Report - purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html

Report Overview

Submitted URL
purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html
IP
3.5.28.176
ASN
#0
Submitted
2023-05-29 15:48:27
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.r2m01.amazontrust.com	unknown	2007-05-11	2022-10-12	2023-05-29	340 B	943 B	54.230.80.227
purelander.s3.amazonaws.com	unknown	2005-08-18	2022-06-05	2023-05-21	3.6 kB	138 kB	3.5.21.131
deehalig.net	105256	2021-09-14	2021-09-14	2023-05-28	1.0 kB	43 kB	139.45.197.251
gibune-anding.icu	unknown	2020-05-13	2020-07-23	2023-05-22	974 B	826 B	18.184.38.55

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-05-29 15:48:20	medium	Client IP	Internal IP	ET INFO DNS Query for Suspicious .icu Domain
2023-05-29 15:48:20	medium	Client IP	18.184.38.55	ET INFO Suspicious Domain (*.icu) in TLS SNI

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (12)

	URL	IP	Response	Size
	ocsp.r2m01.amazontrust.com/	54.230.80.227		471 B
URL ocsp.r2m01.amazontrust.com/ IP 54.230.80.227:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash 6aa1e5179a3efdc10b6131b51904c2b5 a1813e9a94a722d74d00c343061e53ae80c0ca9c 9bf5572215e8aa9acb179fffdf6e0e6c3ebc7b1c9ab99107e43df85e96c8c363 HTTP Headers `POST / HTTP/1.1 Host: ocsp.r2m01.amazontrust.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: 'max-age=7200' Date: Mon, 29 May 2023 15:48:10 GMT Last-Modified: Mon, 29 May 2023 15:46:19 GMT Server: ECAcc (nya/7968) X-Cache: Miss from cloudfront Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: G2_wIupl6epFmNT-xtbexEzyP0cdcFkjgfnSSvIVlgdee0FKeRw_0A== Age: 111`

	purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html	3.5.21.131	200 OK	5.0 kB
URL User Request GET HTTP/1.1 purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html IP 3.5.21.131:443 ASN #14618 AMAZON-AES Certificate IssuerAmazon Subject.s3.amazonaws.com Fingerprint21:97:5B:A2:18:BA:6E:D4:B9:F5:C2:8F:5C:EF:01:F0:FC:54:A9:4F ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (378) Size 5.0 kB (4968 bytes) Hash 0a71cbb501ff453543ed39be695c657b 7ebbd3e5d6a83fc048cc172a5340c16746b29199 84e85038765e1018e856e0bc39e78b5c252da1d553116e2a3a6c5c74f40b6816 HTTP Headers GET /cbed5ff967f879997cd982c3fa58072f/index.html HTTP/1.1 Host: purelander.s3.amazonaws.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK x-amz-id-2: OtSUIPfQanibMpaFAJXyIIwhbGVBty3N2Wh9QInXnoUbiPg1RcTgSI5mfs0uufyaKdJSvHmoqFZCRWBU8iuEIw== x-amz-request-id: 4S9EZBYN8Z0SB2H3 Date: Mon, 29 May 2023 15:48:11 GMT Last-Modified: Tue, 13 Sep 2022 15:33:05 GMT ETag: "0a71cbb501ff453543ed39be695c657b" Accept-Ranges: bytes Content-Type: text/html Server: AmazonS3 Content-Length: 4968`

	purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/css/style.css	3.5.21.131	200 OK	122 kB
URL GET HTTP/1.1 purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/css/style.css IP 3.5.21.131:443 ASN #14618 AMAZON-AES Requested by https://purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html Certificate IssuerAmazon Subject.s3.amazonaws.com Fingerprint21:97:5B:A2:18:BA:6E:D4:B9:F5:C2:8F:5C:EF:01:F0:FC:54:A9:4F ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT File type ASCII text, with very long lines (65371) Size 122 kB (122540 bytes) Hash 5d5357cb3704e1f43a1f5bfed2aebf42 08df9a96752852f2cbd310c30facd934e348c2c5 31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87 HTTP Headers GET /cbed5ff967f879997cd982c3fa58072f/css/style.css HTTP/1.1 Host: purelander.s3.amazonaws.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/*;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK x-amz-id-2: 7VJSof0MeLKoL7UowKalZwL1PAy4YA06TWbG609MpU5IWXED0Jf++hnTPkh+EVHq9M+EIu4QB80EPstSeXkFBA== x-amz-request-id: 4S9CJTPXWG2B1CSR Date: Mon, 29 May 2023 15:48:11 GMT Last-Modified: Tue, 13 Sep 2022 15:33:06 GMT ETag: "5d5357cb3704e1f43a1f5bfed2aebf42" Accept-Ranges: bytes Content-Type: text/css Server: AmazonS3 Content-Length: 122540`

	purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/js/jquery.js	3.5.21.131	404 Not Found	328 B
URL GET HTTP/1.1 purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/js/jquery.js IP 3.5.21.131:443 ASN #14618 AMAZON-AES Requested by https://purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html Certificate IssuerAmazon Subject.s3.amazonaws.com Fingerprint21:97:5B:A2:18:BA:6E:D4:B9:F5:C2:8F:5C:EF:01:F0:FC:54:A9:4F ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT File type XML 1.0 document text\012- XML document, ASCII text Size 328 B (328 bytes) Hash bb64da3f775bc1f333f0e0d169ebe856 aa9ed14f0bffca7be09d5def55de2e6323468ea4 8492e6bd4cd44a9752f0602e8766956afff17548615be67bff7436b49eb4007d HTTP Headers `GET /cbed5ff967f879997cd982c3fa58072f/js/jquery.js HTTP/1.1 Host: purelander.s3.amazonaws.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found x-amz-request-id: 4S91N29RN9E6W6ZM x-amz-id-2: tCgK7ZU5zleCWAXfXB31r7Xwt/OFU2izTYwfSlAylbXTuM/qpET6NE4jqihdowLP8dA54A0wxIJgCf+0N74jnA== Content-Type: application/xml Transfer-Encoding: chunked Date: Mon, 29 May 2023 15:48:10 GMT Server: AmazonS3`

	purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/js/bioep.min.js	3.5.21.131	200 OK	5.3 kB
URL GET HTTP/1.1 purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/js/bioep.min.js IP 3.5.21.131:443 ASN #14618 AMAZON-AES Requested by https://purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html Certificate IssuerAmazon Subject.s3.amazonaws.com Fingerprint21:97:5B:A2:18:BA:6E:D4:B9:F5:C2:8F:5C:EF:01:F0:FC:54:A9:4F ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT File type ASCII text, with very long lines (874), with CRLF line terminators Size 5.3 kB (5292 bytes) Hash b4be5a852fefdae43b355f2c154e3d65 d5a07889208ed421085aa023485bec0a133e10fc 325981e28cde77631c69c478b3c5e84e7284218b0659284217f80e9766381641 HTTP Headers `GET /cbed5ff967f879997cd982c3fa58072f/js/bioep.min.js HTTP/1.1 Host: purelander.s3.amazonaws.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK x-amz-id-2: uGtmTBNWqTFBD2fiz/10LjIINz3/oeg3uk8JVqo43jvJCmYgJGrRG0xthKMAfeGCNVkUx+l3yaSdMp+2663MyQ== x-amz-request-id: 4S9EPWG6M13GWRXG Date: Mon, 29 May 2023 15:48:11 GMT Last-Modified: Tue, 13 Sep 2022 15:33:05 GMT ETag: "b4be5a852fefdae43b355f2c154e3d65" Accept-Ranges: bytes Content-Type: application/javascript Server: AmazonS3 Content-Length: 5292`

	purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/img/checkmark.png	3.5.21.131	200 OK	1.8 kB
URL GET HTTP/1.1 purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/img/checkmark.png IP 3.5.21.131:443 ASN #14618 AMAZON-AES Requested by https://purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html Certificate IssuerAmazon Subject.s3.amazonaws.com Fingerprint21:97:5B:A2:18:BA:6E:D4:B9:F5:C2:8F:5C:EF:01:F0:FC:54:A9:4F ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data Size 1.8 kB (1830 bytes) Hash 42fa8951d2168ea199ea554143648d92 5cbe5054d3594c950709225428d9c134d78e91d7 66db950dc7914781705f9b92f0b90a1adaa742a3d79ef35549a3466c7fd24190 HTTP Headers GET /cbed5ff967f879997cd982c3fa58072f/img/checkmark.png HTTP/1.1 Host: purelander.s3.amazonaws.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK x-amz-id-2: Ijyt+3Y1j3gS1BqQYnpH9/XJRRJRQMDDPeOm+p/f56y7CttGdA3hvWZpH2JtLlyAXVyr/0tgt5Ld0+aG2ZZl4w== x-amz-request-id: 4S99SQD54TTERR3G Date: Mon, 29 May 2023 15:48:11 GMT Last-Modified: Tue, 13 Sep 2022 15:33:05 GMT ETag: "42fa8951d2168ea199ea554143648d92" Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 1830`

	purelander.s3.amazonaws.com/favicon.ico	3.5.21.131	404 Not Found	294 B
URL GET HTTP/1.1 purelander.s3.amazonaws.com/favicon.ico IP 3.5.21.131:443 ASN #14618 AMAZON-AES Requested by https://purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html Certificate IssuerAmazon Subject.s3.amazonaws.com Fingerprint21:97:5B:A2:18:BA:6E:D4:B9:F5:C2:8F:5C:EF:01:F0:FC:54:A9:4F ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT File type XML 1.0 document text\012- XML document, ASCII text Size 294 B (294 bytes) Hash 8ea09b61467a071914803ccc6a2caf0b de427627f7a8ed70bf5e0cf90c81fb4b03508b4f b5b95fd221226b35a1903ac2261ddbadcdc6c2043d13f5fa7bf28616478fda4d HTTP Headers `GET /favicon.ico HTTP/1.1 Host: purelander.s3.amazonaws.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found x-amz-request-id: Y6ARKA5QF3V82RK4 x-amz-id-2: ZcWc9wwTbqFEJktPB3yKN7Tgat4T7KUlGoIttiKVI1LRrTeDBL3eSRksP87mRZjJd6IFDkCprMv9DAkcYxrOjA== Content-Type: application/xml Transfer-Encoding: chunked Date: Mon, 29 May 2023 15:48:10 GMT Server: AmazonS3`

	deehalig.net/zone?&pub=0&zone_id=5377247&is_mobile=false&domain=purelander.s3.amazonaws.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest	139.45.197.251	200 OK	0 B
URL POST HTTP/2 deehalig.net/zone?&pub=0&zone_id=5377247&is_mobile=false&domain=purelander.s3.amazonaws.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest IP 139.45.197.251:443 ASN #9002 RETN Limited Requested by https://purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html Certificate IssuerLet's Encrypt Subjectdeehalig.net Fingerprint2C:9D:DA:32:1D:B3:70:D5:60:17:43:48:BC:26:C8:B7:AA:F8:4E:71 ValidityFri, 07 Apr 2023 05:21:25 GMT - Thu, 06 Jul 2023 05:21:24 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /zone?&pub=0&zone_id=5377247&is_mobile=false&domain=purelander.s3.amazonaws.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest HTTP/1.1 Host: deehalig.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://purelander.s3.amazonaws.com DNT: 1 Connection: keep-alive Referer: https://purelander.s3.amazonaws.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 200 OK server: nginx date: Mon, 29 May 2023 15:48:11 GMT content-length: 0 x-trace-id: be8726b04a7ad44464d566b9c3651ef0 access-control-allow-origin: https://purelander.s3.amazonaws.com access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept strict-transport-security: max-age=1 x-content-type-options: nosniff X-Firefox-Spdy: h2`

	purelander.s3.amazonaws.com/sw-check-permissions-44ddd.js	3.5.21.131	200 OK	566 B
URL GET HTTP/1.1 purelander.s3.amazonaws.com/sw-check-permissions-44ddd.js IP 3.5.21.131:443 ASN #14618 AMAZON-AES Requested by https://purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html Certificate IssuerAmazon Subject.s3.amazonaws.com Fingerprint21:97:5B:A2:18:BA:6E:D4:B9:F5:C2:8F:5C:EF:01:F0:FC:54:A9:4F ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Dec 2023 23:59:59 GMT File type Java source, ASCII text Size 566 B (566 bytes) Hash ef67fedae8cd308c7f574c396a36916f 8b3e85c9606c930aff0f37ac37a56dbde4967bab 14bdc114f5c7740d9c3b9d25a3116cfade563f1119f7e338440d7cf7b2aeda78 HTTP Headers `GET /sw-check-permissions-44ddd.js HTTP/1.1 Host: purelander.s3.amazonaws.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Moz: prefetch DNT: 1 Connection: keep-alive Referer: https://purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK x-amz-id-2: KFPLTeKbhGTVB4azmMUTg2Nd6z8haU0YQjqpYuB/ASdfpTnD9wrXeitkVL+i8keNgYg+cbDKZ1oWsk2FtKU1yQ== x-amz-request-id: Y6AX4M06852472M9 Date: Mon, 29 May 2023 15:48:12 GMT Last-Modified: Tue, 13 Sep 2022 21:02:19 GMT ETag: "ef67fedae8cd308c7f574c396a36916f" Accept-Ranges: bytes Content-Type: application/javascript Server: AmazonS3 Content-Length: 566`

	gibune-anding.icu/click	18.184.38.55	400 Bad Request	152 B
URL User Request GET HTTP/2 gibune-anding.icu/click IP 18.184.38.55:443 ASN #16509 AMAZON-02 Certificate IssuerLet's Encrypt Subjectgibune-anding.icu Fingerprint3D:2C:5A:13:C9:B3:CA:BA:99:B1:D6:BE:D4:A2:35:1B:DC:40:12:9E ValidityTue, 16 May 2023 06:08:12 GMT - Mon, 14 Aug 2023 06:08:11 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Size 152 B (152 bytes) Hash d9bacc468aa23334526933389545e120 e26288b4bada404ce340ca72989f9f1193dc649c 0605685efb44dd3decd77517436c575731b61f807247587de67080c579ffa2d4 HTTP Headers GET /click HTTP/1.1 Host: gibune-anding.icu User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://purelander.s3.amazonaws.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 400 Bad Request server: nginx date: Mon, 29 May 2023 15:48:21 GMT content-type: text/html content-length: 152 cache-control: no-store, no-cache, pre-check=0, post-check=0 expires: Thu, 01 Jan 1970 00:00:00 GMT pragma: no-cache X-Firefox-Spdy: h2`

	gibune-anding.icu/favicon.ico	18.184.38.55	400 Bad Request	150 B
URL GET HTTP/2 gibune-anding.icu/favicon.ico IP 18.184.38.55:443 ASN #16509 AMAZON-02 Requested by https://gibune-anding.icu/click Certificate IssuerLet's Encrypt Subjectgibune-anding.icu Fingerprint3D:2C:5A:13:C9:B3:CA:BA:99:B1:D6:BE:D4:A2:35:1B:DC:40:12:9E ValidityTue, 16 May 2023 06:08:12 GMT - Mon, 14 Aug 2023 06:08:11 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 150 B (150 bytes) Hash 7f077f1fce3d566040b0d69eb1f27d8f 28d9c5f6b214c5cdbe7f7e55d6ed5e82080dea01 487ad0d2cf075f4328a1adf57ef428759ad4e2c873a8ebd2ad9653990829c9cf HTTP Headers `GET /favicon.ico HTTP/1.1 Host: gibune-anding.icu User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://gibune-anding.icu/click Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 400 Bad Request server: nginx date: Mon, 29 May 2023 15:48:21 GMT content-type: text/html content-length: 150 cache-control: no-store, no-cache, pre-check=0, post-check=0 pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT X-Firefox-Spdy: h2`

	deehalig.net/pfe/current/micro.tag.min.js?z=5377247&sw=/sw-check-permissions-44ddd.js	139.45.197.251	200 OK	42 kB
URL GET HTTP/2 deehalig.net/pfe/current/micro.tag.min.js?z=5377247&sw=/sw-check-permissions-44ddd.js IP 139.45.197.251:443 ASN #9002 RETN Limited Requested by https://purelander.s3.amazonaws.com/cbed5ff967f879997cd982c3fa58072f/index.html Certificate IssuerLet's Encrypt Subjectdeehalig.net Fingerprint2C:9D:DA:32:1D:B3:70:D5:60:17:43:48:BC:26:C8:B7:AA:F8:4E:71 ValidityFri, 07 Apr 2023 05:21:25 GMT - Thu, 06 Jul 2023 05:21:24 GMT File type C source, ASCII text, with very long lines (42050), with no line terminators Size 42 kB (42050 bytes) Hash 348aaf537e25d9ba3675b0202c78cb6d eaccff0d833dcb09d9f359cdcde33798deec6bfd cc5c0daa5580f8ad52aba290bf9055d9322a43e36d4fed60ebfd2d2e01f19987 HTTP Headers `GET /pfe/current/micro.tag.min.js?z=5377247&sw=/sw-check-permissions-44ddd.js HTTP/1.1 Host: deehalig.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://purelander.s3.amazonaws.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Mon, 29 May 2023 15:48:11 GMT content-type: application/javascript last-modified: Mon, 29 May 2023 10:02:24 GMT etag: W/"64747830-a442" access-control-allow-credentials: true cache-control: no-cache pragma: no-cache content-encoding: gzip X-Firefox-Spdy: h2`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (12)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP