Report - pub-f3a335c3131047a7a157d355c61847fa.r2.dev/newmicrosoftupdate.html

Report Overview

Visitedpublic

2025-04-08 10:52:41

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
securingabetterway.reviewporter.com	unknown	unknown	2025-03-31	2025-03-31	588 B	0 B	0.0.0.0
pub-f3a335c3131047a7a157d355c61847fa.r2.dev	unknown	2022-08-23	2025-03-31	2025-03-31	1.0 kB	39 kB	162.159.140.237

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-04-07	medium	pub-f3a335c3131047a7a157d355c61847fa.r2.dev/newmicrosoftupdate.html	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2024-05-14	medium	pub-f3a335c3131047a7a157d355c61847fa.r2.dev/newmicrosoftupdate.html	Other

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	pub-f3a335c3131047a7a157d355c61847fa.r2.dev/newmicrosoftupdate.html	ScriptElement	11 kB	2024-05-29	2025-04-08
URL pub-f3a335c3131047a7a157d355c61847fa.r2.dev/newmicrosoftupdate.html IP / ASN 162.159.140.237 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 2024-05-29 Last Seen 2025-04-08 Times Seen 13 Size 11 kB (11016 bytes) MD5 9f91f9af3f93417914b1f6a3a2469d6d SHA1 c536cc750340388e060a4646cdd6c2448d43943f SHA256 7d76d4ea8a8dbb3b2e476465a7e2835bddb9e38eb306210ff678219b070c1d5b Format Code Loading...

	pub-f3a335c3131047a7a157d355c61847fa.r2.dev/newmicrosoftupdate.html	Eval	21 B	2024-04-15	2025-04-08
URL pub-f3a335c3131047a7a157d355c61847fa.r2.dev/newmicrosoftupdate.html IP / ASN 162.159.140.237 #13335 CLOUDFLARENET Introduced by Eval Embedded false Resource Info First Seen 2024-04-15 Last Seen 2025-04-08 Times Seen 21 Size 21 B (21 bytes) MD5 bd84f55e0156ae168f09b506081f6a75 SHA1 1a8ae3cc06642ba02baae8fb8f87ef4ed4bb037b SHA256 4b888bfb65ed53f8dfcb04421c13533b294ba5f739aa3682eb4c0268c0ddf68e Format Code Loading...

HTTP Transactions (3)

URL IP Response Size

GET pub-f3a335c3131047a7a157d355c61847fa.r2.dev/newmicrosoftupdate.html

162.159.140.237

200 OK

11 kB

URL

pub-f3a335c3131047a7a157d355c61847fa.r2.dev/newmicrosoftupdate.html

IP / ASN

162.159.140.237

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with very long lines (7822)

First Seen2025-04-08

Last Seen2025-04-08

Times Seen1

Size11 kB (11193 bytes)

MD5a6b1fc38a379460164682625ecf3c519

SHA114a5e3d3aabe03194e20ee008e2e3ca21e37fbfe

SHA2564c2acc448cbae7da320f237682211d2179730a457d9daf21bb2a0103fa7f91ff

Certificate Info

IssuerLet's Encrypt

Subject*.r2.dev

FingerprintB5:A8:AD:86:09:9A:90:92:96:24:0C:B5:31:B4:70:40:B0:04:5C:F5

ValidityTue, 25 Mar 2025 11:48:11 GMT - Mon, 23 Jun 2025 11:48:10 GMT

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET /newmicrosoftupdate.html HTTP/1.1
Host: pub-f3a335c3131047a7a157d355c61847fa.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 08 Apr 2025 10:52:20 GMT
Content-Type: text/html
Content-Length: 11193
Connection: keep-alive
Accept-Ranges: bytes
ETag: "424e1793f670e84aeb61309ee2b14a45"
Last-Modified: Mon, 13 May 2024 11:10:51 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 92d136f5bf48569b-OSL

GET pub-f3a335c3131047a7a157d355c61847fa.r2.dev/favicon.ico

162.159.140.237

404 Not Found

27 kB

URL

pub-f3a335c3131047a7a157d355c61847fa.r2.dev/favicon.ico

IP / ASN

162.159.140.237

#13335 CLOUDFLARENET

Requested byhttps://pub-f3a335c3131047a7a157d355c61847fa.r2.dev/newmicrosoftupdate.html

Resource Info

File typeHTML document, ASCII text, with very long lines (611)

First Seen2024-07-03

Last Seen2025-08-02

Times Seen17800

Size27 kB (27150 bytes)

MD546dd133ee00dc1bae5e4eeba7b88432f

SHA18af86a4ac91ce48c062216fb94a6e1d57618a19b

SHA2569eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66

Certificate Info

IssuerLet's Encrypt

Subject*.r2.dev

FingerprintB5:A8:AD:86:09:9A:90:92:96:24:0C:B5:31:B4:70:40:B0:04:5C:F5

ValidityTue, 25 Mar 2025 11:48:11 GMT - Mon, 23 Jun 2025 11:48:10 GMT

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: pub-f3a335c3131047a7a157d355c61847fa.r2.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-f3a335c3131047a7a157d355c61847fa.r2.dev/newmicrosoftupdate.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Tue, 08 Apr 2025 10:52:21 GMT
Content-Type: text/html
Content-Length: 27150
Connection: keep-alive
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 92d136f81c15569b-OSL

OPTIONS securingabetterway.reviewporter.com/?tcyiehst

0.0.0.0

0 B

URL

securingabetterway.reviewporter.com/?tcyiehst

IP / ASN

0.0.0.0

Requested byhttps://pub-f3a335c3131047a7a157d355c61847fa.r2.dev/newmicrosoftupdate.html

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606145

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /?tcyiehst HTTP/1.1
Host: securingabetterway.reviewporter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: qrc-auth
Referer: https://pub-f3a335c3131047a7a157d355c61847fa.r2.dev/
Origin: https://pub-f3a335c3131047a7a157d355c61847fa.r2.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache