Report - www.efhe.short.gy/a40ByU

Report Overview

Submitted URL
www.efhe.short.gy/a40ByU
IP
18.184.197.212
ASN
#16509 AMAZON-02
Submitted
2024-04-17 12:17:13
Access
public
Website Title
RAM - Confirm & Payment
Final URL
pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
zerossl.ocsp.sectigo.com	4049	2018-08-16	2020-05-09	2024-04-16	336 B	1.2 kB	172.64.149.23
www.efhe.short.gy	unknown	unknown	No data	No data	394 B	108 B	18.194.86.172
pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev	unknown	unknown	No data	No data	4.5 kB	1.5 MB	104.18.2.35

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html	446 B	2023-03-08	2024-04-27
Pretty URL pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html IP 104.18.2.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 02:29:52 Last Seen2024-04-27 19:39:50 Times Seen41 Hash 99684bd207f06a682b3ccc42304586a9 d88dda7dc43aa77cd01f3b8630ab1e3b5b7f6504 6588d1d53d02e5b08792d3fada49aee451bc0d0f8df1b186fa5d96e853cad06c Loading...

	pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html	0 B	2023-03-07	2024-04-30
Pretty URL pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html IP 104.18.2.35 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-30 12:10:15 Times Seen37212759 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (10)

	URL	IP	Response	Size
	zerossl.ocsp.sectigo.com/	172.64.149.23		728 B
URL zerossl.ocsp.sectigo.com/ IP 172.64.149.23:0 ASN #13335 CLOUDFLARENET File type data Size 728 B (728 bytes) Hash e3581f841f163377fb8765f91f38e456 fc3fbc8ea6522a3b69829c22e388ca118c90a5e1 7087e6b1c0ea4b9a8d15d1ebbe2bdea4442d3e1a6757999720ccc75c6977545b HTTP Headers `POST / HTTP/1.1 Host: zerossl.ocsp.sectigo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 12:16:47 GMT Content-Type: application/ocsp-response Content-Length: 728 Connection: keep-alive Last-Modified: Mon, 15 Apr 2024 14:33:22 GMT Expires: Mon, 22 Apr 2024 14:33:21 GMT Etag: "fc3fbc8ea6522a3b69829c22e388ca118c90a5e1" Cache-Control: max-age=441333,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb1 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 875c592a3c0c92e2-CPH`

	www.efhe.short.gy/a40ByU	18.194.86.172		0 B
URL www.efhe.short.gy/a40ByU IP 18.194.86.172:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /a40ByU HTTP/1.1 Host: www.efhe.short.gy User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Location: https://is.gd/vFuPCt Date: Wed, 17 Apr 2024 12:16:47 GMT Content-Length: 0`

	pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html	104.18.2.35		1.3 MB
URL pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html IP 104.18.2.35:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (26405), with CRLF line terminators Size 1.3 MB (1294741 bytes) Hash e5d8be32ca2f30c0e8401546d77f7ce6 62ad309fec5cdd581f24f1806fe29a2d26d1fe5f 0907f420b27bec19e71aeb5d7358479f30cbe3b4549c6720d5cd08e0ac8221a6 HTTP Headers `GET /home.html HTTP/1.1 Host: pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Wed, 17 Apr 2024 12:16:48 GMT Content-Type: text/html Content-Length: 1294741 Connection: keep-alive Accept-Ranges: bytes ETag: "e5d8be32ca2f30c0e8401546d77f7ce6" Last-Modified: Sat, 06 Apr 2024 17:46:09 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 875c592e68da1d12-CPH`

	pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/pag1_files/reset.min.css	104.18.2.35		27 kB
URL pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/pag1_files/reset.min.css IP 104.18.2.35:0 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (611) Size 27 kB (27242 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers `GET /pag1_files/reset.min.css HTTP/1.1 Host: pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Wed, 17 Apr 2024 12:16:49 GMT Content-Type: text/html Content-Length: 27242 Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 875c59320eb21d12-CPH`

	pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/pag1_files/css	104.18.3.35		27 kB
URL pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/pag1_files/css IP 104.18.3.35:0 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (611) Size 27 kB (27242 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers `GET /pag1_files/css HTTP/1.1 Host: pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Wed, 17 Apr 2024 12:16:49 GMT Content-Type: text/html Content-Length: 27242 Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 875c59327bef92eb-CPH`

	pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/pag1_files/saved_resource.html	104.18.2.35		27 kB
URL pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/pag1_files/saved_resource.html IP 104.18.2.35:0 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (611) Size 27 kB (27242 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers GET /pag1_files/saved_resource.html HTTP/1.1 Host: pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found Date: Wed, 17 Apr 2024 12:16:49 GMT Content-Type: text/html Content-Length: 27242 Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 875c593399051d12-CPH`

	pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/pag1_files/saved_resource(1).html	104.18.3.35		27 kB
URL pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/pag1_files/saved_resource(1).html IP 104.18.3.35:0 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (611) Size 27 kB (27242 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers GET /pag1_files/saved_resource(1).html HTTP/1.1 Host: pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found Date: Wed, 17 Apr 2024 12:16:49 GMT Content-Type: text/html Content-Length: 27242 Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 875c5933ae1d92eb-CPH`

	pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/pag1_files/saved_resource(4).html	104.18.3.35	404 Not Found	27 kB
URL GET HTTP/1.1 pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/pag1_files/saved_resource(4).html IP 104.18.3.35:443 ASN #13335 CLOUDFLARENET Requested by https://pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0 ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT File type HTML document, ASCII text, with very long lines (611) Size 27 kB (27242 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers GET /pag1_files/saved_resource(4).html HTTP/1.1 Host: pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found Date: Wed, 17 Apr 2024 12:16:49 GMT Content-Type: text/html Content-Length: 27242 Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 875c593449d192d6-CPH`

	pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/pag1_files/saved_resource(2).html	104.18.3.35		27 kB
URL pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/pag1_files/saved_resource(2).html IP 104.18.3.35:0 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (611) Size 27 kB (27242 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers GET /pag1_files/saved_resource(2).html HTTP/1.1 Host: pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found Date: Wed, 17 Apr 2024 12:16:49 GMT Content-Type: text/html Content-Length: 27242 Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 875c59344be5be3d-CPH`

	pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/pag1_files/saved_resource(3).html	104.18.3.35		27 kB
URL pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/pag1_files/saved_resource(3).html IP 104.18.3.35:0 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (611) Size 27 kB (27242 bytes) Hash df3d48946e8d3f5a83608308edbb4b86 47b9c40c97abf2658df96b1c06109324e15e1a00 570a6631252b8a52df4de0e953ae77dbdf524dfc3637cda2840494a0d2b49499 HTTP Headers GET /pag1_files/saved_resource(3).html HTTP/1.1 Host: pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-6c2a1e3d30884dcf8651866a22ab4842.r2.dev/home.html Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found Date: Wed, 17 Apr 2024 12:16:49 GMT Content-Type: text/html Content-Length: 27242 Connection: keep-alive Vary: Accept-Encoding Server: cloudflare CF-RAY: 875c593449b59300-CPH`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type