Report - kgads.ir/newhyp/prelogonAuthentication/goAAAAAiUAAAGnCNSUhEUASUhEUAAAGnCN/Logon/login.php

Report Overview

Submitted URL
kgads.ir/newhyp/prelogonAuthentication/goAAAAAiUAAAGnCNSUhEUASUhEUAAAGnCN/Logon/login.php
IP
185.164.73.243
ASN
#60631 Pars Parva System LLC
Submitted
2024-05-04 04:49:59
Access
public
Website Title
Account Suspended
Final URL
kgads.ir/cgi-sys/suspendedpage.cgi
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
kgads.ir	unknown	unknown	2019-05-28	2023-08-08	1.6 kB	16 kB	185.164.73.243
use.fontawesome.com	942	2012-10-18	2017-01-30	2024-05-02	789 B	48 kB	104.21.27.152

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

	URL	IP	Response	Size
	kgads.ir/newhyp/prelogonAuthentication/goAAAAAiUAAAGnCNSUhEUASUhEUAAAGnCN/Logon/login.php	185.164.73.243		225 B
URL User Request GET kgads.ir/newhyp/prelogonAuthentication/goAAAAAiUAAAGnCNSUhEUASUhEUAAAGnCN/Logon/login.php IP 185.164.73.243:0 ASN #60631 Pars Parva System LLC File type HTML document, ASCII text Size 225 B (225 bytes) Hash fce2cfc455cd9b2afac40deec69001a4 80445ddfd91e322ef5a6fe5cc146cf72b676570a a11559ba34e2a1fd7639e77155fe7d31a2f931ee891744e045ef86be37a51cb5 HTTP Headers `GET /newhyp/prelogonAuthentication/goAAAAAiUAAAGnCNSUhEUASUhEUAAAGnCN/Logon/login.php HTTP/1.1 Host: kgads.ir User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Server: nginx Date: Sat, 04 May 2024 04:49:34 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 225 Connection: keep-alive Location: http://kgads.ir/cgi-sys/suspendedpage.cgi`

	kgads.ir/cgi-sys/suspendedpage.cgi	185.164.73.243	200 OK	7.6 kB
URL GET HTTP/1.1 kgads.ir/cgi-sys/suspendedpage.cgi IP 185.164.73.243:80 ASN #60631 Pars Parva System LLC Requested by http://kgads.ir/cgi-sys/suspendedpage.cgi File type HTML document, ASCII text, with very long lines (4070) Size 7.6 kB (7610 bytes) Hash 80776e757bae48b5aa32b34d5b5dfcfc 27acd9a4a8f0f208bb2c650e7fe8794d22621aef 70a9485d66d54487f2019ca9faa1a8bd556da265915d6b45754d7006fa544677 HTTP Headers `GET /cgi-sys/suspendedpage.cgi HTTP/1.1 Host: kgads.ir User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Sat, 04 May 2024 04:49:34 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive`

	use.fontawesome.com/releases/v5.0.6/css/all.css	104.21.27.152	200 OK	7.5 kB
URL GET HTTP/1.1 use.fontawesome.com/releases/v5.0.6/css/all.css IP 104.21.27.152:80 ASN #13335 CLOUDFLARENET Requested by http://kgads.ir/cgi-sys/suspendedpage.cgi File type ASCII text, with very long lines (34556) Size 7.5 kB (7532 bytes) Hash 42eaa52604673b64d6b356c2fd7f87e3 6b59cb703b2d4a7a2691f13008062b46a6bc7fdb ed0f122470c4d13d86bbabdc38046d743d0228204a56d786d2e17bd83fd358ce HTTP Headers `GET /releases/v5.0.6/css/all.css HTTP/1.1 Host: use.fontawesome.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://kgads.ir/ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Sat, 04 May 2024 04:49:35 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=31556926 ETag: W/"42eaa52604673b64d6b356c2fd7f87e3" Last-Modified: Fri, 22 Sep 2023 01:44:11 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Age: 300167 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7tjPc9svjH3MqmRWf49EZGCCod2vzOizZxO9i674P25OapBFMdcjTcbKduhXkFjtReM6vS2LP5%2FaMp%2F7x4k18BKQbwteBRv1DaGaGewCzmKMzGH7rTO6mbj%2FLgSPSu%2BGRKb2tepx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87e5dd72cd827131-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60

	kgads.ir/favicon.ico	185.164.73.243	302 Found	225 B
URL GET HTTP/1.1 kgads.ir/favicon.ico IP 185.164.73.243:80 ASN #60631 Pars Parva System LLC Requested by http://kgads.ir/cgi-sys/suspendedpage.cgi File type HTML document, ASCII text Size 225 B (225 bytes) Hash fce2cfc455cd9b2afac40deec69001a4 80445ddfd91e322ef5a6fe5cc146cf72b676570a a11559ba34e2a1fd7639e77155fe7d31a2f931ee891744e045ef86be37a51cb5 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: kgads.ir User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://kgads.ir/cgi-sys/suspendedpage.cgi Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Server: nginx Date: Sat, 04 May 2024 04:49:34 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 225 Connection: keep-alive Location: http://kgads.ir/cgi-sys/suspendedpage.cgi`

	use.fontawesome.com/releases/v5.0.6/webfonts/fa-solid-900.woff2	104.21.27.152	200 OK	39 kB
URL GET HTTP/1.1 use.fontawesome.com/releases/v5.0.6/webfonts/fa-solid-900.woff2 IP 104.21.27.152:80 ASN #13335 CLOUDFLARENET Requested by http://kgads.ir/cgi-sys/suspendedpage.cgi File type Web Open Font Format (Version 2), TrueType, length 38784, version 1.0 Size 39 kB (38784 bytes) Hash f9b85c9463af7103b9b24bbbf09a06ed d28d7222bcbeb8ea701a771e85f7efe006e62fb1 62554277d07b20c6bfae7c6267b3198b4846f604a37d4085bf9f54c392210b56 HTTP Headers `GET /releases/v5.0.6/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: use.fontawesome.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: http://kgads.ir DNT: 1 Connection: keep-alive Referer: http://use.fontawesome.com/ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Sat, 04 May 2024 04:49:35 GMT Content-Type: application/font-woff2 Content-Length: 38784 Connection: keep-alive Access-Control-Allow-Origin: * Cache-Control: max-age=31556926 ETag: "f9b85c9463af7103b9b24bbbf09a06ed" Last-Modified: Fri, 22 Sep 2023 01:44:10 GMT Vary: Origin, Accept-Encoding CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FPHCpY811AADrqomnSu7WZqdKn%2F24IAlNaMo%2Fu5cnRmoHAokCE20dip4zWUC%2BhWPyYRQ9S%2FswTAwy2SCmut%2FDSAgtkpPuZ9ZoSrflGmv%2B8xcoEr6GwxxocJ0lr2pqFNvMdMUcw31"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87e5dd730f3eb51d-OSL alt-svc: h2=":443"; ma=60

	kgads.ir/cgi-sys/suspendedpage.cgi	185.164.73.243	200 OK	7.6 kB
URL GET HTTP/1.1 kgads.ir/cgi-sys/suspendedpage.cgi IP 185.164.73.243:80 ASN #60631 Pars Parva System LLC Requested by http://kgads.ir/cgi-sys/suspendedpage.cgi File type HTML document, ASCII text, with very long lines (4070) Size 7.6 kB (7610 bytes) Hash 80776e757bae48b5aa32b34d5b5dfcfc 27acd9a4a8f0f208bb2c650e7fe8794d22621aef 70a9485d66d54487f2019ca9faa1a8bd556da265915d6b45754d7006fa544677 HTTP Headers `GET /cgi-sys/suspendedpage.cgi HTTP/1.1 Host: kgads.ir User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://kgads.ir/cgi-sys/suspendedpage.cgi DNT: 1 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Sat, 04 May 2024 04:49:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive`