Report - ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

Report Overview

Submitted URL
ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
IP
64.136.20.36
ASN
#13446 AS-NETZERO
Submitted
2024-05-01 21:23:38
Access
public
Website Title
Можно вечером есть цукаты, диета при болезни бюргера гинзбург похудеть в Бикин
Final URL
ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ameralprob.itgo.com	unknown	unknown	No data	No data	5.7 kB	59 kB	64.136.20.43
allfreedating.ru	unknown	2022-12-07	2015-03-13	2022-03-29	664 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-01	medium	allfreedating.ru	Sinkholed
2024-05-01	medium	allfreedating.ru	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	ameralprob.itgo.com/fs_img/js/overlay.js	6.5 kB	2023-03-07	2024-05-10
Pretty URL ameralprob.itgo.com/fs_img/js/overlay.js IP 64.136.20.36 ASN #13446 AS-NETZERO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:00:53 Last Seen2024-05-10 03:17:37 Times Seen139 Hash 85f8bd82370a634fcb8f5aca3e407395 4065a0ff47a5b4f01df8c90adaa7a6781b4087c3 0c33d70a8a30833d45c2217aeaf8691b17d54c70c136593bf03f7b68109b84ed Loading...

	ameralprob.itgo.com/LI.js	558 B	2024-05-01	2024-05-01
Pretty URL ameralprob.itgo.com/LI.js IP 64.136.20.36 ASN #13446 AS-NETZERO Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-01 21:17:22 Last Seen2024-05-01 23:23:44 Times Seen3 Hash 72846f73277808ca96d92cd9bece0471 e92162b6530e7060cd2da66c13da2396b780805d 5b217a7410d6e3681477c5ca9c69ac832d19bbcf67b9b352c95820026cbdb639 Loading...

	ameralprob.itgo.com/fs_img/js/set_homepage.js	1.7 kB	2023-03-07	2024-05-10
Pretty URL ameralprob.itgo.com/fs_img/js/set_homepage.js IP 64.136.20.36 ASN #13446 AS-NETZERO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:00:53 Last Seen2024-05-10 03:17:37 Times Seen135 Hash 65d1bd2fb6b2997618d4487d7f0c458b e176f2620fb4c3b22e8877d0770f68bed8e1421f 24fcc4b766d9485b2e8276c0fd71fb9f129b0e2fbc90e073afbe8a7cbd3b199b Loading...

	ameralprob.itgo.com/fs_img/js/pt.js	4.9 kB	2023-03-07	2024-05-10
Pretty URL ameralprob.itgo.com/fs_img/js/pt.js IP 64.136.20.36 ASN #13446 AS-NETZERO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:00:53 Last Seen2024-05-10 03:17:37 Times Seen138 Hash 5a579305a5ed446e5d235fdf055af4df 460970478d97e27013664cca14b24b312db5e837 b7869a1ad7f1eec802fdbd1018fa315b26b3c92a13db66c9044dad80a8fc5b2f Loading...

	ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html	594 B	2023-03-07	2024-05-01
Pretty URL ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html IP 64.136.20.43 ASN #13446 AS-NETZERO Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 15:00:53 Last Seen2024-05-01 23:23:44 Times Seen41 Hash bb0203df0543a151c2d2d33fa330d24c 6d494e2408e204417b53b0a5dea0809012e691d0 f4bb9efc2fb721319d20c23e6ee1204d4d2eb8be7fecaa91b3e71f086e5733de Loading...

		Size	First Seen	Last Seen
	#1 Write - b2ffa9903c592c720b32b80d65d90656	358 B	2024-05-01	2024-05-01
Pretty Observations First Seen2024-05-01 23:23:44 Last Seen2024-05-01 23:23:44 Times Seen1 Hash b2ffa9903c592c720b32b80d65d90656 d95c3bf0b042483bf3b04297fd6566cba3746195 cdd779ed1d994144bda4106a530b3a7ecc691594577b434083bb179ad36e910a Loading...

	#2 Write - 96580792efa83d242bfeaaed4eeddb08	470 B	2024-05-01	2024-05-01
Pretty Observations First Seen2024-05-01 23:23:44 Last Seen2024-05-01 23:23:44 Times Seen1 Hash 96580792efa83d242bfeaaed4eeddb08 a00447a48ac1a1a925bee466d5c121ee7b8a6b9a 60e7d2e4cc49d27fb2dc831e7b0914b0ba68979f21aa93998fbbc4c6a5310496 Loading...

HTTP Transactions (17)

URL IP Response Size

ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

64.136.20.43

200 OK

12 kB

URL User Request GET HTTP/1.1
ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
IP
64.136.20.43:80
ASN
#13446 AS-NETZERO

File type
HTML document, ISO-8859 text, with very long lines (461), with CRLF, CR, LF line terminators
Size
12 kB (11792 bytes)
Hash
8dbf6c5eb256dc2cab81909ba419f282
ea54971553e8cd63a1b1eb0f1c2be1031aec3067
37d1af9a34a579b6d55e102bf93401bf0092726d3c005cabe776db104f91556e

HTTP Headers

GET /mozhno-vecherom-est-tsukati.html HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:23:14 GMT
Server: .V16 Apache
Last-Modified: Thu, 13 Jun 2013 16:17:40 GMT
Content-length: 11792
Keep-Alive: timeout=5, max=999939
Connection: Keep-Alive
Content-Type: text/html

ameralprob.itgo.com/cgi-bin/image/images/bannertype/100X22.gif

64.136.20.43

200 OK

570 B

URL GET HTTP/1.1
ameralprob.itgo.com/cgi-bin/image/images/bannertype/100X22.gif
IP
64.136.20.43:80
ASN
#13446 AS-NETZERO

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type
GIF image data, version 89a, 100 x 22
Size
570 B (570 bytes)
Hash
1d64a9e433a2feafb2428b90e5c5b111
835daf495f1309fdff927f7873de8eb4fca8d273
6cacc0769c10c157791bed8a602aaf3b36d90fbff36a49aa0ce55f07f2bdad5b

HTTP Headers

GET /cgi-bin/image/images/bannertype/100X22.gif HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:23:14 GMT
Server: .V16 Apache
Last-Modified: Thu, 04 Oct 2018 07:22:00 GMT
Content-length: 570
Keep-Alive: timeout=5, max=999848
Connection: Keep-Alive
Content-Type: image/gif

ameralprob.itgo.com/fs_img/js/overlay.js

64.136.20.36

200 OK

6.5 kB

URL GET HTTP/1.1
ameralprob.itgo.com/fs_img/js/overlay.js
IP
64.136.20.36:80
ASN
#13446 AS-NETZERO

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type
ASCII text
Size
6.5 kB (6482 bytes)
Hash
85f8bd82370a634fcb8f5aca3e407395
4065a0ff47a5b4f01df8c90adaa7a6781b4087c3
0c33d70a8a30833d45c2217aeaf8691b17d54c70c136593bf03f7b68109b84ed

HTTP Headers

GET /fs_img/js/overlay.js HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:23:14 GMT
Server: .V16 Apache
Last-Modified: Tue, 01 Dec 2015 11:15:04 GMT
ETag: "55ad8-1952-525d444f8be00"
Accept-Ranges: bytes
Content-Length: 6482
Keep-Alive: timeout=5, max=999937
Connection: Keep-Alive
Content-Type: application/x-javascript

ameralprob.itgo.com/style.css

64.136.20.36

200 OK

871 B

URL GET HTTP/1.1
ameralprob.itgo.com/style.css
IP
64.136.20.36:80
ASN
#13446 AS-NETZERO

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type
ASCII text
Size
871 B (871 bytes)
Hash
db41b70af1dac8db30ac238f63da17fe
41b04a58cf33338c7546a8bd33ea6413316896e9
313a123d8b6e8043ea14f65e0975f0e7c834e8702ebbb53f67560853da8f1485

HTTP Headers

GET /style.css HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:23:14 GMT
Server: .V16 Apache
Last-Modified: Thu, 13 Jun 2013 16:17:46 GMT
ETag: "2a33fa9-367-4df0b78874747"
Accept-Ranges: bytes
Content-Length: 871
Keep-Alive: timeout=5, max=999847
Connection: Keep-Alive
Content-Type: text/css

ameralprob.itgo.com/fs_img/js/set_homepage.js

64.136.20.36

200 OK

1.7 kB

URL GET HTTP/1.1
ameralprob.itgo.com/fs_img/js/set_homepage.js
IP
64.136.20.36:80
ASN
#13446 AS-NETZERO

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type
ASCII text
Size
1.7 kB (1739 bytes)
Hash
65d1bd2fb6b2997618d4487d7f0c458b
e176f2620fb4c3b22e8877d0770f68bed8e1421f
24fcc4b766d9485b2e8276c0fd71fb9f129b0e2fbc90e073afbe8a7cbd3b199b

HTTP Headers

GET /fs_img/js/set_homepage.js HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:23:14 GMT
Server: .V16 Apache
Last-Modified: Tue, 01 Dec 2015 11:15:04 GMT
ETag: "55adc-6cb-525d444f8be00"
Accept-Ranges: bytes
Content-Length: 1739
Keep-Alive: timeout=5, max=999861
Connection: Keep-Alive
Content-Type: application/x-javascript

ameralprob.itgo.com/LI.js

64.136.20.36

200 OK

502 B

URL GET HTTP/1.1
ameralprob.itgo.com/LI.js
IP
64.136.20.36:80
ASN
#13446 AS-NETZERO

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type
HTML document, ISO-8859 text
Size
502 B (502 bytes)
Hash
5190628a12ac101a4fd76c2b6dc61281
5ee94acd1d66821b51cb7c9d0170cac22e2c5b77
78c285a85b0715ffe2d1a09433f96cdb704d2a21cafd0ed3c31f54fed98af95c

HTTP Headers

GET /LI.js HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:23:14 GMT
Server: .V16 Apache
Last-Modified: Thu, 13 Jun 2013 16:17:26 GMT
ETag: "5a56cf-1f6-4df0b7751a506"
Accept-Ranges: bytes
Content-Length: 502
Keep-Alive: timeout=5, max=999999
Connection: Keep-Alive
Content-Type: application/x-javascript

ameralprob.itgo.com/fs_img/js/pt.js

64.136.20.36

200 OK

4.9 kB

URL GET HTTP/1.1
ameralprob.itgo.com/fs_img/js/pt.js
IP
64.136.20.36:80
ASN
#13446 AS-NETZERO

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type
ASCII text
Size
4.9 kB (4924 bytes)
Hash
5a579305a5ed446e5d235fdf055af4df
460970478d97e27013664cca14b24b312db5e837
b7869a1ad7f1eec802fdbd1018fa315b26b3c92a13db66c9044dad80a8fc5b2f

HTTP Headers

GET /fs_img/js/pt.js HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:23:14 GMT
Server: .V16 Apache
Last-Modified: Tue, 01 Dec 2015 11:15:04 GMT
ETag: "55adb-133c-525d444f8be00"
Accept-Ranges: bytes
Content-Length: 4924
Keep-Alive: timeout=5, max=999998
Connection: Keep-Alive
Content-Type: application/x-javascript

ameralprob.itgo.com/cgi-bin/image/images/bannertype/100X22.gif

64.136.20.36

200 OK

570 B

URL GET HTTP/1.1
ameralprob.itgo.com/cgi-bin/image/images/bannertype/100X22.gif
IP
64.136.20.36:80
ASN
#13446 AS-NETZERO

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type
GIF image data, version 89a, 100 x 22
Size
570 B (570 bytes)
Hash
1d64a9e433a2feafb2428b90e5c5b111
835daf495f1309fdff927f7873de8eb4fca8d273
6cacc0769c10c157791bed8a602aaf3b36d90fbff36a49aa0ce55f07f2bdad5b

HTTP Headers

GET /cgi-bin/image/images/bannertype/100X22.gif HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:23:15 GMT
Server: .V16 Apache
Last-Modified: Thu, 04 Oct 2018 07:22:00 GMT
Content-length: 570
Keep-Alive: timeout=5, max=999856
Connection: Keep-Alive
Content-Type: image/gif

ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

64.136.20.43

200 OK

12 kB

URL User Request GET HTTP/1.1
ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
IP
64.136.20.43:80
ASN
#13446 AS-NETZERO

File type
HTML document, ISO-8859 text, with very long lines (461), with CRLF, CR, LF line terminators
Size
12 kB (11792 bytes)
Hash
ec927f39f9275a361667547c4a19c947
c296b86baa1a63cf87cf14fd15d189753d6320e1
fc9c18a332568a54a9f614920723f5314e0cc8314f0666beb93922edcbfb2b13

HTTP Headers

GET /mozhno-vecherom-est-tsukati.html HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:23:15 GMT
Server: .V16 Apache
Last-Modified: Thu, 13 Jun 2013 16:17:40 GMT
Content-length: 11792
Keep-Alive: timeout=5, max=999998
Connection: Keep-Alive
Content-Type: text/html

ameralprob.itgo.com/fs_img/js/overlay.js

64.136.20.36

200 OK

6.5 kB

URL GET HTTP/1.1
ameralprob.itgo.com/fs_img/js/overlay.js
IP
64.136.20.36:80
ASN
#13446 AS-NETZERO

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type
ASCII text
Size
6.5 kB (6482 bytes)
Hash
85f8bd82370a634fcb8f5aca3e407395
4065a0ff47a5b4f01df8c90adaa7a6781b4087c3
0c33d70a8a30833d45c2217aeaf8691b17d54c70c136593bf03f7b68109b84ed

HTTP Headers

GET /fs_img/js/overlay.js HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:23:16 GMT
Server: .V16 Apache
Last-Modified: Tue, 01 Dec 2015 11:15:04 GMT
ETag: "55ad8-1952-525d444f8be00"
Accept-Ranges: bytes
Content-Length: 6482
Keep-Alive: timeout=5, max=999934
Connection: Keep-Alive
Content-Type: application/x-javascript

ameralprob.itgo.com/style.css

64.136.20.36

200 OK

871 B

URL GET HTTP/1.1
ameralprob.itgo.com/style.css
IP
64.136.20.36:80
ASN
#13446 AS-NETZERO

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type
ASCII text
Size
871 B (871 bytes)
Hash
db41b70af1dac8db30ac238f63da17fe
41b04a58cf33338c7546a8bd33ea6413316896e9
313a123d8b6e8043ea14f65e0975f0e7c834e8702ebbb53f67560853da8f1485

HTTP Headers

GET /style.css HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:23:16 GMT
Server: .V16 Apache
Last-Modified: Thu, 13 Jun 2013 16:17:46 GMT
ETag: "2a33fa9-367-4df0b78874747"
Accept-Ranges: bytes
Content-Length: 871
Keep-Alive: timeout=5, max=999999
Connection: Keep-Alive
Content-Type: text/css

ameralprob.itgo.com/fs_img/js/set_homepage.js

64.136.20.36

200 OK

1.7 kB

URL GET HTTP/1.1
ameralprob.itgo.com/fs_img/js/set_homepage.js
IP
64.136.20.36:80
ASN
#13446 AS-NETZERO

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type
ASCII text
Size
1.7 kB (1739 bytes)
Hash
65d1bd2fb6b2997618d4487d7f0c458b
e176f2620fb4c3b22e8877d0770f68bed8e1421f
24fcc4b766d9485b2e8276c0fd71fb9f129b0e2fbc90e073afbe8a7cbd3b199b

HTTP Headers

GET /fs_img/js/set_homepage.js HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:23:16 GMT
Server: .V16 Apache
Last-Modified: Tue, 01 Dec 2015 11:15:04 GMT
ETag: "55adc-6cb-525d444f8be00"
Accept-Ranges: bytes
Content-Length: 1739
Keep-Alive: timeout=5, max=999846
Connection: Keep-Alive
Content-Type: application/x-javascript

ameralprob.itgo.com/LI.js

64.136.20.36

200 OK

502 B

URL GET HTTP/1.1
ameralprob.itgo.com/LI.js
IP
64.136.20.36:80
ASN
#13446 AS-NETZERO

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type
HTML document, ISO-8859 text
Size
502 B (502 bytes)
Hash
5190628a12ac101a4fd76c2b6dc61281
5ee94acd1d66821b51cb7c9d0170cac22e2c5b77
78c285a85b0715ffe2d1a09433f96cdb704d2a21cafd0ed3c31f54fed98af95c

HTTP Headers

GET /LI.js HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:23:16 GMT
Server: .V16 Apache
Last-Modified: Thu, 13 Jun 2013 16:17:26 GMT
ETag: "5a56cf-1f6-4df0b7751a506"
Accept-Ranges: bytes
Content-Length: 502
Keep-Alive: timeout=5, max=999998
Connection: Keep-Alive
Content-Type: application/x-javascript

ameralprob.itgo.com/fs_img/js/pt.js

64.136.20.36

200 OK

4.9 kB

URL GET HTTP/1.1
ameralprob.itgo.com/fs_img/js/pt.js
IP
64.136.20.36:80
ASN
#13446 AS-NETZERO

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type
ASCII text
Size
4.9 kB (4924 bytes)
Hash
5a579305a5ed446e5d235fdf055af4df
460970478d97e27013664cca14b24b312db5e837
b7869a1ad7f1eec802fdbd1018fa315b26b3c92a13db66c9044dad80a8fc5b2f

HTTP Headers

GET /fs_img/js/pt.js HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 May 2024 21:23:16 GMT
Server: .V16 Apache
Last-Modified: Tue, 01 Dec 2015 11:15:04 GMT
ETag: "55adb-133c-525d444f8be00"
Accept-Ranges: bytes
Content-Length: 4924
Keep-Alive: timeout=5, max=999845
Connection: Keep-Alive
Content-Type: application/x-javascript

ameralprob.itgo.com/favicon.ico

64.136.20.36

200 Special Default

1.4 kB

URL GET HTTP/1.1
ameralprob.itgo.com/favicon.ico
IP
64.136.20.36:80
ASN
#13446 AS-NETZERO

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type
MS Windows icon resource - 1 icon, 16x16
Size
1.4 kB (1406 bytes)
Hash
d009cced4ed43383291700a3b7a18f86
eff142aafd81e111c728ccf1f1df36cf1c244dce
748f652b4067e9b431761049ae7e3b77e5cf4d3042b2cd7a3b5da379d95d8dab

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ameralprob.itgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 Special Default
Date: Wed, 01 May 2024 21:23:16 GMT
Server: .V16 Apache
Last-Modified: Tue, 01 Dec 2015 11:14:38 GMT
Content-length: 1406
Keep-Alive: timeout=5, max=999844
Connection: Keep-Alive
Content-Type: image/gif

allfreedating.ru/js/dieta/menu4.js

0.0.0.0

0 B

URL GET
allfreedating.ru/js/dieta/menu4.js
IP
0.0.0.0:0
ASN
#0

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/dieta/menu4.js HTTP/1.1
Host: allfreedating.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/
Pragma: no-cache
Cache-Control: no-cache

allfreedating.ru/js/dieta/menu4.js

0.0.0.0

0 B

URL GET
allfreedating.ru/js/dieta/menu4.js
IP
0.0.0.0:0
ASN
#0

Requested by
http://ameralprob.itgo.com/mozhno-vecherom-est-tsukati.html

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/dieta/menu4.js HTTP/1.1
Host: allfreedating.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ameralprob.itgo.com/
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (17)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash