Report - gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/

Report Overview

Submitted URL
gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/
IP
64.136.20.34
ASN
#13446 AS-NETZERO
Submitted
2024-05-10 01:17:36
Access
public
Website Title
gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/
Final URL
gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com	unknown	1999-06-07	2023-11-27	2024-02-01	2.4 kB	32 kB	64.136.20.34

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-09	medium	gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/	eBay Inc.
2024-05-09	medium	gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/	eBay Inc.
2024-05-09	medium	gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/	eBay Inc.
2024-05-09	medium	gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/	eBay Inc.
2024-05-09	medium	gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/	eBay Inc.
2024-05-09	medium	gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/	eBay Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/fs_img/js/set_homepage.js	1.7 kB	2023-03-07	2024-05-10
Pretty URL gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/fs_img/js/set_homepage.js IP 64.136.20.34 ASN #13446 AS-NETZERO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:00:53 Last Seen2024-05-10 03:17:37 Times Seen135 Hash 65d1bd2fb6b2997618d4487d7f0c458b e176f2620fb4c3b22e8877d0770f68bed8e1421f 24fcc4b766d9485b2e8276c0fd71fb9f129b0e2fbc90e073afbe8a7cbd3b199b Loading...

	gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/fs_img/js/overlay.js	6.5 kB	2023-03-07	2024-05-10
Pretty URL gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/fs_img/js/overlay.js IP 64.136.20.34 ASN #13446 AS-NETZERO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:00:53 Last Seen2024-05-10 03:17:37 Times Seen139 Hash 85f8bd82370a634fcb8f5aca3e407395 4065a0ff47a5b4f01df8c90adaa7a6781b4087c3 0c33d70a8a30833d45c2217aeaf8691b17d54c70c136593bf03f7b68109b84ed Loading...

	gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/fs_img/js/pt.js	4.9 kB	2023-03-07	2024-05-10
Pretty URL gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/fs_img/js/pt.js IP 64.136.20.34 ASN #13446 AS-NETZERO Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:00:53 Last Seen2024-05-10 03:17:37 Times Seen138 Hash 5a579305a5ed446e5d235fdf055af4df 460970478d97e27013664cca14b24b312db5e837 b7869a1ad7f1eec802fdbd1018fa315b26b3c92a13db66c9044dad80a8fc5b2f Loading...

	gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/	593 B	2024-02-01	2024-05-10
Pretty URL gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/ IP 64.136.20.34 ASN #13446 AS-NETZERO Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-01 15:52:27 Last Seen2024-05-10 03:17:37 Times Seen3 Hash 97ebc91b76c38ba604c73c6b3355ad5d 9fc500047dd9a0fd72032fe0f99ef92d4f87d0e5 ba487122992cd3b686fbc873f60424c6d434db4b25cfe51ceb5dd330ec742db3 Loading...

HTTP Transactions (6)

URL IP Response Size

gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/

64.136.20.34

200 OK

14 kB

URL User Request GET HTTP/1.1
gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/
IP
64.136.20.34:80
ASN
#13446 AS-NETZERO

File type
HTML document, ISO-8859 text, with very long lines (305)
Size
14 kB (14304 bytes)
Hash
d2b2159dc1ec3ca66a82ff5aea51e280
0083131ffab5de58cd9d9e7beb1ef3bea2a5b5be
85618d77bbba340da9e4421bf60ce65bbaa97053cadb140bac3d39d9da18ab4d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET / HTTP/1.1
Host: gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 01:17:12 GMT
Server: .V18 Apache
Last-Modified: Mon, 12 Feb 2007 22:02:28 GMT
Content-length: 14304
Keep-Alive: timeout=5, max=999950
Connection: Keep-Alive
Content-Type: text/html

gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/cgi-bin/image/images/bannertype/100X22.gif

64.136.20.34

200 OK

1.5 kB

URL GET HTTP/1.1
gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/cgi-bin/image/images/bannertype/100X22.gif
IP
64.136.20.34:80
ASN
#13446 AS-NETZERO

Requested by
http://gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/

File type
GIF image data, version 89a, 100 x 22
Size
1.5 kB (1505 bytes)
Hash
c898ad914400533a737fde36d57515bd
cab37d60bc45dd949ba90eaeac87d442d1a5e411
0550e19711584fe569a30946f6e72650cf67ff0fc374e768e95e83c960a82084

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /cgi-bin/image/images/bannertype/100X22.gif HTTP/1.1
Host: gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 01:17:12 GMT
Server: .V18 Apache
Last-Modified: Tue, 01 Dec 2015 11:14:29 GMT
Content-length: 1505
Keep-Alive: timeout=5, max=999971
Connection: Keep-Alive
Content-Type: image/gif

gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/fs_img/js/pt.js

64.136.20.34

200 OK

4.9 kB

URL GET HTTP/1.1
gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/fs_img/js/pt.js
IP
64.136.20.34:80
ASN
#13446 AS-NETZERO

Requested by
http://gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/

File type
ASCII text
Size
4.9 kB (4924 bytes)
Hash
5a579305a5ed446e5d235fdf055af4df
460970478d97e27013664cca14b24b312db5e837
b7869a1ad7f1eec802fdbd1018fa315b26b3c92a13db66c9044dad80a8fc5b2f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /fs_img/js/pt.js HTTP/1.1
Host: gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 01:17:12 GMT
Server: .V18 Apache
Last-Modified: Tue, 01 Dec 2015 11:15:04 GMT
ETag: "2a855-133c-525d444f8be00"
Accept-Ranges: bytes
Content-Length: 4924
Keep-Alive: timeout=5, max=999970
Connection: Keep-Alive
Content-Type: application/x-javascript

gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/fs_img/js/set_homepage.js

64.136.20.34

200 OK

1.7 kB

URL GET HTTP/1.1
gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/fs_img/js/set_homepage.js
IP
64.136.20.34:80
ASN
#13446 AS-NETZERO

Requested by
http://gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/

File type
ASCII text
Size
1.7 kB (1739 bytes)
Hash
65d1bd2fb6b2997618d4487d7f0c458b
e176f2620fb4c3b22e8877d0770f68bed8e1421f
24fcc4b766d9485b2e8276c0fd71fb9f129b0e2fbc90e073afbe8a7cbd3b199b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /fs_img/js/set_homepage.js HTTP/1.1
Host: gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 01:17:12 GMT
Server: .V18 Apache
Last-Modified: Tue, 01 Dec 2015 11:15:04 GMT
ETag: "2a856-6cb-525d444f8be00"
Accept-Ranges: bytes
Content-Length: 1739
Keep-Alive: timeout=5, max=999989
Connection: Keep-Alive
Content-Type: application/x-javascript

gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/fs_img/js/overlay.js

64.136.20.34

200 OK

6.5 kB

URL GET HTTP/1.1
gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/fs_img/js/overlay.js
IP
64.136.20.34:80
ASN
#13446 AS-NETZERO

Requested by
http://gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/

File type
ASCII text
Size
6.5 kB (6482 bytes)
Hash
85f8bd82370a634fcb8f5aca3e407395
4065a0ff47a5b4f01df8c90adaa7a6781b4087c3
0c33d70a8a30833d45c2217aeaf8691b17d54c70c136593bf03f7b68109b84ed

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /fs_img/js/overlay.js HTTP/1.1
Host: gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 01:17:12 GMT
Server: .V18 Apache
Last-Modified: Tue, 01 Dec 2015 11:15:04 GMT
ETag: "2a852-1952-525d444f8be00"
Accept-Ranges: bytes
Content-Length: 6482
Keep-Alive: timeout=5, max=999948
Connection: Keep-Alive
Content-Type: application/x-javascript

gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/favicon.ico

64.136.20.34

200 Special Default

1.4 kB

URL GET HTTP/1.1
gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/favicon.ico
IP
64.136.20.34:80
ASN
#13446 AS-NETZERO

Requested by
http://gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/

File type
MS Windows icon resource - 1 icon, 16x16
Size
1.4 kB (1406 bytes)
Hash
d009cced4ed43383291700a3b7a18f86
eff142aafd81e111c728ccf1f1df36cf1c244dce
748f652b4067e9b431761049ae7e3b77e5cf4d3042b2cd7a3b5da379d95d8dab

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	eBay Inc.

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gfrggrfhtfggtyhfygftgffhffgfgfgfg.50megs.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 Special Default
Date: Fri, 10 May 2024 01:17:13 GMT
Server: .V18 Apache
Last-Modified: Tue, 01 Dec 2015 11:14:38 GMT
Content-length: 1406
Keep-Alive: timeout=5, max=999988
Connection: Keep-Alive
Content-Type: image/gif

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (6)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections