Report - sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0

Report Overview

Visited public
2025-05-17 15:14:02
Tags
Submit Tags
URL
sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0
Finishing URL
sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0
IP / ASN
18.156.26.130
#16509 AMAZON-02
Title
404 - Quick Tip | Cofense

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
sharepoint.eu.securefileshares.com	unknown	2011-10-31	2025-03-20	2025-05-13	3.1 kB	206 kB	18.156.26.130
cofense.com	525401	2017-10-16	2018-02-26	2025-05-15	438 B	56 kB	67.22.136.24

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0	ScriptElement	40 B	2023-03-07	2025-07-06
Pretty URL sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0 IP 18.156.26.130 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02 Last Seen2025-07-06 03:38 Times Seen8946 Hash 6bd43cf0ae158526c6ab93dc3be79f28 15c289e342bd3fdf5b1e95f7abf25a2bc78bf357 7a13d5ae0755d86c09084ec300c4a0f1a0a06921f74d9980eba9d966ff17ad38 Loading...

		Size	First Seen	Last Seen
	#1 Write - 312351bff07989769097660a56395065	4 B	2023-03-13 00:05	2025-07-06 04:26
Pretty Observations First Seen2023-03-13 00:05 Last Seen2025-07-06 04:26 Times Seen9436 Hash 312351bff07989769097660a56395065 004be89dd9e070ecb080b9b759e5be29ec24881b b2b2f104d32c638903e151a9b20d6e27b41d8c0c84cf8458738f83ca2f1dd744 Loading...

HTTP Transactions (7)

	URL	IP	Response	Size
	GET sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0	18.156.26.130	404 Not Found	3.4 kB
URL User Request GET sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0 IP 18.156.26.130:443 ASN #16509 AMAZON-02 Certificate IssuerLet's Encrypt Subject.eu.securefileshares.com Fingerprint66:A6:AB:D2:57:B1:D0:F4:B8:69:B9:8C:B4:9F:FC:41:B9:BB:90:D1 ValidityFri, 21 Mar 2025 02:35:59 GMT - Thu, 19 Jun 2025 02:35:58 GMT File type HTML document, ASCII text Size 3.4 kB (3371 bytes) Hash f057ece37f7c14e4d996739057bdf5f3 1801c26774dbb63662774ad8f6ec3136b6d2a902 dda76f72291e2d7c70566ba3780514fd608107575da2079c1d29adef8e19a4b0 HTTP Headers GET /76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0 HTTP/1.1 Host: sharepoint.eu.securefileshares.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 404 Not Found access-control-allow-origin: http://landing.phishme.co.uk cache-control: no-store content-type: text/html; charset=utf-8 date: Sat, 17 May 2025 15:13:41 GMT expires: Mon, 01 Jan 1990 00:00:00 GMT pragma: no-cache referrer-policy: strict-origin-when-cross-origin server: Apache set-cookie: _phishme.com_session_id=79b68c331241b39c9fe4128d41b1f753; path=/; httponly x-content-type-options: nosniff x-download-options: noopen x-frame-options: DENY x-permitted-cross-domain-policies: none x-request-id: 8f5849c0-e2a9-4c88-bdda-2324d09be66f x-runtime: 0.040836 x-xss-protection: 1; mode=block content-length: 3371 X-Firefox-Spdy: h2

	GET sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0	18.156.26.130	404 Not Found	3.4 kB
URL User Request GET sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0 IP 18.156.26.130:80 ASN #16509 AMAZON-02 File type HTML document, ASCII text Size 3.4 kB (3371 bytes) Hash f057ece37f7c14e4d996739057bdf5f3 1801c26774dbb63662774ad8f6ec3136b6d2a902 dda76f72291e2d7c70566ba3780514fd608107575da2079c1d29adef8e19a4b0 HTTP Headers GET /76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0 HTTP/1.1 Host: sharepoint.eu.securefileshares.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Cookie: _phishme.com_session_id=79b68c331241b39c9fe4128d41b1f753 Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache HTTP/1.1 404 Not Found Date: Sat, 17 May 2025 15:13:42 GMT Server: Apache x-frame-options: DENY x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin cache-control: no-store pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT content-type: text/html; charset=utf-8 x-request-id: 640e4a0b-1b25-4b29-8a61-b071b3ac4390 x-runtime: 0.021470 Content-Length: 3371 Access-Control-Allow-Origin: http://landing.phishme.co.uk Keep-Alive: timeout=5, max=100 Connection: Keep-Alive

	GET sharepoint.eu.securefileshares.com/images/www/phishme_spear_phishing_quick_tip_title.png	18.156.26.130	200 OK	89 kB
URL GET sharepoint.eu.securefileshares.com/images/www/phishme_spear_phishing_quick_tip_title.png IP 18.156.26.130:80 ASN #16509 AMAZON-02 Requested by http://sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0 File type PNG image data, 1600 x 263, 8-bit/color RGBA, non-interlaced Size 89 kB (88898 bytes) Hash 838b3aa2c0a05d4629cf4e11db18f502 df1f498f9ea1a004188a1fde44e6eb059cd485a1 8079376a80d57cf462aad98f4d21542871852b4f4edc5fe3db2f2f1839fdc87d HTTP Headers GET /images/www/phishme_spear_phishing_quick_tip_title.png HTTP/1.1 Host: sharepoint.eu.securefileshares.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0 DNT: 1 Connection: keep-alive Cookie: _phishme.com_session_id=79b68c331241b39c9fe4128d41b1f753 Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Sat, 17 May 2025 15:13:42 GMT Server: Apache Last-Modified: Wed, 14 May 2025 16:15:10 GMT ETag: "15b42-6351ada68ff80" Accept-Ranges: bytes Content-Length: 88898 Cache-Control: max-age=0 Expires: Sat, 17 May 2025 15:13:42 GMT Access-Control-Allow-Origin: http://landing.phishme.co.uk X-Download-Options: noopen Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: image/png`

	GET sharepoint.eu.securefileshares.com/images/www/phishme_spear_phishing_quick_tip.png	18.156.26.130	200 OK	95 kB
URL GET sharepoint.eu.securefileshares.com/images/www/phishme_spear_phishing_quick_tip.png IP 18.156.26.130:80 ASN #16509 AMAZON-02 Requested by http://sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0 File type PNG image data, 1600 x 816, 8-bit/color RGBA, non-interlaced Size 95 kB (94817 bytes) Hash 52e71c716b54e62fdb5903d743e6fdb5 b958a3205364a0e529f54a5176d1fcf052af94ab e106b2b8a45566462a60cecbe4e8f8c1ffb287e40222b1db28fc46e7da43766d HTTP Headers GET /images/www/phishme_spear_phishing_quick_tip.png HTTP/1.1 Host: sharepoint.eu.securefileshares.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0 DNT: 1 Connection: keep-alive Cookie: _phishme.com_session_id=79b68c331241b39c9fe4128d41b1f753 Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Sat, 17 May 2025 15:13:42 GMT Server: Apache Last-Modified: Wed, 14 May 2025 16:15:10 GMT ETag: "17261-6351ada68ff80" Accept-Ranges: bytes Content-Length: 94817 Cache-Control: max-age=0 Expires: Sat, 17 May 2025 15:13:42 GMT Access-Control-Allow-Origin: http://landing.phishme.co.uk X-Download-Options: noopen Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/png`

	GET sharepoint.eu.securefileshares.com/images/www/reporter.png	18.156.26.130	200 OK	12 kB
URL GET sharepoint.eu.securefileshares.com/images/www/reporter.png IP 18.156.26.130:80 ASN #16509 AMAZON-02 Requested by http://sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0 File type PNG image data, 280 x 357, 8-bit/color RGBA, non-interlaced Size 12 kB (12310 bytes) Hash 6d1a6b807cef30298277d86801115ef9 d85ffa1e9c7cebeb9d92e3db9baa502bade99de6 b66912ec278b45ce43a38e270d8f94f39296787dd3857274002951d7b773761a HTTP Headers `GET /images/www/reporter.png HTTP/1.1 Host: sharepoint.eu.securefileshares.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0 DNT: 1 Connection: keep-alive Cookie: _phishme.com_session_id=79b68c331241b39c9fe4128d41b1f753 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sat, 17 May 2025 15:13:42 GMT Server: Apache Last-Modified: Wed, 14 May 2025 16:15:10 GMT ETag: "3016-6351ada68ff80" Accept-Ranges: bytes Content-Length: 12310 Cache-Control: max-age=0 Expires: Sat, 17 May 2025 15:13:42 GMT Access-Control-Allow-Origin: http://landing.phishme.co.uk X-Download-Options: noopen Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: image/png`

	GET sharepoint.eu.securefileshares.com/images/www/Cofense_spear_phishing_quick_tip_ground.png	18.156.26.130	404 Not Found	0 B
URL GET sharepoint.eu.securefileshares.com/images/www/Cofense_spear_phishing_quick_tip_ground.png IP 18.156.26.130:80 ASN #16509 AMAZON-02 Requested by http://sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /images/www/Cofense_spear_phishing_quick_tip_ground.png HTTP/1.1 Host: sharepoint.eu.securefileshares.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0 DNT: 1 Connection: keep-alive Cookie: _phishme.com_session_id=79b68c331241b39c9fe4128d41b1f753 Pragma: no-cache Cache-Control: no-cache HTTP/1.1 404 Not Found Date: Sat, 17 May 2025 15:13:42 GMT Server: Apache x-frame-options: DENY x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin cache-control: no-store pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT content-type: image/png x-request-id: 4d520f2a-f9de-4f07-ba51-61b1758c2a28 x-runtime: 0.020723 Content-Length: 0 Access-Control-Allow-Origin: http://landing.phishme.co.uk Keep-Alive: timeout=5, max=100 Connection: Keep-Alive

	GET cofense.com/favicon.ico	67.22.136.24	200 OK	55 kB
URL GET cofense.com/favicon.ico IP 67.22.136.24:443 ASN #13767 DATABANK-DFW Requested by http://sharepoint.eu.securefileshares.com/76e3f5/18241500-2727-4b65-9308-5d8f8bf272c0 Certificate IssuerDigiCert Inc Subject.cofense.com FingerprintD9:4A:DE:57:83:4D:0C:A7:DA:7D:DF:93:D7:C3:53:89:18:74:2E:A5 ValidityTue, 13 Aug 2024 00:00:00 GMT - Sat, 13 Sep 2025 23:59:59 GMT File type PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced Size 55 kB (55215 bytes) Hash d83a3420c7d950b4f73ae012a4ff7f34 1b19e186779cdc7cb4c93d0f7c95a1fee0d9e1cc 2589baa821baa1dba721315ac6ee27b85a287c7e45b7012433ad6b2a16abed89 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: cofense.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://sharepoint.eu.securefileshares.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK cache-control: public,max-age=604800 content-length: 55215 content-type: image/x-icon last-modified: Mon, 16 Dec 2024 18:10:08 GMT accept-ranges: bytes etag: "1db4fe5bd53d7af" server: Microsoft-IIS/10.0 date: Sat, 17 May 2025 15:13:42 GMT X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (7)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers