Report Overview

  1. Submitted URL

    www.richelieu.com/newsflash/redirect.php?code=7OW516fmfNDxMzA2OTgz&urlRedirect=https://rawatgirlscollege.com/pbt/mtvletts/njswhi/pprince@slurpmail.net

  2. IP

    206.162.132.224

    ASN

    #852 TELUS Communications

  3. Submitted

    2023-12-04 01:45:24

    Access

    public

  4. Website Title

    Sign in to your account

  5. Final URL

    4jbsumm2ow0b-1322632174.cos.na-ashburn.myqcloud.com/4jbsumm2ow0b.html?e=pprince@slurpmail.net

  6. urlquery detections

    Phishing - Microsoft

    Phishing - Microsoft Outlook

Detections

  1. urlquery

    6

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
fonts.googleapis.com88772005-01-252013-06-102023-12-03
www.richelieu.com4312031996-02-242013-01-182023-12-03
c.s-microsoft.com101662012-02-072013-11-062023-12-03
use.fontawesome.com9422012-10-182017-01-302023-12-03
cdnjs.cloudflare.com2352009-02-172015-04-172023-12-03
maxcdn.bootstrapcdn.com7242012-05-252014-06-182023-12-03
ottoandreggjwk30.cloudunknown2023-07-172023-07-182023-11-21
aadcdn.msftauth.net14552018-10-252018-11-192023-12-03
ajax.googleapis.com129052005-01-252013-08-162023-12-03
rawatgirlscollege.comunknownunknownNo dataNo data
ottoandreggjwk30-1322272810.cos.na-toronto.myqcloud.comunknown2013-04-242023-11-162023-11-21
aadcdn.msauth.net14212018-10-252018-11-192023-12-03
4jbsumm2ow0b-1322632174.cos.na-ashburn.myqcloud.comunknownunknownNo dataNo data
code.jquery.com6342005-12-102012-05-212023-12-03

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (12)

HTTP Transactions (19)

URLIPResponseSize
www.richelieu.com/newsflash/redirect.php?code=7OW516fmfNDxMzA2OTgz&urlRedirect=https://rawatgirlscollege.com/pbt/mtvletts/njswhi/pprince@slurpmail.net
206.162.132.224 0 B
4jbsumm2ow0b-1322632174.cos.na-ashburn.myqcloud.com/4jbsumm2ow0b.html?e=pprince@slurpmail.net
49.51.78.226200 OK7.9 kB
cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
104.17.25.14200 OK6.2 kB
code.jquery.com/jquery-3.1.1.min.js
151.101.2.137200 OK30 kB
code.jquery.com/jquery-3.3.1.js
151.101.2.137200 OK80 kB
code.jquery.com/jquery-3.2.1.slim.min.js
151.101.2.137200 OK24 kB
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.138200 OK30 kB
rawatgirlscollege.com/pbt/mtvletts/njswhi/pprince@slurpmail.net
188.114.97.1 939 B
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.138200 OK30 kB
ottoandreggjwk30-1322272810.cos.na-toronto.myqcloud.com/bootstrap.min.js
49.51.54.104200 OK620 kB
c.s-microsoft.com/favicon.ico?v2
23.38.201.156 540 B
ottoandreggjwk30.cloud/next.php
162.241.71.126200 OK16 B
aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
13.107.246.53200 OK621 B
aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
13.107.246.53200 OK17 kB
aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
152.199.23.37200 OK673 B
ottoandreggjwk30.cloud/next.php
162.241.71.126200 OK99 B
fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
142.250.74.106200 OK1.3 kB
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
104.18.10.207200 OK49 kB
use.fontawesome.com/releases/v5.8.1/css/all.css
172.64.141.13200 OK55 kB