Report - nam11.safelinks.protection.outlook.com/?url=https://r.srvtrck.com/v1/redirect?yk_tag=337_47d_c3_3b6f&site_id=56e7d51be4b05d750682348a&api_key=abbc5236946676eae219a734c0a1c5e8&url=https://tamltdsti.com/zoom/new/tamltdsti/dXNlZGFnc2FsZXNtZkByZG9lcXVpcG1lbnQuY29t&data=05|01|zwhitesell@rdoequipment.com|136aa2502f614717166a08db7ef430cf|b99e7c1b6a774194aeb8db80931e4d15|0|0|638243359531559982|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|3000|||&sdata=pVLCsTGCzIiJY7CcwybVTiI+Fqcp0Q33PBcAU2EYPr0=&reserved=0

Report Overview

Visited public
2023-09-20 01:08:01
Tags
URL
nam11.safelinks.protection.outlook.com/?url=https://r.srvtrck.com/v1/redirect?yk_tag=337_47d_c3_3b6f&site_id=56e7d51be4b05d750682348a&api_key=abbc5236946676eae219a734c0a1c5e8&url=https://tamltdsti.com/zoom/new/tamltdsti/dXNlZGFnc2FsZXNtZkByZG9lcXVpcG1lbnQuY29t&data=05|01|zwhitesell@rdoequipment.com|136aa2502f614717166a08db7ef430cf|b99e7c1b6a774194aeb8db80931e4d15|0|0|638243359531559982|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|3000|||&sdata=pVLCsTGCzIiJY7CcwybVTiI+Fqcp0Q33PBcAU2EYPr0=&reserved=0
Finishing URL
nam11.safelinks.protection.outlook.com/?url=https://r.srvtrck.com/v1/redirect?yk_tag=337_47d_c3_3b6f&site_id=56e7d51be4b05d750682348a&api_key=abbc5236946676eae219a734c0a1c5e8&url=https://tamltdsti.com/zoom/new/tamltdsti/dXNlZGFnc2FsZXNtZkByZG9lcXVpcG1lbnQuY29t&data=05|01|zwhitesell@rdoequipment.com|136aa2502f614717166a08db7ef430cf|b99e7c1b6a774194aeb8db80931e4d15|0|0|638243359531559982|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|3000|||&sdata=pVLCsTGCzIiJY7CcwybVTiI+Fqcp0Q33PBcAU2EYPr0=&reserved=0
IP / ASN
104.47.56.156
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Title
Error during processing.

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
nam11.safelinks.protection.outlook.com	15258	1994-08-18	2019-08-15 11:58:39	2023-09-19 21:25:36	3.9 kB	30 kB	104.47.56.156

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-20 01:07:55	high	54.37.238.86	Client IP	ET POLICY PE EXE or DLL Windows file download HTTP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	nam11.safelinks.protection.outlook.com/Content/Scripts/site.js	ScriptElement	1.6 kB	2023-03-07	2025-04-25
Pretty URL nam11.safelinks.protection.outlook.com/Content/Scripts/site.js IP 104.47.57.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:14 Last Seen2025-04-25 19:01 Times Seen477 Hash 3af1fdb9a3f664a6683d212f4787733a 59063d49b723a1988236c8d39c2804c6ebc5ff95 a9ce4840ff0d613b456081dea64e46eb717a1f8bfa5afb05d3bd058f294e416c Loading...

HTTP Transactions (4)

	URL	IP	Response	Size
	nam11.safelinks.protection.outlook.com/?url=https://r.srvtrck.com/v1/redirect?yk_tag=337_47d_c3_3b6f&site_id=56e7d51be4b05d750682348a&api_key=abbc5236946676eae219a734c0a1c5e8&url=https://tamltdsti.com/zoom/new/tamltdsti/dXNlZGFnc2FsZXNtZkByZG9lcXVpcG1lbnQuY29t&data=05\|01\|zwhitesell@rdoequipment.com\|136aa2502f614717166a08db7ef430cf\|b99e7c1b6a774194aeb8db80931e4d15\|0\|0\|638243359531559982\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|3000\|\|\|&sdata=pVLCsTGCzIiJY7CcwybVTiI+Fqcp0Q33PBcAU2EYPr0=&reserved=0	104.47.56.156	200 OK	2.2 kB
URL User Request GET HTTP/1.1 nam11.safelinks.protection.outlook.com/?url=https://r.srvtrck.com/v1/redirect?yk_tag=337_47d_c3_3b6f&site_id=56e7d51be4b05d750682348a&api_key=abbc5236946676eae219a734c0a1c5e8&url=https://tamltdsti.com/zoom/new/tamltdsti/dXNlZGFnc2FsZXNtZkByZG9lcXVpcG1lbnQuY29t&data=05\|01\|zwhitesell@rdoequipment.com\|136aa2502f614717166a08db7ef430cf\|b99e7c1b6a774194aeb8db80931e4d15\|0\|0\|638243359531559982\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|3000\|\|\|&sdata=pVLCsTGCzIiJY7CcwybVTiI+Fqcp0Q33PBcAU2EYPr0=&reserved=0 IP 104.47.56.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerDigiCert Inc Subject.safelinks.protection.outlook.com FingerprintAC:D5:5A:BD:B6:35:63:20:02:15:3D:7B:3F:ED:0E:3F:7F:A6:48:EB ValidityMon, 08 May 2023 00:00:00 GMT - Tue, 07 May 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1150), with CRLF line terminators Size 2.2 kB (2179 bytes) Hash 07f3cb1e5b4e447ab8e8cc5258b1e764 86a161e0f92d7f31714e529506fe9a8fe612d159 75bc5c179c5f1a0a5973a615f28bb60d2cc3ee0359131f21390a009521809cce HTTP Headers GET /?url=https://r.srvtrck.com/v1/redirect?yk_tag=337_47d_c3_3b6f&site_id=56e7d51be4b05d750682348a&api_key=abbc5236946676eae219a734c0a1c5e8&url=https://tamltdsti.com/zoom/new/tamltdsti/dXNlZGFnc2FsZXNtZkByZG9lcXVpcG1lbnQuY29t&data=05\|01\|zwhitesell@rdoequipment.com\|136aa2502f614717166a08db7ef430cf\|b99e7c1b6a774194aeb8db80931e4d15\|0\|0\|638243359531559982\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|3000\|\|\|&sdata=pVLCsTGCzIiJY7CcwybVTiI+Fqcp0Q33PBcAU2EYPr0=&reserved=0 HTTP/1.1 Host: nam11.safelinks.protection.outlook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Content-Encoding: gzip Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-AspNetMvc-Version: 4.0 X-SL-GetUrlReputation-Verdict: Error SafelinksWebApiErrorCode: 400201 X-Robots-Tag: noindex, nofollow X-AspNet-Version: 4.0.30319 X-ServerName: CO1NAM11WS019 X-ServerVersion: 15.20.6813.014 X-ServerLat: 6 X-SafeLinks-Tracking-Id: e394b7f1-f971-4dcb-93e1-08dbb975ff76 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=Edge Date: Wed, 20 Sep 2023 01:07:44 GMT Connection: close Content-Length: 2179

	nam11.safelinks.protection.outlook.com/Content/Scripts/safelinksv2.css	104.47.57.156	200 OK	1.1 kB
URL GET HTTP/1.1 nam11.safelinks.protection.outlook.com/Content/Scripts/safelinksv2.css IP 104.47.57.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://nam11.safelinks.protection.outlook.com/?url=https://r.srvtrck.com/v1/redirect?yk_tag=337_47d_c3_3b6f&site_id=56e7d51be4b05d750682348a&api_key=abbc5236946676eae219a734c0a1c5e8&url=https://tamltdsti.com/zoom/new/tamltdsti/dXNlZGFnc2FsZXNtZkByZG9lcXVpcG1lbnQuY29t&data=05\|01\|zwhitesell@rdoequipment.com\|136aa2502f614717166a08db7ef430cf\|b99e7c1b6a774194aeb8db80931e4d15\|0\|0\|638243359531559982\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|3000\|\|\|&sdata=pVLCsTGCzIiJY7CcwybVTiI+Fqcp0Q33PBcAU2EYPr0=&reserved=0 Certificate IssuerDigiCert Inc Subject.safelinks.protection.outlook.com FingerprintAC:D5:5A:BD:B6:35:63:20:02:15:3D:7B:3F:ED:0E:3F:7F:A6:48:EB ValidityMon, 08 May 2023 00:00:00 GMT - Tue, 07 May 2024 23:59:59 GMT File type ASCII text, with CRLF line terminators Size 1.1 kB (1142 bytes) Hash bbad95c4a0be4e5775b7d5b409fbf602 fad598750b15c207dfef6e1fea3c072baeac2b66 41f78d15ae18c36b84c819d9af3511c342c180f0aba8f91dc1ccf4046b56b308 HTTP Headers GET /Content/Scripts/safelinksv2.css HTTP/1.1 Host: nam11.safelinks.protection.outlook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://nam11.safelinks.protection.outlook.com/?url=https://r.srvtrck.com/v1/redirect?yk_tag=337_47d_c3_3b6f&site_id=56e7d51be4b05d750682348a&api_key=abbc5236946676eae219a734c0a1c5e8&url=https://tamltdsti.com/zoom/new/tamltdsti/dXNlZGFnc2FsZXNtZkByZG9lcXVpcG1lbnQuY29t&data=05\|01\|zwhitesell@rdoequipment.com\|136aa2502f614717166a08db7ef430cf\|b99e7c1b6a774194aeb8db80931e4d15\|0\|0\|638243359531559982\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|3000\|\|\|&sdata=pVLCsTGCzIiJY7CcwybVTiI+Fqcp0Q33PBcAU2EYPr0=&reserved=0 DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Mon, 18 Sep 2023 11:51:54 GMT Accept-Ranges: bytes ETag: "029b18426ead91:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-ServerName: DM6NAM11WS052 X-ServerVersion: 15.20.6813.018 X-ServerLat: 0 X-SafeLinks-Tracking-Id: 6049b63a-7fc9-4a94-808d-08dbb975fff1 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=Edge Date: Wed, 20 Sep 2023 01:07:45 GMT Connection: close Content-Length: 1142`

	nam11.safelinks.protection.outlook.com/Content/Scripts/site.js	104.47.57.156	200 OK	854 B
URL GET HTTP/1.1 nam11.safelinks.protection.outlook.com/Content/Scripts/site.js IP 104.47.57.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://nam11.safelinks.protection.outlook.com/?url=https://r.srvtrck.com/v1/redirect?yk_tag=337_47d_c3_3b6f&site_id=56e7d51be4b05d750682348a&api_key=abbc5236946676eae219a734c0a1c5e8&url=https://tamltdsti.com/zoom/new/tamltdsti/dXNlZGFnc2FsZXNtZkByZG9lcXVpcG1lbnQuY29t&data=05\|01\|zwhitesell@rdoequipment.com\|136aa2502f614717166a08db7ef430cf\|b99e7c1b6a774194aeb8db80931e4d15\|0\|0\|638243359531559982\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|3000\|\|\|&sdata=pVLCsTGCzIiJY7CcwybVTiI+Fqcp0Q33PBcAU2EYPr0=&reserved=0 Certificate IssuerDigiCert Inc Subject.safelinks.protection.outlook.com FingerprintAC:D5:5A:BD:B6:35:63:20:02:15:3D:7B:3F:ED:0E:3F:7F:A6:48:EB ValidityMon, 08 May 2023 00:00:00 GMT - Tue, 07 May 2024 23:59:59 GMT File type ASCII text, with CRLF line terminators Size 854 B (854 bytes) Hash 3af1fdb9a3f664a6683d212f4787733a 59063d49b723a1988236c8d39c2804c6ebc5ff95 a9ce4840ff0d613b456081dea64e46eb717a1f8bfa5afb05d3bd058f294e416c HTTP Headers GET /Content/Scripts/site.js HTTP/1.1 Host: nam11.safelinks.protection.outlook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://nam11.safelinks.protection.outlook.com/?url=https://r.srvtrck.com/v1/redirect?yk_tag=337_47d_c3_3b6f&site_id=56e7d51be4b05d750682348a&api_key=abbc5236946676eae219a734c0a1c5e8&url=https://tamltdsti.com/zoom/new/tamltdsti/dXNlZGFnc2FsZXNtZkByZG9lcXVpcG1lbnQuY29t&data=05\|01\|zwhitesell@rdoequipment.com\|136aa2502f614717166a08db7ef430cf\|b99e7c1b6a774194aeb8db80931e4d15\|0\|0\|638243359531559982\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|3000\|\|\|&sdata=pVLCsTGCzIiJY7CcwybVTiI+Fqcp0Q33PBcAU2EYPr0=&reserved=0 DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Mon, 18 Sep 2023 11:51:54 GMT Accept-Ranges: bytes ETag: "029b18426ead91:0" Vary: Accept-Encoding Server: Microsoft-IIS/10.0 X-ServerName: DM6NAM11WS007 X-ServerVersion: 15.20.6813.018 X-ServerLat: 0 X-SafeLinks-Tracking-Id: 12100c37-cf7c-48c2-bd51-08dbb975fff2 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=Edge Date: Wed, 20 Sep 2023 01:07:45 GMT Connection: close Content-Length: 854

	nam11.safelinks.protection.outlook.com/Content/images/scanned.png	104.47.57.156	200 OK	24 kB
URL GET HTTP/1.1 nam11.safelinks.protection.outlook.com/Content/images/scanned.png IP 104.47.57.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://nam11.safelinks.protection.outlook.com/?url=https://r.srvtrck.com/v1/redirect?yk_tag=337_47d_c3_3b6f&site_id=56e7d51be4b05d750682348a&api_key=abbc5236946676eae219a734c0a1c5e8&url=https://tamltdsti.com/zoom/new/tamltdsti/dXNlZGFnc2FsZXNtZkByZG9lcXVpcG1lbnQuY29t&data=05\|01\|zwhitesell@rdoequipment.com\|136aa2502f614717166a08db7ef430cf\|b99e7c1b6a774194aeb8db80931e4d15\|0\|0\|638243359531559982\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|3000\|\|\|&sdata=pVLCsTGCzIiJY7CcwybVTiI+Fqcp0Q33PBcAU2EYPr0=&reserved=0 Certificate IssuerDigiCert Inc Subject.safelinks.protection.outlook.com FingerprintAC:D5:5A:BD:B6:35:63:20:02:15:3D:7B:3F:ED:0E:3F:7F:A6:48:EB ValidityMon, 08 May 2023 00:00:00 GMT - Tue, 07 May 2024 23:59:59 GMT File type PNG image data, 186 x 200, 8-bit/color RGBA, non-interlaced\012- data Size 24 kB (24231 bytes) Hash 1f6397becea10f3aa7c63671c29b9a79 633d92227b28480cd1b26adb7c259d9208ab0bbb bf5bd5c4216a18e5cea417d8ef471796eca754cff391d087409a940008d71a25 HTTP Headers GET /Content/images/scanned.png HTTP/1.1 Host: nam11.safelinks.protection.outlook.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://nam11.safelinks.protection.outlook.com/?url=https://r.srvtrck.com/v1/redirect?yk_tag=337_47d_c3_3b6f&site_id=56e7d51be4b05d750682348a&api_key=abbc5236946676eae219a734c0a1c5e8&url=https://tamltdsti.com/zoom/new/tamltdsti/dXNlZGFnc2FsZXNtZkByZG9lcXVpcG1lbnQuY29t&data=05\|01\|zwhitesell@rdoequipment.com\|136aa2502f614717166a08db7ef430cf\|b99e7c1b6a774194aeb8db80931e4d15\|0\|0\|638243359531559982\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|3000\|\|\|&sdata=pVLCsTGCzIiJY7CcwybVTiI+Fqcp0Q33PBcAU2EYPr0=&reserved=0 DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Mon, 18 Sep 2023 20:10:02 GMT Accept-Ranges: bytes ETag: "09541b6cead91:0" Server: Microsoft-IIS/10.0 X-ServerName: DM6NAM11WS008 X-ServerVersion: 15.20.6813.018 X-ServerLat: 0 X-SafeLinks-Tracking-Id: 3864e67b-776b-415e-9b03-08dbb9760009 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=Edge Date: Wed, 20 Sep 2023 01:07:45 GMT Connection: close Content-Length: 24231`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (4)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers