Report - go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4VhIGwOBUAWa7XytTIXeNrnZcrcD8HXtAER9DTkyTvRQyLcBsLZ6ix

Report Overview

Visited public
2024-10-09 17:19:26
Tags
URL
go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4VhIGwOBUAWa7XytTIXeNrnZcrcD8HXtAER9DTkyTvRQyLcBsLZ6ix
Finishing URL
go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4VhIGwOBUAWa7XytTIXeNrnZcrcD8HXtAER9DTkyTvRQyLcBsLZ6ix
IP / ASN
104.17.72.206
#13335 CLOUDFLARENET
Title
404 - Page not found

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
go.ups.com	741166	1992-04-07	2017-06-20 02:36:41	2024-09-25 17:31:37	1.3 kB	8.9 kB	104.17.73.206
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-10-08 18:12:21	1.3 kB	3.5 kB	23.33.119.27
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-10-08 18:12:09	654 B	1.8 kB	23.36.76.249

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4VhIGwOBUAWa7XytTIXeNrnZcrcD8HXtAER9DTkyTvRQyLcBsLZ6ix	ScriptElement	45 B	2023-09-22	2025-03-10
Pretty URL go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4VhIGwOBUAWa7XytTIXeNrnZcrcD8HXtAER9DTkyTvRQyLcBsLZ6ix IP 104.17.73.206 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-22 06:19 Last Seen2025-03-10 11:22 Times Seen187 Hash 814b8e6d4d32c92f5ec80270279dc4f4 ad337d2d41ba8714f45c8f80cfc9dea2d9b133b7 27e63897ec9fc57778718cc7f4b8575121d26fbcd9bb66e075d7c2ba655924ca Loading...

		Size	First Seen	Last Seen
	#1 Write - 6a325178e0f6420bac693ebd4b961da2	21 B	2024-10-11 08:36	2024-10-11 08:36
Pretty Observations First Seen2024-10-11 08:36 Last Seen2024-10-11 08:36 Times Seen1 Hash 6a325178e0f6420bac693ebd4b961da2 625bf8adcf22a5ae724df6d44c1fa8b7ae810fa8 628ba8b6424d43fcb351d6c5099182a569a87daa80e1308f5375b47da5f322a1 Loading...

HTTP Transactions (8)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.33.119.27		504 B
URL r10.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c3fbe0b62fa278b1a007491908bb16f2 2ae17f1c5ae52ff197923ec0189f34ad3f43e645 a4eca96abeac5f2760f850db06e2fa5bf29dc017d9d33eabf73943fa4bb94197 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "A4ECA96ABEAC5F2760F850DB06E2FA5BF29DC017D9D33EABF73943FA4BB94197" Last-Modified: Wed, 09 Oct 2024 04:48:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7056 Expires: Wed, 09 Oct 2024 19:16:36 GMT Date: Wed, 09 Oct 2024 17:19:00 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.27		504 B
URL r10.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash ca9529e5dcfdfe04a1af2baa41d988d6 2f7b1a6c5d3e1c8c9f52c513ee250006de18b00b fea81540ca4c6f34f779c3306d4414c07bab63cec6b11425d8e3c5fb74118be3 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "FEA81540CA4C6F34F779C3306D4414C07BAB63CEC6B11425D8E3C5FB74118BE3" Last-Modified: Wed, 09 Oct 2024 11:30:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17763 Expires: Wed, 09 Oct 2024 22:15:03 GMT Date: Wed, 09 Oct 2024 17:19:00 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.27		504 B
URL r10.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 46338129794811f186a0b7a4f44fa3ec f2e9fd21618da6188e9b28d1abaf563cabf4d29d c062cb8b7804448db2cfb7aec7389f996d3c14fe2699a038ab536c7e0a99ae88 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "C062CB8B7804448DB2CFB7AEC7389F996D3C14FE2699A038AB536C7E0A99AE88" Last-Modified: Tue, 08 Oct 2024 04:15:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7405 Expires: Wed, 09 Oct 2024 19:22:26 GMT Date: Wed, 09 Oct 2024 17:19:01 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.27		504 B
URL r10.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 31fc782bf1efb76a7251d3e45007b986 7cfef07644e0e4aad99bfa3dd10cf975f7c06f89 663061e811010828ed222146cbb81114a49ba635f6c6547f3601ae0c3de1409d HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "663061E811010828ED222146CBB81114A49BA635F6C6547F3601AE0C3DE1409D" Last-Modified: Tue, 08 Oct 2024 04:16:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6173 Expires: Wed, 09 Oct 2024 19:01:54 GMT Date: Wed, 09 Oct 2024 17:19:01 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.36.76.249		504 B
URL r11.o.lencr.org/ IP 23.36.76.249:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash aa746f2452828a39148ef2ed129c14f6 aab2904047696ac367e2bfc0ffb1ba44c9c84256 5c76fd0fb994332de5317dc7d533ae3edb60d9f0ce253f839e609d83a3bf0fa7 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5C76FD0FB994332DE5317DC7D533AE3EDB60D9F0CE253F839E609D83A3BF0FA7" Last-Modified: Tue, 08 Oct 2024 04:17:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4905 Expires: Wed, 09 Oct 2024 18:40:48 GMT Date: Wed, 09 Oct 2024 17:19:03 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.36.76.249		504 B
URL r11.o.lencr.org/ IP 23.36.76.249:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash aa746f2452828a39148ef2ed129c14f6 aab2904047696ac367e2bfc0ffb1ba44c9c84256 5c76fd0fb994332de5317dc7d533ae3edb60d9f0ce253f839e609d83a3bf0fa7 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5C76FD0FB994332DE5317DC7D533AE3EDB60D9F0CE253F839E609D83A3BF0FA7" Last-Modified: Tue, 08 Oct 2024 04:17:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4905 Expires: Wed, 09 Oct 2024 18:40:48 GMT Date: Wed, 09 Oct 2024 17:19:03 GMT Connection: keep-alive`

	go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4VhIGwOBUAWa7XytTIXeNrnZcrcD8HXtAER9DTkyTvRQyLcBsLZ6ix	104.17.73.206	200 OK	7.6 kB
URL User Request GET HTTP/2 go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4VhIGwOBUAWa7XytTIXeNrnZcrcD8HXtAER9DTkyTvRQyLcBsLZ6ix IP 104.17.73.206:443 ASN #13335 CLOUDFLARENET Certificate IssuerCOMODO CA Limited Subjectgo.ups.com FingerprintD7:61:25:C6:D7:26:56:CF:1E:B1:10:1E:93:1D:9A:F9:8E:CB:E7:15 ValidityFri, 31 May 2024 00:00:00 GMT - Sat, 31 May 2025 23:59:59 GMT File type gzip compressed data, from Unix Size 7.6 kB (7616 bytes) Hash f3e1cbf851ad1db3535300dcfb696c2d 6903060dbb4071fcdbdea191f92f478339076145 ec91ea2afe8fb329b5da8cae4815c6b7a708cd9770c33df487dfc1ea484ff3ab HTTP Headers GET /OTM1LUtLRS0yNDAAAAGWEJmy4VhIGwOBUAWa7XytTIXeNrnZcrcD8HXtAER9DTkyTvRQyLcBsLZ6ix HTTP/1.1 Host: go.ups.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Cookie: HASSEENNOTICE=TRUE; CONSENTMGR=c1:0%7Cc3:0%7Cc5:0%7Cc6:0%7Cc7:0%7Cc8:0 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Wed, 09 Oct 2024 17:19:01 GMT content-type: text/html;charset=UTF-8 x-request-id: 8f63c28bfa0de55b cache-control: private, no-cache, no-store, max-age=0 referrer-policy: strict-origin x-frame-options: SAMEORIGIN x-content-type-options: nosniff content-security-policy: default-src 'self'; img-src 'self';script-src 'self' 'sha256-J+Y4l+yfxXd4cYzH9LhXUSHSb7zZu2bgddfCumVZJMo=';object-src 'none';form-action 'none';frame-src 'none';style-src 'self' 'sha256-OU0LTytxyR8kjQ+DRjRCDKhUAKEeH7rb0D5nBWOzRlQ=' cf-cache-status: DYNAMIC set-cookie: __cf_bm=IgE.nsRxMhF5WJ_u2VZdGoPlGlyHDBpI2m8rAqWeyVw-1728494341-1.0.1.1-WLB5hJP3A8BlAx0bvFW2Cz0D8XvzeNGnuODtr7EBK9yZQPH3cOh.Q.5w.07KhlsPpmRyTUdbvb0ISnIpE2l9Dw; path=/; expires=Wed, 09-Oct-24 17:49:01 GMT; domain=.go.ups.com; HttpOnly; Secure; SameSite=None server: cloudflare cf-ray: 8d000880d9c0712b-OSL content-encoding: gzip X-Firefox-Spdy: h2

	go.ups.com/favicon.ico	104.17.73.206	200 OK	0 B
URL GET HTTP/2 go.ups.com/favicon.ico IP 104.17.73.206:443 ASN #13335 CLOUDFLARENET Requested by https://go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4VhIGwOBUAWa7XytTIXeNrnZcrcD8HXtAER9DTkyTvRQyLcBsLZ6ix Certificate IssuerCOMODO CA Limited Subjectgo.ups.com FingerprintD7:61:25:C6:D7:26:56:CF:1E:B1:10:1E:93:1D:9A:F9:8E:CB:E7:15 ValidityFri, 31 May 2024 00:00:00 GMT - Sat, 31 May 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /favicon.ico HTTP/1.1 Host: go.ups.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://go.ups.com/ DNT: 1 Connection: keep-alive Cookie: HASSEENNOTICE=TRUE; CONSENTMGR=c1:0%7Cc3:0%7Cc5:0%7Cc6:0%7Cc7:0%7Cc8:0; __cf_bm=IgE.nsRxMhF5WJ_u2VZdGoPlGlyHDBpI2m8rAqWeyVw-1728494341-1.0.1.1-WLB5hJP3A8BlAx0bvFW2Cz0D8XvzeNGnuODtr7EBK9yZQPH3cOh.Q.5w.07KhlsPpmRyTUdbvb0ISnIpE2l9Dw Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK date: Wed, 09 Oct 2024 17:19:01 GMT x-request-id: bfa0a7332186c259 last-modified: Wed, 09 Oct 2024 17:17:26 GMT cf-cache-status: HIT age: 95 expires: Wed, 09 Oct 2024 21:19:01 GMT cache-control: public, max-age=14400 vary: Accept-Encoding server: cloudflare cf-ray: 8d0008844f11712b-OSL X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (8)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size