Report Overview
Visitedpublic
2025-06-17 16:41:41
Submit Tags
URL
dnsbq8.gmzncopmtnh.ru/v!FhB0jeuAWOztMa/*doug@slurpmail.net
Finishing URL
dnsbq8.gmzncopmtnh.ru/YJXILKOPADBRSVRMOUZSKWXMIIZKSB73uedpa5qwyzjqzbj?TVOOMTZYRZXWALZKRLRRUYPHJ
IP / ASN
104.21.60.175
Title
Login Securely Now
Phishing - Microsoft
Phishing - Generic phishing
Suspicious - Anti-debugging code
Phishing - Tycoon Phishing Kit
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
dnsbq8.gmzncopmtnh.ru 78 alert(s) on this Domain | unknown | 2025-05-28 | 2025-06-17 | 2025-06-17 | 35 kB | 1.0 MB | 172.67.198.237 | |
ok4static.oktacdn.com | 16592 | 2014-11-11 | 2018-06-15 | 2025-06-11 | 2.0 kB | 268 kB |  3.167.2.112 | |
get.geojs.io | 17418 | 2017-02-18 | 2017-03-30 | 2025-06-12 | 499 B | 1.5 kB | 172.67.70.233 | |
zzjuim6pfi4a0rdcaj3nenic5rrwzevcac9d7kth4ulgxuzlhzqnf5fw.honcfd.es 2 alert(s) on this Domain | unknown | unknown | 2025-06-17 | 2025-06-17 | 664 B | 1.2 kB | 172.67.180.178 | |
github.com | 1423 | 2007-10-09 | 2016-07-13 | 2025-06-11 | 460 B | 15 kB |  140.82.121.4 | |
cdnjs.cloudflare.com | 235 | 2009-02-17 | 2012-05-23 | 2025-06-11 | 2.3 kB | 247 kB | 104.17.24.14 | |
code.jquery.com | 634 | 2005-12-10 | 2012-05-21 | 2025-06-11 | 1.3 kB | 270 kB | 151.101.66.137 | |
challenges.cloudflare.com | unknown | 2009-02-17 | 2021-10-20 | 2025-06-11 | 924 B | 98 kB | 104.18.95.41 | |
objects.githubusercontent.com | 134060 | 2014-02-06 | 2021-11-01 | 2025-06-11 | 895 B | 11 kB | 185.199.110.133 | |
5y6e80.pxihkdtkdqw.es 1 alert(s) on this Domain | unknown | unknown | 2025-06-17 | 2025-06-17 | 462 B | 576 B | 104.21.91.192 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | Client IP | 172.67.70.233 | ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI |
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
Quad9 DNS
| Scan Date | Severity | Indicator | Alert |
|---|---|---|---|
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | honcfd.es | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
| 2025-06-17 | medium | gmzncopmtnh.ru | Sinkholed |
ThreatFox
No alerts detected
JavaScript (98)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| 90a0526629b704d47685782ffdc38a71 | DocumentWrite | 7.1 kB | 2025-06-17 | 2025-06-17 | |
Introduced by DocumentWrite First Seen 2025-06-17 Last Seen 2025-06-17 Times Seen 1 Size 7.1 kB (7063 bytes) MD5 90a0526629b704d47685782ffdc38a71 SHA1 9a9b1a215a73e28e9a6a75a1a83b8d7b9730887c Loading... | |||||
| 984221483b8aac0fb8f11f2c610c9ff5 | DocumentWrite | 111 kB | 2025-06-17 | 2025-06-17 | |
Introduced by DocumentWrite First Seen 2025-06-17 Last Seen 2025-06-17 Times Seen 1 Size 111 kB (110927 bytes) MD5 984221483b8aac0fb8f11f2c610c9ff5 SHA1 ccc1a1fb7901158633671e30729c6b9f6d15fa13 Loading... | |||||
HTTP Transactions (47)
| URL | IP | Response | Size |
|---|