Report Overview

  1. Visited public
    2024-01-02 05:10:45
    Submit Tags
  2. URL

    pideloenbz.com/c2

  3. Finishing URL

    prime-renewalsecure-billing.com.work.gd/ap/signin?eventid=bb0a976f802a2c741b5771a0330a7dde

  4. IP / ASN
    104.21.95.10

    #13335 CLOUDFLARENET

    Title
    Amazon Sign-In
  5. Phishing - Amazon

    Suspicious - DynDNS domain

Detections
urlquery
12
Network Intrusion Detection
6
Threat Detection Systems
10

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
pideloenbz.comunknown2020-06-242020-10-10 19:48:092023-11-18 09:47:48
qrs.ly3150052010-01-272015-02-19 19:55:022023-12-27 13:16:05
prime-renewalsecure-billing.com.work.gdunknownunknownNo dataNo data
i.ibb.co134852010-07-202018-11-25 11:13:482024-01-01 05:19:23
m.media-amazon.com5802016-08-182018-06-22 13:41:032024-01-01 10:16:55
images-na.ssl-images-amazon.com8422004-07-212012-10-30 03:08:432024-01-01 18:35:03

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IPInternal IP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumprime-renewalsecure-billing.com.work.gdSinkholed
mediumprime-renewalsecure-billing.com.work.gdSinkholed
mediumprime-renewalsecure-billing.com.work.gdSinkholed
mediumprime-renewalsecure-billing.com.work.gdSinkholed
mediumprime-renewalsecure-billing.com.work.gdSinkholed

ThreatFox

No alerts detected


JavaScript (2)

HTTP Transactions (16)

URLIPResponseSize
pideloenbz.com/
104.21.95.10 0 B
GET qrs.ly/q5fgnzv
143.204.55.12302 Found486 B
GET prime-renewalsecure-billing.com.work.gd/ap/signin?eventid=bb0a976f802a2c741b5771a0330a7dde
103.134.154.109200 OK7.4 kB
GET i.ibb.co/LPZq55S/amz.png
162.19.58.158200 OK19 kB
GET prime-renewalsecure-billing.com.work.gd/Resources/Assets/css/pc1.css
103.134.154.109200 OK12 kB
GET prime-renewalsecure-billing.com.work.gd/Resources/Assets/js/pc1.js
103.134.154.109200 OK14 kB
GET m.media-amazon.com/images/S/sash/KFPk-9IF4FqAqY-.woff2
65.9.51.123200 OK16 kB
GET m.media-amazon.com/images/S/sash/pDxWAF1pBB0dzGB.woff2
65.9.51.123200 OK17 kB
pideloenbz.com/
104.21.95.10 67 kB
GET m.media-amazon.com/images/S/sash/pDxWAF1pBB0dzGB.woff2
65.9.51.123200 OK17 kB
GET m.media-amazon.com/images/S/sash/KFPk-9IF4FqAqY-.woff2
65.9.51.123200 OK16 kB
GET prime-renewalsecure-billing.com.work.gd/Resources/Assets/img/fav.png
103.134.154.109200 OK4.3 kB
GET i.ibb.co/B6Zr64S/memeksapi.png
162.19.58.158404 Not Found1.0 kB
GET images-na.ssl-images-amazon.com/images/I/61-6nKPKyWL._RC|11Y+5x+kkTL.js,51KMV3Cz2XL.js,31x4ENTlVIL.js,31f4+QIEeqL.js,01N6xzIJxbL.js,518BI433aLL.js,01rpauTep4L.js,31QZSjMuoeL.js,61ofwvddDeL.js,01KsMxlPtzL.js_.js?AUIClients/AmazonUI
52.85.238.114200 OK317 kB
GET prime-renewalsecure-billing.com.work.gd/?anti-tikung
103.134.154.109302 Found7.4 kB
GET pideloenbz.com/c2
104.21.95.10301 Moved Permanently7.4 kB