Report - brandequity.economictimes.indiatimes.com/etlr.php?url=https://nancysupo.com/New/Auth//jpuvck////emk@slurpmail.net

Report Overview

Submitted URL
brandequity.economictimes.indiatimes.com/etlr.php?url=https://nancysupo.com/New/Auth//jpuvck////emk@slurpmail.net
IP
96.6.16.163
ASN
#16625 AKAMAI-AS
Submitted
2023-05-30 20:58:14
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
brandequity.economictimes.indiatimes.com	734553	1996-11-22	2015-06-26	2023-05-27	587 B	992 B	96.6.16.163
nancysupo.com	unknown	2010-04-10	2019-08-26	2023-05-26	560 B	272 B	108.167.143.73
s3.amazonaws.com	unknown	2005-08-18	2020-05-13	2023-05-29	1.6 kB	1.5 kB	52.217.232.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2023-03-23	medium	s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html
2023-03-23	medium	s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

URL IP Response Size

brandequity.economictimes.indiatimes.com/etlr.php?url=https://nancysupo.com/New/Auth//jpuvck////emk@slurpmail.net

96.6.16.163

0 B

URL
brandequity.economictimes.indiatimes.com/etlr.php?url=https://nancysupo.com/New/Auth//jpuvck////emk@slurpmail.net
IP
96.6.16.163:0
ASN
#16625 AKAMAI-AS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /etlr.php?url=https://nancysupo.com/New/Auth//jpuvck////emk@slurpmail.net HTTP/1.1
Host: brandequity.economictimes.indiatimes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: optout=1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: Bhoot
content-type: text/html; charset=UTF-8
content-length: 0
access-control-allow-origin: *
pragma: no-cache
location: https://nancysupo.com/New/Auth//jpuvck////emk@slurpmail.net?utm_source=promotions&utm_medium=email&utm_campaign=
x-cool: 22.57
content-language: en
access-control-allow-credentials: true
strict-transport-security: max-age=25920000; includeSubdomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: no-cache, no-store, must-revalidate
expires: Tue, 30 May 2023 20:57:55 GMT
date: Tue, 30 May 2023 20:57:55 GMT
set-cookie: PHPSESSID=1663ecc4af97440f1ac2505eda694d73; expires=Tue, 06-Jun-2023 20:57:55 GMT; Max-Age=604800; path=/; secure; HttpOnly
brandequity_subscription_source=email; expires=Tue, 06-Jun-2023 20:57:55 GMT; Max-Age=604800; path=/
brandequity_pop_user_sub=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
x-frame-options: sameorigin, SAMEORIGIN
X-Firefox-Spdy: h2

nancysupo.com/New/Auth//jpuvck////emk@slurpmail.net?utm_source=promotions&utm_medium=email&utm_campaign=

108.167.143.73

0 B

URL
nancysupo.com/New/Auth//jpuvck////emk@slurpmail.net?utm_source=promotions&utm_medium=email&utm_campaign=
IP
108.167.143.73:0
ASN
#46606 UNIFIEDLAYER-AS-1

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /New/Auth//jpuvck////emk@slurpmail.net?utm_source=promotions&utm_medium=email&utm_campaign= HTTP/1.1
Host: nancysupo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
refresh: 0;url=https://s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html#emk@slurpmail.net
content-length: 0
content-type: text/html; charset=UTF-8
date: Tue, 30 May 2023 20:57:56 GMT
server: Apache
X-Firefox-Spdy: h2

s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html

52.217.232.0

243 B

URL
s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html
IP
52.217.232.0:0
ASN
#16509 AMAZON-02

File type
XML 1.0 document text\012- XML document, ASCII text
Size
243 B (243 bytes)
Hash
6bd997ea9ae37ea56f6023ccde7c1e9f
c7552ff70d6b8da8447accd86bed7cb4a06e18d3
d1c72d044f7622f72ea1917a93cf05334195a7a2a22a6e76a57b5e533d978f95

Detections

Analyzer	Verdict	Alert
phishtank	Other

HTTP Headers

GET /appforest_uf/f1679410731851x295358009011027700/passwordreset.html HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
x-amz-request-id: EW8MQ799ZVVBZY7V
x-amz-id-2: QEucVUZGfKXxw9X0ajfA4xOXdvI8f846les+UWgVTjOoJ82LiebnIfiUVVcUGWpvc2gYs4UX7TM=
Content-Type: application/xml
Transfer-Encoding: chunked
Date: Tue, 30 May 2023 20:57:56 GMT
Server: AmazonS3

s3.amazonaws.com/favicon.ico

52.217.232.0

403 Forbidden

243 B

URL GET HTTP/1.1
s3.amazonaws.com/favicon.ico
IP
52.217.232.0:443
ASN
#16509 AMAZON-02

Requested by
https://s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html#emk@slurpmail.net
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint94:B9:7C:21:8C:A0:94:8C:1A:34:F7:CB:48:59:A4:A2:B4:E5:81:03
ValidityTue, 11 Apr 2023 00:00:00 GMT - Wed, 20 Dec 2023 23:59:59 GMT

File type
XML 1.0 document text\012- XML document, ASCII text
Size
243 B (243 bytes)
Hash
a7931d097b3ca9936cd0051244d26c15
c427bc4197ea8bf5a9f282a3b5f8c4b1276ee5e0
6f930a48cd4c03fdb8804454dc3eefb590f823004811877d16dd0c066dea095b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
x-amz-request-id: EW8K0A550BAPZAS6
x-amz-id-2: zZILPDkvLkEWSXINqP1wLSRzQZL2lVOz5uuse/I++XAX3cz1gcpmaOrheOSNfRQEVw2zPz8c3qo=
Content-Type: application/xml
Transfer-Encoding: chunked
Date: Tue, 30 May 2023 20:57:57 GMT
Server: AmazonS3

s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html

52.217.232.0

403 Forbidden

243 B

URL User Request GET HTTP/1.1
s3.amazonaws.com/appforest_uf/f1679410731851x295358009011027700/passwordreset.html
IP
52.217.232.0:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint94:B9:7C:21:8C:A0:94:8C:1A:34:F7:CB:48:59:A4:A2:B4:E5:81:03
ValidityTue, 11 Apr 2023 00:00:00 GMT - Wed, 20 Dec 2023 23:59:59 GMT

File type
XML document, ASCII text, with no line terminators
Size
243 B (243 bytes)
Hash
701184c9a71426ccb2e139d5034b732d
3b59f0acebb1114ca51193afc5795b1bdd798bee
7577b28866890a7a5842b1c90fe4ce8a3ffee02bdcc6579f5425da514993bc50

Detections

Analyzer	Verdict	Alert
phishtank	Other

HTTP Headers

GET /appforest_uf/f1679410731851x295358009011027700/passwordreset.html HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
x-amz-request-id: EW8MQ799ZVVBZY7V
x-amz-id-2: QEucVUZGfKXxw9X0ajfA4xOXdvI8f846les+UWgVTjOoJ82LiebnIfiUVVcUGWpvc2gYs4UX7TM=
Content-Type: application/xml
Transfer-Encoding: chunked
Date: Tue, 30 May 2023 20:57:56 GMT
Server: AmazonS3

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (5)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers