Report - plitka-tut.ru/admin/view/template/module/UPS/

Report Overview

Submitted URL
plitka-tut.ru/admin/view/template/module/UPS/
IP
62.109.24.207
ASN
#29182 JSC IOT
Submitted
2024-04-27 04:40:17
Access
public
Website Title
UPS
Final URL
plitka-tut.ru/admin/view/template/module/UPS/
Tags
ups logistics phishing suspicious
urlquery detections
Phishing - UPS
Suspicious - Suspicious Javascript code

Detections

urlquery
51
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
plitka-tut.ru	unknown	2007-10-29	2016-07-20	2024-02-15	20 kB	2.9 MB	62.109.24.207
api.ipify.org	3267	2014-01-05	2014-10-06	2024-04-26	898 B	562 B	172.67.74.152

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	plitka-tut.ru/admin/view/template/module/UPS/	UPS
2024-04-07	medium	plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html	UPS

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	plitka-tut.ru/admin/view/template/module/UPS/files/scripts.js	10 kB	2023-11-28	2024-04-27
Pretty URL plitka-tut.ru/admin/view/template/module/UPS/files/scripts.js IP 62.109.24.207 ASN #29182 JSC IOT Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-28 14:19:27 Last Seen2024-04-27 06:40:18 Times Seen10 Hash d1946cd026b21963f6d169b7fb1f8b26 b75c9e16d6efc9e5544806ab9cca217f86469966 c0f4bcecb972001d54abbb5b3127e7220d7637ab5cdc7568e0cc230da75bb969 Loading...

	plitka-tut.ru/admin/view/template/module/UPS/files/jquery-3.6.0.min.js	90 kB	2023-03-08	2024-04-27
Pretty URL plitka-tut.ru/admin/view/template/module/UPS/files/jquery-3.6.0.min.js IP 62.109.24.207 ASN #29182 JSC IOT Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 21:54:14 Last Seen2024-04-27 06:40:18 Times Seen105 Hash 7456a90fd80ca99122c33bf61a3e7edf 601b14d1a5ceb49b3a06214f51cec39856aa5a13 f7f8cadd5617e031bab4251526f44db2fd1b3e444ec2cfae4381d2ff2ea0e216 Loading...

	plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html	885 B	2023-03-08	2024-04-27
Pretty URL plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html IP 62.109.24.207 ASN #29182 JSC IOT Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 21:54:14 Last Seen2024-04-27 06:40:18 Times Seen40 Hash 9d36e8e2579b9e82f6f8c9071bd47dcb 8afeea2a7c7955cadd61ebdd31bf23163ee325ac 071c45b59ba4364219dd0b63202a3e2cf0280d8de6692162446a1f79b543ea34 Loading...

	api.ipify.org/?format=jsonp&callback=getIP	29 B	2023-03-07	2024-05-07
Pretty URL api.ipify.org/?format=jsonp&callback=getIP IP 172.67.74.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:16:09 Last Seen2024-05-07 20:19:52 Times Seen16676 Hash 90a39389063c7c5716745c3b3bb4fba1 a0903c9a7e90fa3c6ddb04d0ce36abbd4c7a004f eaa6745d9d0a7698235cd6af53aad1551d975506c8405d8303282fb6d2f7ab69 Loading...

	plitka-tut.ru/admin/view/template/module/UPS/	661 B	2023-03-08	2024-04-27
Pretty URL plitka-tut.ru/admin/view/template/module/UPS/ IP 62.109.24.207 ASN #29182 JSC IOT Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 21:54:14 Last Seen2024-04-27 06:40:18 Times Seen39 Hash 6c1efef5f77669c01995e1e31da57529 d1858a3e8eaa8799144bb03c792b20fd0033416b 4a39ae397cc272724f88b44ccb6c19884987f15f97d47e63858f8f738167bb68 Loading...

HTTP Transactions (42)

URL IP Response Size

plitka-tut.ru/admin/view/template/module/UPS/files/ajax-loader-transparent.gif

62.109.24.207

200 OK

16 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/ajax-loader-transparent.gif
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
GIF image data, version 89a, 400 x 400
Size
16 kB (15964 bytes)
Hash
a5e95a276e626945d507f3cdb7d26e23
0d1bb6051723f64ceafb68a957c9fff8e2580572
57caab7f7bde8031786ec6f0427be22d746c7f145a65a6648349fade0c319ad9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/ajax-loader-transparent.gif HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: image/gif
content-length: 15964
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: "623b9482-3e5c"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/inf_cc_30x23_mcard.gif

62.109.24.207

200 OK

259 B

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/inf_cc_30x23_mcard.gif
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
GIF image data, version 89a, 30 x 23
Size
259 B (259 bytes)
Hash
6cbf1ce620ae87bd6b34b5ea56397fc9
96204a84a03033bed6ff7ae6f397242c2026ba3c
aec21bbecff210f8193fe5e717fae0c55b291a2b338a1ca641586b011aceb48e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/inf_cc_30x23_mcard.gif HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: image/gif
content-length: 259
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: "623b9482-103"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/

62.109.24.207

200 OK

22 kB

URL User Request GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
gzip compressed data, from Unix
Size
22 kB (22176 bytes)
Hash
b62d20942a2f8d01e0a143381a7877d5
3ed11d1bc91cdaec71a98737198403d1d994f2b8
9eb4018494f8fe3e3f9385c86c9401162a9c0dd42ab5938e6bb47617be97a641

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	UPS

HTTP Headers

GET /admin/view/template/module/UPS/ HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:50 GMT
content-type: text/html
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/inf_cc_30x23_discover.gif

62.109.24.207

200 OK

240 B

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/inf_cc_30x23_discover.gif
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
GIF image data, version 89a, 30 x 23
Size
240 B (240 bytes)
Hash
ea22ae05cced2a8f8a187a5c9ec2a1ed
abf00b7b6c464f91da2d9ee576da53917826a2b3
7cf99d94ecb8ecad9431f07ed8d256677d94a2f89bb1a5126d635a71cec54d86

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/inf_cc_30x23_discover.gif HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: image/gif
content-length: 240
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: "623b9482-f0"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/creditcard_maestro.png

62.109.24.207

200 OK

790 B

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/creditcard_maestro.png
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
PNG image data, 37 x 23, 8-bit colormap, non-interlaced
Size
790 B (790 bytes)
Hash
42c8b260c1a10ac3d2f9042eeeb418fc
6d983a9a226a3154d562a251846faac51e823aee
dda6cdb55353c5ae6a55bb0358b50c59bbb1776a761280cfb83e630fe663bbb8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/creditcard_maestro.png HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: image/png
content-length: 790
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: "623b9482-316"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/creditcard_visa_electron.png

62.109.24.207

200 OK

515 B

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/creditcard_visa_electron.png
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
PNG image data, 37 x 23, 8-bit colormap, non-interlaced
Size
515 B (515 bytes)
Hash
a96d3f6706b12ea362d41029d9bdf2fd
af11f3bf48899601879961dd1a94812edb2f7ce0
31524ae16732c68f962c1bfaa15290b0f6baf480071d0939ad6e93246c78b243

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/creditcard_visa_electron.png HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: image/png
content-length: 515
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: "623b9482-203"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/creditcard_vpay.webp

62.109.24.207

200 OK

266 B

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/creditcard_vpay.webp
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 21x23, Scaling: [none]x[none], YUV color, decoders should clamp
Size
266 B (266 bytes)
Hash
8f7f8b3f07129ddc05f9296244dbf2ec
dff0dda69823b725b8f640632dd92e8ddafb5ba6
0cfe169c45fa30109ca3c56d7e2f07f8f87a8551e6f43400b6d2060b6e8ddf7c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/creditcard_vpay.webp HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-length: 266
accept-ranges: bytes
strict-transport-security: max-age=31536000;
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/inf_cc_30x23_visa.webp

62.109.24.207

200 OK

228 B

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/inf_cc_30x23_visa.webp
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 30x23, Scaling: [none]x[none], YUV color, decoders should clamp
Size
228 B (228 bytes)
Hash
abb388e81fe1fcb699bc1cfa06253138
fc3a9b68e3280b529c757a76960dc2569a54f3f3
a37b01d1d9442089bbfd4b84fddba9576ec75e9ce9e70b0f0975491bd9c0a909

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/inf_cc_30x23_visa.webp HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-length: 228
accept-ranges: bytes
strict-transport-security: max-age=31536000;
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/creditcard_carte_bleue.webp

62.109.24.207

200 OK

368 B

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/creditcard_carte_bleue.webp
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 30x23, Scaling: [none]x[none], YUV color, decoders should clamp
Size
368 B (368 bytes)
Hash
8dfec32f6f57f01b1e7ec5f3280cf40b
c5ffaaa629cd20adb8d6202ea6485728c987fccf
e02ae9cb71a94d7272c3bbe5a64609030caf48a05e9b4fa2c9f5b215e316369c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/creditcard_carte_bleue.webp HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-length: 368
accept-ranges: bytes
strict-transport-security: max-age=31536000;
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/styles.css

62.109.24.207

200 OK

105 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/styles.css
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
gzip compressed data, from Unix
Size
105 kB (104997 bytes)
Hash
15168cbe844012d7ed9c63522a6aee4f
abfb8487a29a429334fe6f7b54ced7289225e925
68500410eae6af88d9306784dd10eb51859eee1d154b8a1dbae752e126aaa8d5

HTTP Headers

GET /admin/view/template/module/UPS/files/styles.css HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/css
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-3c03a"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/us.png

62.109.24.207

200 OK

30 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/us.png
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/loading.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
PNG image data, 1280 x 674, 8-bit/color RGB, non-interlaced
Size
30 kB (29808 bytes)
Hash
b08cce473caa95d0fe0df12369e9aa68
48f5104f9ac74cdcc275e3ad6b2c3bbdab0a6aae
f768deaef22da979abcfb73c9175b54d71fcf891666c5449c1969c07c3cc8920

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/us.png HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/loading.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: image/png
content-length: 29808
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: "623b9482-7470"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/vs.png

62.109.24.207

200 OK

29 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/vs.png
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
PNG image data, 273 x 70, 8-bit/color RGBA, non-interlaced
Size
29 kB (29332 bytes)
Hash
80f715fdaa4e5dd1c955a8a53b03742f
e52b9a0d25efc46f78a35793d506a067c414041f
b425793090e593a9cc910812a1e8a3022b45f6ef47baa4e718da54b5cbb03722

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/vs.png HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: image/png
content-length: 29332
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: "623b9482-7294"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/ajax-loader-transparent.gif

62.109.24.207

200 OK

16 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/ajax-loader-transparent.gif
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
GIF image data, version 89a, 400 x 400
Size
16 kB (15964 bytes)
Hash
a5e95a276e626945d507f3cdb7d26e23
0d1bb6051723f64ceafb68a957c9fff8e2580572
57caab7f7bde8031786ec6f0427be22d746c7f145a65a6648349fade0c319ad9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/ajax-loader-transparent.gif HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: image/gif
content-length: 15964
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: "623b9482-3e5c"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2

api.ipify.org/?format=jsonp&callback=getIP

172.67.74.152

200 OK

29 B

URL GET HTTP/2
api.ipify.org/?format=jsonp&callback=getIP
IP
172.67.74.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Certificate
IssuerGoogle Trust Services LLC
Subjectipify.org
FingerprintC8:1A:05:47:C5:73:C6:CE:DF:1D:A6:DE:00:11:A9:9A:8C:DB:EF:A7
ValidityThu, 21 Mar 2024 19:56:02 GMT - Wed, 19 Jun 2024 19:56:01 GMT

File type
ASCII text, with no line terminators
Size
29 B (29 bytes)
Hash
90a39389063c7c5716745c3b3bb4fba1
a0903c9a7e90fa3c6ddb04d0ce36abbd4c7a004f
eaa6745d9d0a7698235cd6af53aad1551d975506c8405d8303282fb6d2f7ab69

HTTP Headers

GET /?format=jsonp&callback=getIP HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plitka-tut.ru
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: application/javascript
content-length: 29
access-control-allow-origin: *
vary: Origin
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ac2192c91c569c-OSL
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/libs.bundle.d4af436688895680.css

62.109.24.207

200 OK

30 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/libs.bundle.d4af436688895680.css
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/loading.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
gzip compressed data, from Unix
Size
30 kB (30169 bytes)
Hash
eac3300b8ffbd5292ac5b150687383c2
687f8fcd1bd857caf80594d780854125bf17a621
f7941488b436037367e9cab03ce3efc52dd412bf4b1310644d0d2b753dda0c28

HTTP Headers

GET /admin/view/template/module/UPS/files/libs.bundle.d4af436688895680.css HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/loading.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/css
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-2a825"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

api.ipify.org/?format=jsonp&callback=getIP

172.67.74.152

200 OK

29 B

URL GET HTTP/2
api.ipify.org/?format=jsonp&callback=getIP
IP
172.67.74.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Certificate
IssuerGoogle Trust Services LLC
Subjectipify.org
FingerprintC8:1A:05:47:C5:73:C6:CE:DF:1D:A6:DE:00:11:A9:9A:8C:DB:EF:A7
ValidityThu, 21 Mar 2024 19:56:02 GMT - Wed, 19 Jun 2024 19:56:01 GMT

File type
ASCII text, with no line terminators
Size
29 B (29 bytes)
Hash
90a39389063c7c5716745c3b3bb4fba1
a0903c9a7e90fa3c6ddb04d0ce36abbd4c7a004f
eaa6745d9d0a7698235cd6af53aad1551d975506c8405d8303282fb6d2f7ab69

HTTP Headers

GET /?format=jsonp&callback=getIP HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plitka-tut.ru
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: application/javascript
content-length: 29
access-control-allow-origin: *
vary: Origin
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ac2193e995569c-OSL
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/jquery-3.6.0.min.js

62.109.24.207

200 OK

32 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/jquery-3.6.0.min.js
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
gzip compressed data, from Unix
Size
32 kB (31801 bytes)
Hash
e38c1968873e012e0193469153eaea88
9c484a2e5f0dd506d6fb8c32675edc35a271dbd9
b6795e7a2577a7c0e634f2b6e5d2e8d4af3638987fee3dd2fe6bdce013705cd7

HTTP Headers

GET /admin/view/template/module/UPS/files/jquery-3.6.0.min.js HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: application/javascript
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-15d9f"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/vendor.css

62.109.24.207

200 OK

55 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/vendor.css
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
gzip compressed data, from Unix
Size
55 kB (55076 bytes)
Hash
82500e5e47349d40ced56c74efeeba7c
a00c83955d500fdda3bc6d690dcd92b322d42ed6
d741a1ff9a0c78a1b5600670cff74d39243ad1d78011b3267d92c7c95d48048b

HTTP Headers

GET /admin/view/template/module/UPS/files/vendor.css HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/css
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-249d5"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/vendor.css

62.109.24.207

200 OK

25 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/vendor.css
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
gzip compressed data, from Unix
Size
25 kB (24924 bytes)
Hash
dbd8a65c8bbeaf7a687f7fc69ddcab2a
ca83750a7279e5f4ab71dbbf1c362acc67b73b65
85ed462f33849211d2ab19619856a3e4c7d2cdc1c30f653fa61faebff7b828f9

HTTP Headers

GET /admin/view/template/module/UPS/files/vendor.css HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/css
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-249d5"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/loading.html

62.109.24.207

200 OK

88 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/loading.html
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
gzip compressed data, from Unix
Size
88 kB (88260 bytes)
Hash
2159d96f2426d388dfbdcaefcff4621c
28eccc290f274b03b4be1ef91a7485c2f8db8d60
99e1549b86c3773795cb45f860e6066ba130bfd464704f7a82fb1042193e096b

HTTP Headers

GET /admin/view/template/module/UPS/files/loading.html HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/html
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/ups.css

62.109.24.207

200 OK

9.8 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/ups.css
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
gzip compressed data, from Unix
Size
9.8 kB (9767 bytes)
Hash
6fbfb184559b956ddaa4a0af3790424b
9824196ecd0130e0e510fd709d9fb6061c3059f9
2735e247d106c333cca58669f5767a24126442d76ac9d47b5fecc2b251592352

HTTP Headers

GET /admin/view/template/module/UPS/files/ups.css HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/css
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-3237"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/app.bundle.bf30b6e8faa99cf9.css

62.109.24.207

200 OK

8.2 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/app.bundle.bf30b6e8faa99cf9.css
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/loading.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
ASCII text, with very long lines (8719), with no line terminators
Size
8.2 kB (8203 bytes)
Hash
3b1fc1f3e18de9f09c6a2a4e4d16ee47
1df92a4d605bf26a75020e66d9ae899133847fdb
181d307e4bf9ce10c7e9ce7dcb31240a1853b0f390bccf2516ee15bd60dd2aec

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/app.bundle.bf30b6e8faa99cf9.css HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/loading.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/css
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-200b"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/apps-nbs.css

62.109.24.207

200 OK

127 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/apps-nbs.css
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
ASCII text
Size
127 kB (127272 bytes)
Hash
46ce27b4196903003b6863d045dd9763
523d28bad7759ae34b2b10a3287d85cc837703fd
f328aebd8b9511d745f74f82db1558b9fb255e2f67fd86ea4bede50e4bb92665

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/apps-nbs.css HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/css
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-1f128"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/apps-nbs.css

62.109.24.207

200 OK

127 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/apps-nbs.css
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
ASCII text
Size
127 kB (127272 bytes)
Hash
46ce27b4196903003b6863d045dd9763
523d28bad7759ae34b2b10a3287d85cc837703fd
f328aebd8b9511d745f74f82db1558b9fb255e2f67fd86ea4bede50e4bb92665

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/apps-nbs.css HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/css
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-1f128"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/widgets.css

62.109.24.207

200 OK

79 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/widgets.css
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
ASCII text, with CRLF, LF line terminators
Size
79 kB (78871 bytes)
Hash
881e5b94c61226e7d478663fe61bb0b9
d265e1647b103609cdc4b723bc052eceab30b978
cd3eb1b3e12351ded3b1267c006af9f5a7aafb5c1b398e4054c7fd0dcabc97a6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/widgets.css HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/css
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-13417"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/scripts.js

62.109.24.207

200 OK

10 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/scripts.js
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (10798), with no line terminators
Size
10 kB (9977 bytes)
Hash
a29b4bc46cf25d8f850b2907b173d69b
1f61cdd32ddbcbb73393920b6b2095dfbbc1ab20
60e85ee3fdfa5b5a4528677b6634e9ff7845b237339b6548a1dba9de60d55ddf

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Suspicious Javascript code

HTTP Headers

GET /admin/view/template/module/UPS/files/scripts.js HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 21:16:24 GMT
etag: W/"65650728-26f9"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/UPS_logo.svg

62.109.24.207

200 OK

2.2 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/UPS_logo.svg
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
SVG Scalable Vector Graphics image
Size
2.2 kB (2162 bytes)
Hash
e43c29ad2012783279041e61187d863c
0ffa517d89c44b499797b048eff09ae25bc441c4
e83a7880dd4e2d8b561100522bc24566525187aa3aac599d81d82bab0bca3a94

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/UPS_logo.svg HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: image/svg+xml
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-872"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/modules.css

62.109.24.207

200 OK

813 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/modules.css
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type

Size
813 kB (813126 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /admin/view/template/module/UPS/files/modules.css HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/css
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-c6846"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/all.css

62.109.24.207

200 OK

156 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/all.css
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/loading.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
ASCII text, with very long lines (65393)
Size
156 kB (156228 bytes)
Hash
aa1272633e7e552395d147a499bad186
ddbccb0011dd4868a013b1dcbdb836b7213eb41d
2af905d92cfd34b5413126a54f639da408166cbbcb54318e413ad5e10b5bf6ec

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/all.css HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/loading.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/css
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-26244"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/UPS_logo.svg

62.109.24.207

200 OK

2.2 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/UPS_logo.svg
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
SVG Scalable Vector Graphics image
Size
2.2 kB (2162 bytes)
Hash
e43c29ad2012783279041e61187d863c
0ffa517d89c44b499797b048eff09ae25bc441c4
e83a7880dd4e2d8b561100522bc24566525187aa3aac599d81d82bab0bca3a94

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/UPS_logo.svg HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: image/svg+xml
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-872"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/fr.png

62.109.24.207

200 OK

2.9 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/fr.png
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/loading.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
PNG image data, 2000 x 1333, 4-bit colormap, non-interlaced
Size
2.9 kB (2934 bytes)
Hash
98ed847d113e4f1899819db4904e9a3b
0ca19a14145be05f236975217bab2305992d08f5
b719b7ece7b67f60700420e577fa4a14324827325c5023b80714e169d2e5c06d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/fr.png HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/loading.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: image/png
content-length: 2934
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: "623b9482-b76"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/scripts.js

62.109.24.207

200 OK

10 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/scripts.js
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (10798), with no line terminators
Size
10 kB (9977 bytes)
Hash
a29b4bc46cf25d8f850b2907b173d69b
1f61cdd32ddbcbb73393920b6b2095dfbbc1ab20
60e85ee3fdfa5b5a4528677b6634e9ff7845b237339b6548a1dba9de60d55ddf

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Suspicious Javascript code

HTTP Headers

GET /admin/view/template/module/UPS/files/scripts.js HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 21:16:24 GMT
etag: W/"65650728-26f9"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/inf_cc_30x23_amex.gif

62.109.24.207

200 OK

172 B

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/inf_cc_30x23_amex.gif
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
GIF image data, version 89a, 30 x 23
Size
172 B (172 bytes)
Hash
7e9e0cc81077d6473438d1529d2e5f2b
d77572732aed3b4c3d7667f60b3114bb3440cf02
b318dc68fc47a5fdd6aea11d94b0c45b5539357631354b150abf8afd9a2a7412

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/inf_cc_30x23_amex.gif HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: image/gif
content-length: 172
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: "623b9482-ac"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/fonts/Roboto-Medium.woff

62.109.24.207

404 Not Found

153 B

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/fonts/Roboto-Medium.woff
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
HTML document, ASCII text, with no line terminators
Size
153 B (153 bytes)
Hash
8da645239d94c3cb83c17629f652dd95
a4102d313dfaef4d919abc0a353f8a48c664ee01
a479b7847130ad7cfeab9ddbf70e7afdef9ed36c89b28e00afbb019a51999d6e

HTTP Headers

GET /admin/view/template/module/UPS/files/fonts/Roboto-Medium.woff HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/styles.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/html
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/fonts/Roboto-Regular.woff

62.109.24.207

404 Not Found

153 B

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/fonts/Roboto-Regular.woff
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
HTML document, ASCII text, with no line terminators
Size
153 B (153 bytes)
Hash
8da645239d94c3cb83c17629f652dd95
a4102d313dfaef4d919abc0a353f8a48c664ee01
a479b7847130ad7cfeab9ddbf70e7afdef9ed36c89b28e00afbb019a51999d6e

HTTP Headers

GET /admin/view/template/module/UPS/files/fonts/Roboto-Regular.woff HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/styles.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/html
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/fonts/Roboto-Medium.woff2

62.109.24.207

404 Not Found

79 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/fonts/Roboto-Medium.woff2
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type

Size
79 kB (79441 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /admin/view/template/module/UPS/files/fonts/Roboto-Medium.woff2 HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/styles.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/html; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=18b1b9a6387033fb284148da260b160b; path=/; HttpOnly
default=d9d734889a21a8a817ea648f206c75c9; path=/; HttpOnly
language=ru-ru; expires=Mon, 27-May-2024 04:39:51 GMT; Max-Age=2592000; path=/; domain=plitka-tut.ru
currency=RUB; expires=Mon, 27-May-2024 04:39:51 GMT; Max-Age=2592000; path=/; domain=plitka-tut.ru
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/widgets.css

62.109.24.207

200 OK

79 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/widgets.css
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
ASCII text, with CRLF, LF line terminators
Size
79 kB (78871 bytes)
Hash
881e5b94c61226e7d478663fe61bb0b9
d265e1647b103609cdc4b723bc052eceab30b978
cd3eb1b3e12351ded3b1267c006af9f5a7aafb5c1b398e4054c7fd0dcabc97a6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/widgets.css HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/css
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-13417"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html

62.109.24.207

200 OK

14 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/vbv.html
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type

Size
14 kB (13869 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/vbv.html HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/html
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/modules.css

62.109.24.207

200 OK

813 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/modules.css
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type

Size
813 kB (813126 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /admin/view/template/module/UPS/files/modules.css HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/css
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-c6846"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/onelink.css

62.109.24.207

200 OK

1.9 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/onelink.css
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
ASCII text, with very long lines (1958), with no line terminators
Size
1.9 kB (1898 bytes)
Hash
ebd856da60a56f6a9d9cc907c0bea7d8
a32f0c73d2c16c1a0fbc53ba915f75df18ba3033
40f4729855e50fa4368316decd856f005c7eb77b0be16310014bed86c77b68b3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/files/onelink.css HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/css
last-modified: Wed, 23 Mar 2022 21:43:30 GMT
etag: W/"623b9482-76a"
expires: Thu, 24 Oct 2024 04:39:51 GMT
cache-control: max-age=15552000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/files/fonts/Roboto-Regular.woff2

62.109.24.207

404 Not Found

79 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/files/fonts/Roboto-Regular.woff2
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type

Size
79 kB (79442 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /admin/view/template/module/UPS/files/fonts/Roboto-Regular.woff2 HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/files/styles.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: text/html; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=45b99151388613b049899bb8c4d7d4da; path=/; HttpOnly
default=92e9f81383c24bfe96eb7a458fbb23a0; path=/; HttpOnly
language=ru-ru; expires=Mon, 27-May-2024 04:39:51 GMT; Max-Age=2592000; path=/; domain=plitka-tut.ru
currency=RUB; expires=Mon, 27-May-2024 04:39:51 GMT; Max-Age=2592000; path=/; domain=plitka-tut.ru
X-Firefox-Spdy: h2

plitka-tut.ru/admin/view/template/module/UPS/favicon.ico

62.109.24.207

200 OK

2.2 kB

URL GET HTTP/2
plitka-tut.ru/admin/view/template/module/UPS/favicon.ico
IP
62.109.24.207:443
ASN
#29182 JSC IOT

Requested by
https://plitka-tut.ru/admin/view/template/module/UPS/
Certificate
IssuerLet's Encrypt
Subjectplitka-tut.ru
Fingerprint3D:92:A6:49:11:DA:58:CA:0C:A1:67:A2:F1:6B:89:E1:C5:D6:EA:AB
ValiditySat, 30 Mar 2024 23:06:18 GMT - Fri, 28 Jun 2024 23:06:17 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
Size
2.2 kB (2238 bytes)
Hash
afd13e52f285793f5eaa266c12a19abe
4b71098176443981be65286ec864b12ebc233f81
9ca2236bb4ec1714e173cecb6bcc95c82e12df204c7d4c87fe4b9f01135efce8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - UPS

HTTP Headers

GET /admin/view/template/module/UPS/favicon.ico HTTP/1.1
Host: plitka-tut.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plitka-tut.ru/admin/view/template/module/UPS/
Cookie: PHPSESSID=45b99151388613b049899bb8c4d7d4da; default=92e9f81383c24bfe96eb7a458fbb23a0; language=ru-ru; currency=RUB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 27 Apr 2024 04:39:51 GMT
content-type: image/vnd.microsoft.icon
content-length: 2238
accept-ranges: bytes
cache-control: max-age=31622400, public
strict-transport-security: max-age=31536000;
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (42)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash