reidnelson.com/uwcz/qGGNd/Y29tbUBhYmVuZG93bWVudC5vcmc=
0
URL
reidnelson.com/uwcz/qGGNd/Y29tbUBhYmVuZG93bWVudC5vcmc=
IP
ASN
#46606 UNIFIEDLAYER-AS-1
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer
Verdict
Alert
urlquery
phishing
Phishing - Microsoft Outlook
GET /uwcz/qGGNd/Y29tbUBhYmVuZG93bWVudC5vcmc= HTTP/1.1
Host: reidnelson.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 20 Nov 2023 21:19:04 GMT
Server: Apache
refresh: 0;url=https://hzivvy.lijx1.ru/ZPtjEL#comm@abendowment.org
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
URL
User Request
GET
HTTP/2
IP
Certificate
IssuerGoogle Trust Services LLC
Subjectlijx1.ru
FingerprintD4:D9:70:3B:C7:94:84:06:BD:02:D4:50:56:7C:99:B9:9A:B9:46:9F
ValidityWed, 04 Oct 2023 20:55:34 GMT - Tue, 02 Jan 2024 20:55:33 GMT
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer
Verdict
Alert
urlquery
phishing
Phishing - Microsoft Outlook
GET /ZPtjEL HTTP/1.1
Host: hzivvy.lijx1.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Mon, 20 Nov 2023 21:19:06 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W9ZmACzwkW2GvJYYhhFwmDbnIap8ST8%2FPWRjsN9BUNbkiEetxdkeKwyyF84%2BCu94mVyqYCGtM0NwZF0JYwXdJ2jwtmkgirvhLTOpBiTDjTHzvej9idxZiwYGSrLZe2SV%2FnI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8293baafcec356ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
hzivvy.lijx1.ru/favicon.ico
404 Not Found
315
URL
GET
HTTP/3
hzivvy.lijx1.ru/favicon.ico
IP
Requested by
https://hzivvy.lijx1.ru/ZPtjEL#comm@abendowment.org
Certificate
IssuerGoogle Trust Services LLC
Subjectlijx1.ru
FingerprintD4:D9:70:3B:C7:94:84:06:BD:02:D4:50:56:7C:99:B9:9A:B9:46:9F
ValidityWed, 04 Oct 2023 20:55:34 GMT - Tue, 02 Jan 2024 20:55:33 GMT
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
GET /favicon.ico HTTP/1.1
Host: hzivvy.lijx1.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hzivvy.lijx1.ru/ZPtjEL
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 20 Nov 2023 21:19:06 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sg6iIbb%2BFa0%2F4OAw0Qtgafaa1gxVxwGJftpZYu8hgUe%2FEzxMNWqcg6wxy4u49UGaR1AaCeRwalnrv0TWoCTIyVMnbtamlivKdackGKPgjAyV3oa1R2JBUio8jwnyXMI1Vvc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8293bab2d93db4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
162.241.120.242
188.114.97.1