Report Overview

  1. Visited public
    2025-03-10 15:28:07
  2. URL

    3zv.hecoesrh.ru/fLFYJIMv/

  3. Finishing URL

    3zv.hecoesrh.ru/hywdhcdlfisezxgzcqdnkrpzxup76rwq9ior7wmizl19k?DKTJCPMOMSDVWJVYQ

  4. IP / ASN
    172.67.158.241

    #13335 CLOUDFLARENET

    Title
    Continue For Account Safety Login
  5. Phishing - Microsoft

    Phishing - Generic phishing

    Suspicious - Anti-debugging code

Detections
urlquery
34
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
3zv.hecoesrh.ruunknownunknownNo dataNo data
code.jquery.com6342005-12-102012-05-212025-03-05
objects.githubusercontent.com1340602014-02-062021-11-012025-03-05
challenges.cloudflare.comunknown2009-02-172021-10-202025-03-05
github.com14232007-10-092016-07-132025-03-05
developers.cloudflare.com5920342009-02-172012-09-072025-03-05
cdnjs.cloudflare.com2352009-02-172012-05-232025-03-05
ok4static.oktacdn.com165922014-11-112018-06-152025-03-04
9vbkeo.biijvi.ruunknownunknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (24)

HTTP Transactions (43)

URLIPResponseSize
GET 3zv.hecoesrh.ru/st2Zz3M61OFqarfMe2liNoxztQR62FnYUdKDkwhHGbt45t1DhCqfsi4bQSYiiC04gDdw2rzeUrRHgh260
172.67.158.241200 OK18 kB
GET 3zv.hecoesrh.ru/ijUltqOjX1HBBJB8QVLKsG9u3OXdQcnhin1mYrWQfNjBaLErqrk61QL13IFFo3Qkt2yC5TOEBrP9446ab222
172.67.158.241200 OK1.3 kB
GET developers.cloudflare.com/favicon.png
104.16.5.189200 OK937 B
GET code.jquery.com/jquery-3.6.0.min.js
151.101.194.137200 OK90 kB
GET 3zv.hecoesrh.ru/fLFYJIMv/
172.67.158.241200 OK17 kB
GET code.jquery.com/jquery-3.6.0.min.js
151.101.194.137200 OK90 kB
GET 3zv.hecoesrh.ru/GDSherpa-regular.woff
172.67.158.241200 OK37 kB
GET objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250310%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250310T152800Z&X-Amz-Expires=300&X-Amz-Signature=3db9b357396e3f6b16227c0ff6de2bac574ba5151de37e986397884daf73b23f&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
185.199.109.133200 OK10 kB
GET challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
104.18.94.41302 Found48 kB
GET challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js
104.18.94.41200 OK48 kB
GET 3zv.hecoesrh.ru/hywdhcdlfisezxgzcqdnkrpzxup76rwq9ior7wmizl19k?DKTJCPMOMSDVWJVYQ
172.67.158.241200 OK150 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
GET 3zv.hecoesrh.ru/klpQx2AR9VpBYzJqjRPUwa0mA6O7qSyogqSSQ4kZBXklJkiFt86DzCxyq1izVmf6w9cdptjUCYewx212
172.67.158.241200 OK1.9 kB
GET ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2
143.204.55.47200 OK20 kB
POST 3zv.hecoesrh.ru/rqtXy0woJUPOfMV9jbnYrYUEQwq167SsXJUOFU2Jgy
172.67.158.241200 OK286 B
GET 3zv.hecoesrh.ru/favicon.ico
172.67.158.241404 Not Found0 B
GET 3zv.hecoesrh.ru/34Ex7Uu1gNo52i3r8ErjklsSmcCnsY7TP67105
172.67.158.241200 OK4.7 MB
POST 3zv.hecoesrh.ru/baRa8zupzYQP4OVvjExgSG3PhMkTHun34RUIORpAz9dsNmti
172.67.158.241200 OK2.5 kB
GET 3zv.hecoesrh.ru/uvzohBLtyagnxwMq6L5AalOYObgjhzmUsttvpTuVEFHXZnNsRel12125
172.67.158.241200 OK644 B
GET 3zv.hecoesrh.ru/op8K2aqTNqPZUAMJ0iwtXbpMiDNi1SHHzP0HzZt95stmD8GgdWk0BGzv6rUTDzTbvrycd236
172.67.158.241200 OK9.6 kB
GET 3zv.hecoesrh.ru/GDSherpa-vf2.woff2
172.67.158.241200 OK93 kB
GET ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
143.204.55.47200 OK10 kB
GET code.jquery.com/jquery-3.6.0.min.js
151.101.194.137200 OK90 kB
GET 3zv.hecoesrh.ru/GDSherpa-vf.woff2
172.67.158.241200 OK44 kB
GET 3zv.hecoesrh.ru/GDSherpa-bold.woff2
172.67.158.241200 OK28 kB
GET ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
143.204.55.47200 OK223 kB
GET ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
143.204.55.47200 OK11 kB
GET github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js
140.82.121.3302 Found10 kB
GET 3zv.hecoesrh.ru/12IeBuATSywJBabIvT8913
172.67.158.241200 OK27 kB
POST 3zv.hecoesrh.ru/uosj0S42nvqQyzcaL0v6tAO3o
172.67.158.241200 OK20 B
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
GET 3zv.hecoesrh.ru/xyIMTitKpqEwcd30
172.67.158.241200 OK36 kB
GET 3zv.hecoesrh.ru/GDSherpa-regular.woff2
172.67.158.241200 OK29 kB
GET 3zv.hecoesrh.ru/ef4rGbnu5FI9upHr90OrFOlbMklIkXAmnnemcPXJX90147
172.67.158.241200 OK270 B
GET 3zv.hecoesrh.ru/ijUourwQGSqCThBYhNAyj7MwxWfrXkPu3h8sXR53nute5YRJyez78164
172.67.158.241200 OK7.4 kB
GET 3zv.hecoesrh.ru/fLFYJIMv/
172.67.158.241200 OK195 kB
GET 9vbkeo.biijvi.ru/pani!z6xijrh8
104.21.20.57200 OK1 B
GET 3zv.hecoesrh.ru/rsH6qHY5ducpjfIdYBtMWQetiaXArpHSUgoN7WyFijmM1Z57FypG4huVref200
172.67.158.241200 OK268 B
GET 3zv.hecoesrh.ru/op0riJSkcCWo5iQMB8YQkRabDytefihgaLwbchTrlEw367140
172.67.158.241200 OK892 B
GET 3zv.hecoesrh.ru/wxfAsqHuLsXFgw6UDvoIUuvHOsf7LZhZuT3HwopS8qIJaFmUD9N38UmiF476dNS90171
172.67.158.241200 OK2.9 kB
GET 3zv.hecoesrh.ru/ijVYDcSsnWx1Q6fuNa603sV7rNxyE22GVbNocfp3SkYw12204
172.67.158.241200 OK25 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK48 kB
GET 3zv.hecoesrh.ru/GDSherpa-bold.woff
172.67.158.241200 OK36 kB