Report - nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fqcaydfvctclb-xpolzdibqmvds.maillist-manage.com%2Fclick%2F1134797e05fa29baf%2F1134797e05fa2993b%23VGFjK1pCOHhzeVNzNGlyTkNXbkJoZ25YOTU5MDJaRWhQQ215c0xtTDFMdk5GT0YzRlQvcCtRbTdJbzB2b2FIYWZWV0IzcWt1TXIxWlY4bGJDOW1ZZzR2aERkK0tuY2FBTWxCWFN6TEoyMDA9&data=05%7C02%7CHaydee.Lecuona%40teachforamerica.org%7C21334fb6e8724dc8e7e508dd580d2fca%7Ce1b9b06cef30491886545a7b9c1aca93%7C0%7C0%7C638763536756411706%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C20000%7C%7C%7C&sdata=f8akvZSTuHrOUydXEjN3EMuUzZc0nkBo5w0srElWZS4%3D&reserved=0

Report Overview

Visited public
2025-03-03 14:55:50
Tags
URL
nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fqcaydfvctclb-xpolzdibqmvds.maillist-manage.com%2Fclick%2F1134797e05fa29baf%2F1134797e05fa2993b%23VGFjK1pCOHhzeVNzNGlyTkNXbkJoZ25YOTU5MDJaRWhQQ215c0xtTDFMdk5GT0YzRlQvcCtRbTdJbzB2b2FIYWZWV0IzcWt1TXIxWlY4bGJDOW1ZZzR2aERkK0tuY2FBTWxCWFN6TEoyMDA9&data=05%7C02%7CHaydee.Lecuona%40teachforamerica.org%7C21334fb6e8724dc8e7e508dd580d2fca%7Ce1b9b06cef30491886545a7b9c1aca93%7C0%7C0%7C638763536756411706%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C20000%7C%7C%7C&sdata=f8akvZSTuHrOUydXEjN3EMuUzZc0nkBo5w0srElWZS4%3D&reserved=0
Finishing URL
qcaydfvctclb-xpolzdibqmvds.maillist-manage.com/click/1134797e05fa29baf/1134797e05fa2993b#VGFjK1pCOHhzeVNzNGlyTkNXbkJoZ25YOTU5MDJaRWhQQ215c0xtTDFMdk5GT0YzRlQvcCtRbTdJbzB2b2FIYWZWV0IzcWt1TXIxWlY4bGJDOW1ZZzR2aERkK0tuY2FBTWxCWFN6TEoyMDA9
IP / ASN
104.47.55.156
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Title
Redirection Blocked

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
qcaydfvctclb-xpolzdibqmvds.maillist-manage.com	unknown	2012-08-09	2025-03-03	2025-03-03	2.0 kB	6.0 kB	136.143.190.68
nam12.safelinks.protection.outlook.com	12250	1994-08-18	2019-08-15	2025-03-01	1.1 kB	3.0 kB	104.47.66.28

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	qcaydfvctclb-xpolzdibqmvds.maillist-manage.com/click/1134797e05fa29baf/1134797e05fa2993b#VGFjK1pCOHhzeVNzNGlyTkNXbkJoZ25YOTU5MDJaRWhQQ215c0xtTDFMdk5GT0YzRlQvcCtRbTdJbzB2b2FIYWZWV0IzcWt1TXIxWlY4bGJDOW1ZZzR2aERkK0tuY2FBTWxCWFN6TEoyMDA9	ScriptElement	305 B	2025-03-03	2025-03-03
Pretty URL qcaydfvctclb-xpolzdibqmvds.maillist-manage.com/click/1134797e05fa29baf/1134797e05fa2993b#VGFjK1pCOHhzeVNzNGlyTkNXbkJoZ25YOTU5MDJaRWhQQ215c0xtTDFMdk5GT0YzRlQvcCtRbTdJbzB2b2FIYWZWV0IzcWt1TXIxWlY4bGJDOW1ZZzR2aERkK0tuY2FBTWxCWFN6TEoyMDA9 IP 136.143.190.68 ASN #2639 ZOHO-AS Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-03 14:55 Last Seen2025-03-03 14:55 Times Seen1 Hash 4871146131139da6e3d410cca1b03d94 079ce233014a8e4573eec1a33701c94bf39cf19b 0c17722e007196375297558d70a15d4969bef682a122e4a93c936ee655932e25 Loading...

HTTP Transactions (4)

	URL	IP	Response	Size
	qcaydfvctclb-xpolzdibqmvds.maillist-manage.com/click/images/blockedicon.png	136.143.190.68	200	1.8 kB
URL GET qcaydfvctclb-xpolzdibqmvds.maillist-manage.com/click/images/blockedicon.png IP 136.143.190.68:443 ASN #2639 ZOHO-AS Requested by https://qcaydfvctclb-xpolzdibqmvds.maillist-manage.com/click/1134797e05fa29baf/1134797e05fa2993b#VGFjK1pCOHhzeVNzNGlyTkNXbkJoZ25YOTU5MDJaRWhQQ215c0xtTDFMdk5GT0YzRlQvcCtRbTdJbzB2b2FIYWZWV0IzcWt1TXIxWlY4bGJDOW1ZZzR2aERkK0tuY2FBTWxCWFN6TEoyMDA9 Certificate IssuerLet's Encrypt Subjectzctracker.com Fingerprint9B:F7:D7:B3:00:EE:B1:7B:13:AF:85:0F:D3:34:F3:D0:5A:AE:54:D4 ValidityMon, 03 Mar 2025 09:46:39 GMT - Sun, 01 Jun 2025 09:46:38 GMT File type HTML document, ASCII text, with very long lines (1943), with no line terminators Size 1.8 kB (1819 bytes) Hash 51e5b40869d06a87d077851431290f0a f03852fd87e5f79d3534b016b0cbd5574c03efb2 46cb2a498daaa306bfbb168d0953ee13b380e0f676aa8edb057481289a35bf5e HTTP Headers GET /click/images/blockedicon.png HTTP/1.1 Host: qcaydfvctclb-xpolzdibqmvds.maillist-manage.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://qcaydfvctclb-xpolzdibqmvds.maillist-manage.com/click/1134797e05fa29baf/1134797e05fa2993b Cookie: zalb_c72887300d=bc8a164127ae0588ecb5d0b57b5fb0ca; ZCAMPAIGN_CSRF_TOKEN=98005c79-cb35-4656-a1e2-094309752c37; _zcsr_tmp=98005c79-cb35-4656-a1e2-094309752c37 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 Server: ZGS Date: Mon, 03 Mar 2025 14:55:30 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Set-Cookie: JSESSIONID=C32C89CB8CB2FD30718B74420ACF6642; Path=/; Secure; HttpOnly vary: accept-encoding Content-Encoding: gzip Strict-Transport-Security: max-age=63072000`

	qcaydfvctclb-xpolzdibqmvds.maillist-manage.com/favicon.ico	136.143.190.68	404	447 B
URL GET qcaydfvctclb-xpolzdibqmvds.maillist-manage.com/favicon.ico IP 136.143.190.68:443 ASN #2639 ZOHO-AS Requested by https://qcaydfvctclb-xpolzdibqmvds.maillist-manage.com/click/1134797e05fa29baf/1134797e05fa2993b#VGFjK1pCOHhzeVNzNGlyTkNXbkJoZ25YOTU5MDJaRWhQQ215c0xtTDFMdk5GT0YzRlQvcCtRbTdJbzB2b2FIYWZWV0IzcWt1TXIxWlY4bGJDOW1ZZzR2aERkK0tuY2FBTWxCWFN6TEoyMDA9 Certificate IssuerLet's Encrypt Subjectzctracker.com Fingerprint9B:F7:D7:B3:00:EE:B1:7B:13:AF:85:0F:D3:34:F3:D0:5A:AE:54:D4 ValidityMon, 03 Mar 2025 09:46:39 GMT - Sun, 01 Jun 2025 09:46:38 GMT File type HTML document, ASCII text, with very long lines (484), with no line terminators Size 447 B (447 bytes) Hash e824b7dd04c996333fd63676cb27e86d 56e3783c7fbfba24ba047757cdef1538de1d1f28 be64890c936f710ad8b48999feb40f0321238c5607da90bcee21d3b892b87cb7 HTTP Headers GET /favicon.ico HTTP/1.1 Host: qcaydfvctclb-xpolzdibqmvds.maillist-manage.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://qcaydfvctclb-xpolzdibqmvds.maillist-manage.com/click/1134797e05fa29baf/1134797e05fa2993b Cookie: zalb_c72887300d=bc8a164127ae0588ecb5d0b57b5fb0ca; ZCAMPAIGN_CSRF_TOKEN=98005c79-cb35-4656-a1e2-094309752c37; _zcsr_tmp=98005c79-cb35-4656-a1e2-094309752c37 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Server: ZGS Date: Mon, 03 Mar 2025 14:55:30 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 447 Connection: keep-alive X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Set-Cookie: JSESSIONID=61038A663D875D53DBD17543189038D1; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=63072000`

	nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fqcaydfvctclb-xpolzdibqmvds.maillist-manage.com%2Fclick%2F1134797e05fa29baf%2F1134797e05fa2993b%23VGFjK1pCOHhzeVNzNGlyTkNXbkJoZ25YOTU5MDJaRWhQQ215c0xtTDFMdk5GT0YzRlQvcCtRbTdJbzB2b2FIYWZWV0IzcWt1TXIxWlY4bGJDOW1ZZzR2aERkK0tuY2FBTWxCWFN6TEoyMDA9&data=05%7C02%7CHaydee.Lecuona%40teachforamerica.org%7C21334fb6e8724dc8e7e508dd580d2fca%7Ce1b9b06cef30491886545a7b9c1aca93%7C0%7C0%7C638763536756411706%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C20000%7C%7C%7C&sdata=f8akvZSTuHrOUydXEjN3EMuUzZc0nkBo5w0srElWZS4%3D&reserved=0	104.47.66.28	302 Found	2.2 kB
URL User Request GET nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fqcaydfvctclb-xpolzdibqmvds.maillist-manage.com%2Fclick%2F1134797e05fa29baf%2F1134797e05fa2993b%23VGFjK1pCOHhzeVNzNGlyTkNXbkJoZ25YOTU5MDJaRWhQQ215c0xtTDFMdk5GT0YzRlQvcCtRbTdJbzB2b2FIYWZWV0IzcWt1TXIxWlY4bGJDOW1ZZzR2aERkK0tuY2FBTWxCWFN6TEoyMDA9&data=05%7C02%7CHaydee.Lecuona%40teachforamerica.org%7C21334fb6e8724dc8e7e508dd580d2fca%7Ce1b9b06cef30491886545a7b9c1aca93%7C0%7C0%7C638763536756411706%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C20000%7C%7C%7C&sdata=f8akvZSTuHrOUydXEjN3EMuUzZc0nkBo5w0srElWZS4%3D&reserved=0 IP 104.47.66.28:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerDigiCert Inc Subject.safelinks.protection.outlook.com FingerprintDC:A1:15:10:7E:EA:98:1B:4E:4B:4B:C4:62:56:08:B5:0E:D3:A5:89 ValiditySat, 02 Nov 2024 00:00:00 GMT - Sat, 01 Nov 2025 23:59:59 GMT File type Size 2.2 kB (2158 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /?url=https%3A%2F%2Fqcaydfvctclb-xpolzdibqmvds.maillist-manage.com%2Fclick%2F1134797e05fa29baf%2F1134797e05fa2993b%23VGFjK1pCOHhzeVNzNGlyTkNXbkJoZ25YOTU5MDJaRWhQQ215c0xtTDFMdk5GT0YzRlQvcCtRbTdJbzB2b2FIYWZWV0IzcWt1TXIxWlY4bGJDOW1ZZzR2aERkK0tuY2FBTWxCWFN6TEoyMDA9&data=05%7C02%7CHaydee.Lecuona%40teachforamerica.org%7C21334fb6e8724dc8e7e508dd580d2fca%7Ce1b9b06cef30491886545a7b9c1aca93%7C0%7C0%7C638763536756411706%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C20000%7C%7C%7C&sdata=f8akvZSTuHrOUydXEjN3EMuUzZc0nkBo5w0srElWZS4%3D&reserved=0 HTTP/1.1 Host: nam12.safelinks.protection.outlook.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found cache-control: private content-type: text/html; charset=utf-8 location: https://qcaydfvctclb-xpolzdibqmvds.maillist-manage.com/click/1134797e05fa29baf/1134797e05fa2993b#VGFjK1pCOHhzeVNzNGlyTkNXbkJoZ25YOTU5MDJaRWhQQ215c0xtTDFMdk5GT0YzRlQvcCtRbTdJbzB2b2FIYWZWV0IzcWt1TXIxWlY4bGJDOW1ZZzR2aERkK0tuY2FBTWxCWFN6TEoyMDA9 server: Microsoft-IIS/10.0 x-aspnetmvc-version: 5.2 x-sl-geturlreputation-verdict: Good x-robots-tag: noindex, nofollow x-aspnet-version: 4.0.30319 x-servername: MW2NAM12WS068 x-serverversion: 15.20.8511.012 x-serverlat: 225 x-safelinks-tracking-id: be673ad4-aa75-4adc-a33e-08dd5a63703e x-powered-by: ASP.NET x-content-type-options: nosniff x-ua-compatible: IE=Edge strict-transport-security: max-age=63072000; includeSubDomains; preload date: Mon, 03 Mar 2025 14:55:28 GMT content-length: 358 X-Firefox-Spdy: h2

	qcaydfvctclb-xpolzdibqmvds.maillist-manage.com/click/1134797e05fa29baf/1134797e05fa2993b#VGFjK1pCOHhzeVNzNGlyTkNXbkJoZ25YOTU5MDJaRWhQQ215c0xtTDFMdk5GT0YzRlQvcCtRbTdJbzB2b2FIYWZWV0IzcWt1TXIxWlY4bGJDOW1ZZzR2aERkK0tuY2FBTWxCWFN6TEoyMDA9	136.143.190.68	200	2.2 kB
URL User Request GET qcaydfvctclb-xpolzdibqmvds.maillist-manage.com/click/1134797e05fa29baf/1134797e05fa2993b#VGFjK1pCOHhzeVNzNGlyTkNXbkJoZ25YOTU5MDJaRWhQQ215c0xtTDFMdk5GT0YzRlQvcCtRbTdJbzB2b2FIYWZWV0IzcWt1TXIxWlY4bGJDOW1ZZzR2aERkK0tuY2FBTWxCWFN6TEoyMDA9 IP 136.143.190.68:443 ASN #2639 ZOHO-AS Certificate IssuerLet's Encrypt Subjectzctracker.com Fingerprint9B:F7:D7:B3:00:EE:B1:7B:13:AF:85:0F:D3:34:F3:D0:5A:AE:54:D4 ValidityMon, 03 Mar 2025 09:46:39 GMT - Sun, 01 Jun 2025 09:46:38 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (2316), with no line terminators Size 2.2 kB (2158 bytes) Hash 95f02f3be39523c3cc5767b45a908b63 4b98d76198bb06a72be68534abc224f135837d50 66857522700fdd0f86203dba2756a890e55b556fffde38569f51eb949ebbff7a HTTP Headers GET /click/1134797e05fa29baf/1134797e05fa2993b HTTP/1.1 Host: qcaydfvctclb-xpolzdibqmvds.maillist-manage.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 Server: ZGS Date: Mon, 03 Mar 2025 14:55:29 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive X-Content-Type-Options: nosniff Set-Cookie: zalb_c72887300d=bc8a164127ae0588ecb5d0b57b5fb0ca; Path=/; Secure; HttpOnly ZCAMPAIGN_CSRF_TOKEN=98005c79-cb35-4656-a1e2-094309752c37;path=/;SameSite=None;Secure;priority=high _zcsr_tmp=98005c79-cb35-4656-a1e2-094309752c37;path=/;SameSite=Strict;Secure;priority=high Cache-Control: private,no-cache,no-store,max-age=0,must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes ETag: W/"2158-1740745738000" Last-Modified: Fri, 28 Feb 2025 12:28:58 GMT vary: accept-encoding Content-Encoding: gzip Strict-Transport-Security: max-age=63072000

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (4)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers