Report - teamstr.net/hope/alive/wGVNu/YnVydEBsZXdpc3Byb3BlcnRpZXMubmV0?referrer=singular_click_id=f30bfbb2-1828-4b58-a752-2971b65d643f

Report Overview

Visited public
2023-12-01 19:12:44
Tags
URL
teamstr.net/hope/alive/wGVNu/YnVydEBsZXdpc3Byb3BlcnRpZXMubmV0?referrer=singular_click_id=f30bfbb2-1828-4b58-a752-2971b65d643f
Finishing URL
gtnkdbaeud.striars.tech/?email=burt@lewisproperties.net
IP / ASN
192.185.148.211
#46606 UNIFIEDLAYER-AS-1
Title
Loading... Wait...

Detections

urlquery

0

Network Intrusion Detection

2

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
teamstr.net	unknown	2012-11-05	2019-05-28 08:13:09	2023-12-01 06:41:43	591 B	226 B	192.185.148.211
gtnkdbaeud.striars.tech	unknown	2023-06-16	2023-11-22 14:10:10	2023-12-01 13:54:18	521 B	4.5 kB	199.192.27.240

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-01 19:12:28	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2023-12-01 19:12:29	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	gtnkdbaeud.striars.tech/?email=burt@lewisproperties.net	ScriptElement	518 B	2023-11-25	2024-08-20
Pretty URL gtnkdbaeud.striars.tech/?email=burt@lewisproperties.net IP 199.192.27.240 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-25 10:17 Last Seen2024-08-20 17:59 Times Seen179 Hash ea6aa8e76471887a1a7ef6fb25421d7a c96a7b1cd0ab7b98330b36d805503e579a1f9252 3b6b7bae8b88ec97946b586df013391ea56870bca38e9f2ec74ac814d0188778 Loading...

HTTP Transactions (2)

	URL	IP	Response	Size
	teamstr.net/hope/alive/wGVNu/YnVydEBsZXdpc3Byb3BlcnRpZXMubmV0?referrer=singular_click_id=f30bfbb2-1828-4b58-a752-2971b65d643f	192.185.148.211		0 B
URL teamstr.net/hope/alive/wGVNu/YnVydEBsZXdpc3Byb3BlcnRpZXMubmV0?referrer=singular_click_id=f30bfbb2-1828-4b58-a752-2971b65d643f IP 192.185.148.211:0 ASN #46606 UNIFIEDLAYER-AS-1 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /hope/alive/wGVNu/YnVydEBsZXdpc3Byb3BlcnRpZXMubmV0?referrer=singular_click_id=f30bfbb2-1828-4b58-a752-2971b65d643f HTTP/1.1 Host: teamstr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK refresh: 0;url=https://gtnkdbaeud.striars.tech?email=burt@lewisproperties.net content-length: 0 content-type: text/html; charset=UTF-8 date: Fri, 01 Dec 2023 19:12:26 GMT server: Apache X-Firefox-Spdy: h2`

	gtnkdbaeud.striars.tech/?email=burt@lewisproperties.net	199.192.27.240	200 OK	4.0 kB
URL User Request GET HTTP/1.1 gtnkdbaeud.striars.tech/?email=burt@lewisproperties.net IP 199.192.27.240:443 ASN #22612 NAMECHEAP-NET Certificate IssuerLet's Encrypt Subjectgtnkdbaeud.striars.tech Fingerprint90:3B:09:32:10:00:D4:71:58:D1:86:69:B6:77:81:A8:02:6E:7B:EE ValidityMon, 27 Nov 2023 21:52:13 GMT - Sun, 25 Feb 2024 21:52:12 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (10033), with CRLF line terminators Size 4.0 kB (3981 bytes) Hash 8952e2b9b297ffa7df2f4210c53abc2b 523a19b4e988bc1cc9aa746aebce193ade04c127 8b5747ccf768c9f0971e40b70a75e07833b2bd6e9281ccee6295fb39aaeaa610 HTTP Headers GET /?email=burt@lewisproperties.net HTTP/1.1 Host: gtnkdbaeud.striars.tech User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Fri, 01 Dec 2023 19:12:27 GMT Server: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips X-Powered-By: PHP/7.4.1 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=822815221e9b4692c1d62850837381d6; path=/ Vary: Accept-Encoding,User-Agent Content-Encoding: gzip Content-Length: 3981 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8`