Report - alltorq-net.oncallservices.ca/test/Panel/login.php

Report Overview

Submitted URL
alltorq-net.oncallservices.ca/test/Panel/login.php
IP
173.254.28.195
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2024-04-20 12:53:17
Access
public
Website Title
Login
Final URL
alltorq-net.oncallservices.ca/test/Panel/login.php
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
26

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
alltorq-net.oncallservices.ca	unknown	2009-03-11	2019-07-03	2024-03-27	6.4 kB	616 kB	173.254.28.195
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-20	565 B	16 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-20	903 B	14 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

Scan Date	Severity	Indicator	Alert
2024-03-21	medium	alltorq-net.oncallservices.ca	Lucifer
2024-03-21	medium	alltorq-net.oncallservices.ca	Lucifer
2024-03-21	medium	alltorq-net.oncallservices.ca	Lucifer
2024-03-21	medium	alltorq-net.oncallservices.ca	Lucifer
2024-03-21	medium	alltorq-net.oncallservices.ca	Lucifer
2024-03-21	medium	alltorq-net.oncallservices.ca	Lucifer
2024-03-21	medium	alltorq-net.oncallservices.ca	Lucifer
2024-03-21	medium	alltorq-net.oncallservices.ca	Lucifer
2024-03-21	medium	alltorq-net.oncallservices.ca	Lucifer
2024-03-21	medium	alltorq-net.oncallservices.ca	Lucifer
2024-03-21	medium	alltorq-net.oncallservices.ca	Lucifer
2024-03-21	medium	alltorq-net.oncallservices.ca	Lucifer
2024-03-21	medium	alltorq-net.oncallservices.ca	Lucifer

JavaScript (2)

	URL	Size	First Seen	Last Seen
	alltorq-net.oncallservices.ca/test/css/bootstrap/js/jquery-2.1.1.js	247 kB	2023-03-07	2024-05-01
Pretty URL alltorq-net.oncallservices.ca/test/css/bootstrap/js/jquery-2.1.1.js IP 173.254.28.195 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10:26 Last Seen2024-05-01 18:36:54 Times Seen1663 Hash 7403060950f4a13be3b3dfde0490ee05 8d55aabf2b76486cc311fdc553a3613cad46aa3f 140ff438eaaede046f1ceba27579d16dc980595709391873fa9bf74d7dbe53ac Loading...

	alltorq-net.oncallservices.ca/test/css/bootstrap/js/bootstrap.min.js	32 kB	2023-03-07	2024-05-03
Pretty URL alltorq-net.oncallservices.ca/test/css/bootstrap/js/bootstrap.min.js IP 173.254.28.195 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:23 Last Seen2024-05-03 21:39:20 Times Seen4169 Hash abda843684d022f3bc22bc83927fe05f 26908395e7a9a4eab607d80aa50a81d65f3017cb 24cc29533598f962823c4229bc280487646a27a42a95257c31de1b9b18f3710f Loading...

HTTP Transactions (16)

URL IP Response Size

alltorq-net.oncallservices.ca/test/Panel/login.php

173.254.28.195

200 OK

1.4 kB

URL User Request GET HTTP/2
alltorq-net.oncallservices.ca/test/Panel/login.php
IP
173.254.28.195:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuerLet's Encrypt
Subjectalltorq-net.oncallservices.ca
Fingerprint4E:67:F5:E4:AB:A2:DC:18:A6:CF:2B:65:A1:A0:95:29:36:6A:E2:12
ValidityMon, 15 Apr 2024 18:16:24 GMT - Sun, 14 Jul 2024 18:16:23 GMT

File type
HTML document, ASCII text
Size
1.4 kB (1408 bytes)
Hash
4b7946ba0d9ba5882f4c0e52469fde02
4782725222b334542447a508348b5d5ba6982d68
66a41183422873e8c5488fa4af6d2b9ad60fac4aee2041583f832d3d93efb3d8

Detections

Analyzer	Verdict	Alert
ThreatFox	malicious	Lucifer

HTTP Headers

GET /test/Panel/login.php HTTP/1.1
Host: alltorq-net.oncallservices.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-length: 1408
content-type: text/html; charset=UTF-8
date: Sat, 20 Apr 2024 12:52:51 GMT
server: Apache
X-Firefox-Spdy: h2

alltorq-net.oncallservices.ca/test/css/bootstrap/css/bootstrap-theme.min.css

173.254.28.195

200 OK

3.5 kB

URL GET HTTP/2
alltorq-net.oncallservices.ca/test/css/bootstrap/css/bootstrap-theme.min.css
IP
173.254.28.195:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerLet's Encrypt
Subjectalltorq-net.oncallservices.ca
Fingerprint4E:67:F5:E4:AB:A2:DC:18:A6:CF:2B:65:A1:A0:95:29:36:6A:E2:12
ValidityMon, 15 Apr 2024 18:16:24 GMT - Sun, 14 Jul 2024 18:16:23 GMT

File type
ASCII text, with very long lines (18695)
Size
3.5 kB (3456 bytes)
Hash
ffb12f89f706291cb139b73c164a7722
77962277dd005e3f2651b6e68cba9ad6c14ecc00
34b102cb7689409fd1c3c180aeb1fd3f0b8bf0b47ab25c74c42eaff574e661a9

Detections

Analyzer	Verdict	Alert
ThreatFox	malicious	Lucifer

HTTP Headers

GET /test/css/bootstrap/css/bootstrap-theme.min.css HTTP/1.1
Host: alltorq-net.oncallservices.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://alltorq-net.oncallservices.ca/test/Panel/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 19 Sep 2021 03:17:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3456
content-type: text/css
date: Sat, 20 Apr 2024 12:52:51 GMT
server: Apache
X-Firefox-Spdy: h2

alltorq-net.oncallservices.ca/test/css/bootstrap/font/CheltenhamStd-BoldCond.otf

173.254.28.195

500 Internal Server Error

683 B

URL GET HTTP/2
alltorq-net.oncallservices.ca/test/css/bootstrap/font/CheltenhamStd-BoldCond.otf
IP
173.254.28.195:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerLet's Encrypt
Subjectalltorq-net.oncallservices.ca
Fingerprint4E:67:F5:E4:AB:A2:DC:18:A6:CF:2B:65:A1:A0:95:29:36:6A:E2:12
ValidityMon, 15 Apr 2024 18:16:24 GMT - Sun, 14 Jul 2024 18:16:23 GMT

File type
HTML document, ASCII text
Size
683 B (683 bytes)
Hash
34acde1bafe685cc4f0a03eacc24d270
c9c775aef28dc65b3262ddfad15803553a5826ba
910829f771688ebd0fac1a00342bab4a8540e0680d3f5e7100527c63f5753ce4

Detections

Analyzer	Verdict	Alert
ThreatFox	malicious	Lucifer

HTTP Headers

GET /test/css/bootstrap/font/CheltenhamStd-BoldCond.otf HTTP/1.1
Host: alltorq-net.oncallservices.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://alltorq-net.oncallservices.ca/test/Panel/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 500 Internal Server Error
content-length: 683
content-type: text/html; charset=iso-8859-1
date: Sat, 20 Apr 2024 12:52:51 GMT
server: Apache
X-Firefox-Spdy: h2

alltorq-net.oncallservices.ca/test/css/animate.css

173.254.28.195

200 OK

7.4 kB

URL GET HTTP/2
alltorq-net.oncallservices.ca/test/css/animate.css
IP
173.254.28.195:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerLet's Encrypt
Subjectalltorq-net.oncallservices.ca
Fingerprint4E:67:F5:E4:AB:A2:DC:18:A6:CF:2B:65:A1:A0:95:29:36:6A:E2:12
ValidityMon, 15 Apr 2024 18:16:24 GMT - Sun, 14 Jul 2024 18:16:23 GMT

File type
ASCII text
Size
7.4 kB (7418 bytes)
Hash
346964e149ad49ccf4f3da77b66fa086
46fed2c46e1673370e619cb3a54ce8da46d0145e
75a33bdccbadc38c64bf09f76d24d7a1b3fdf61c0915169cc3e7d9b5b07405c5

Detections

Analyzer	Verdict	Alert
ThreatFox	malicious	Lucifer

HTTP Headers

GET /test/css/animate.css HTTP/1.1
Host: alltorq-net.oncallservices.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://alltorq-net.oncallservices.ca/test/Panel/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 19 Sep 2021 03:17:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7418
content-type: text/css
date: Sat, 20 Apr 2024 12:52:51 GMT
server: Apache
X-Firefox-Spdy: h2

alltorq-net.oncallservices.ca/test/css/bootstrap/js/bootstrap.min.js

173.254.28.195

200 OK

12 kB

URL GET HTTP/2
alltorq-net.oncallservices.ca/test/css/bootstrap/js/bootstrap.min.js
IP
173.254.28.195:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerLet's Encrypt
Subjectalltorq-net.oncallservices.ca
Fingerprint4E:67:F5:E4:AB:A2:DC:18:A6:CF:2B:65:A1:A0:95:29:36:6A:E2:12
ValidityMon, 15 Apr 2024 18:16:24 GMT - Sun, 14 Jul 2024 18:16:23 GMT

File type
JavaScript source, ASCII text, with very long lines (31650)
Size
12 kB (12386 bytes)
Hash
abda843684d022f3bc22bc83927fe05f
26908395e7a9a4eab607d80aa50a81d65f3017cb
24cc29533598f962823c4229bc280487646a27a42a95257c31de1b9b18f3710f

Detections

Analyzer	Verdict	Alert
ThreatFox	malicious	Lucifer

HTTP Headers

GET /test/css/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: alltorq-net.oncallservices.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://alltorq-net.oncallservices.ca/test/Panel/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 19 Sep 2021 03:17:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12386
content-type: application/javascript
date: Sat, 20 Apr 2024 12:52:51 GMT
server: Apache
X-Firefox-Spdy: h2

alltorq-net.oncallservices.ca/test/css/morrisjs/morris.css

173.254.28.195

500 Internal Server Error

683 B

URL GET HTTP/2
alltorq-net.oncallservices.ca/test/css/morrisjs/morris.css
IP
173.254.28.195:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerLet's Encrypt
Subjectalltorq-net.oncallservices.ca
Fingerprint4E:67:F5:E4:AB:A2:DC:18:A6:CF:2B:65:A1:A0:95:29:36:6A:E2:12
ValidityMon, 15 Apr 2024 18:16:24 GMT - Sun, 14 Jul 2024 18:16:23 GMT

File type
HTML document, ASCII text
Size
683 B (683 bytes)
Hash
34acde1bafe685cc4f0a03eacc24d270
c9c775aef28dc65b3262ddfad15803553a5826ba
910829f771688ebd0fac1a00342bab4a8540e0680d3f5e7100527c63f5753ce4

Detections

Analyzer	Verdict	Alert
ThreatFox	malicious	Lucifer

HTTP Headers

GET /test/css/morrisjs/morris.css HTTP/1.1
Host: alltorq-net.oncallservices.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://alltorq-net.oncallservices.ca/test/Panel/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 500 Internal Server Error
content-length: 683
content-type: text/html; charset=iso-8859-1
date: Sat, 20 Apr 2024 12:52:51 GMT
server: Apache
X-Firefox-Spdy: h2

alltorq-net.oncallservices.ca/test/css/bootstrap/font/CheltenhamStd-BoldCond.otf

173.254.28.195

500 Internal Server Error

683 B

URL GET HTTP/2
alltorq-net.oncallservices.ca/test/css/bootstrap/font/CheltenhamStd-BoldCond.otf
IP
173.254.28.195:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerLet's Encrypt
Subjectalltorq-net.oncallservices.ca
Fingerprint4E:67:F5:E4:AB:A2:DC:18:A6:CF:2B:65:A1:A0:95:29:36:6A:E2:12
ValidityMon, 15 Apr 2024 18:16:24 GMT - Sun, 14 Jul 2024 18:16:23 GMT

File type
HTML document, ASCII text
Size
683 B (683 bytes)
Hash
34acde1bafe685cc4f0a03eacc24d270
c9c775aef28dc65b3262ddfad15803553a5826ba
910829f771688ebd0fac1a00342bab4a8540e0680d3f5e7100527c63f5753ce4

Detections

Analyzer	Verdict	Alert
ThreatFox	malicious	Lucifer

HTTP Headers

GET /test/css/bootstrap/font/CheltenhamStd-BoldCond.otf HTTP/1.1
Host: alltorq-net.oncallservices.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://alltorq-net.oncallservices.ca/test/Panel/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 500 Internal Server Error
content-length: 683
content-type: text/html; charset=iso-8859-1
date: Sat, 20 Apr 2024 12:52:52 GMT
server: Apache
X-Firefox-Spdy: h2

alltorq-net.oncallservices.ca/test/css/morrisjs/morris.css

173.254.28.195

500 Internal Server Error

683 B

URL GET HTTP/2
alltorq-net.oncallservices.ca/test/css/morrisjs/morris.css
IP
173.254.28.195:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerLet's Encrypt
Subjectalltorq-net.oncallservices.ca
Fingerprint4E:67:F5:E4:AB:A2:DC:18:A6:CF:2B:65:A1:A0:95:29:36:6A:E2:12
ValidityMon, 15 Apr 2024 18:16:24 GMT - Sun, 14 Jul 2024 18:16:23 GMT

File type
HTML document, ASCII text
Size
683 B (683 bytes)
Hash
34acde1bafe685cc4f0a03eacc24d270
c9c775aef28dc65b3262ddfad15803553a5826ba
910829f771688ebd0fac1a00342bab4a8540e0680d3f5e7100527c63f5753ce4

Detections

Analyzer	Verdict	Alert
ThreatFox	malicious	Lucifer

HTTP Headers

GET /test/css/morrisjs/morris.css HTTP/1.1
Host: alltorq-net.oncallservices.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://alltorq-net.oncallservices.ca/test/Panel/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 500 Internal Server Error
content-length: 683
content-type: text/html; charset=iso-8859-1
date: Sat, 20 Apr 2024 12:52:52 GMT
server: Apache
X-Firefox-Spdy: h2

fonts.gstatic.com/s/cairo/v28/SLXgc1nY6HkvangtZmpQdkhzfH5lkSs2SgRjCAGMQ1z0hOA-a1PiLA.woff2

216.58.207.227

200 OK

15 kB

URL GET HTTP/2
fonts.gstatic.com/s/cairo/v28/SLXgc1nY6HkvangtZmpQdkhzfH5lkSs2SgRjCAGMQ1z0hOA-a1PiLA.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15040, version 1.0
Size
15 kB (15040 bytes)
Hash
1f8775699abbbdf0eb6427803b3efe33
a3e7fcf959294b2babf1ae14494c787825dbc3f1
cc8b30e9bfe6a385b5619c0d0a34b8f562e02ee4c09ab0637eed496ca3944fcb

HTTP Headers

GET /s/cairo/v28/SLXgc1nY6HkvangtZmpQdkhzfH5lkSs2SgRjCAGMQ1z0hOA-a1PiLA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://alltorq-net.oncallservices.ca
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 05:57:51 GMT
expires: Wed, 16 Apr 2025 05:57:51 GMT
cache-control: public, max-age=31536000
age: 370501
last-modified: Tue, 02 May 2023 14:51:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

alltorq-net.oncallservices.ca/favicon.ico

173.254.28.195

200 OK

1.2 kB

URL GET HTTP/2
alltorq-net.oncallservices.ca/favicon.ico
IP
173.254.28.195:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerLet's Encrypt
Subjectalltorq-net.oncallservices.ca
Fingerprint4E:67:F5:E4:AB:A2:DC:18:A6:CF:2B:65:A1:A0:95:29:36:6A:E2:12
ValidityMon, 15 Apr 2024 18:16:24 GMT - Sun, 14 Jul 2024 18:16:23 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Size
1.2 kB (1150 bytes)
Hash
a21d5440a0deac93c33111dcf5f7eee2
bba7ac59a110febb8da758d16baaa2887a6619a6
f0ad9d7046924a3f231c85548fa9a3eed1d427a5c32df23418ee7c6c7389000c

Detections

Analyzer	Verdict	Alert
ThreatFox	malicious	Lucifer

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: alltorq-net.oncallservices.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://alltorq-net.oncallservices.ca/test/Panel/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 01 May 2014 16:48:22 GMT
accept-ranges: bytes
content-length: 1150
cache-control: max-age=604800
expires: Sat, 27 Apr 2024 12:52:52 GMT
content-type: image/x-icon
date: Sat, 20 Apr 2024 12:52:52 GMT
server: Apache
X-Firefox-Spdy: h2

alltorq-net.oncallservices.ca/test/img/img/Dark.jpg

173.254.28.195

200 OK

113 kB

URL GET HTTP/2
alltorq-net.oncallservices.ca/test/img/img/Dark.jpg
IP
173.254.28.195:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerLet's Encrypt
Subjectalltorq-net.oncallservices.ca
Fingerprint4E:67:F5:E4:AB:A2:DC:18:A6:CF:2B:65:A1:A0:95:29:36:6A:E2:12
ValidityMon, 15 Apr 2024 18:16:24 GMT - Sun, 14 Jul 2024 18:16:23 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1200, components 3
Size
113 kB (112918 bytes)
Hash
cc09dc479a5a1afad1ca9a34d940afa3
ad6ba197c36971462a2e799de0fb3eb44255f2e3
d520262d36e2f33ef63a027ea29d96a0f68e0ab82c199b4aa25f5b2b0db8de90

Detections

Analyzer	Verdict	Alert
ThreatFox	malicious	Lucifer

HTTP Headers

GET /test/img/img/Dark.jpg HTTP/1.1
Host: alltorq-net.oncallservices.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://alltorq-net.oncallservices.ca/test/Panel/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 19 Sep 2021 03:17:30 GMT
accept-ranges: bytes
content-length: 112918
content-type: image/jpeg
date: Sat, 20 Apr 2024 12:52:52 GMT
server: Apache
X-Firefox-Spdy: h2

alltorq-net.oncallservices.ca/test/css/bootstrap/css/bootstrap.min.css

173.254.28.195

200 OK

110 kB

URL GET HTTP/2
alltorq-net.oncallservices.ca/test/css/bootstrap/css/bootstrap.min.css
IP
173.254.28.195:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerLet's Encrypt
Subjectalltorq-net.oncallservices.ca
Fingerprint4E:67:F5:E4:AB:A2:DC:18:A6:CF:2B:65:A1:A0:95:29:36:6A:E2:12
ValidityMon, 15 Apr 2024 18:16:24 GMT - Sun, 14 Jul 2024 18:16:23 GMT

File type
ASCII text, with very long lines (65371)
Size
110 kB (109518 bytes)
Hash
385b964b68acb68d23cb43a5218fade9
58a360d7ef24d8d05737db1712dd5c086597e862
b5fd723750763ebb731f9221e413e7d64d58d5192dc040e42292ed3dcccca732

Detections

Analyzer	Verdict	Alert
ThreatFox	malicious	Lucifer

HTTP Headers

GET /test/css/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: alltorq-net.oncallservices.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://alltorq-net.oncallservices.ca/test/Panel/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Sun, 19 Sep 2021 03:17:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sat, 20 Apr 2024 12:52:51 GMT
server: Apache
X-Firefox-Spdy: h2

alltorq-net.oncallservices.ca/test/css/bootstrap/js/jquery-2.1.1.js

173.254.28.195

200 OK

247 kB

URL GET HTTP/2
alltorq-net.oncallservices.ca/test/css/bootstrap/js/jquery-2.1.1.js
IP
173.254.28.195:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerLet's Encrypt
Subjectalltorq-net.oncallservices.ca
Fingerprint4E:67:F5:E4:AB:A2:DC:18:A6:CF:2B:65:A1:A0:95:29:36:6A:E2:12
ValidityMon, 15 Apr 2024 18:16:24 GMT - Sun, 14 Jul 2024 18:16:23 GMT

File type
JavaScript source, ASCII text
Size
247 kB (247351 bytes)
Hash
7403060950f4a13be3b3dfde0490ee05
8d55aabf2b76486cc311fdc553a3613cad46aa3f
140ff438eaaede046f1ceba27579d16dc980595709391873fa9bf74d7dbe53ac

Detections

Analyzer	Verdict	Alert
ThreatFox	malicious	Lucifer

HTTP Headers

GET /test/css/bootstrap/js/jquery-2.1.1.js HTTP/1.1
Host: alltorq-net.oncallservices.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://alltorq-net.oncallservices.ca/test/Panel/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Sun, 19 Sep 2021 03:17:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Sat, 20 Apr 2024 12:52:51 GMT
server: Apache
X-Firefox-Spdy: h2

alltorq-net.oncallservices.ca/test/css/hover.css

173.254.28.195

200 OK

115 kB

URL GET HTTP/2
alltorq-net.oncallservices.ca/test/css/hover.css
IP
173.254.28.195:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerLet's Encrypt
Subjectalltorq-net.oncallservices.ca
Fingerprint4E:67:F5:E4:AB:A2:DC:18:A6:CF:2B:65:A1:A0:95:29:36:6A:E2:12
ValidityMon, 15 Apr 2024 18:16:24 GMT - Sun, 14 Jul 2024 18:16:23 GMT

File type
ASCII text
Size
115 kB (114672 bytes)
Hash
87ed96de90ccd52be6e81aeaf0914a2b
088ec2c1ad1a5c43ea8f62eefe136a253cc2961a
51e8181d2c98bf2b7a4f4023f6e2835515e3431323b1dcc93b13676859d44ed9

Detections

Analyzer	Verdict	Alert
ThreatFox	malicious	Lucifer

HTTP Headers

GET /test/css/hover.css HTTP/1.1
Host: alltorq-net.oncallservices.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://alltorq-net.oncallservices.ca/test/Panel/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Sun, 19 Sep 2021 03:17:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Sat, 20 Apr 2024 12:52:51 GMT
server: Apache
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Cairo

142.250.74.106

200 OK

1.7 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Cairo
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text, with very long lines (1676), with no line terminators
Size
1.7 kB (1652 bytes)
Hash
93ec2dff50cf94e5fd4327664c6c47a2
7a33ef3c7f2c3285f814cfa2e8bc373d8529fd8d
6fa8c1f329346c7f077d1d7da4406190e47a6d2d1433efbea046b0961297b9cf

HTTP Headers

GET /css?family=Cairo HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://alltorq-net.oncallservices.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 20 Apr 2024 12:52:51 GMT
date: Sat, 20 Apr 2024 12:52:51 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Roboto:100,300,400,700,500

142.250.74.106

200 OK

11 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:100,300,400,700,500
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://alltorq-net.oncallservices.ca/test/Panel/login.php
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text
Size
11 kB (10915 bytes)
Hash
155f53ee6339ba8215c3513f7e89a646
1785d802da7b560dc8af49e5c17627ecc88285a0
859bbc3840ddbfac2cbabd04217077fcab6f31a0e24a9f7ff1a2ee6246ba5319

HTTP Headers

GET /css?family=Roboto:100,300,400,700,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://alltorq-net.oncallservices.ca/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 20 Apr 2024 12:52:51 GMT
date: Sat, 20 Apr 2024 12:52:51 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (16)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers