Report - applesupport-track.live/6vv

Report Overview

Submitted URL
applesupport-track.live/6vv
IP
172.67.142.234
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-08 21:38:40
Access
public
Website Title
applesupport-track.live/6vv
Final URL
applesupport-track.live/6vv
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
36

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-05-08	414 B	88 kB	151.101.66.137
applesupport-track.live	unknown	unknown	No data	No data	9.9 kB	3.1 MB	172.67.142.234

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed
2024-05-08	medium	applesupport-track.live	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	applesupport-track.live/6vv	0 B	2023-03-07	2024-05-20
Pretty URL applesupport-track.live/6vv IP 172.67.142.234 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-20 00:27:00 Times Seen37847253 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	code.jquery.com/jquery-1.12.4.js	293 kB	2023-03-07	2024-05-20
Pretty URL code.jquery.com/jquery-1.12.4.js IP 151.101.66.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:16:13 Last Seen2024-05-20 00:25:58 Times Seen1638 Hash fb2d334dabf4902825df4fe6c2298b4b 433836da7e015f2eb3fc386817de88b78248f6ef 430f36f9b5f21aae8cc9dca6a81c4d3d84da5175eaedcf2fdc2c226302cb3575 Loading...

	applesupport-track.live/6vv	0 B	2023-03-07	2024-05-20
Pretty URL applesupport-track.live/6vv IP 172.67.142.234 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-20 00:27:00 Times Seen37847253 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	applesupport-track.live/flmcd/signin.php	340 B	2024-05-08	2024-05-08
Pretty URL applesupport-track.live/flmcd/signin.php IP 172.67.142.234 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-08 23:38:47 Last Seen2024-05-08 23:38:47 Times Seen1 Hash 3c1a59ebaf429b8dcc5deebf53ea0819 04deeecdd25a061124464c54a64a88f863e72bde 5aa5559790871411a7b80ca49e6ca5c0fa694215e2f9fe8f18cd0f88db4197df Loading...

	applesupport-track.live/app/icl/files/jquery-1.10.2.js	273 kB	2023-03-07	2024-05-19
Pretty URL applesupport-track.live/app/icl/files/jquery-1.10.2.js IP 172.67.142.234 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:19:58 Last Seen2024-05-19 05:07:42 Times Seen1355 Hash 91515770ce8c55de23b306444d8ea998 1d85f0f3464e5e49b0522744bf7314e176ac76d9 8ade6740a1d3cfedf81e28d9250929341207b23a55f1be90ccc26cf6d98e052a Loading...

	applesupport-track.live/app/icl/files/jquery-ui.js	521 kB	2023-03-07	2024-05-19
Pretty URL applesupport-track.live/app/icl/files/jquery-ui.js IP 172.67.142.234 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:28 Last Seen2024-05-19 23:00:01 Times Seen6178 Hash ab5284de5e3d221e53647fd348e5644b 75c20acdc6cbc6334fe2b918ab7afeec007f969e 4f455eb2ddf2094ee969f470f6bfac7adb4c057e8990a374e9da819e943c777d Loading...

	applesupport-track.live/flmcd/signin.php	11 kB	2024-01-23	2024-05-08
Pretty URL applesupport-track.live/flmcd/signin.php IP 172.67.142.234 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-23 03:03:18 Last Seen2024-05-08 23:38:47 Times Seen3 Hash 0ec09560bbc89a9407f303c2e07b6f8c 6a8e14ee0cf11fa9c57ca3c53a0e86d2fa8e9c1a 420e3f5cd70aeaee5df9e5858a5c4b7784b3347a0b3826b649dd9ae7a80c82c8 Loading...

HTTP Transactions (19)

URL IP Response Size

code.jquery.com/jquery-1.12.4.js

151.101.66.137

200 OK

87 kB

URL GET HTTP/2
code.jquery.com/jquery-1.12.4.js
IP
151.101.66.137:443
ASN
#54113 FASTLY

Requested by
https://applesupport-track.live/6vv
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
87 kB (87176 bytes)
Hash
fb2d334dabf4902825df4fe6c2298b4b
433836da7e015f2eb3fc386817de88b78248f6ef
430f36f9b5f21aae8cc9dca6a81c4d3d84da5175eaedcf2fdc2c226302cb3575

HTTP Headers

GET /jquery-1.12.4.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-47a36"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 08 May 2024 21:38:15 GMT
age: 20402095
x-served-by: cache-lga21970-LGA, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 26406, 13488
x-timer: S1715204296.530842,VS0,VE0
vary: Accept-Encoding
content-length: 87176
X-Firefox-Spdy: h2

applesupport-track.live/app/icl/files/ajax-loader.gif

172.67.142.234

200 OK

3.8 kB

URL GET HTTP/3
applesupport-track.live/app/icl/files/ajax-loader.gif
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/flmcd/signin.php
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
GIF image data, version 89a, 32 x 32
Size
3.8 kB (3783 bytes)
Hash
3db24b58dc488b1820ecbd06300f5cec
2886d696139c36eeda8db561b4f178c0876603b5
fd458f36d73b7d6434326d18c9229da92384d37303dbdd72fa346597fde23068

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /app/icl/files/ajax-loader.gif HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/flmcd/signin.php
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: image/gif
content-length: 3783
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 21:38:15 GMT
last-modified: Wed, 02 Aug 2023 19:54:56 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B8mkwC6taRaNdJDXCfTtwjsJPEdKj0as%2FTrOT9R3F8dVLsx%2F9YG5HLLZTEytehB%2BTCC2r%2BK8KGOS8F74YOI463qsMSv5pYfjVKHjqqyuWAf6AXGSup2l650n1gaw6o%2BLhFteUtFjyX309Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c987ef89c1c06-OSL
alt-svc: h3=":443"; ma=86400

applesupport-track.live/app/icl/apps/ebdd87b7a9c033aa8ba806d09f788a6a.png

172.67.142.234

200 OK

27 kB

URL GET HTTP/3
applesupport-track.live/app/icl/apps/ebdd87b7a9c033aa8ba806d09f788a6a.png
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/flmcd/signin.php
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
PNG image data, 142 x 142, 8-bit/color RGBA, non-interlaced
Size
27 kB (27169 bytes)
Hash
73d1eb213a9dbdd7b920c9f98f2ff29f
b2120044511d70c2e33920586ac924700233e84b
1fce95fec86f8ae43628e184c118a76e3c0bfab007ecafca55676e4e5e7cc9d2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /app/icl/apps/ebdd87b7a9c033aa8ba806d09f788a6a.png HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/flmcd/signin.php
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: image/png
content-length: 27169
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 21:38:15 GMT
last-modified: Thu, 30 Nov 2023 01:04:18 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0yvinhTFmX365ES%2FTE%2Bv%2B56Ghs1xi%2B9j5UzP1nbWYUOCEzziohfxfhfhZdSs8ZmRr1NCavkmjOziPNPZj8NofdJC%2BBD2MgPMj53G8d1D0uRY%2BbtoRV5eWdH02GVLoig1YI19kIqcY8Nmpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c987f18b11c06-OSL
alt-svc: h3=":443"; ma=86400

applesupport-track.live/fonts/current/fonts/SFNSText-Medium.woff

172.67.142.234

200 OK

128 kB

URL GET HTTP/3
applesupport-track.live/fonts/current/fonts/SFNSText-Medium.woff
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/6vv
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
Web Open Font Format, CFF, length 127968, version 1.0
Size
128 kB (127968 bytes)
Hash
901ce2b5f0b8836aa47aa84dfb51b696
c4c2ccbf267e970b5372b9ac1869563ae1e93fd1
92786e7392c26afd8afc97762f0efcfd4b9b345da7ceb9ec3a1b1cbc72ce7505

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/current/fonts/SFNSText-Medium.woff HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/flmcd/css/main.css
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: font/woff
content-length: 127968
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 21:38:15 GMT
last-modified: Sat, 01 Apr 2023 05:03:38 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Thef8wQ8Xs4tEJKIkQZe1sd%2Fq7Ts6%2Byfl3QxYiAFFXEw89OO9bbkp4%2F1GGlKRwABEoz9E7OFgfAYYIC0c2oUFTT%2BUBrwgQRthSp7IVv5GDDdF%2B45B4P0p0NOUuMGapaaUeKYIEzJOZcmtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c987fc9151c06-OSL
alt-svc: h3=":443"; ma=86400

applesupport-track.live/fonts/current/fonts/SFNSText-Light.woff

172.67.142.234

200 OK

215 kB

URL GET HTTP/3
applesupport-track.live/fonts/current/fonts/SFNSText-Light.woff
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/6vv
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
Web Open Font Format, CFF, length 215328, version 1.0
Size
215 kB (215328 bytes)
Hash
79b05229097a088612618213b96d45b4
d518378192bef5b4b610787a0997cb75d76ffed9
635cebe91454ae2d5a03a25d6ae73692273a942e4fcb89badcba1fb606d0f6ad

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/current/fonts/SFNSText-Light.woff HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/flmcd/css/main.css
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: font/woff
content-length: 215328
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 21:38:15 GMT
last-modified: Sat, 01 Apr 2023 06:48:02 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fn971UHcwpWUGtdKls%2F1dKhnaGXXM7XLHuVf1xfI8IHYxHhFGfRspNSqf09p9vzJjF5nqRqKCTanO46xEQaR%2F%2Fu4eejd0mkPfujocar0h%2BFOeCxpgS0EfESt74Pmsyys1XI8tAmOnbYqBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c987fb9111c06-OSL
alt-svc: h3=":443"; ma=86400

applesupport-track.live/fonts/current/fonts/SFNSDisplay-Semibold.woff

172.67.142.234

200 OK

220 kB

URL GET HTTP/3
applesupport-track.live/fonts/current/fonts/SFNSDisplay-Semibold.woff
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/6vv
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
Web Open Font Format, CFF, length 220316, version 1.0
Size
220 kB (220316 bytes)
Hash
475daf28f82243f57d2092d49620ccb1
de1a2e53c5bd0f84093a42b01cc8f5e41200f458
1e903559463abcbcd75f7b61f88e60a6a267415ef1fc14efeac88261b4d78318

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/current/fonts/SFNSDisplay-Semibold.woff HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/flmcd/css/main.css
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: font/woff
content-length: 220316
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 21:38:15 GMT
last-modified: Sat, 01 Apr 2023 05:03:38 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R0OWvCN6c39PMfGUcvLvLz0WueYwG64Nj44gYU4xY34flLXswBx6r3izXfD6mhRcN6tKIlIOslWFuPiFL9FUFU1kvUbIstnC2%2F87kfXJx3w5WYQHd%2BAmuTHezdcGulkjQZ%2BQeh0VAOAohQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c987fb90f1c06-OSL
alt-svc: h3=":443"; ma=86400

applesupport-track.live/fonts/current/fonts/SFNSText-Regular.woff

172.67.142.234

200 OK

115 kB

URL GET HTTP/3
applesupport-track.live/fonts/current/fonts/SFNSText-Regular.woff
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/6vv
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
Web Open Font Format, CFF, length 115440, version 1.0
Size
115 kB (115440 bytes)
Hash
bb4e47e77af8f52ea01514126f2dbcc1
e52e47eec363de7e3aab682920488011a7ea73a8
dda7a05b0690fbf8863136a26241e67f4a89f630638d16ee677dc3dd17609fa9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/current/fonts/SFNSText-Regular.woff HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/flmcd/css/main.css
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: font/woff
content-length: 115440
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 21:38:15 GMT
last-modified: Sat, 01 Apr 2023 05:03:38 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YzpkNMqCOuNgA%2B6oM9IZIg79F17d%2FC2uRfyhDgUmW5Er%2BBJa%2F5X7S1FSlv0wdM%2FPhD7cTmiPNxNJtnY%2BBR4RPtabbph%2BUNUI125%2B6fZOTB9GzMdrRPIljTyHjNLu3lxkj2PuRUOdNokAgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c988089a61c06-OSL
alt-svc: h3=":443"; ma=86400

applesupport-track.live/app/icl/files/shared-icons.woff

172.67.142.234

200 OK

7.9 kB

URL GET HTTP/3
applesupport-track.live/app/icl/files/shared-icons.woff
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/flmcd/signin.php
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
Web Open Font Format, TrueType, length 7944, version 1.0
Size
7.9 kB (7944 bytes)
Hash
5e01630de5d0dad02c927c49d22436f1
1f991fe5eaaf73408294818725ec9dac5b978568
3d12586b3d24efe92df696c5b7a9aab33d89deee147f9ff1a6e957db6a962abd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /app/icl/files/shared-icons.woff HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/app/icl/files/app-sk7.css
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: font/woff
content-length: 7944
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 21:38:15 GMT
last-modified: Thu, 30 Nov 2023 01:04:20 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UJ7wO9fR4PEmVWq%2BfWHlfzmS%2BqB2jjOQXz3FpJDFB2RZ549IkViepd%2F0Q7jQwxKOX3cLbk%2FEnyBHWSo8cwB6UxGsHkiQ2qGYVdfIi5p%2FyADKdtVP%2Bc6CE5vEFCUUvefvNtHGQZxDUAk66g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c98815a3b1c06-OSL
alt-svc: h3=":443"; ma=86400

applesupport-track.live/flmcd/css/favicon.png

172.67.142.234

200 OK

22 kB

URL GET HTTP/3
applesupport-track.live/flmcd/css/favicon.png
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/6vv
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
22 kB (22382 bytes)
Hash
310fd67d702063937e39c17b2060067f
503b0c1cd35674b8e58b6b35431f381f1417a1a5
2ee7ca9b189df54d7ccdd064d75d0143a8229bae9bdb69f37105e59f433c0a8b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /flmcd/css/favicon.png HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/6vv
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:16 GMT
content-type: image/png
content-length: 22382
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 21:38:16 GMT
last-modified: Sun, 30 Jul 2023 00:22:58 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7qUBu4WydrHU6gra23bCketX03cXuckWl%2BCQItX7ykF5uc2PUArURx2cPigLk4JjxK53tQBE5%2Bb9UaZncCNO9IlLUi049pi78kRDFftmfNEh3W0A6RXuukCdNVbJX%2Fw2RF15mZQ4leplXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c98820aab1c06-OSL
alt-svc: h3=":443"; ma=86400

applesupport-track.live/fonts/current/fonts/SFNSText-Regular.woff

172.67.142.234

200 OK

115 kB

URL GET HTTP/3
applesupport-track.live/fonts/current/fonts/SFNSText-Regular.woff
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/6vv
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
Web Open Font Format, CFF, length 115440, version 1.0
Size
115 kB (115440 bytes)
Hash
bb4e47e77af8f52ea01514126f2dbcc1
e52e47eec363de7e3aab682920488011a7ea73a8
dda7a05b0690fbf8863136a26241e67f4a89f630638d16ee677dc3dd17609fa9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/current/fonts/SFNSText-Regular.woff HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/flmcd/css/main.css
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:16 GMT
content-type: font/woff
content-length: 115440
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 21:38:15 GMT
last-modified: Sat, 01 Apr 2023 05:03:38 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3%2FHLfj0cDr5dAhhDAGI9JzTo5jS3xphbLkE6HFPuvZ4gplpJvZZivGVwPmAF8%2FaHqAAcJsikrME1JKW91dCOt3hb%2FYH%2FeMVh09HAYuJmYKjQW%2BOM0%2BlYyZedPuY%2BBJmgPcGqpM6bDPFsdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c98830b841c06-OSL
alt-svc: h3=":443"; ma=86400

applesupport-track.live/flmcd/signin.php

172.67.142.234

200 OK

225 kB

URL GET HTTP/3
applesupport-track.live/flmcd/signin.php
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/6vv
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
JavaScript source, ASCII text, with very long lines (403), with CRLF line terminators
Size
225 kB (224927 bytes)
Hash
cfd9b6bea289d8dc4fad9bde2d1005fc
90b37ad5816257f63cb571a3286693ca5926bdf4
87cbf06e0fb56ec23044e5d398542b81fd7e752ea3e078726ed2cae8c6c9e8be

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /flmcd/signin.php HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/6vv
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MzyUMHRTsFwL2tFcmmxO2DcnRiAX6bRU3mrh6HKdm%2FKgOLXBVq%2FOsKHYmAfLJAChzYuVuLA607mrvc8SZBF7YU9ba3M8LbVTtmqYpLL%2FnPp6fW%2Bm9av6PRyTDIQDIbb10%2BCPSS4nrlm2oQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c987e88561c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

applesupport-track.live/app/icl/files/home-5cfdf03621c120b4e02b.css

172.67.142.234

200 OK

260 kB

URL GET HTTP/3
applesupport-track.live/app/icl/files/home-5cfdf03621c120b4e02b.css
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/flmcd/signin.php
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
Unicode text, UTF-8 text
Size
260 kB (260442 bytes)
Hash
e517f73252de2da5e1f8312f7fb6f6b2
d8dcab4f046a8ddb99290b0075f042b09ef16e6e
17c563cad6d83c5e7c1f894db759e709f8043c4cd6cab8e9dd4f8e19f4eb97d4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /app/icl/files/home-5cfdf03621c120b4e02b.css HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/flmcd/signin.php
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 21:38:15 GMT
last-modified: Thu, 30 Nov 2023 01:04:20 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jgiwlSo%2FUiGlOIXZQ3M49gkKTO4%2F53TrnxTKXSq8P1DXf7rebdPqbG4pyz%2BN3iCtSmx3rGesiyKN6gHqNEDZNYWjOGMjZKxqYdHxC0Cf8nT6RouoZDdkyOMB1pUVjg3c98Qi0L5%2F9WdNVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c987f08a11c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

applesupport-track.live/fonts/current/fonts/SFNSText-Medium.woff

172.67.142.234

200 OK

128 kB

URL GET HTTP/3
applesupport-track.live/fonts/current/fonts/SFNSText-Medium.woff
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/6vv
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
Web Open Font Format, CFF, length 127968, version 1.0
Size
128 kB (127968 bytes)
Hash
901ce2b5f0b8836aa47aa84dfb51b696
c4c2ccbf267e970b5372b9ac1869563ae1e93fd1
92786e7392c26afd8afc97762f0efcfd4b9b345da7ceb9ec3a1b1cbc72ce7505

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/current/fonts/SFNSText-Medium.woff HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/flmcd/css/main.css
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:16 GMT
content-type: font/woff
content-length: 127968
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 21:38:15 GMT
last-modified: Sat, 01 Apr 2023 05:03:38 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qpDkNh%2Bq79IaVI3jF1vGAvWeMqB5x%2Bef0319HcXQQwl5Khj5%2BbjHU5RFUNW5s5wQ6Ljd8zk0oZVNS6GDftQS8Ik%2FCVEWTm4GKISifiQKZ8bCf%2B1oAP3j%2B42aUAlAFv14XfjuSnsA3jh7%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880c98830b8d1c06-OSL
alt-svc: h3=":443"; ma=86400

applesupport-track.live/6vv

172.67.142.234

200 OK

8.3 kB

URL User Request GET HTTP/2
applesupport-track.live/6vv
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (8669), with no line terminators
Size
8.3 kB (8250 bytes)
Hash
2aad25375748d5233244e35fbb69f07b
5d0096adca4de69e7c1b6d7d33bfff932c9d3202
249e52a4105efd668332db806a0a3872a7d98cfb7bf06ed43d061b0f3182c878

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /6vv HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: text/html; charset=utf-8
set-cookie: PHPSESSID=12519628c934458209c6150d468ce93a; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mK2R84q5HyVJCjjHQ6tijhDi78sll66%2F6OFRZn1HM2j0puNi2jg%2F3e250f4Hw4ZqYILYSmH9%2BT%2FZwsqH95YefoiEAKzeOu0HAHw1PDqqo2qMWGne0%2FTeL1j0xQMq0kHGaE6coreUBmYSgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c9873f805b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

applesupport-track.live/app/icl/files/jquery-ui.js

172.67.142.234

200 OK

521 kB

URL GET HTTP/3
applesupport-track.live/app/icl/files/jquery-ui.js
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/flmcd/signin.php
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
JavaScript source, ASCII text, with very long lines (1002)
Size
521 kB (520714 bytes)
Hash
ab5284de5e3d221e53647fd348e5644b
75c20acdc6cbc6334fe2b918ab7afeec007f969e
4f455eb2ddf2094ee969f470f6bfac7adb4c057e8990a374e9da819e943c777d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /app/icl/files/jquery-ui.js HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/flmcd/signin.php
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: text/javascript
last-modified: Thu, 30 Nov 2023 01:04:20 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nFKlRlZp9cUg3iqZuhVrrl7FohU0Bwu5VJ1vIHBL8haeyvtXy1nv3ZG9JbLJoQdKrKM5HlQCZf29Qrc8Fi0ePVqlqMWOy80tRX3p2%2FA8MbUTG%2BGTFx1FwiVJSAEfe5iuz%2BgXxmsz7%2FfJzg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c987f18b01c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

applesupport-track.live/flmcd/css/main.css

172.67.142.234

200 OK

266 kB

URL GET HTTP/3
applesupport-track.live/flmcd/css/main.css
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/6vv
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
266 kB (265592 bytes)
Hash
d5f5669843f6db65f84e95420ce4b289
09717ad82885cdaf42cfa1844f7ba392cfb9d557
a40e124e14554772ab8ab9853d87241b1f6949b04e2864f7cb41b8b9662ca728

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /flmcd/css/main.css HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/6vv
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 21:38:15 GMT
last-modified: Sun, 30 Jul 2023 00:22:58 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IS%2Fx5pVLTj%2B4nP8neQseKT6ssQi84WmR71y%2BSXi%2BCmn5r9zpXvvB5s0E9%2BpVEyhHjXRDjVJfhe3Fp7FCNNJZ5rZ1yArrqIyO%2Fh8Vag0r2UJdPLba3oSKsh%2Bh4sKkiLNEOgleP3PXbWn0%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c987e884d1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

applesupport-track.live/app/icl/files/app-sk7.css

172.67.142.234

200 OK

544 kB

URL GET HTTP/3
applesupport-track.live/app/icl/files/app-sk7.css
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/flmcd/signin.php
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type

Size
544 kB (543876 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /app/icl/files/app-sk7.css HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/flmcd/signin.php
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 21:38:15 GMT
last-modified: Thu, 14 Dec 2023 11:19:52 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0sT%2BmOk%2F7sf3ll6i6nqioBH%2BGxt63%2BUtlcY4N6KHgmf51JO2iBt%2Fl0Iy5PYc5sHKXDk%2FGZb5fHgTR%2FUJszTGuYYP55pMdIuH%2FEkVBOLyO3Z95KYoNw%2FmBUIVpmMf%2BP4%2FWGpItq9tDvalRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c987f08a71c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

applesupport-track.live/app/icl/files/loader.css

172.67.142.234

200 OK

4.4 kB

URL GET HTTP/3
applesupport-track.live/app/icl/files/loader.css
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/flmcd/signin.php
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
ASCII text, with very long lines (4956), with no line terminators
Size
4.4 kB (4382 bytes)
Hash
18f07b42b980416ccff224dd189fb8c4
afc401c1fe822be2523e4e995ed3cf583e6a88be
2d1482a712faced45d4a4c870a6c74151382886da61b44ea6380d01d934294a1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /app/icl/files/loader.css HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/flmcd/signin.php
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Wed, 15 May 2024 21:38:15 GMT
last-modified: Thu, 30 Nov 2023 01:04:20 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FasbfggtFMrx4M%2FAUpLLneJkMOlUs2Rou%2BW8dDNdj6i06%2BS3jG1M%2BP7Jz4%2FSACV85vu8AKhmZna7MzeVrJmCjUq58DB0nsSJL35xxpKZ9FxHLN3JZjSVhXlV2VdaZ147HZccWCD5jwEK7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c987ef89f1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

applesupport-track.live/app/icl/files/jquery-1.10.2.js

172.67.142.234

200 OK

273 kB

URL GET HTTP/3
applesupport-track.live/app/icl/files/jquery-1.10.2.js
IP
172.67.142.234:443
ASN
#13335 CLOUDFLARENET

Requested by
https://applesupport-track.live/flmcd/signin.php
Certificate
IssuerGoogle Trust Services LLC
Subjectapplesupport-track.live
Fingerprint71:DF:6B:7A:28:19:0A:B5:C3:97:BA:BD:AC:B0:33:44:22:23:42:86
ValidityThu, 02 May 2024 06:36:11 GMT - Wed, 31 Jul 2024 06:36:10 GMT

File type
JavaScript source, ASCII text
Size
273 kB (273199 bytes)
Hash
91515770ce8c55de23b306444d8ea998
1d85f0f3464e5e49b0522744bf7314e176ac76d9
8ade6740a1d3cfedf81e28d9250929341207b23a55f1be90ccc26cf6d98e052a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /app/icl/files/jquery-1.10.2.js HTTP/1.1
Host: applesupport-track.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://applesupport-track.live/flmcd/signin.php
Cookie: PHPSESSID=12519628c934458209c6150d468ce93a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 21:38:15 GMT
content-type: text/javascript
last-modified: Thu, 30 Nov 2023 01:04:20 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nGV1JaMEPhdv8p%2B9wWn0JU8f9888uc0qi4EmrxR2e3l4hHV%2FyQkqhYVYpbde%2BTc%2F675%2BZjFreAoyWKNr1eCtLeTHKxCji4VUtzXGNMKNBildtOSjQ10JEUgwjB7dAFzirEeANXcjRNqEaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880c987f18af1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (19)

URL GET HTTP/2

IP

ASN

Requested by