Report - link.edgepilot.com/s/7daac673/SpdCHkCQcUOm4l73yczFQg?u=https://acebc.co.uk/cgi-root/cnlhbi5lbGFydG9uQHNpZWEuY29t

Report Overview

Submitted URL
link.edgepilot.com/s/7daac673/SpdCHkCQcUOm4l73yczFQg?u=https://acebc.co.uk/cgi-root/cnlhbi5lbGFydG9uQHNpZWEuY29t
IP
199.30.234.133
ASN
#13380 ASN-CUST
Submitted
2024-04-17 17:26:10
Access
public
Website Title
fjbcbnz4ft.helardskel.tech/?email=ryan.elarton@siea.com
Final URL
fjbcbnz4ft.helardskel.tech/?email=ryan.elarton@siea.com
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.entrust.net	1208	1997-07-28	2014-01-10	2024-04-17	328 B	2.0 kB	2.16.254.32
link.edgepilot.com	52195	2009-01-22	2020-08-20	2024-04-17	2.3 kB	5.5 kB	199.30.234.133
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-17	445 B	31 kB	151.101.194.137
acebc.co.uk	unknown	2007-04-13	2017-07-09	2024-04-17	541 B	666 B	91.238.164.172
fjbcbnz4ft.helardskel.tech	unknown	2024-04-12	2024-04-17	2024-04-17	1.1 kB	839 B	77.37.51.161

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	fjbcbnz4ft.helardskel.tech/	Outlook
2024-04-17	medium	fjbcbnz4ft.helardskel.tech/	Outlook

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (9)

URL IP Response Size

ocsp.entrust.net/

2.16.254.32

1.6 kB

URL
ocsp.entrust.net/
IP
2.16.254.32:0
ASN
#16625 AKAMAI-AS

File type
data
Size
1.6 kB (1588 bytes)
Hash
3856975086a3b227b9118a7b111db621
93b0f8bac7bcc861e92064be0024cc0c2c9c227b
b1cbd13ae630981ffe19ae3abb7826a493f5f4091d97b2014f2fd654f54b9d3e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "B1CBD13AE630981FFE19AE3ABB7826A493F5F4091D97B2014F2FD654F54B9D3E"
Last-Modified: Wed, 17 Apr 2024 15:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3565
Expires: Wed, 17 Apr 2024 18:25:10 GMT
Date: Wed, 17 Apr 2024 17:25:45 GMT
Connection: keep-alive

link.edgepilot.com/s/7daac673/SpdCHkCQcUOm4l73yczFQg?u=https://acebc.co.uk/cgi-root/cnlhbi5lbGFydG9uQHNpZWEuY29t

199.30.234.133

2.5 kB

URL
link.edgepilot.com/s/7daac673/SpdCHkCQcUOm4l73yczFQg?u=https://acebc.co.uk/cgi-root/cnlhbi5lbGFydG9uQHNpZWEuY29t
IP
199.30.234.133:0
ASN
#13380 ASN-CUST

File type
HTML document, ASCII text
Size
2.5 kB (2500 bytes)
Hash
646d9564e1dcbeab5c1221e964902724
88cf77ed706fce8480b4c75832be39be0933cca6
eb0868945d95ed77edcd86f42da1690e2a08bbbf96f17207af2a9bcee2eb6d52

HTTP Headers

GET /s/7daac673/SpdCHkCQcUOm4l73yczFQg?u=https://acebc.co.uk/cgi-root/cnlhbi5lbGFydG9uQHNpZWEuY29t HTTP/1.1
Host: link.edgepilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 17:25:45 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 2500
Connection: keep-alive
Cache-Control: no-cache

code.jquery.com/jquery-3.2.1.min.js

151.101.194.137

30 kB

URL
code.jquery.com/jquery-3.2.1.min.js
IP
151.101.194.137:0
ASN
#54113 FASTLY

File type
JavaScript source, ASCII text, with very long lines (32058)
Size
30 kB (30125 bytes)
Hash
c9f5aeeca3ad37bf2aa006139b935f0a
1055018c28ab41087ef9ccefe411606893dabea2
87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de

HTTP Headers

GET /jquery-3.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://link.edgepilot.com
DNT: 1
Connection: keep-alive
Referer: https://link.edgepilot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15283"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Apr 2024 17:25:46 GMT
age: 7923312
x-served-by: cache-lga21971-LGA, cache-hel1410032-HEL
x-cache: HIT, HIT
x-cache-hits: 29, 332661
x-timer: S1713374746.012609,VS0,VE0
vary: Accept-Encoding
content-length: 30125
X-Firefox-Spdy: h2

link.edgepilot.com/css/app.css?v=1

199.30.234.133

819 B

URL
link.edgepilot.com/css/app.css?v=1
IP
199.30.234.133:0
ASN
#13380 ASN-CUST

File type
ASCII text
Size
819 B (819 bytes)
Hash
959f46f67438369c413f903156848bd0
0daf348389da6ce4dcc2cbe71e0589c26f6bbdab
8c52987fbc48500c2a81bd52f81d44324e31e7ecadbebd111a02f912be232cfd

HTTP Headers

GET /css/app.css?v=1 HTTP/1.1
Host: link.edgepilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://link.edgepilot.com/s/7daac673/SpdCHkCQcUOm4l73yczFQg?u=https://acebc.co.uk/cgi-root/cnlhbi5lbGFydG9uQHNpZWEuY29t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 17:25:45 GMT
Content-Type: text/css
Content-Length: 819
Last-Modified: Wed, 01 Mar 2023 20:35:57 GMT
Connection: keep-alive
ETag: "63ffb72d-333"
Cache-Control: max-age
Accept-Ranges: bytes

link.edgepilot.com/favicon.ico

199.30.234.133

1.3 kB

URL
link.edgepilot.com/favicon.ico
IP
199.30.234.133:0
ASN
#13380 ASN-CUST

File type
HTML document, ASCII text
Size
1.3 kB (1310 bytes)
Hash
5fd6c81e2d45bd71ef47570f15eb622a
474672baf3bf959b770a21ed2ad0fd6c3eac424c
c0f777284d7d75a641591d10d3cd99457f19f816fb3c6e2e6ab295f3eda52e99

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: link.edgepilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://link.edgepilot.com/s/7daac673/SpdCHkCQcUOm4l73yczFQg?u=https://acebc.co.uk/cgi-root/cnlhbi5lbGFydG9uQHNpZWEuY29t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 17 Apr 2024 17:25:46 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1310
Connection: keep-alive
Cache-Control: no-cache

link.edgepilot.com/filter

199.30.234.133

0 B

URL
link.edgepilot.com/filter
IP
199.30.234.133:0
ASN
#13380 ASN-CUST

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /filter HTTP/1.1
Host: link.edgepilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 255
Origin: https://link.edgepilot.com
DNT: 1
Connection: keep-alive
Referer: https://link.edgepilot.com/s/7daac673/SpdCHkCQcUOm4l73yczFQg?u=https://acebc.co.uk/cgi-root/cnlhbi5lbGFydG9uQHNpZWEuY29t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx
Date: Wed, 17 Apr 2024 17:25:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://acebc.co.uk/cgi-root/cnlhbi5lbGFydG9uQHNpZWEuY29t
Cache-Control: no-cache

acebc.co.uk/cgi-root/cnlhbi5lbGFydG9uQHNpZWEuY29t

91.238.164.172

109 B

URL
acebc.co.uk/cgi-root/cnlhbi5lbGFydG9uQHNpZWEuY29t
IP
91.238.164.172:0
ASN
#52148 Enix Ltd

File type
HTML document, ASCII text
Size
109 B (109 bytes)
Hash
8f93b16d70656977987e4ce6afb0f4c7
96446f0a531245bba3f95826bff32dc08ec08ea3
e37ab95fcb124b099502406fd20bde581c648c1c4e3a1e4c248c2a81a0b02b13

HTTP Headers

GET /cgi-root/cnlhbi5lbGFydG9uQHNpZWEuY29t HTTP/1.1
Host: acebc.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://link.edgepilot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
set-cookie: PHPSESSID=bcec412bcd35b4c524934741dc0e6cce; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 109
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 17:25:47 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

fjbcbnz4ft.helardskel.tech/?email=ryan.elarton@siea.com

77.37.51.161

404 Not Found

0 B

URL User Request GET HTTP/1.1
fjbcbnz4ft.helardskel.tech/?email=ryan.elarton@siea.com
IP
77.37.51.161:443
ASN
#31400 firstcolo GmbH

Certificate
IssuerLet's Encrypt
Subjectfjbcbnz4ft.helardskel.tech
FingerprintAC:A1:7C:8A:42:B6:97:71:44:D0:33:F8:82:D2:BB:24:50:BB:03:72
ValidityWed, 17 Apr 2024 09:15:13 GMT - Tue, 16 Jul 2024 09:15:12 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /?email=ryan.elarton@siea.com HTTP/1.1
Host: fjbcbnz4ft.helardskel.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://acebc.co.uk/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Wed, 17 Apr 2024 17:25:47 GMT
Server: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
X-Powered-By: PHP/7.4.1
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=8ed28f87ad9eec13f08e371b7dc895af; path=/
Vary: User-Agent
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

fjbcbnz4ft.helardskel.tech/favicon.ico

77.37.51.161

404 Not Found

0 B

URL GET HTTP/1.1
fjbcbnz4ft.helardskel.tech/favicon.ico
IP
77.37.51.161:443
ASN
#31400 firstcolo GmbH

Requested by
https://fjbcbnz4ft.helardskel.tech/?email=ryan.elarton@siea.com
Certificate
IssuerLet's Encrypt
Subjectfjbcbnz4ft.helardskel.tech
FingerprintAC:A1:7C:8A:42:B6:97:71:44:D0:33:F8:82:D2:BB:24:50:BB:03:72
ValidityWed, 17 Apr 2024 09:15:13 GMT - Tue, 16 Jul 2024 09:15:12 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Outlook

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: fjbcbnz4ft.helardskel.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fjbcbnz4ft.helardskel.tech/?email=ryan.elarton@siea.com
Cookie: PHPSESSID=8ed28f87ad9eec13f08e371b7dc895af
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Wed, 17 Apr 2024 17:25:48 GMT
Server: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
X-Powered-By: PHP/7.4.1
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: User-Agent
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (9)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate