Report - www.freshstar.raubet.pe/

Report Overview

Submitted URL
www.freshstar.raubet.pe/
IP
69.73.180.181
ASN
#11042 NTHL
Submitted
2023-06-01 01:30:04
Access
public
Website Title
Final URL
Tags
suspicious
urlquery detections
Suspicious - JavaScript obfusction

Detections

urlquery
9
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.freshstar.raubet.pe	unknown	unknown	2019-12-01	2023-05-03	1.8 kB	58 kB	69.73.180.181

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator
2023-05-31	medium	www.freshstar.raubet.pe/
2023-05-31	medium	www.freshstar.raubet.pe/
2023-05-31	medium	www.freshstar.raubet.pe/
2023-05-31	medium	www.freshstar.raubet.pe/

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	www.freshstar.raubet.pe/	5.2 kB	2023-03-07	2024-04-04
Pretty URL www.freshstar.raubet.pe/ IP 69.73.180.181 ASN #11042 NTHL Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:27:18 Last Seen2024-04-04 18:27:51 Times Seen59 Hash 35c48691ddb4b0807fa2f7874ee5a06a 614feab698a1017cdf7b4fd8d985aae72b334702 086c383d9587ccb93e64e46cb4a8104eed01b824ca562f9942e545e34fcad394 Loading...

	www.freshstar.raubet.pe/	2.4 kB	2023-03-07	2024-04-04
Pretty URL www.freshstar.raubet.pe/ IP 69.73.180.181 ASN #11042 NTHL Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:27:18 Last Seen2024-04-04 18:27:51 Times Seen59 Hash e8e75b64cf354a92238981bb4c8ff7dc 92c7139ad3921981faaf76fab38b1acc0d611e0b fcaaf2dac7cd07b9c29b3d557e80341ce844a20ea15e6f0b005d1e88eb968ccb Loading...

	unknown	490 B	2023-04-13	2024-04-04
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-13 09:21:38 Last Seen2024-04-04 18:27:51 Times Seen53 Hash eecd07c22cc00c609342129ad8fe641b c5f93a3b131012fcfbefa4e596d9ed4a0036d842 05fe4a816f5950e877d650b20c87b0045708aa1d34bf710a9e29615849f704fd Loading...

	www.freshstar.raubet.pe/	4.2 kB	2023-03-07	2024-04-04
Pretty URL www.freshstar.raubet.pe/ IP 69.73.180.181 ASN #11042 NTHL Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:27:18 Last Seen2024-04-04 18:27:51 Times Seen59 Hash d4271c8b78e6b0cc93f5a9419cde6b01 aa3bdb8bb9529f878053cb927277482c780c43ef 43024d8f7cbc52fb31bd9bdbeab4ef7b1c756fc8547d2259ab23fe5484f12633 Loading...

	www.freshstar.raubet.pe/	1.8 kB	2023-03-07	2024-04-04
Pretty URL www.freshstar.raubet.pe/ IP 69.73.180.181 ASN #11042 NTHL Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:27:18 Last Seen2024-04-04 18:27:51 Times Seen59 Hash bf6ebd71aabe5f7ac14e31983440530f 06b0efab0af8ca3fdd8d717627ffc81b98d1a6df 7018572cd6d1916182277a3b42033d10c302be832ddda3c23b3b3a74f4ba259f Loading...

		Size	First Seen	Last Seen
	#1 Write - 02f98e109909541d3a4c18bad834ca94	1.7 kB	2023-03-07	2024-04-04
Pretty Observations First Seen2023-03-07 14:27:18 Last Seen2024-04-04 18:27:51 Times Seen59 Hash 02f98e109909541d3a4c18bad834ca94 ff2076ee0f3f796ea042c5382d34e8249996e661 a3d32e08b7bc8507197e181dcfeb233808d41154a60a898d1247e25dbbaba4ce Loading...

	#2 Write - 22552ac9c32f5dd3be104b878e2a615c	771 B	2023-03-07	2024-04-04
Pretty Observations First Seen2023-03-07 14:27:18 Last Seen2024-04-04 18:27:51 Times Seen59 Hash 22552ac9c32f5dd3be104b878e2a615c 4390aec1040eaafba8b75e8614701b0e95ef23c4 6161402eb2580ae0378db35c173e710cf1cac7354be6ac99719ccc8b499be855 Loading...

	#3 Write - d16b423ae15d071a09abbef3b00c9078	1.4 kB	2023-03-07	2024-04-04
Pretty Observations First Seen2023-03-07 14:27:18 Last Seen2024-04-04 18:27:51 Times Seen59 Hash d16b423ae15d071a09abbef3b00c9078 7a1851bc02a390baefe7f913b10572dff6ea92dc 1d440b95fced58d7bb4b33f5a8f011d1bacb129cb81ca3d6ff68ce178b1ff749 Loading...

	#4 Write - d5da4bc11ce0d78e51933026aec87ab3	574 B	2023-03-07	2024-04-04
Pretty Observations First Seen2023-03-07 14:27:18 Last Seen2024-04-04 18:27:51 Times Seen59 Hash d5da4bc11ce0d78e51933026aec87ab3 892a045851cf480bef6a4cb8bd5df204a7eb553e 90393741756b9513295d6789b4831194fb6ee6a4cfce878e43f801a37c81b22f Loading...

HTTP Transactions (4)

URL IP Response Size

www.freshstar.raubet.pe/

69.73.180.181

200 OK

14 kB

URL User Request GET HTTP/1.1
www.freshstar.raubet.pe/
IP
69.73.180.181:443
ASN
#11042 NTHL

Certificate
IssuerLet's Encrypt
Subject*.raubet.pe
Fingerprint6F:59:8C:E8:45:4F:03:90:08:E6:74:56:37:C8:04:30:D6:5A:A2:AB
ValidityThu, 06 Apr 2023 13:22:24 GMT - Wed, 05 Jul 2023 13:22:23 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5198)
Size
14 kB (13697 bytes)
Hash
45ce213cdcbfb5685c140f9f91d6c028
6b3daa5c68bc26e5eb40c6a30b6072d92b0674e5
3943467f91fb43e1bad6101dd2a5b82cef264eb9c776ba2a1df8b17ef2173d33

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - JavaScript obfusction
urlquery	suspicious	Suspicious - JavaScript obfusction
urlquery	suspicious	Suspicious - JavaScript obfusction
urlquery	suspicious	Suspicious - JavaScript obfusction
openphish	Webmail Providers

HTTP Headers

GET / HTTP/1.1
Host: www.freshstar.raubet.pe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 01:29:46 GMT
Server: Apache
Last-Modified: Mon, 13 Mar 2017 09:40:04 GMT
Accept-Ranges: bytes
Content-Length: 13697
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

www.freshstar.raubet.pe/files/mail.png

69.73.180.181

200 OK

34 kB

URL GET HTTP/1.1
www.freshstar.raubet.pe/files/mail.png
IP
69.73.180.181:443
ASN
#11042 NTHL

Requested by
https://www.freshstar.raubet.pe/
Certificate
IssuerLet's Encrypt
Subject*.raubet.pe
Fingerprint6F:59:8C:E8:45:4F:03:90:08:E6:74:56:37:C8:04:30:D6:5A:A2:AB
ValidityThu, 06 Apr 2023 13:22:24 GMT - Wed, 05 Jul 2023 13:22:23 GMT

File type
PNG image data, 312 x 214, 8-bit/color RGBA, non-interlaced\012- data
Size
34 kB (34328 bytes)
Hash
23f7e3555145f8b35f9187347e80b490
30be3577ba0615b4a350ffede5bab43332b7cedf
e11a6773a10302f1d4a38c34b58395884c4ad628ff0f7842aa03fba5e8e50ab1

Detections

Analyzer	Verdict	Alert
openphish	Webmail Providers

HTTP Headers

GET /files/mail.png HTTP/1.1
Host: www.freshstar.raubet.pe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freshstar.raubet.pe/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 01:29:47 GMT
Server: Apache
Last-Modified: Mon, 13 Mar 2017 09:40:06 GMT
Accept-Ranges: bytes
Content-Length: 34328
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

www.freshstar.raubet.pe/files/id.png

69.73.180.181

200 OK

4.5 kB

URL GET HTTP/1.1
www.freshstar.raubet.pe/files/id.png
IP
69.73.180.181:443
ASN
#11042 NTHL

Requested by
https://www.freshstar.raubet.pe/
Certificate
IssuerLet's Encrypt
Subject*.raubet.pe
Fingerprint6F:59:8C:E8:45:4F:03:90:08:E6:74:56:37:C8:04:30:D6:5A:A2:AB
ValidityThu, 06 Apr 2023 13:22:24 GMT - Wed, 05 Jul 2023 13:22:23 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
4.5 kB (4545 bytes)
Hash
20012b70e82c499b433b37b2a98b9079
847a4aa7495440eeca16eb6211ec72c7dea2e22b
272c9a8ee9faf4bb46b70403cda777ce98f24fd48b2083ee133478461261d5dd

Detections

Analyzer	Verdict	Alert
openphish	Webmail Providers

HTTP Headers

GET /files/id.png HTTP/1.1
Host: www.freshstar.raubet.pe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freshstar.raubet.pe/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 01:29:47 GMT
Server: Apache
Last-Modified: Mon, 13 Mar 2017 09:40:06 GMT
Accept-Ranges: bytes
Content-Length: 4545
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

www.freshstar.raubet.pe/files/id.png

69.73.180.181

200 OK

4.5 kB

URL GET HTTP/1.1
www.freshstar.raubet.pe/files/id.png
IP
69.73.180.181:443
ASN
#11042 NTHL

Requested by
https://www.freshstar.raubet.pe/
Certificate
IssuerLet's Encrypt
Subject*.raubet.pe
Fingerprint6F:59:8C:E8:45:4F:03:90:08:E6:74:56:37:C8:04:30:D6:5A:A2:AB
ValidityThu, 06 Apr 2023 13:22:24 GMT - Wed, 05 Jul 2023 13:22:23 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
4.5 kB (4545 bytes)
Hash
20012b70e82c499b433b37b2a98b9079
847a4aa7495440eeca16eb6211ec72c7dea2e22b
272c9a8ee9faf4bb46b70403cda777ce98f24fd48b2083ee133478461261d5dd

Detections

Analyzer	Verdict	Alert
openphish	Webmail Providers

HTTP Headers

GET /files/id.png HTTP/1.1
Host: www.freshstar.raubet.pe
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.freshstar.raubet.pe/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 01:29:47 GMT
Server: Apache
Last-Modified: Mon, 13 Mar 2017 09:40:06 GMT
Accept-Ranges: bytes
Content-Length: 4545
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (4)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by