Report - page-2321656497.at.ua/

Report Overview

Submitted URL
page-2321656497.at.ua/
IP
213.174.157.151
ASN
#39572 DataWeb Global Group B.V.
Submitted
2023-06-01 22:35:53
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
9
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
page-2321656497.at.ua	unknown	2007-08-01	2016-10-18	2023-05-06	3.1 kB	54 kB	213.174.157.151
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-05-31	666 B	1.4 kB	142.250.74.3
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2023-06-01	438 B	34 kB	142.250.74.170

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-01 22:35:34	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-01 22:35:34	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-01 22:35:35	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-01 22:35:35	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-01 22:35:35	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-01 22:35:35	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-01 22:35:36	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-01 22:35:36	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)
2023-06-01 22:35:36	low	Client IP	Internal IP	ETPRO INFO Observed DNS Query for Ukraine Domain (.ua)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js	93 kB	2023-03-07	2024-04-24
Pretty URL ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js IP 142.250.74.170 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-04-24 15:54:13 Times Seen16792 Hash e0e0559014b222245deb26b6ae8bd940 e2f3603e23711f6446f278a411d905623d65201e 89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e Loading...

	page-2321656497.at.ua/.serr/js/core.js	414 B	2023-03-07	2024-02-05
Pretty URL page-2321656497.at.ua/.serr/js/core.js IP 213.174.157.151 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03:32 Last Seen2024-02-05 06:02:52 Times Seen383 Hash 5701bc484b705ef62821a39f29742cba 2da3dc6a488db5812f1911bf96888a4c7aaf436f 80053729721b15fe8667def4e6270e156043789e01f7ec35defae93933274493 Loading...

	page-2321656497.at.ua/	0 B	2023-03-07	2024-04-25
Pretty URL page-2321656497.at.ua/ IP 213.174.157.151 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-25 03:23:18 Times Seen37053225 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (11)

	URL	IP	Response	Size
	page-2321656497.at.ua/	213.174.157.151	301 Moved Permanently	178 B
URL User Request GET HTTP/1.1 page-2321656497.at.ua/ IP 213.174.157.151:443 ASN #39572 DataWeb Global Group B.V. Certificate IssuerDigiCert Inc Subject.at.ua Fingerprint53:87:0B:5B:1D:E6:85:B9:80:14:0B:9A:26:E5:CF:B4:C3:FB:0F:7D ValidityFri, 17 Jun 2022 00:00:00 GMT - Thu, 29 Jun 2023 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size 178 B (178 bytes) Hash cd2e0e43980a00fb6a2742d3afd803b8 81ffbd1712afe8cdf138b570c0fc9934742c33c1 bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d HTTP Headers `GET / HTTP/1.1 Host: page-2321656497.at.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 01 Jun 2023 22:35:39 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Keep-Alive: timeout=15 Location: http://page-2321656497.at.ua/ X-Frame-Options: SAMEORIGIN`

	page-2321656497.at.ua/	213.174.157.151	301 Moved Permanently	2.1 kB
URL User Request GET HTTP/1.1 page-2321656497.at.ua/ IP 213.174.157.151:443 ASN #39572 DataWeb Global Group B.V. Certificate IssuerDigiCert Inc Subject.at.ua Fingerprint53:87:0B:5B:1D:E6:85:B9:80:14:0B:9A:26:E5:CF:B4:C3:FB:0F:7D ValidityFri, 17 Jun 2022 00:00:00 GMT - Thu, 29 Jun 2023 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text Size 2.1 kB (2061 bytes) Hash 95b9600f28db2ee4c359e4f9b6074d2b ca9025e1e2621a4b8aaec27bec0677937e84b167 ec766b63f1417b186b4215d8af29a6c8a46231b1f36eea41e130f16f3bf18819 HTTP Headers `GET / HTTP/1.1 Host: page-2321656497.at.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not found Server: nginx Date: Thu, 01 Jun 2023 22:35:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Cache-Control: no-cache, no-store Pragma: no-cache Vary: host Content-Encoding: gzip`

	ocsp.pki.goog/gts1c3	142.250.74.3		472 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.3:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash 02593b51cd737e1085e5837a9a47c755 aab410449655b9fddf070f3e25a1a8e5aee59530 0ea607d017e63bf06a742560b582d99802dc477bba715d9890e1d51663e50d99 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Jun 2023 22:35:36 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js	142.250.74.170	200 OK	33 kB
URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js IP 142.250.74.170:443 ASN #15169 GOOGLE Requested by http://page-2321656497.at.ua/ Certificate IssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT File type ASCII text, with very long lines (32072) Size 33 kB (32954 bytes) Hash e0e0559014b222245deb26b6ae8bd940 e2f3603e23711f6446f278a411d905623d65201e 89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e HTTP Headers `GET /ajax/libs/jquery/1.10.2/jquery.min.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://page-2321656497.at.ua/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes content-encoding: gzip access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers" report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]} timing-allow-origin: * content-length: 32954 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Tue, 30 May 2023 17:51:24 GMT expires: Wed, 29 May 2024 17:51:24 GMT cache-control: public, max-age=31536000, stale-while-revalidate=2592000 age: 189852 last-modified: Tue, 03 Mar 2020 19:15:00 GMT content-type: text/javascript; charset=UTF-8 vary: Accept-Encoding alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	page-2321656497.at.ua/.serr/css/style.css	213.174.157.151	200 OK	4.3 kB
URL GET HTTP/1.1 page-2321656497.at.ua/.serr/css/style.css IP 213.174.157.151:80 ASN #39572 DataWeb Global Group B.V. Requested by http://page-2321656497.at.ua/ File type ASCII text, with CRLF line terminators Size 4.3 kB (4288 bytes) Hash 98a90bc50f0b53842d1863fec51697fa 2e39243745ccb62e77a2fa92357f703619aba6d8 6fcbe05fd7251ea2506caecbb12812dc2273ceb231a3182aeee4124b0165d9ef HTTP Headers `GET /.serr/css/style.css HTTP/1.1 Host: page-2321656497.at.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://page-2321656497.at.ua/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Jun 2023 22:35:39 GMT Content-Type: text/css Last-Modified: Wed, 10 May 2023 12:56:36 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 ETag: W/"645b9484-4c25" X-Frame-Options: SAMEORIGIN Content-Encoding: gzip`

	ocsp.pki.goog/gts1c3	142.250.74.3		472 B
URL ocsp.pki.goog/gts1c3 IP 142.250.74.3:0 ASN #15169 GOOGLE File type data Size 472 B (472 bytes) Hash 02593b51cd737e1085e5837a9a47c755 aab410449655b9fddf070f3e25a1a8e5aee59530 0ea607d017e63bf06a742560b582d99802dc477bba715d9890e1d51663e50d99 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Jun 2023 22:35:36 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	page-2321656497.at.ua/.serr/js/core.js	213.174.157.151	200 OK	234 B
URL GET HTTP/1.1 page-2321656497.at.ua/.serr/js/core.js IP 213.174.157.151:80 ASN #39572 DataWeb Global Group B.V. Requested by http://page-2321656497.at.ua/ File type ASCII text, with very long lines (414), with no line terminators Size 234 B (234 bytes) Hash 5701bc484b705ef62821a39f29742cba 2da3dc6a488db5812f1911bf96888a4c7aaf436f 80053729721b15fe8667def4e6270e156043789e01f7ec35defae93933274493 HTTP Headers `GET /.serr/js/core.js HTTP/1.1 Host: page-2321656497.at.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://page-2321656497.at.ua/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Jun 2023 22:35:39 GMT Content-Type: text/javascript Last-Modified: Wed, 10 May 2023 12:56:36 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 ETag: W/"645b9484-19e" X-Frame-Options: SAMEORIGIN Content-Encoding: gzip`

	page-2321656497.at.ua/.serr/img/ulogo.svg	213.174.157.151	200 OK	4.2 kB
URL GET HTTP/1.1 page-2321656497.at.ua/.serr/img/ulogo.svg IP 213.174.157.151:80 ASN #39572 DataWeb Global Group B.V. Requested by http://page-2321656497.at.ua/ File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size 4.2 kB (4235 bytes) Hash 993299552bfd263cd4a75ad398e75b58 3fc9ad991516b8ad0c6553a05de4a8c9759c5020 c660064588748948fcadc6a86b73dcb981d124c370b0ba764fe8a210854f6cd5 HTTP Headers `GET /.serr/img/ulogo.svg HTTP/1.1 Host: page-2321656497.at.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://page-2321656497.at.ua/.serr/css/style.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Jun 2023 22:35:40 GMT Content-Type: image/svg+xml Content-Length: 4235 Last-Modified: Wed, 10 May 2023 12:56:36 GMT Connection: keep-alive Keep-Alive: timeout=15 ETag: "645b9484-108b" X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes`

	page-2321656497.at.ua/.serr/img/nofound.png	213.174.157.151	200 OK	35 kB
URL GET HTTP/1.1 page-2321656497.at.ua/.serr/img/nofound.png IP 213.174.157.151:80 ASN #39572 DataWeb Global Group B.V. Requested by http://page-2321656497.at.ua/ File type PNG image data, 294 x 240, 8-bit/color RGB, non-interlaced\012- data Size 35 kB (34722 bytes) Hash cfd5b3c7df2dea454f19c96505e74905 02a66f5ce373921d2d065377fd3c9f1045cf5d99 a160c19e07bb27c7e3b95153c6392bf6664398fb2cf57f12c386bc7a8d43e551 HTTP Headers `GET /.serr/img/nofound.png HTTP/1.1 Host: page-2321656497.at.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://page-2321656497.at.ua/.serr/css/style.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Jun 2023 22:35:40 GMT Content-Type: image/png Content-Length: 34722 Last-Modified: Wed, 10 May 2023 12:56:36 GMT Connection: keep-alive Keep-Alive: timeout=15 ETag: "645b9484-87a2" X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes`

	page-2321656497.at.ua/.serr/img/eyes.png	213.174.157.151	200 OK	3.3 kB
URL GET HTTP/1.1 page-2321656497.at.ua/.serr/img/eyes.png IP 213.174.157.151:80 ASN #39572 DataWeb Global Group B.V. Requested by http://page-2321656497.at.ua/ File type PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced\012- data Size 3.3 kB (3288 bytes) Hash 61ecb4143b3582b11f3b5cd1503d9d4e 04fdc163629c4cd8aac7f237e21a8f27b96624ab a7b92bb840e66c0f1b47e8b5cd5fab170935dab76fdc9a7264b5fefe57a39c6b HTTP Headers `GET /.serr/img/eyes.png HTTP/1.1 Host: page-2321656497.at.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://page-2321656497.at.ua/.serr/css/style.css Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Jun 2023 22:35:40 GMT Content-Type: image/png Content-Length: 3288 Last-Modified: Wed, 10 May 2023 12:56:36 GMT Connection: keep-alive Keep-Alive: timeout=15 ETag: "645b9484-cd8" X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes`

	page-2321656497.at.ua/.serr/img/favicon.ico	213.174.157.151	404 Not Found	2.7 kB
URL GET HTTP/1.1 page-2321656497.at.ua/.serr/img/favicon.ico IP 213.174.157.151:80 ASN #39572 DataWeb Global Group B.V. Requested by http://page-2321656497.at.ua/ File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (348) Size 2.7 kB (2656 bytes) Hash 5c75256ff15177fadac5c895c962b733 e90e0c7a8be93e60dc3410157c38d7d3f732b88f 62f1c6afca91811f41c42ddb85464a4ddf0787793a079a68587c1a0f0b53c5d3 HTTP Headers `GET /.serr/img/favicon.ico HTTP/1.1 Host: page-2321656497.at.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://page-2321656497.at.ua/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Server: nginx Date: Thu, 01 Jun 2023 22:35:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Content-Encoding: gzip`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers