Report Overview
URL
www.generalplacements.com/
Finishing URL
support.microsoft.com/en-us/office/create-an-email-message-in-outlook-147208af-ca8e-4cdf-b71f-77ba81a54069#DummyBot
IP / ASN
107.172.151.8
Title
Create an email message in Outlook - Microsoft Support
Phishing - Kratos Phishing Kit
Detections
urlquery
2
Network Intrusion Detection
1
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
browser.events.data.microsoft.com | 380 | 1991-05-02 | 2018-05-25 | 2026-04-22 | 10 kB | 7.8 kB | 20.189.173.14 |  |
mem.gfx.ms | 38230 | 2012-09-07 | 2015-02-13 | 2026-04-18 | 2.0 kB | 424 kB | 13.107.246.53 |  |
arc.msn.com | 914 | 1994-11-10 | 2015-01-30 | 2026-04-23 | 8.3 kB | 5.0 kB |  20.74.47.205 |   |
href.li 1 alert(s) on this Host | 30988 | unknown | 2012-05-22 | 2026-04-23 | 636 B | 1.1 kB | 192.0.78.26 |  |
videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net | 205648 | 2018-05-08 | 2024-07-18 | 2026-04-22 | 530 B | 70 kB | 150.171.109.200 | |
js.monitor.azure.com | 3578 | 1994-10-25 | 2020-04-24 | 2026-04-22 | 500 B | 93 kB | 150.171.109.200 | |
www.generalplacements.com 32 alert(s) on this Host | unknown | unknown | No data | No data | 5.0 kB | 265 kB | 107.172.151.8 |    |
support.microsoft.com | 335 | 1991-05-02 | 2012-05-23 | 2026-04-24 | 26 kB | 2.9 MB | 150.171.109.200 |  |
challenges.cloudflare.com | 11393 | 2009-02-17 | 2021-10-20 | 2026-04-19 | 5.6 kB | 798 kB |  104.18.94.41 |  |
login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-04-20 | 2.9 kB | 36 kB | 20.190.147.3 | |
www.microsoft.com | 812 | 1991-05-02 | 2012-05-21 | 2026-04-23 | 1.2 kB | 200 kB |  96.6.17.223 | |
uhf.microsoft.com | 46576 | 1991-05-02 | 2017-02-01 | 2026-04-19 | 518 B | 4.5 kB | 23.49.24.19 | |
Microsoft HTTPAPI:2.0 (Web servers)
Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.Microsoft ASP.NET:4.0.30319 (Web frameworks)
ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.IIS:10.0 (Web servers)
Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.Windows Server (Operating systems)
Windows Server is a brand name for a group of server operating systems.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Apache HTTP Server:2.4.58 (Web servers)
Apache is a free and open-source cross-platform web server software.Ubuntu (Operating systems)
Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.PHP (Programming languages)
PHP is a general-purpose scripting language used for web development.Microsoft ASP.NET (Web frameworks)
ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.jQuery (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 192.0.78.26 | ETPRO INFO Referer Obfuscation/Hiding Service Domain (href .li in TLS SNI) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | www.generalplacements.com | phishing | Phishing Block |
| DigiCert UltraDNS | www.generalplacements.com | malicious | Sinkholed |
| DNS4EU | www.generalplacements.com | malicious | Sinkholed |
| DigiCert UltraDNS | href.li | malicious | Sinkholed |
JavaScript (124)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| 086707e4369f60afedcafb16050a7618 | DocumentWrite | 39 B | 2023-03-07 | 2026-08-08 | |
Introduced by DocumentWrite First Seen 2023-03-07 Last Seen 2026-08-08 Times Seen 1036143 Size 39 B (39 bytes) MD5 086707e4369f60afedcafb16050a7618 SHA1 8216b0cc6876cbd44f01c158e7dff3833ceccd41 Loading... | |||||
HTTP Transactions (81)
| URL | IP | Response | Size |
|---|