Report - kdc.ygs.mybluehost.me/melly/16229/

Report Overview

Submitted URL
kdc.ygs.mybluehost.me/melly/16229/
IP
162.241.218.238
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2024-05-05 06:00:37
Access
public
Website Title
Crédit Agricole
Final URL
kdc.ygs.mybluehost.me/melly/16229/
Tags
suspicious
urlquery detections
Suspicious - Suspicious Javascript code
Suspicious - Anti-debugging code

Detections

urlquery
6
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-05-04	1.4 kB	435 kB	104.17.25.14
kdc.ygs.mybluehost.me	unknown	unknown	No data	No data	3.2 kB	457 kB	162.241.218.238
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-05-04	896 B	41 kB	151.101.193.229
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-05-04	438 B	90 kB	142.250.74.42

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	kdc.ygs.mybluehost.me/melly/16229/	Credit Agricole S.A.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/js/all.min.js	1.5 MB	2023-03-09	2024-05-18
Pretty URL cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/js/all.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 05:04:22 Last Seen2024-05-18 09:05:23 Times Seen9945 Hash d5beb8fa265f90be5ccadd6b32b8672f 7bdc23c06b51e7e42c05de486680a3c18aa5ce5a 6a769e18b06859751eaa2259044a6ff76e3ddcd6572a516d8ce3a2d7b8c7538e Loading...

	kdc.ygs.mybluehost.me/melly/16229/assets/js/main.js	1.7 kB	2023-03-26	2024-05-18
Pretty URL kdc.ygs.mybluehost.me/melly/16229/assets/js/main.js IP 162.241.218.238 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 01:04:15 Last Seen2024-05-18 09:05:23 Times Seen902 Hash 2dc67549209149f1480d8466b87f6d3e 2e6c1faef52c85bc0f4dd049b99468345d47cd40 2ca7aa1d81228a9c5d45e13f96de1cd280afe6f5540b45b8b7705618b64af733 Loading...

	cdn.jsdelivr.net/npm/sweetalert2@7.26.11/dist/sweetalert2.all.min.js	62 kB	2023-03-07	2024-05-18
Pretty URL cdn.jsdelivr.net/npm/sweetalert2@7.26.11/dist/sweetalert2.all.min.js IP 151.101.193.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:31 Last Seen2024-05-18 09:05:23 Times Seen3338 Hash cdb34f3de7cfb2d32a2ed08d98e7382c 9b04f4f986048aa09ebeeb459f17e274bbc3cde6 6965c967fe2474e34f024a08618c84e9f995c3482a3c46e793b9eca4b00d82e2 Loading...

	cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.2/sweetalert.min.js	41 kB	2023-03-07	2024-05-18
Pretty URL cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.2/sweetalert.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:31 Last Seen2024-05-18 09:05:23 Times Seen7632 Hash f3b8ce97ff6ce324da6232da353adf40 2a3daabc70232c6350ab48d32605dc4a6ac1f1fa 2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b Loading...

	kdc.ygs.mybluehost.me/melly/16229/common/region.js	831 B	2023-03-26	2024-05-18
Pretty URL kdc.ygs.mybluehost.me/melly/16229/common/region.js IP 162.241.218.238 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 01:04:15 Last Seen2024-05-18 09:05:23 Times Seen1313 Hash 9c41d76b689cc4e2e57788f48c852c45 585c8fc602fd8cc4b912e48babb5859c72ee6a7d 6fd6839426aabc880cef8714c245bd0d65d6cbf86415c318649b0e48a97ce290 Loading...

	kdc.ygs.mybluehost.me/melly/16229/assets/js/jquery-3.6.1.min.js	93 kB	2023-06-26	2024-05-18
Pretty URL kdc.ygs.mybluehost.me/melly/16229/assets/js/jquery-3.6.1.min.js IP 162.241.218.238 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-26 18:16:15 Last Seen2024-05-18 09:05:23 Times Seen301 Hash 0f34cab89b639722cc55c85ff3536aec c3c73fef53f9092878a1b80ff3919756ac3c24c0 949f8c43efb42f56a87947f9cc14727ffeeddca084acb4fd9806b9063a9f467c Loading...

	cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js	79 kB	2023-03-07	2024-05-18
Pretty URL cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js IP 151.101.193.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:37 Last Seen2024-05-18 15:04:50 Times Seen27195 Hash 0aa8d64e726c4a57adb5c88f9115996b 901169527507ff9e662cf64d8e361f359308970d 7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js	8.3 kB	2023-03-07	2024-05-18
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:41 Last Seen2024-05-18 09:05:23 Times Seen13082 Hash cc290e6c3aeecf5021dd82ad8df2512a fb983aecd3940e8ebbfe5e74c8099cee9223c957 2a0db34dc14ef4b5ce73b230701c7561e5012667a4c9cb274ecab646e1474995 Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js	90 kB	2023-03-07	2024-05-18
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js IP 142.250.74.42 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-05-18 17:51:38 Times Seen145304 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

HTTP Transactions (13)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js

104.17.25.14

200 OK

3.1 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kdc.ygs.mybluehost.me/melly/16229/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (542)
Size
3.1 kB (3074 bytes)
Hash
cc290e6c3aeecf5021dd82ad8df2512a
fb983aecd3940e8ebbfe5e74c8099cee9223c957
2a0db34dc14ef4b5ce73b230701c7561e5012667a4c9cb274ecab646e1474995

HTTP Headers

GET /ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kdc.ygs.mybluehost.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 06:00:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 3074
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-2087"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 307922
expires: Fri, 25 Apr 2025 06:00:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qTxp9DDNwy6DqW2HbOuY5wvLktm4xLlXJ1DTmJ0fPVW70PxrsVp7GOIfMlx%2BiiS2X6plojuooV5lqzJX6pfKdDViSjbgtaHoOnXCWtYDeK1TgcY2krR4B0Hxu%2FDbnFckTK7DezAa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87ee823f29465697-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/js/all.min.js

104.17.25.14

200 OK

418 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/js/all.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kdc.ygs.mybluehost.me/melly/16229/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65317)
Size
418 kB (418541 bytes)
Hash
d5beb8fa265f90be5ccadd6b32b8672f
7bdc23c06b51e7e42c05de486680a3c18aa5ce5a
6a769e18b06859751eaa2259044a6ff76e3ddcd6572a516d8ce3a2d7b8c7538e

HTTP Headers

GET /ajax/libs/font-awesome/6.2.0/js/all.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kdc.ygs.mybluehost.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 06:00:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 418541
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "630e6e62-662ed"
last-modified: Tue, 30 Aug 2022 20:09:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 390729
expires: Fri, 25 Apr 2025 06:00:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=maVPvSUckTT3RJbfD%2Fz2SXjftnixvdLSxrC6SqAMEx4FMb2vAtST0ACr7UFO6Z%2F7GVsI6BPn3y4G1Iq9M3ov828Ur0CojbjZkAaoUy%2F2kjYc8cX7qcFAWypMghhYDWBgiiFcxMdf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87ee823f29445697-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.2/sweetalert.min.js

104.17.25.14

200 OK

10 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.2/sweetalert.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kdc.ygs.mybluehost.me/melly/16229/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (40808), with no line terminators
Size
10 kB (10494 bytes)
Hash
f3b8ce97ff6ce324da6232da353adf40
2a3daabc70232c6350ab48d32605dc4a6ac1f1fa
2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b

HTTP Headers

GET /ajax/libs/sweetalert/2.1.2/sweetalert.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kdc.ygs.mybluehost.me
DNT: 1
Connection: keep-alive
Referer: https://kdc.ygs.mybluehost.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 06:00:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 10494
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ff8-9f68"
last-modified: Mon, 04 May 2020 16:16:56 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 394951
expires: Fri, 25 Apr 2025 06:00:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NuSumXlkRhBo6E%2BGHYuYjGC6GjXAns3ep8TkbjE%2BmpH7e9ogU%2FKpoGaHk0w7JPPuscMQpNzUMVsDH8yDj9ow0eLcImjtX%2FBZxhFwq5JtIQqW%2Fbl8Yc%2FQJW8g3qLaaQHRqCufRc5h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87ee823f78dc56aa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kdc.ygs.mybluehost.me/melly/16229/

162.241.218.238

200 OK

361 kB

URL User Request GET HTTP/2
kdc.ygs.mybluehost.me/melly/16229/
IP
162.241.218.238:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuerLet's Encrypt
Subjectkdc.ygs.mybluehost.me
Fingerprint2A:2C:37:CC:6D:D0:D6:F3:BE:28:47:26:B3:9E:02:5B:59:F0:DD:CF
ValidityFri, 03 May 2024 16:56:03 GMT - Thu, 01 Aug 2024 16:56:02 GMT

File type
HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (36809)
Size
361 kB (361247 bytes)
Hash
ec0a2c882c5cbc2ddd8b9a0d0f00f763
ced0981cc25a75e5d59144f264d572694c411f39
721d6ab5a7fec9d21a71ed3f2f7b150f0514c1d52c10065a3a64ea02b698945f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Credit Agricole S.A.

HTTP Headers

GET /melly/16229/ HTTP/1.1
Host: kdc.ygs.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 06:00:10 GMT
server: nginx/1.21.6
content-type: text/html
last-modified: Sat, 04 May 2024 08:22:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-server-cache: false
X-Firefox-Spdy: h2

kdc.ygs.mybluehost.me/melly/16229/assets/js/main.js

162.241.218.238

200 OK

479 B

URL GET HTTP/2
kdc.ygs.mybluehost.me/melly/16229/assets/js/main.js
IP
162.241.218.238:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://kdc.ygs.mybluehost.me/melly/16229/
Certificate
IssuerLet's Encrypt
Subjectkdc.ygs.mybluehost.me
Fingerprint2A:2C:37:CC:6D:D0:D6:F3:BE:28:47:26:B3:9E:02:5B:59:F0:DD:CF
ValidityFri, 03 May 2024 16:56:03 GMT - Thu, 01 Aug 2024 16:56:02 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
479 B (479 bytes)
Hash
2dc67549209149f1480d8466b87f6d3e
2e6c1faef52c85bc0f4dd049b99468345d47cd40
2ca7aa1d81228a9c5d45e13f96de1cd280afe6f5540b45b8b7705618b64af733

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Anti-debugging code

HTTP Headers

GET /melly/16229/assets/js/main.js HTTP/1.1
Host: kdc.ygs.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kdc.ygs.mybluehost.me/melly/16229/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sat, 04 May 2024 08:22:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 479
content-type: application/javascript
date: Sun, 05 May 2024 06:00:11 GMT
server: Apache
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js

151.101.193.229

200 OK

24 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js
IP
151.101.193.229:443
ASN
#54113 FASTLY

Requested by
https://kdc.ygs.mybluehost.me/melly/16229/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, ASCII text, with very long lines (65299)
Size
24 kB (23943 bytes)
Hash
0aa8d64e726c4a57adb5c88f9115996b
901169527507ff9e662cf64d8e361f359308970d
7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe

HTTP Headers

GET /npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kdc.ygs.mybluehost.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.0.2
x-jsd-version-type: version
etag: W/"13397-kBFpUnUH/55mLPZNjjYfNZMIlw0"
content-encoding: br
accept-ranges: bytes
date: Sun, 05 May 2024 06:00:11 GMT
age: 1103394
x-served-by: cache-fra-eddf8230080-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23943
X-Firefox-Spdy: h2

kdc.ygs.mybluehost.me/melly/16229/media/js/js.js

162.241.218.238

404 Not Found

315 B

URL GET HTTP/2
kdc.ygs.mybluehost.me/melly/16229/media/js/js.js
IP
162.241.218.238:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://kdc.ygs.mybluehost.me/melly/16229/
Certificate
IssuerLet's Encrypt
Subjectkdc.ygs.mybluehost.me
Fingerprint2A:2C:37:CC:6D:D0:D6:F3:BE:28:47:26:B3:9E:02:5B:59:F0:DD:CF
ValidityFri, 03 May 2024 16:56:03 GMT - Thu, 01 Aug 2024 16:56:02 GMT

File type
HTML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /melly/16229/media/js/js.js HTTP/1.1
Host: kdc.ygs.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kdc.ygs.mybluehost.me/melly/16229/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Sun, 05 May 2024 06:00:11 GMT
server: Apache
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/sweetalert2@7.26.11/dist/sweetalert2.all.min.js

151.101.193.229

200 OK

16 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/sweetalert2@7.26.11/dist/sweetalert2.all.min.js
IP
151.101.193.229:443
ASN
#54113 FASTLY

Requested by
https://kdc.ygs.mybluehost.me/melly/16229/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (34666)
Size
16 kB (15789 bytes)
Hash
cdb34f3de7cfb2d32a2ed08d98e7382c
9b04f4f986048aa09ebeeb459f17e274bbc3cde6
6965c967fe2474e34f024a08618c84e9f995c3482a3c46e793b9eca4b00d82e2

HTTP Headers

GET /npm/sweetalert2@7.26.11/dist/sweetalert2.all.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kdc.ygs.mybluehost.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 7.26.11
x-jsd-version-type: version
etag: W/"f0e9-mwT0+YYEiqCevutFnxfidLvDzeY"
content-encoding: br
accept-ranges: bytes
age: 1556148
date: Sun, 05 May 2024 06:00:11 GMT
x-served-by: cache-fra-eddf8230098-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 15789
X-Firefox-Spdy: h2

kdc.ygs.mybluehost.me/melly/16229/common/region.js

162.241.218.238

200 OK

445 B

URL GET HTTP/2
kdc.ygs.mybluehost.me/melly/16229/common/region.js
IP
162.241.218.238:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://kdc.ygs.mybluehost.me/melly/16229/
Certificate
IssuerLet's Encrypt
Subjectkdc.ygs.mybluehost.me
Fingerprint2A:2C:37:CC:6D:D0:D6:F3:BE:28:47:26:B3:9E:02:5B:59:F0:DD:CF
ValidityFri, 03 May 2024 16:56:03 GMT - Thu, 01 Aug 2024 16:56:02 GMT

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
445 B (445 bytes)
Hash
9c41d76b689cc4e2e57788f48c852c45
585c8fc602fd8cc4b912e48babb5859c72ee6a7d
6fd6839426aabc880cef8714c245bd0d65d6cbf86415c318649b0e48a97ce290

HTTP Headers

GET /melly/16229/common/region.js HTTP/1.1
Host: kdc.ygs.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kdc.ygs.mybluehost.me/melly/16229/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sat, 04 May 2024 08:22:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-length: 445
content-type: application/javascript
date: Sun, 05 May 2024 06:00:11 GMT
server: Apache
X-Firefox-Spdy: h2

kdc.ygs.mybluehost.me/melly/16229/media/js/js.js

162.241.218.238

404 Not Found

315 B

URL GET HTTP/2
kdc.ygs.mybluehost.me/melly/16229/media/js/js.js
IP
162.241.218.238:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://kdc.ygs.mybluehost.me/melly/16229/
Certificate
IssuerLet's Encrypt
Subjectkdc.ygs.mybluehost.me
Fingerprint2A:2C:37:CC:6D:D0:D6:F3:BE:28:47:26:B3:9E:02:5B:59:F0:DD:CF
ValidityFri, 03 May 2024 16:56:03 GMT - Thu, 01 Aug 2024 16:56:02 GMT

File type
HTML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /melly/16229/media/js/js.js HTTP/1.1
Host: kdc.ygs.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kdc.ygs.mybluehost.me/melly/16229/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Sun, 05 May 2024 06:00:12 GMT
server: Apache
X-Firefox-Spdy: h2

kdc.ygs.mybluehost.me/favicon.ico

162.241.218.238

404 Not Found

315 B

URL GET HTTP/2
kdc.ygs.mybluehost.me/favicon.ico
IP
162.241.218.238:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://kdc.ygs.mybluehost.me/melly/16229/
Certificate
IssuerLet's Encrypt
Subjectkdc.ygs.mybluehost.me
Fingerprint2A:2C:37:CC:6D:D0:D6:F3:BE:28:47:26:B3:9E:02:5B:59:F0:DD:CF
ValidityFri, 03 May 2024 16:56:03 GMT - Thu, 01 Aug 2024 16:56:02 GMT

File type
HTML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: kdc.ygs.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kdc.ygs.mybluehost.me/melly/16229/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Sun, 05 May 2024 06:00:12 GMT
server: nginx/1.21.6
content-type: text/html; charset=iso-8859-1
content-length: 315
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js

142.250.74.42

200 OK

90 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
142.250.74.42:443
ASN
#15169 GOOGLE

Requested by
https://kdc.ygs.mybluehost.me/melly/16229/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
90 kB (89476 bytes)
Hash
dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

HTTP Headers

GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kdc.ygs.mybluehost.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 10:06:43 GMT
expires: Sat, 03 May 2025 10:06:43 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 158008
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

kdc.ygs.mybluehost.me/melly/16229/assets/js/jquery-3.6.1.min.js

162.241.218.238

200 OK

93 kB

URL GET HTTP/2
kdc.ygs.mybluehost.me/melly/16229/assets/js/jquery-3.6.1.min.js
IP
162.241.218.238:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://kdc.ygs.mybluehost.me/melly/16229/
Certificate
IssuerLet's Encrypt
Subjectkdc.ygs.mybluehost.me
Fingerprint2A:2C:37:CC:6D:D0:D6:F3:BE:28:47:26:B3:9E:02:5B:59:F0:DD:CF
ValidityFri, 03 May 2024 16:56:03 GMT - Thu, 01 Aug 2024 16:56:02 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
93 kB (92569 bytes)
Hash
0f34cab89b639722cc55c85ff3536aec
c3c73fef53f9092878a1b80ff3919756ac3c24c0
949f8c43efb42f56a87947f9cc14727ffeeddca084acb4fd9806b9063a9f467c

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Suspicious Javascript code

HTTP Headers

GET /melly/16229/assets/js/jquery-3.6.1.min.js HTTP/1.1
Host: kdc.ygs.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kdc.ygs.mybluehost.me/melly/16229/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Sat, 04 May 2024 08:22:31 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
content-type: application/javascript
date: Sun, 05 May 2024 06:00:11 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML