknxat.vrncmwsk.es/56olJVjst2hrURdSZe1LrwLxughm7aHAgzC42Bpu6QO67102
188.114.96.1200 OK291 kB
GET ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/img/security/default.png
3.167.2.112200 OK1.8 kB
POST aknxat.vrncmwsk.es/rqR5ja6d20FTRDDd2Wxrmt7VjDoBCBETyl8EZ2EyNH47pUyJQzAjy
188.114.96.1200 OK440 B
GET aknxat.vrncmwsk.es/abYUP41rsfKEcd24
188.114.96.1200 OK36 kB
GET aknxat.vrncmwsk.es/wxY9QFyk6R32e8jDZJbmjHEzrsENFut3KCC8y2uXAab180
188.114.96.1200 OK2.9 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
104.18.95.41200 OK86 B
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9672a61abaef0afe&lang=en
104.18.95.41200 OK138 kB
GET cdnjs.cloudflare.com/ajax/libs/lz-string/1.4.4/lz-string.min.js
104.17.24.14200 OK4.7 kB
GET aknxat.vrncmwsk.es/GDSherpa-bold.woff2
188.114.96.1200 OK28 kB
GET aknxat.vrncmwsk.es/opCYFGAvxJiFHi9nlFh2eAghLeWksXq8E6H67134
188.114.96.1200 OK892 B
GET aknxat.vrncmwsk.es/favicon.ico
188.114.96.1404 Not Found0 B
POST aknxat.vrncmwsk.es/clIIbRSvfBfvrYItDveBnYYcjxPUkAi48
188.114.96.1200 OK20 B
GET aknxat.vrncmwsk.es/ipr5m4ksuv?id=8ac006d9ad88286f46-927432c9e30f0f7-3649aab7-84e4901dc7-c8b5a96bc-a39b7faedf1-61e6c160bbc4409-3cb45ffd8b18-7294036db-c24d8e6ad8256d-d0d27187692-fd3639e17b0c8dea77cef6e
188.114.96.1200 OK206 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
GET ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2
3.167.2.112200 OK20 kB
GET aknxat.vrncmwsk.es/GDSherpa-vf.woff2
188.114.96.1200 OK44 kB
GET cdnjs.cloudflare.com/ajax/libs/lz-string/1.4.4/lz-string.min.js
104.17.24.14200 OK4.7 kB
POST aknxat.vrncmwsk.es/gwg6By9zoP2K4DE9Kx2SzMzt5EZQ6oVqOm1HPGpCbQbjl
188.114.96.1200 OK1 B
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
GET cdnjs.cloudflare.com/ajax/libs/lz-string/1.4.4/lz-string.min.js
104.17.24.14200 OK4.7 kB
GET aknxat.vrncmwsk.es/rsJQu3KenRmt9rFZLglKa73UcYXijZ9GzcjQhGxD544Tnm1NQTQSRef200
188.114.96.1200 OK268 B
GET get.geojs.io/v1/ip/geo.json
104.26.0.100200 OK335 B
GET aknxat.vrncmwsk.es/GDSherpa-bold.woff
188.114.96.1200 OK36 kB
GET aknxat.vrncmwsk.es/uvkrygEh878lD0mgFIGqrlQvfU6d8sjDfK5s12130
188.114.96.1200 OK644 B