Report - ymlp.com/ugyjqqqwgsgmuummygeusgguwysb

Report Overview

Visited public
2023-12-01 17:42:00
Tags
Submit Tags
URL
ymlp.com/ugyjqqqwgsgmuummygeusgguwysb
Finishing URL
ymlp.com/ugyjqqqwgsgmuummygeusgguwysb
IP / ASN
188.215.230.2
#201168 YMLP BVBA
Title
ymlp.com/ugyjqqqwgsgmuummygeusgguwysb

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ymlp.com	243976	2002-04-20	2012-05-26 04:12:45	2023-11-28 01:59:40	975 B	2.8 kB	188.215.230.2

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-01 17:41:52	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	GET ymlp.com/assets/favicon.ico	188.215.230.2	200 OK	1.2 kB
URL GET HTTP/2 ymlp.com/assets/favicon.ico IP 188.215.230.2:443 ASN #201168 YMLP BVBA Requested by https://ymlp.com/ugyjqqqwgsgmuummygeusgguwysb Certificate IssuerGlobalSign nv-sa Subject.ymlp.com Fingerprint86:B4:6E:26:06:E5:48:85:76:54:C6:23:1F:19:31:3A:60:89:D3:4B ValidityFri, 15 Sep 2023 13:08:05 GMT - Wed, 16 Oct 2024 13:08:04 GMT File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data Size 1.2 kB (1150 bytes) Hash ffd533b2570ad1f46d9cb718d677cfe5 b9beb0399a1fd8472095fc94f68b83bd4e699c71 bfa62ae6e50d89a0353c15de5956749bf5fc8d51a4e92ea1fd1049d56bbccafd HTTP Headers `GET /assets/favicon.ico HTTP/1.1 Host: ymlp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://ymlp.com/ugyjqqqwgsgmuummygeusgguwysb Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 17:41:43 GMT content-type: image/x-icon content-length: 1150 etag: "54792f36-47e" expires: Sat, 30 Nov 2024 17:41:43 GMT pragma: public cache-control: max-age=31536000, public accept-ranges: bytes X-Firefox-Spdy: h2`

	GET ymlp.com/ugyjqqqwgsgmuummygeusgguwysb	188.215.230.2	200 OK	1.2 kB
URL User Request GET HTTP/2 ymlp.com/ugyjqqqwgsgmuummygeusgguwysb IP 188.215.230.2:443 ASN #201168 YMLP BVBA Certificate IssuerGlobalSign nv-sa Subject.ymlp.com Fingerprint86:B4:6E:26:06:E5:48:85:76:54:C6:23:1F:19:31:3A:60:89:D3:4B ValidityFri, 15 Sep 2023 13:08:05 GMT - Wed, 16 Oct 2024 13:08:04 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1278), with no line terminators Size 1.2 kB (1172 bytes) Hash 566a9dd385ffc80856347b10de748583 c7dd44d1ad823ce40b70d6e513f755cc5bec5f7c 1292c9c9bd8749aac1d8384682b33b54ddc4c348a9456b0539ba1488dfd915b6 HTTP Headers `GET /ugyjqqqwgsgmuummygeusgguwysb HTTP/1.1 Host: ymlp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Fri, 01 Dec 2023 17:41:42 GMT content-type: text/html vary: Accept-Encoding strict-transport-security: max-age=63072000; includeSubdomains; content-encoding: gzip X-Firefox-Spdy: h2`