Report Overview

  1. Submitted URL

    tr.cloudmagic.com/h/v6/link-track/1.0/1653586175111584-e5449996-ded2-d04e-76e6-83302b700c39/1653586158/25a6df233274f31d935e851802d6946d/fa6e8cf070e2759f5f1587cf217f3cfe/ce5f7a01e55be7e4e4aad4df40697507?redirect_uri=https://short-end-of-the-stick.com/new/auth/sf_rand_string_lowercase6////am9zZS5kb3VnbmFjQHNreWFpcmxpbmUuY29t

  2. IP

    3.209.148.183

    ASN

    #14618 AMAZON-AES

  3. Submitted

    2023-05-25 18:04:11

    Access

    public

  4. Website Title

  5. Final URL

  6. urlquery detections

    Phishing - Microsoft Outlook

Detections

  1. urlquery

    4

  2. Network Intrusion Detection

    2

  3. Threat Detection Systems

    16

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
unpkg.com116932016-01-062016-01-082023-05-25
ocsp.r2m02.amazontrust.comunknown2007-05-112022-10-122023-05-25
tr.cloudmagic.com4296292005-03-182017-01-302023-05-25
short-end-of-the-stick.comunknown2022-11-242022-11-252023-05-25
3nzpr4vtka64543df240feb.tkdref.ruunknown2023-05-082023-05-242023-05-24

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IP 192.169.69.26
mediumClient IP 192.169.69.26

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumshort-end-of-the-stick.com/new/auth/sf_rand_string_lowercase6////am9zZS5kb3VnbmFjQHNreWFpcmxpbmUuY29t
medium3nzpr4vtka64543df240feb.tkdref.ru/cdn-cgi/images/trace/managed/js/transparent.gif?ray=7ccfb2a51bdcb51d
medium3nzpr4vtka64543df240feb.tkdref.ru/Mjose.dougnac@skyairline.com
medium3nzpr4vtka64543df240feb.tkdref.ru/boot/ec522571eaad1e9548cbc5523fa8c489646fa30cd3a43
medium3nzpr4vtka64543df240feb.tkdref.ru/jm/ec522571eaad1e9548cbc5523fa8c489646fa30cd3a47
medium3nzpr4vtka64543df240feb.tkdref.ru/Mjose.dougnac@skyairline.com
medium3nzpr4vtka64543df240feb.tkdref.ru/beebb091955c06fa68b3eb8afc0bae51646fa30cc3695PASbeebb091955c06fa68b3eb8afc0bae51646fa30cc3696
medium3nzpr4vtka64543df240feb.tkdref.ru/jq/ec522571eaad1e9548cbc5523fa8c489646fa30cd3a40

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (9)

HTTP Transactions (12)

URLIPResponseSize
ocsp.r2m02.amazontrust.com/
54.230.80.227 471 B
tr.cloudmagic.com/h/v6/link-track/1.0/1653586175111584-e5449996-ded2-d04e-76e6-83302b700c39/1653586158/25a6df233274f31d935e851802d6946d/fa6e8cf070e2759f5f1587cf217f3cfe/ce5f7a01e55be7e4e4aad4df40697507?redirect_uri=https://short-end-of-the-stick.com/new/auth/sf_rand_string_lowercase6////am9zZS5kb3VnbmFjQHNreWFpcmxpbmUuY29t
54.86.136.244302 Found262 B
short-end-of-the-stick.com/new/auth/sf_rand_string_lowercase6////am9zZS5kb3VnbmFjQHNreWFpcmxpbmUuY29t
192.129.178.66200 OK0 B
3nzpr4vtka64543df240feb.tkdref.ru/cdn-cgi/images/trace/managed/js/transparent.gif?ray=7ccfb2a51bdcb51d
172.67.180.66 42 B
3nzpr4vtka64543df240feb.tkdref.ru/Mjose.dougnac@skyairline.com
172.67.180.66403 Forbidden8.2 kB
3nzpr4vtka64543df240feb.tkdref.ru/boot/ec522571eaad1e9548cbc5523fa8c489646fa30cd3a43
172.67.180.66200 OK51 kB
3nzpr4vtka64543df240feb.tkdref.ru/jm/ec522571eaad1e9548cbc5523fa8c489646fa30cd3a47
172.67.180.66200 OK7.3 kB
3nzpr4vtka64543df240feb.tkdref.ru/Mjose.dougnac@skyairline.com
172.67.180.66302 Found7.4 kB
3nzpr4vtka64543df240feb.tkdref.ru/beebb091955c06fa68b3eb8afc0bae51646fa30cc3695PASbeebb091955c06fa68b3eb8afc0bae51646fa30cc3696
172.67.180.66200 OK7.4 kB
3nzpr4vtka64543df240feb.tkdref.ru/jq/ec522571eaad1e9548cbc5523fa8c489646fa30cd3a40
172.67.180.66200 OK86 kB
unpkg.com/axios/dist/axios.min.js
104.16.123.175302 Found32 kB
unpkg.com/axios@1.4.0/dist/axios.min.js
104.16.123.175200 OK32 kB