Report - uemjcb.bt/verify/OV4.zip

Report Overview

Submitted URL
uemjcb.bt/verify/OV4.zip
IP
202.144.128.216
ASN
#18024 Bhutan Telecom Ltd
Submitted
2024-03-19 08:57:02
Access
public
Website Title
Account Suspended
Final URL
uemjcb.bt/cgi-sys/suspendedpage.cgi
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
uemjcb.bt	unknown	unknown	2020-09-13	2024-02-16	2.1 kB	25 kB	202.144.128.216
use.fontawesome.com	942	2012-10-18	2017-01-30	2024-03-18	791 B	48 kB	172.64.207.38

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (8)

	URL	IP	Response	Size
	uemjcb.bt/	202.144.128.216		226 B
URL uemjcb.bt/ IP 202.144.128.216:0 ASN #18024 Bhutan Telecom Ltd File type HTML document, ASCII text Size 226 B (226 bytes) Hash 65cddba2ccde5557b7413ec4987d5ccc 73d8ce9ba16ce323bccdc573b49873e38a7fec4d c1fa9b278a0ac59fe4e06d3382832a77ff710677fca68e6e901881578c6e41aa HTTP Headers `GET / HTTP/1.1 Host: uemjcb.bt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Date: Tue, 19 Mar 2024 08:56:40 GMT Server: Apache Location: http://uemjcb.bt/cgi-sys/suspendedpage.cgi Content-Length: 226 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1`

	uemjcb.bt/cgi-sys/suspendedpage.cgi	202.144.128.216	200 OK	7.6 kB
URL User Request GET HTTP/1.1 uemjcb.bt/cgi-sys/suspendedpage.cgi IP 202.144.128.216:80 ASN #18024 Bhutan Telecom Ltd File type HTML document, ASCII text, with very long lines (4070) Size 7.6 kB (7606 bytes) Hash 8ce1a98822596166fe759e80fb2e337f c32231e3a5d1ddea400ffc03352271d4a5ef83f9 33f5033688183b74a99b17cb4fcb818caf6b0abdeeefa56a217deef1b56f6701 HTTP Headers `GET /cgi-sys/suspendedpage.cgi HTTP/1.1 Host: uemjcb.bt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 19 Mar 2024 08:56:40 GMT Server: Apache Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html`

	uemjcb.bt/verify/OV4.zip	202.144.128.216	302 Found	226 B
URL User Request GET HTTP/1.1 uemjcb.bt/verify/OV4.zip IP 202.144.128.216:80 ASN #18024 Bhutan Telecom Ltd File type HTML document, ASCII text Size 226 B (226 bytes) Hash 65cddba2ccde5557b7413ec4987d5ccc 73d8ce9ba16ce323bccdc573b49873e38a7fec4d c1fa9b278a0ac59fe4e06d3382832a77ff710677fca68e6e901881578c6e41aa HTTP Headers `GET /verify/OV4.zip HTTP/1.1 Host: uemjcb.bt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Date: Tue, 19 Mar 2024 08:56:41 GMT Server: Apache Location: http://uemjcb.bt/cgi-sys/suspendedpage.cgi Content-Length: 226 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1`

	uemjcb.bt/cgi-sys/suspendedpage.cgi	202.144.128.216	200 OK	7.6 kB
URL User Request GET HTTP/1.1 uemjcb.bt/cgi-sys/suspendedpage.cgi IP 202.144.128.216:80 ASN #18024 Bhutan Telecom Ltd File type HTML document, ASCII text, with very long lines (4070) Size 7.6 kB (7606 bytes) Hash 8ce1a98822596166fe759e80fb2e337f c32231e3a5d1ddea400ffc03352271d4a5ef83f9 33f5033688183b74a99b17cb4fcb818caf6b0abdeeefa56a217deef1b56f6701 HTTP Headers `GET /cgi-sys/suspendedpage.cgi HTTP/1.1 Host: uemjcb.bt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 19 Mar 2024 08:56:43 GMT Server: Apache Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html`

	use.fontawesome.com/releases/v5.0.6/css/all.css	172.64.207.38	200 OK	7.5 kB
URL GET HTTP/1.1 use.fontawesome.com/releases/v5.0.6/css/all.css IP 172.64.207.38:80 ASN #13335 CLOUDFLARENET Requested by http://uemjcb.bt/cgi-sys/suspendedpage.cgi File type ASCII text, with very long lines (34556) Size 7.5 kB (7532 bytes) Hash 42eaa52604673b64d6b356c2fd7f87e3 6b59cb703b2d4a7a2691f13008062b46a6bc7fdb ed0f122470c4d13d86bbabdc38046d743d0228204a56d786d2e17bd83fd358ce HTTP Headers `GET /releases/v5.0.6/css/all.css HTTP/1.1 Host: use.fontawesome.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://uemjcb.bt/ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Tue, 19 Mar 2024 08:56:45 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=31556926 ETag: W/"42eaa52604673b64d6b356c2fd7f87e3" Last-Modified: Fri, 22 Sep 2023 01:44:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 56505 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vfAV3QMV3t%2BJ5T0hdaH%2BIiZ7IJJybLN508Xti1lK%2BXfQPO7MTnUBm1OVrW6oePvF5G%2FAAFqZqbIinGYls9xs8r9MBVP2RsRYnCs1TZICPHDO5CXzzLcu5KQTBqRs5yZE9OvK8AZj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 866c4041ae4f4173-LHR Content-Encoding: gzip alt-svc: h2=":443"; ma=60

	use.fontawesome.com/releases/v5.0.6/webfonts/fa-solid-900.woff2	172.64.207.38	200 OK	39 kB
URL GET HTTP/1.1 use.fontawesome.com/releases/v5.0.6/webfonts/fa-solid-900.woff2 IP 172.64.207.38:80 ASN #13335 CLOUDFLARENET Requested by http://uemjcb.bt/cgi-sys/suspendedpage.cgi File type Web Open Font Format (Version 2), TrueType, length 38784, version 1.0 Size 39 kB (38784 bytes) Hash f9b85c9463af7103b9b24bbbf09a06ed d28d7222bcbeb8ea701a771e85f7efe006e62fb1 62554277d07b20c6bfae7c6267b3198b4846f604a37d4085bf9f54c392210b56 HTTP Headers `GET /releases/v5.0.6/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: use.fontawesome.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: http://uemjcb.bt DNT: 1 Connection: keep-alive Referer: http://use.fontawesome.com/ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Tue, 19 Mar 2024 08:56:45 GMT Content-Type: application/font-woff2 Content-Length: 38784 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=31556926 ETag: "f9b85c9463af7103b9b24bbbf09a06ed" Last-Modified: Fri, 22 Sep 2023 01:44:10 GMT Vary: Origin, Accept-Encoding CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ODE90UaA29CEWii42wKyAqjatGZ5Ve3eVP77h2GpaIKHkXqdK3ywTqoG%2FgUbz0LMhztDVCi78fIgvwfCqrOGbUFenJJtj2M2XkItKLlztzwzSqr1g8QEKmYzsFFLUx1LqSxbV%2FJq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 866c40422cb723b1-LHR alt-svc: h2=":443"; ma=60

	uemjcb.bt/favicon.ico	202.144.128.216	302 Found	226 B
URL GET HTTP/1.1 uemjcb.bt/favicon.ico IP 202.144.128.216:80 ASN #18024 Bhutan Telecom Ltd Requested by http://uemjcb.bt/cgi-sys/suspendedpage.cgi File type HTML document, ASCII text Size 226 B (226 bytes) Hash 65cddba2ccde5557b7413ec4987d5ccc 73d8ce9ba16ce323bccdc573b49873e38a7fec4d c1fa9b278a0ac59fe4e06d3382832a77ff710677fca68e6e901881578c6e41aa HTTP Headers `GET /favicon.ico HTTP/1.1 Host: uemjcb.bt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://uemjcb.bt/cgi-sys/suspendedpage.cgi Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Date: Tue, 19 Mar 2024 08:56:44 GMT Server: Apache Location: http://uemjcb.bt/cgi-sys/suspendedpage.cgi Content-Length: 226 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1`

	uemjcb.bt/cgi-sys/suspendedpage.cgi	202.144.128.216	200 OK	7.6 kB
URL User Request GET HTTP/1.1 uemjcb.bt/cgi-sys/suspendedpage.cgi IP 202.144.128.216:80 ASN #18024 Bhutan Telecom Ltd File type HTML document, ASCII text, with very long lines (4070) Size 7.6 kB (7606 bytes) Hash 8ce1a98822596166fe759e80fb2e337f c32231e3a5d1ddea400ffc03352271d4a5ef83f9 33f5033688183b74a99b17cb4fcb818caf6b0abdeeefa56a217deef1b56f6701 HTTP Headers `GET /cgi-sys/suspendedpage.cgi HTTP/1.1 Host: uemjcb.bt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://uemjcb.bt/cgi-sys/suspendedpage.cgi DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 19 Mar 2024 08:56:44 GMT Server: Apache Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (8)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1