Report - fush.nl/21gh4

Report Overview

Submitted URL
fush.nl/21gh4
IP
195.211.74.112
ASN
#20847 Previder B.V.
Submitted
2024-05-08 14:18:42
Access
public
Website Title
Placeholder – Antagonist
Final URL
fush.nl/21gh4
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.antagonist.nl	613364	2004-06-22	2017-02-01	2024-02-09	1.7 kB	286 kB	195.211.75.97
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-07	441 B	50 kB	142.250.74.74
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-08	533 B	49 kB	216.58.207.227
fush.nl	unknown	unknown	No data	No data	383 B	40 kB	195.211.74.112

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	fush.nl/21gh4	2.3 kB	2023-03-09	2024-05-08
Pretty URL fush.nl/21gh4 IP 195.211.74.112 ASN #20847 Previder B.V. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-09 23:03:36 Last Seen2024-05-08 16:18:48 Times Seen4 Hash 5f40522f81e6c8b62d5520c8fab45332 4861876380f248ea8a8961c678842a8827912469 42cd3eeedffcabcfaa41677bc1f3c4e7d1fc25eaf9cae73a6f82b6d6cbc3df3e Loading...

	www.antagonist.nl/static/js/jquery/jquery-3.4.1.min.js	88 kB	2023-03-07	2024-05-18
Pretty URL www.antagonist.nl/static/js/jquery/jquery-3.4.1.min.js IP 195.211.75.97 ASN #20847 Previder B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:26:29 Last Seen2024-05-18 16:35:29 Times Seen424 Hash b4999cbb6a73a9b312f635cff75e5a53 c7b683fc72d06eac129185c3e60362f5c1adc2a8 736173659d4431b8a53a08aacc1bec3ad3a2f44df5209c09d76c265374698302 Loading...

HTTP Transactions (7)

	URL	IP	Response	Size
	fush.nl/21gh4	195.211.74.112	404 Not Found	39 kB
URL User Request GET HTTP/1.1 fush.nl/21gh4 IP 195.211.74.112:80 ASN #20847 Previder B.V. File type HTML document, ASCII text, with very long lines (4656) Size 39 kB (39438 bytes) Hash 9fefeb4492b7afe4f974c9459057e392 a917d2858b306a9e24f94863442a8992db8f1582 48b22c454fe3f72744fdf36763cd912ec3ca9c42d76cb167a9619ba3fdc1b740 HTTP Headers `GET /21gh4 HTTP/1.1 Host: fush.nl User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Server: nginx Date: Wed, 08 May 2024 14:18:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/7.2.24`

	www.antagonist.nl/static/images/logo-180.png	195.211.75.97	200 OK	39 kB
URL GET HTTP/2 www.antagonist.nl/static/images/logo-180.png IP 195.211.75.97:443 ASN #20847 Previder B.V. Requested by http://fush.nl/21gh4 Certificate IssuerSectigo Limited Subject.antagonist.nl Fingerprint05:E6:40:C2:77:F7:01:9F:21:40:C4:D0:CC:AD:0C:60:8F:C9:E6:90 ValidityThu, 07 Dec 2023 00:00:00 GMT - Mon, 06 Jan 2025 23:59:59 GMT File type PNG image data, 360 x 84, 8-bit/color RGBA, non-interlaced Size 39 kB (39412 bytes) Hash 93dc366b395e12822d4409bb2b7baa1f dbb218e580c5fa7714fd1f5db23a06d2cfb610eb 537ec9a70c00484a2c0e3823d1f5595ec09ad147d8da1b6f7dccdceb85c83f93 HTTP Headers `GET /static/images/logo-180.png HTTP/1.1 Host: www.antagonist.nl User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 May 2024 14:18:17 GMT content-type: image/png content-length: 39412 last-modified: Mon, 22 Apr 2024 09:00:50 GMT etag: "66262742-99f4" expires: Wed, 15 May 2024 14:18:17 GMT cache-control: max-age=604800 access-control-allow-origin: * accept-ranges: bytes X-Firefox-Spdy: h2`

	fonts.googleapis.com/css?family=Open+Sans:400,600&display=swap	142.250.74.74	200 OK	50 kB
URL GET HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,600&display=swap IP 142.250.74.74:443 ASN #15169 GOOGLE Requested by http://fush.nl/21gh4 Certificate IssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT File type gzip compressed data, max compression Size 50 kB (49833 bytes) Hash a4b6ef5fe69be0e4aef5e8393b9f0ba8 d514780528fdb32d750cb58a3a01450631140fb0 33ff86c4c42c05e411998de4d3b66252877fabd1363b31311a618dff1ba35dbf HTTP Headers `GET /css?family=Open+Sans:400,600&display=swap HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://fush.nl/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Wed, 08 May 2024 14:18:17 GMT date: Wed, 08 May 2024 14:18:17 GMT cache-control: private, max-age=86400 cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2	216.58.207.227	200 OK	48 kB
URL GET HTTP/2 fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP 216.58.207.227:443 ASN #15169 GOOGLE Requested by http://fush.nl/21gh4 Certificate IssuerGoogle Trust Services LLC Subject.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT File type Web Open Font Format (Version 2), TrueType, length 48236, version 1.0 Size 48 kB (48236 bytes) Hash 015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa HTTP Headers GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: http://fush.nl DNT: 1 Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 48236 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 02 May 2024 02:35:00 GMT expires: Fri, 02 May 2025 02:35:00 GMT cache-control: public, max-age=31536000 age: 560598 last-modified: Thu, 14 Dec 2023 02:08:40 GMT content-type: font/woff2 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	www.antagonist.nl/favicon.ico	195.211.75.97	200 OK	1.4 kB
URL GET HTTP/2 www.antagonist.nl/favicon.ico IP 195.211.75.97:443 ASN #20847 Previder B.V. Requested by http://fush.nl/21gh4 Certificate IssuerSectigo Limited Subject.antagonist.nl Fingerprint05:E6:40:C2:77:F7:01:9F:21:40:C4:D0:CC:AD:0C:60:8F:C9:E6:90 ValidityThu, 07 Dec 2023 00:00:00 GMT - Mon, 06 Jan 2025 23:59:59 GMT File type MS Windows icon resource - 1 icon, 16x16 Size 1.4 kB (1406 bytes) Hash 386ca59e3003c5f5165b1a03d0d93cf5 d3a4f70714827acfd21fb1914441e77fddd417ce 0f5c9f1707bab601f87fa76e493d368f991d248f2fa4f0c911e7a43ff827d4ce HTTP Headers `GET /favicon.ico HTTP/1.1 Host: www.antagonist.nl User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://fush.nl/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx date: Wed, 08 May 2024 14:18:18 GMT content-type: image/x-icon content-length: 1406 last-modified: Mon, 22 Apr 2024 09:00:50 GMT etag: "66262742-57e" referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=63072000; includeSubDomains; always x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block accept-ranges: bytes X-Firefox-Spdy: h2`

	www.antagonist.nl/static/js/jquery/jquery-3.4.1.min.js	195.211.75.97	200 OK	88 kB
URL GET HTTP/2 www.antagonist.nl/static/js/jquery/jquery-3.4.1.min.js IP 195.211.75.97:443 ASN #20847 Previder B.V. Requested by http://fush.nl/21gh4 Certificate IssuerSectigo Limited Subject.antagonist.nl Fingerprint05:E6:40:C2:77:F7:01:9F:21:40:C4:D0:CC:AD:0C:60:8F:C9:E6:90 ValidityThu, 07 Dec 2023 00:00:00 GMT - Mon, 06 Jan 2025 23:59:59 GMT File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 88 kB (88059 bytes) Hash b4999cbb6a73a9b312f635cff75e5a53 c7b683fc72d06eac129185c3e60362f5c1adc2a8 736173659d4431b8a53a08aacc1bec3ad3a2f44df5209c09d76c265374698302 HTTP Headers `GET /static/js/jquery/jquery-3.4.1.min.js HTTP/1.1 Host: www.antagonist.nl User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://fush.nl/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Wed, 08 May 2024 14:18:17 GMT content-type: application/javascript last-modified: Mon, 22 Apr 2024 09:00:50 GMT etag: W/"66262742-157fb" expires: Wed, 15 May 2024 14:18:17 GMT cache-control: max-age=604800 access-control-allow-origin: * content-encoding: gzip X-Firefox-Spdy: h2`

	www.antagonist.nl/static/css/bootstrap/bootstrap-4.3.1.min.css	195.211.75.97	200 OK	156 kB
URL GET HTTP/2 www.antagonist.nl/static/css/bootstrap/bootstrap-4.3.1.min.css IP 195.211.75.97:443 ASN #20847 Previder B.V. Requested by http://fush.nl/21gh4 Certificate IssuerSectigo Limited Subject.antagonist.nl Fingerprint05:E6:40:C2:77:F7:01:9F:21:40:C4:D0:CC:AD:0C:60:8F:C9:E6:90 ValidityThu, 07 Dec 2023 00:00:00 GMT - Mon, 06 Jan 2025 23:59:59 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 156 kB (155497 bytes) Hash a610710d5a3c47d8e33e922ae79631e1 0f9ecfa74b7405950dbfa4458d0fe91140f24c35 9fd9256100a4d4ff9ece48f584f67f1e116d0747f9282a913dbf3b1b9128d2ad HTTP Headers `GET /static/css/bootstrap/bootstrap-4.3.1.min.css HTTP/1.1 Host: www.antagonist.nl User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://fush.nl/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Wed, 08 May 2024 14:18:17 GMT content-type: text/css last-modified: Mon, 22 Apr 2024 09:00:50 GMT etag: W/"66262742-25f69" expires: Wed, 15 May 2024 14:18:17 GMT cache-control: max-age=604800 access-control-allow-origin: content-encoding: gzip X-Firefox-Spdy: h2`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (7)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate