Report - vk.com/doc228185173_661589625?hash=D2DPjWz1RqXmdMLCaZvtDyDWKzSBvkLmqmFVhqiYTUw&dl=3a8KG0bPuZ6yCEnPwEbQuEZ2De7YKfZRMK40B5Ie1xc&api=1&no_preview=1#orig

Report Overview

Submitted URL
vk.com/doc228185173_661589625?hash=D2DPjWz1RqXmdMLCaZvtDyDWKzSBvkLmqmFVhqiYTUw&dl=3a8KG0bPuZ6yCEnPwEbQuEZ2De7YKfZRMK40B5Ie1xc&api=1&no_preview=1#orig
IP
87.240.132.72
ASN
#47541 VKontakte Ltd
Submitted
2023-06-14 20:32:07
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
4
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp2.globalsign.com	1544	1999-04-19	2012-05-23	2023-06-14	714 B	3.9 kB	104.18.20.226
vk.com	2243	1997-06-24	2012-05-21	2023-06-14	1.2 kB	268 kB	87.240.132.72
psv4.userapi.com	43011	2008-09-24	2015-08-31	2023-06-14	1.4 kB	534 kB	87.240.137.140

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-14 20:31:36	low	Client IP	Internal IP	ET INFO URL Shortening Service Domain in DNS Lookup (vk .com)
2023-06-14 20:31:36	low	Client IP	Internal IP	ET INFO URL Shortening Service Domain in DNS Lookup (vk .com)
2023-06-14 20:31:36	low	Client IP	Internal IP	ET INFO URL Shortening Service Domain in DNS Lookup (vk .com)
2023-06-14 20:31:36	low	Client IP	87.240.132.72	ET INFO Observed URL Shortening Service Domain (vk .com in TLS SNI)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

	URL	IP	Response	Size
	ocsp2.globalsign.com/gsorganizationvalsha2g2	104.18.20.226		1.5 kB
URL ocsp2.globalsign.com/gsorganizationvalsha2g2 IP 104.18.20.226:0 ASN #13335 CLOUDFLARENET File type data Size 1.5 kB (1459 bytes) Hash 163ffbc5fa66f5594dc39956f962f1ff 1cab302e996d789f9fcf7d5d41cc17d4b69b1168 69e4f92c481f8c2481d47438959ded7db21ce2afd15e21622c27de6e1fc24c31 HTTP Headers `POST /gsorganizationvalsha2g2 HTTP/1.1 Host: ocsp2.globalsign.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Wed, 14 Jun 2023 20:31:37 GMT Content-Type: application/ocsp-response Content-Length: 1459 Connection: keep-alive Expires: Sun, 18 Jun 2023 18:43:17 GMT ETag: "1cab302e996d789f9fcf7d5d41cc17d4b69b1168" Last-Modified: Wed, 14 Jun 2023 18:43:18 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Age: 2957 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 7d7556803cddb4f7-OSL`

	vk.com/doc228185173_661589625?hash=D2DPjWz1RqXmdMLCaZvtDyDWKzSBvkLmqmFVhqiYTUw&dl=3a8KG0bPuZ6yCEnPwEbQuEZ2De7YKfZRMK40B5Ie1xc&api=1&no_preview=1	87.240.132.72		20 B
URL vk.com/doc228185173_661589625?hash=D2DPjWz1RqXmdMLCaZvtDyDWKzSBvkLmqmFVhqiYTUw&dl=3a8KG0bPuZ6yCEnPwEbQuEZ2De7YKfZRMK40B5Ie1xc&api=1&no_preview=1 IP 87.240.132.72:0 ASN #47541 VKontakte Ltd File type gzip compressed data, from Unix\012- data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers GET /doc228185173_661589625?hash=D2DPjWz1RqXmdMLCaZvtDyDWKzSBvkLmqmFVhqiYTUw&dl=3a8KG0bPuZ6yCEnPwEbQuEZ2De7YKfZRMK40B5Ie1xc&api=1&no_preview=1 HTTP/1.1 Host: vk.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found server: kittenx date: Wed, 14 Jun 2023 20:31:37 GMT content-type: text/html; charset=windows-1251 content-length: 20 location: https://psv4.userapi.com/c909328/u228185173/docs/d17/9e022bfedb54/OriginalBuild.bmp?extra=gA4x1Mx_HzvC5nNod540yz5cD93tA4PW8Ngz8UjJFRgGW2YX3CBlUcXGQ8Yr91HRXQ8_9AZkYjPFJpFux2NQHqek1il-HsVtkX3F040LAokihILTirrqgfY9E4LlW56vfq7gqauCW9vQ&dl=1 x-powered-by: KPHP/7.4.113971 set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly remixlang=3; expires=Fri, 07 Jun 2024 15:53:39 GMT; path=/; domain=.vk.com remixstlid=9075560260089345141_uuQfCSEQ7MMHCKTqMiqlqDFZezlwuBGujfSQuRurwzk; expires=Thu, 13 Jun 2024 20:31:37 GMT; path=/; domain=.vk.com; secure remixir=1; path=/; domain=.vk.com; secure; HttpOnly cache-control: no-store x-robots-tag: noindex,nofollow content-encoding: gzip x-frontend: front220204 strict-transport-security: max-age=15768000 access-control-expose-headers: X-Frontend X-Firefox-Spdy: h2

	ocsp2.globalsign.com/gsorganizationvalsha2g2	104.18.20.226		1.5 kB
URL ocsp2.globalsign.com/gsorganizationvalsha2g2 IP 104.18.20.226:0 ASN #13335 CLOUDFLARENET File type data Size 1.5 kB (1459 bytes) Hash a1b39d85398e4f2444866f47bf85b67d e1c93392fdf9262e61b8b9b72dd79f50b8d76aeb 036e0561cb7a97f00baa3b89860be3bd792a7dd6b14bd134c5cce9083e9d237c HTTP Headers `POST /gsorganizationvalsha2g2 HTTP/1.1 Host: ocsp2.globalsign.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Wed, 14 Jun 2023 20:31:37 GMT Content-Type: application/ocsp-response Content-Length: 1459 Connection: keep-alive Expires: Sun, 18 Jun 2023 16:12:01 GMT ETag: "e1c93392fdf9262e61b8b9b72dd79f50b8d76aeb" Last-Modified: Wed, 14 Jun 2023 16:12:02 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Age: 2314 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 7d755682e918b4f7-OSL`

	psv4.userapi.com/c909328/u228185173/docs/d17/9e022bfedb54/OriginalBuild.bmp?extra=gA4x1Mx_HzvC5nNod540yz5cD93tA4PW8Ngz8UjJFRgGW2YX3CBlUcXGQ8Yr91HRXQ8_9AZkYjPFJpFux2NQHqek1il-HsVtkX3F040LAokihILTirrqgfY9E4LlW56vfq7gqauCW9vQ&dl=1	87.240.137.140		266 kB
URL psv4.userapi.com/c909328/u228185173/docs/d17/9e022bfedb54/OriginalBuild.bmp?extra=gA4x1Mx_HzvC5nNod540yz5cD93tA4PW8Ngz8UjJFRgGW2YX3CBlUcXGQ8Yr91HRXQ8_9AZkYjPFJpFux2NQHqek1il-HsVtkX3F040LAokihILTirrqgfY9E4LlW56vfq7gqauCW9vQ&dl=1 IP 87.240.137.140:0 ASN #47541 VKontakte Ltd File type data Size 266 kB (266244 bytes) Hash 5fa85e5934e65e4e9d206d36b1816765 3c2fc65e8238ee9b176728fa592d9674bef828ab cff80f1922afa1c2570f49d2debbd94220de43380024663ac2977434b2d4e812 HTTP Headers GET /c909328/u228185173/docs/d17/9e022bfedb54/OriginalBuild.bmp?extra=gA4x1Mx_HzvC5nNod540yz5cD93tA4PW8Ngz8UjJFRgGW2YX3CBlUcXGQ8Yr91HRXQ8_9AZkYjPFJpFux2NQHqek1il-HsVtkX3F040LAokihILTirrqgfY9E4LlW56vfq7gqauCW9vQ&dl=1 HTTP/1.1 Host: psv4.userapi.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: kittenx Date: Wed, 14 Jun 2023 20:31:37 GMT Content-Type: image/x-ms-bmp Content-Length: 266244 Connection: keep-alive Last-Modified: Wed, 14 Jun 2023 17:09:29 GMT ETag: "6489f449-41004" Content-Disposition: attachment Expires: Wed, 21 Jun 2023 20:31:37 GMT Cache-Control: max-age=604800 X-Frontend: front632915 Access-Control-Expose-Headers: X-Frontend Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=15768000 Accept-Ranges: bytes, bytes

	vk.com/doc228185173_661589625?hash=D2DPjWz1RqXmdMLCaZvtDyDWKzSBvkLmqmFVhqiYTUw&dl=3a8KG0bPuZ6yCEnPwEbQuEZ2De7YKfZRMK40B5Ie1xc&api=1&no_preview=1	87.240.132.72	302 Found	266 kB
URL User Request GET HTTP/2 vk.com/doc228185173_661589625?hash=D2DPjWz1RqXmdMLCaZvtDyDWKzSBvkLmqmFVhqiYTUw&dl=3a8KG0bPuZ6yCEnPwEbQuEZ2De7YKfZRMK40B5Ie1xc&api=1&no_preview=1 IP 87.240.132.72:443 ASN #47541 VKontakte Ltd Certificate IssuerGlobalSign nv-sa Subject.vk.com Fingerprint6B:39:D3:5A:FA:5A:EE:80:1A:D7:F6:77:30:52:CF:2B:52:A1:82:09 ValidityThu, 16 Mar 2023 17:17:11 GMT - Tue, 20 Feb 2024 10:00:00 GMT File type Size 266 kB (266244 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /doc228185173_661589625?hash=D2DPjWz1RqXmdMLCaZvtDyDWKzSBvkLmqmFVhqiYTUw&dl=3a8KG0bPuZ6yCEnPwEbQuEZ2De7YKfZRMK40B5Ie1xc&api=1&no_preview=1 HTTP/1.1 Host: vk.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found server: kittenx date: Wed, 14 Jun 2023 20:31:37 GMT content-type: text/html; charset=windows-1251 content-length: 20 location: https://psv4.userapi.com/c909328/u228185173/docs/d17/9e022bfedb54/OriginalBuild.bmp?extra=gA4x1Mx_HzvC5nNod540yz5cD93tA4PW8Ngz8UjJFRgGW2YX3CBlUcXGQ8Yr91HRXQ8_9AZkYjPFJpFux2NQHqek1il-HsVtkX3F040LAokihILTirrqgfY9E4LlW56vfq7gqauCW9vQ&dl=1 x-powered-by: KPHP/7.4.113971 set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly remixlang=3; expires=Fri, 07 Jun 2024 15:53:39 GMT; path=/; domain=.vk.com remixstlid=9075560260089345141_uuQfCSEQ7MMHCKTqMiqlqDFZezlwuBGujfSQuRurwzk; expires=Thu, 13 Jun 2024 20:31:37 GMT; path=/; domain=.vk.com; secure remixir=1; path=/; domain=.vk.com; secure; HttpOnly cache-control: no-store x-robots-tag: noindex,nofollow content-encoding: gzip x-frontend: front220204 strict-transport-security: max-age=15768000 access-control-expose-headers: X-Frontend X-Firefox-Spdy: h2

	psv4.userapi.com/c909328/u228185173/docs/d17/9e022bfedb54/OriginalBuild.bmp?extra=gA4x1Mx_HzvC5nNod540yz5cD93tA4PW8Ngz8UjJFRgGW2YX3CBlUcXGQ8Yr91HRXQ8_9AZkYjPFJpFux2NQHqek1il-HsVtkX3F040LAokihILTirrqgfY9E4LlW56vfq7gqauCW9vQ&dl=1	87.240.137.140	200 OK	266 kB
URL User Request GET HTTP/1.1 psv4.userapi.com/c909328/u228185173/docs/d17/9e022bfedb54/OriginalBuild.bmp?extra=gA4x1Mx_HzvC5nNod540yz5cD93tA4PW8Ngz8UjJFRgGW2YX3CBlUcXGQ8Yr91HRXQ8_9AZkYjPFJpFux2NQHqek1il-HsVtkX3F040LAokihILTirrqgfY9E4LlW56vfq7gqauCW9vQ&dl=1 IP 87.240.137.140:443 ASN #47541 VKontakte Ltd Certificate IssuerGlobalSign nv-sa Subject.userapi.com FingerprintBC:A9:84:5F:86:90:B1:02:BA:2D:66:E8:E5:46:C1:57:E9:C0:CC:24 ValidityFri, 17 Mar 2023 15:42:03 GMT - Tue, 20 Feb 2024 10:00:00 GMT File type data Size 266 kB (266244 bytes) Hash 5fa85e5934e65e4e9d206d36b1816765 3c2fc65e8238ee9b176728fa592d9674bef828ab cff80f1922afa1c2570f49d2debbd94220de43380024663ac2977434b2d4e812 HTTP Headers GET /c909328/u228185173/docs/d17/9e022bfedb54/OriginalBuild.bmp?extra=gA4x1Mx_HzvC5nNod540yz5cD93tA4PW8Ngz8UjJFRgGW2YX3CBlUcXGQ8Yr91HRXQ8_9AZkYjPFJpFux2NQHqek1il-HsVtkX3F040LAokihILTirrqgfY9E4LlW56vfq7gqauCW9vQ&dl=1 HTTP/1.1 Host: psv4.userapi.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Server: kittenx Date: Wed, 14 Jun 2023 20:31:37 GMT Content-Type: image/x-ms-bmp Content-Length: 266244 Connection: keep-alive Last-Modified: Wed, 14 Jun 2023 17:09:29 GMT ETag: "6489f449-41004" Content-Disposition: attachment Expires: Wed, 21 Jun 2023 20:31:37 GMT Cache-Control: max-age=604800 X-Frontend: front632915 Access-Control-Expose-Headers: X-Frontend Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: Strict-Transport-Security: max-age=15768000 Accept-Ranges: bytes, bytes