Report - r20.rs6.net/tn.jsp?f=0012pfmDLUWz4n0lrUfFUTWyN28yFmyNbWtbprbbXBgusQrbbCt1dlwhoIWJlRxvPq0PfFbSY6_3srXT9hzB4nguOOl0VKV5-1eO3u6EnolaoEpQ_LMouzI4OXTQIGBlVc79B_dYbvN8dcGaxzwiaNCxg==&c=&ch==&__=/asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=

Report Overview

Visited public
2023-12-08 13:32:53
Tags
URL
r20.rs6.net/tn.jsp?f=0012pfmDLUWz4n0lrUfFUTWyN28yFmyNbWtbprbbXBgusQrbbCt1dlwhoIWJlRxvPq0PfFbSY6_3srXT9hzB4nguOOl0VKV5-1eO3u6EnolaoEpQ_LMouzI4OXTQIGBlVc79B_dYbvN8dcGaxzwiaNCxg==&c=&ch==&__=/asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=
Finishing URL
vmlapierre.com/asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=
IP / ASN
208.75.122.11
#40444 ASN-CC
Title
404 Not Found

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r20.rs6.net	6735	2001-12-21	2014-04-18 19:30:06	2023-12-07 10:03:21	696 B	381 B	208.75.122.11
vmlapierre.com	unknown	2002-11-27	2016-09-06 16:09:52	2023-12-07 17:40:07	2.0 kB	2.0 kB	162.214.77.4

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-12-07	medium	vmlapierre.com/	Office365
2023-12-07	medium	vmlapierre.com/	Office365
2023-12-07	medium	vmlapierre.com/	Office365
2023-12-07	medium	vmlapierre.com/	Office365

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

URL IP Response Size

r20.rs6.net/tn.jsp?f=0012pfmDLUWz4n0lrUfFUTWyN28yFmyNbWtbprbbXBgusQrbbCt1dlwhoIWJlRxvPq0PfFbSY6_3srXT9hzB4nguOOl0VKV5-1eO3u6EnolaoEpQ_LMouzI4OXTQIGBlVc79B_dYbvN8dcGaxzwiaNCxg==&c=&ch==&__=/asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=

208.75.122.11

302 Found

0 B

URL User Request GET HTTP/1.1
r20.rs6.net/tn.jsp?f=0012pfmDLUWz4n0lrUfFUTWyN28yFmyNbWtbprbbXBgusQrbbCt1dlwhoIWJlRxvPq0PfFbSY6_3srXT9hzB4nguOOl0VKV5-1eO3u6EnolaoEpQ_LMouzI4OXTQIGBlVc79B_dYbvN8dcGaxzwiaNCxg==&c=&ch==&__=/asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=
IP
208.75.122.11:443
ASN
#40444 ASN-CC

Certificate
IssuerGlobalSign nv-sa
Subjectrs6.net
Fingerprint65:B1:9F:36:97:C2:7B:17:26:C1:6E:96:16:90:70:A8:E5:22:D1:78
ValidityWed, 17 May 2023 21:06:28 GMT - Mon, 17 Jun 2024 21:06:27 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /tn.jsp?f=0012pfmDLUWz4n0lrUfFUTWyN28yFmyNbWtbprbbXBgusQrbbCt1dlwhoIWJlRxvPq0PfFbSY6_3srXT9hzB4nguOOl0VKV5-1eO3u6EnolaoEpQ_LMouzI4OXTQIGBlVc79B_dYbvN8dcGaxzwiaNCxg==&c=&ch==&__=/asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20= HTTP/1.1
Host: r20.rs6.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Fri, 08 Dec 2023 13:32:36 GMT
Server: Apache
P3P: CP="CAO DSP TAIa OUR NOR UNI"
Location: https://vmlapierre.com//asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=
Content-Length: 0
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate, no-cache="Set-Cookie"
Pragma: no-cache
Connection: close
Content-Type: text/html;charset=ISO-8859-1

vmlapierre.com//asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=

162.214.77.4

301 Moved Permanently

315 B

URL User Request GET HTTP/1.1
vmlapierre.com//asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=
IP
162.214.77.4:80
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET //asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20= HTTP/1.1
Host: vmlapierre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Fri, 08 Dec 2023 13:32:36 GMT
server: Apache
X-Firefox-Spdy: h2

vmlapierre.com//asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=

162.214.77.4

301 Moved Permanently

272 B

URL User Request GET HTTP/1.1
vmlapierre.com//asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=
IP
162.214.77.4:80
ASN
#46606 UNIFIEDLAYER-AS-1

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
272 B (272 bytes)
Hash
b0b2cdd39136796472dce892404a37c3
f6bd280da33bcf21d7f93fa6ac3e9dfe39117b67
39bb995ca6f3355fb56c7c974352f2f012cd78257509166e034b987e2944dfd8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET //asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20= HTTP/1.1
Host: vmlapierre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Fri, 08 Dec 2023 13:32:37 GMT
Server: Apache
Location: https://vmlapierre.com/asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=
Content-Length: 272
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

vmlapierre.com/asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=

162.214.77.4

404 Not Found

315 B

URL User Request GET HTTP/2
vmlapierre.com/asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=
IP
162.214.77.4:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuerLet's Encrypt
Subjectwebmail.vmlapierre.com
FingerprintD9:29:5E:F4:0E:AD:9E:C2:CF:F8:E4:A8:02:89:D2:55:91:A4:E9:F6
ValidityThu, 26 Oct 2023 15:07:21 GMT - Wed, 24 Jan 2024 15:07:20 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20= HTTP/1.1
Host: vmlapierre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Fri, 08 Dec 2023 13:32:37 GMT
server: Apache
X-Firefox-Spdy: h2

vmlapierre.com/favicon.ico

162.214.77.4

404 Not Found

315 B

URL GET HTTP/2
vmlapierre.com/favicon.ico
IP
162.214.77.4:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://vmlapierre.com/asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=
Certificate
IssuerLet's Encrypt
Subjectwebmail.vmlapierre.com
FingerprintD9:29:5E:F4:0E:AD:9E:C2:CF:F8:E4:A8:02:89:D2:55:91:A4:E9:F6
ValidityThu, 26 Oct 2023 15:07:21 GMT - Wed, 24 Jan 2024 15:07:20 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: vmlapierre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmlapierre.com/asdf/amFja2llLmNvaGVuQHJvcGVzZ3JheS5jb20=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Fri, 08 Dec 2023 13:32:37 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (5)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers