Report Overview

  1. Submitted URL

    mail4teamtechitbeta.com/api/tracking/click?email=theo.vanvliet@slurpmail.net&campaign=122636&followUp=122636_ILDKdvYGt5&tag=1026ANW4&event=m0Vs5YmFYI&sid=10292

  2. IP

    18.216.45.34

    ASN

    #16509 AMAZON-02

  3. Submitted

    2022-10-26 06:19:16

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    16

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
mail4teamtechitbeta.comunknown
mail4itnews.comunknown2020-02-12T21:29:51Z2023-03-10T09:07:09Z
ocsp.pki.goog1752018-07-01T08:43:07Z2023-03-10T05:11:10Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-10T05:12:35Z
use.typekit.net4942012-07-05T03:42:39Z2023-03-10T05:27:57Z
cdnjs.cloudflare.com2352015-04-17T22:46:33Z2023-03-10T08:04:05Z
fonts.googleapis.com88772013-06-10T22:14:26Z2023-03-10T12:25:49Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-10T05:10:04Z
polyfill.io1026442016-02-12T01:04:58Z2023-03-10T13:52:49Z
p.typekit.net6202012-05-23T16:28:57Z2023-03-10T05:27:57Z
fonts.gstatic.comunknown2014-09-09T02:40:21Z2023-03-10T13:37:03Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-10T05:09:10Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-10T13:49:44Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-10T05:10:00Z
ocsp.sca1b.amazontrust.com10152017-03-03T16:20:51Z2019-03-27T05:05:54Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-10T05:10:02Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediummail4itnews.com/122636_uFvsey-cMWPhishing
mediummail4itnews.com/122636_uFvsey-cMW/Phishing
mediummail4itnews.com/lib/uri/uri.jsPhishing
mediummail4itnews.com/lpScripts/assetsBehavior.js?v=1Phishing
mediummail4itnews.com/lib/uri/uri.jsPhishing
mediummail4itnews.com/lpScripts/assetsBehavior.js?v=1Phishing
mediummail4itnews.com/122636_uFvsey-cMW/none.htmlPhishing
mediummail4itnews.com/122636_uFvsey-cMW//ransomware-101.pdfPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


Files detected

  1. URL

    mail4itnews.com/122636_uFvsey-cMW//ransomware-101.pdf

  2. IP

    3.23.206.136

  3. ASN

    #16509 AMAZON-02

  1. File type

    PDF document, version 1.7, 0 pages\012- data

    Size

    3.1 MB (3114198 bytes)

  2. Hash

    ef2ea61e0fa6268c775953ea7bd88a6d

    46e2dcdc01a23b2a7456e5f4008fef4fb95a453e

    Detections

    AnalyzerVerdictAlert
    VirusTotal0/0

JavaScript (5)

HTTP Transactions (57)

URLIPResponseSize
mail4teamtechitbeta.com/api/tracking/click?email=theo.vanvliet@slurpmail.net&campaign=122636&followUp=122636_ILDKdvYGt5&tag=1026ANW4&event=m0Vs5YmFYI&sid=10292
18.216.45.34302 Found371 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK471 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
mail4teamtechitbeta.com/api/tracking/click?email=theo.vanvliet@slurpmail.net&campaign=122636&followUp=122636_ILDKdvYGt5&tag=1026ANW4&event=m0Vs5YmFYI&sid=10292
18.216.45.34302 Found126 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
push.services.mozilla.com/
34.213.121.129101 Switching Protocols0 B
mail4itnews.com/122636_uFvsey-cMW
3.23.206.136301 Moved Permanently201 B
mail4itnews.com/122636_uFvsey-cMW/
3.23.206.136200 OK2.5 kB
ocsp.digicert.com/
93.184.220.29200 OK278 B
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
104.17.25.14200 OK28 kB
polyfill.io/v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7
151.101.1.26200 OK74 B
ocsp.digicert.com/
93.184.220.29200 OK278 B
mail4itnews.com/122636_uFvsey-cMW/css/contents.css
3.23.206.136200 OK1.2 kB
mail4itnews.com/122636_uFvsey-cMW/css/styles.css
3.23.206.136200 OK644 B
mail4itnews.com/122636_uFvsey-cMW/css/formBuilder.css
3.23.206.136200 OK1.5 kB
mail4itnews.com/122636_uFvsey-cMW/css/fontsImport.css
3.23.206.136200 OK8.2 kB
mail4itnews.com/lib/uri/uri.js
3.23.206.136404 Not Found575 B
mail4itnews.com/lpScripts/assetsBehavior.js?v=1
3.23.206.136404 Not Found575 B
mail4itnews.com/122636_uFvsey-cMW/css/bootstrap.min.css
3.23.206.136200 OK24 kB
use.typekit.net/mgr2odi.css
23.36.76.186200 OK4.1 kB
p.typekit.net/p.css?s=1&k=mgr2odi&ht=tk&f=137.138.139.140.169.170.171.172.173.174.175.176.5474.5475.25136.25137.143.144.147.148.156.157.161.162.2003.2004.2005.2006.2007.2008.2009.2010.2011.2012.9938.9939.39002.39004.12046.12047.12048.12049.12050.12051.12053.12054.12055.12056.17398.17399.17400.17401.22618.22619.14032.14033.14034.14035.26425.26426.35617.35620.26435.35615.26438.26439.35630.35633.26448.35628.26893.26894.26897.26898.26909.26910.26913.26914.29382.29383&a=14392602&app=typekit&e=css
23.36.76.186200 OK5 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
mail4itnews.com/122636_uFvsey-cMW/images/download-2-commvault.png
3.23.206.136200 OK2.8 kB
mail4itnews.com/lib/uri/uri.js
3.23.206.136404 Not Found575 B
fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
142.250.74.10200 OK1.5 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
34.120.237.76200 OK4.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fe27cf2-33a8-42cc-a8cd-f5e804e60e26.jpeg
34.120.237.76200 OK7.9 kB
fonts.googleapis.com/css2?family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap
142.250.74.10200 OK15 kB
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK16 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg
34.120.237.76200 OK8.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F710265b5-7594-45dd-ae3b-49cf84887c51.jpeg
34.120.237.76200 OK8.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac38eda-2bed-4703-8560-7d07ad90dabc.webp
34.120.237.76200 OK3.3 kB
mail4itnews.com/lpScripts/assetsBehavior.js?v=1
3.23.206.136404 Not Found575 B
mail4itnews.com/122636_uFvsey-cMW/none.html
3.23.206.136200 OK585 B
ocsp.pki.goog/gts1c3
142.250.74.3200 OK472 B
mail4itnews.com/favicon.ico
3.23.206.136404 Not Found575 B
mail4itnews.com/122636_uFvsey-cMW//ransomware-101.pdf
3.23.206.136200 OK3.1 MB
fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;0,800;1,300;1,400;1,600;1,700;1,800&display=swap
142.250.74.10200 OK0 B
fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap
142.250.74.10200 OK0 B
fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
142.250.74.10200 OK0 B
fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap
142.250.74.10200 OK0 B
fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap
142.250.74.10200 OK0 B
fonts.googleapis.com/css?family=Muli
142.250.74.10200 OK0 B