Report - go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4d8uESfLXM9KGnwQbkaZ

Report Overview

Visited public
2024-10-09 17:18:30
Tags
URL
go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4d8uESfLXM9KGnwQbkaZ_bn2qLBXEF7awQFJOql0Q0xXPvUlO
Finishing URL
go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4d8uESfLXM9KGnwQbkaZ_bn2qLBXEF7awQFJOql0Q0xXPvUlO
IP / ASN
104.17.74.206
#13335 CLOUDFLARENET
Title
404 - Page not found

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-10-08 18:12:09	654 B	1.8 kB	23.36.76.249
go.ups.com	741166	1992-04-07	2017-06-20 02:36:41	2024-09-25 17:31:37	1.3 kB	1.8 kB	104.17.73.206
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-10-08 18:12:21	1.3 kB	3.5 kB	23.33.119.10

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4d8uESfLXM9KGnwQbkaZ_bn2qLBXEF7awQFJOql0Q0xXPvUlO	45 B	2023-09-22 06:19	2024-12-20 21:12
Pretty URL go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4d8uESfLXM9KGnwQbkaZ_bn2qLBXEF7awQFJOql0Q0xXPvUlO IP 104.17.73.206 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-22 06:19 Last Seen2024-12-20 21:12 Times Seen174 Hash 814b8e6d4d32c92f5ec80270279dc4f4 ad337d2d41ba8714f45c8f80cfc9dea2d9b133b7 27e63897ec9fc57778718cc7f4b8575121d26fbcd9bb66e075d7c2ba655924ca Loading...

		Size	First Seen	Last Seen
	#1 Write - 13cf2cabe487c2671f59ccb340ad4b5a	21 B	2024-10-11 08:36	2024-10-11 08:36
Pretty Observations First Seen2024-10-11 08:36 Last Seen2024-10-11 08:36 Times Seen1 Hash 13cf2cabe487c2671f59ccb340ad4b5a 931a9288be999b23eca932add7e20b2d64882cf8 bf39d1fae75f239db00289935e6778c3417db172263c3a5e40773b94de1666ec Loading...

HTTP Transactions (8)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.33.119.10		504 B
URL r10.o.lencr.org/ IP 23.33.119.10:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash ca9529e5dcfdfe04a1af2baa41d988d6 2f7b1a6c5d3e1c8c9f52c513ee250006de18b00b fea81540ca4c6f34f779c3306d4414c07bab63cec6b11425d8e3c5fb74118be3 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "FEA81540CA4C6F34F779C3306D4414C07BAB63CEC6B11425D8E3C5FB74118BE3" Last-Modified: Wed, 09 Oct 2024 11:30:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17861 Expires: Wed, 09 Oct 2024 22:15:45 GMT Date: Wed, 09 Oct 2024 17:18:04 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.10		504 B
URL r10.o.lencr.org/ IP 23.33.119.10:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash c3fbe0b62fa278b1a007491908bb16f2 2ae17f1c5ae52ff197923ec0189f34ad3f43e645 a4eca96abeac5f2760f850db06e2fa5bf29dc017d9d33eabf73943fa4bb94197 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "A4ECA96ABEAC5F2760F850DB06E2FA5BF29DC017D9D33EABF73943FA4BB94197" Last-Modified: Wed, 09 Oct 2024 04:48:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7045 Expires: Wed, 09 Oct 2024 19:15:29 GMT Date: Wed, 09 Oct 2024 17:18:04 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.10		504 B
URL r10.o.lencr.org/ IP 23.33.119.10:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 46338129794811f186a0b7a4f44fa3ec f2e9fd21618da6188e9b28d1abaf563cabf4d29d c062cb8b7804448db2cfb7aec7389f996d3c14fe2699a038ab536c7e0a99ae88 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "C062CB8B7804448DB2CFB7AEC7389F996D3C14FE2699A038AB536C7E0A99AE88" Last-Modified: Tue, 08 Oct 2024 04:15:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7493 Expires: Wed, 09 Oct 2024 19:22:57 GMT Date: Wed, 09 Oct 2024 17:18:04 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.33.119.10		504 B
URL r10.o.lencr.org/ IP 23.33.119.10:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 31fc782bf1efb76a7251d3e45007b986 7cfef07644e0e4aad99bfa3dd10cf975f7c06f89 663061e811010828ed222146cbb81114a49ba635f6c6547f3601ae0c3de1409d HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "663061E811010828ED222146CBB81114A49BA635F6C6547F3601AE0C3DE1409D" Last-Modified: Tue, 08 Oct 2024 04:16:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6167 Expires: Wed, 09 Oct 2024 19:00:52 GMT Date: Wed, 09 Oct 2024 17:18:05 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.36.76.249		504 B
URL r11.o.lencr.org/ IP 23.36.76.249:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash aa746f2452828a39148ef2ed129c14f6 aab2904047696ac367e2bfc0ffb1ba44c9c84256 5c76fd0fb994332de5317dc7d533ae3edb60d9f0ce253f839e609d83a3bf0fa7 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5C76FD0FB994332DE5317DC7D533AE3EDB60D9F0CE253F839E609D83A3BF0FA7" Last-Modified: Tue, 08 Oct 2024 04:17:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4961 Expires: Wed, 09 Oct 2024 18:40:48 GMT Date: Wed, 09 Oct 2024 17:18:07 GMT Connection: keep-alive`

	r11.o.lencr.org/	23.36.76.249		504 B
URL r11.o.lencr.org/ IP 23.36.76.249:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash aa746f2452828a39148ef2ed129c14f6 aab2904047696ac367e2bfc0ffb1ba44c9c84256 5c76fd0fb994332de5317dc7d533ae3edb60d9f0ce253f839e609d83a3bf0fa7 HTTP Headers `POST / HTTP/1.1 Host: r11.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "5C76FD0FB994332DE5317DC7D533AE3EDB60D9F0CE253F839E609D83A3BF0FA7" Last-Modified: Tue, 08 Oct 2024 04:17:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4961 Expires: Wed, 09 Oct 2024 18:40:48 GMT Date: Wed, 09 Oct 2024 17:18:07 GMT Connection: keep-alive`

	go.ups.com/favicon.ico	104.17.73.206	200 OK	0 B
URL GET HTTP/2 go.ups.com/favicon.ico IP 104.17.73.206:443 ASN #13335 CLOUDFLARENET Requested by https://go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4d8uESfLXM9KGnwQbkaZ_bn2qLBXEF7awQFJOql0Q0xXPvUlO Certificate IssuerCOMODO CA Limited Subjectgo.ups.com FingerprintD7:61:25:C6:D7:26:56:CF:1E:B1:10:1E:93:1D:9A:F9:8E:CB:E7:15 ValidityFri, 31 May 2024 00:00:00 GMT - Sat, 31 May 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /favicon.ico HTTP/1.1 Host: go.ups.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://go.ups.com/ DNT: 1 Connection: keep-alive Cookie: HASSEENNOTICE=TRUE; CONSENTMGR=c1:0%7Cc3:0%7Cc5:0%7Cc6:0%7Cc7:0%7Cc8:0; __cf_bm=4pWcSDYPKw2eZA5yJSijiJdLU_xtOvrcA1PbeFi6WLs-1728494285-1.0.1.1-Xd9neJguu6F8_uWycdYAfI0vNtjfS0eFwcr.0rwuFf95BWAm5nhPcBMFDEglH7OicU8SSOe3IwP7KZQXWjdrvQ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK date: Wed, 09 Oct 2024 17:18:05 GMT x-request-id: bfa0a7332186c259 last-modified: Wed, 09 Oct 2024 17:17:26 GMT cf-cache-status: HIT age: 39 expires: Wed, 09 Oct 2024 21:18:05 GMT cache-control: public, max-age=14400 vary: Accept-Encoding server: cloudflare cf-ray: 8d0007252eb4b4f9-OSL X-Firefox-Spdy: h2`

	go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4d8uESfLXM9KGnwQbkaZ_bn2qLBXEF7awQFJOql0Q0xXPvUlO	104.17.73.206	200 OK	539 B
URL User Request GET HTTP/2 go.ups.com/OTM1LUtLRS0yNDAAAAGWEJmy4d8uESfLXM9KGnwQbkaZ_bn2qLBXEF7awQFJOql0Q0xXPvUlO IP 104.17.73.206:443 ASN #13335 CLOUDFLARENET Certificate IssuerCOMODO CA Limited Subjectgo.ups.com FingerprintD7:61:25:C6:D7:26:56:CF:1E:B1:10:1E:93:1D:9A:F9:8E:CB:E7:15 ValidityFri, 31 May 2024 00:00:00 GMT - Sat, 31 May 2025 23:59:59 GMT File type HTML document, ASCII text, with very long lines (545), with no line terminators Size 539 B (539 bytes) Hash 707972f0e7e7737919ad346ec0f2a1c5 31ef869d7eb166a9f18413ea93ad95f581ea0651 5ed7b29dfdd3c22f9fe66f920b89f2a16b7ca1be10d8c8d81fc01fa5c93b783e HTTP Headers GET /OTM1LUtLRS0yNDAAAAGWEJmy4d8uESfLXM9KGnwQbkaZ_bn2qLBXEF7awQFJOql0Q0xXPvUlO HTTP/1.1 Host: go.ups.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Cookie: HASSEENNOTICE=TRUE; CONSENTMGR=c1:0%7Cc3:0%7Cc5:0%7Cc6:0%7Cc7:0%7Cc8:0 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Wed, 09 Oct 2024 17:18:05 GMT content-type: text/html;charset=UTF-8 x-request-id: a3eb2da4eb834bfb cache-control: private, no-cache, no-store, max-age=0 referrer-policy: strict-origin x-frame-options: SAMEORIGIN x-content-type-options: nosniff content-security-policy: default-src 'self'; img-src 'self';script-src 'self' 'sha256-J+Y4l+yfxXd4cYzH9LhXUSHSb7zZu2bgddfCumVZJMo=';object-src 'none';form-action 'none';frame-src 'none';style-src 'self' 'sha256-OU0LTytxyR8kjQ+DRjRCDKhUAKEeH7rb0D5nBWOzRlQ=' cf-cache-status: DYNAMIC set-cookie: __cf_bm=4pWcSDYPKw2eZA5yJSijiJdLU_xtOvrcA1PbeFi6WLs-1728494285-1.0.1.1-Xd9neJguu6F8_uWycdYAfI0vNtjfS0eFwcr.0rwuFf95BWAm5nhPcBMFDEglH7OicU8SSOe3IwP7KZQXWjdrvQ; path=/; expires=Wed, 09-Oct-24 17:48:05 GMT; domain=.go.ups.com; HttpOnly; Secure; SameSite=None server: cloudflare cf-ray: 8d000721c8c3b4f9-OSL content-encoding: gzip X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (8)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size