Report - diractclicker.com/survey/MX/ATT/

Report Overview

Submitted URL
diractclicker.com/survey/MX/ATT/
IP
138.68.64.85
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2023-05-26 20:38:42
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
14

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
diractclicker.com	unknown	2022-11-15	2022-11-15	2023-05-26	4.9 kB	235 kB	138.68.64.85
oungimuk.net	335656	2021-02-06	2021-02-10	2023-05-26	984 B	16 kB	139.45.197.251
teleforum.site	unknown	2022-11-27	2022-12-22	2023-05-26	440 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-05-26	medium	diractclicker.com/survey/MX/ATT/
2023-05-26	medium	diractclicker.com/survey/MX/ATT/

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator
2023-05-26	medium	diractclicker.com/survey/MX/ATT/
2023-05-26	medium	diractclicker.com/survey/MX/ATT/jquery-3.4.1.min.js
2023-05-26	medium	diractclicker.com/survey/MX/ATT/tag.min.js
2023-05-26	medium	diractclicker.com/sw-check-permissions-f6451.js
2023-05-26	medium	diractclicker.com/survey/MX/ATT/

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	oungimuk.net/pfe/current/micro.tag.min.js?z=5857532&sw=/sw-check-permissions-f6451.js	42 kB	2023-05-11	2023-05-29
Pretty URL oungimuk.net/pfe/current/micro.tag.min.js?z=5857532&sw=/sw-check-permissions-f6451.js IP 139.45.197.251 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-11 16:26:45 Last Seen2023-05-29 09:32:34 Times Seen6742 Hash d44fd7b96fceca8f81b472766025d0d2 237541097413baf5cd3e703413f8bc9ea538a4db b6c7c1e7fb1a437f100bdcb253df8b0468f130835fbb82c5687505a099997d16 Loading...

	diractclicker.com/survey/MX/ATT/jquery-3.4.1.min.js	88 kB	2023-03-07	2024-04-25
Pretty URL diractclicker.com/survey/MX/ATT/jquery-3.4.1.min.js IP 138.68.64.85 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-04-25 02:03:00 Times Seen95470 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

	diractclicker.com/survey/MX/ATT/	496 B	2023-04-08	2023-06-01
Pretty URL diractclicker.com/survey/MX/ATT/ IP 138.68.64.85 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-08 01:31:45 Last Seen2023-06-01 15:15:23 Times Seen154 Hash f3727530bccb273564035b8ecbe90dfc c1b664f1a4c66ade68480c505600a87be0215c45 78d57ec6567cf00cc35b7649de0f5e41bf53746d69f01c90f8c94bb28ffe0fca Loading...

	diractclicker.com/survey/MX/ATT/#	374 B	2023-04-23	2023-05-26
Pretty URL diractclicker.com/survey/MX/ATT/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-23 08:51:51 Last Seen2023-05-26 22:38:43 Times Seen106 Hash af655c8f19f6be9503adb7b248fcc3be 9a1aa4fa18781386bee071933bc4218d3c41526a 342f65b97221b0b29af365980dc289995aec77f8a8dcbc4bb070e4a9f46a8f11 Loading...

	diractclicker.com/survey/MX/ATT/#	74 B	2023-03-07	2024-01-07
Pretty URL diractclicker.com/survey/MX/ATT/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:17:18 Last Seen2024-01-07 03:56:15 Times Seen209 Hash f5f799f1f854dfb84174e766a107a3b6 18ab8fa339313c97b15576deb460b47821b0902a b56a9e3c42ffc0df3628a04833d7a112d86a2a2a74269750a4497dfab5a30069 Loading...

	diractclicker.com/survey/MX/ATT/tag.min.js	15 kB	2023-03-10	2023-12-02
Pretty URL diractclicker.com/survey/MX/ATT/tag.min.js IP 138.68.64.85 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 01:12:05 Last Seen2023-12-02 09:47:11 Times Seen338 Hash 87d9472427b55ed4521f876551ea39d7 d6bd6818ed1f0976b65f3c8e6edaeedc498e512c f94100399b8b590ac26643f021f2768189cc24ba1de5cd09871b6288b0dbe8b7 Loading...

	diractclicker.com/survey/MX/ATT/#	1.4 kB	2023-03-07	2024-01-07
Pretty URL diractclicker.com/survey/MX/ATT/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:17:18 Last Seen2024-01-07 15:26:01 Times Seen238 Hash baa94c60bc7a031fbc58646567851271 1d74bd9a5280e2441e7f33badd418fb6ee10202d ac28c5dba5eb6a232d9ea4b96b2a90544ff25417aac900b25a6ee60360d54416 Loading...

	diractclicker.com/survey/MX/ATT/#	1.1 kB	2023-03-13	2023-06-01
Pretty URL diractclicker.com/survey/MX/ATT/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 02:27:22 Last Seen2023-06-01 15:15:23 Times Seen179 Hash 5354aaed730a73837a37b26c9b9895fe 888621a30a4d13ec82d19c2d8af9b2005355c9cf 35a211e2568ffa0c7b833eaa7bfac82d8e7cf984756245426d68351a1436ad58 Loading...

HTTP Transactions (14)

URL IP Response Size

diractclicker.com/survey/MX/ATT/

138.68.64.85

200 OK

3.9 kB

URL User Request GET HTTP/1.1
diractclicker.com/survey/MX/ATT/
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (462)
Size
3.9 kB (3900 bytes)
Hash
e2dfc54dde732c4638c3d274c5ea1933
af277337e6b65aa539cd00654609e09d77f23272
7e3d8e477ded0839326fb48ed9ddc1df5f2b00b5ccf256e04104d74a543a06ed

Detections

Analyzer	Verdict	Alert
openphish	AT&T Inc.
fortinet	Phishing

HTTP Headers

GET /survey/MX/ATT/ HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 20:38:25 GMT
Content-Type: text/html
Last-Modified: Fri, 26 May 2023 03:48:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"64702c00-2914"
Content-Encoding: gzip

diractclicker.com/survey/MX/ATT/jquery-3.4.1.min.js

138.68.64.85

200 OK

88 kB

URL GET HTTP/1.1
diractclicker.com/survey/MX/ATT/jquery-3.4.1.min.js
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/MX/ATT/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
ASCII text, with very long lines (65451)
Size
88 kB (88145 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /survey/MX/ATT/jquery-3.4.1.min.js HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/MX/ATT/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 20:38:25 GMT
Content-Type: application/javascript
Content-Length: 88145
Last-Modified: Fri, 26 May 2023 03:48:17 GMT
Connection: keep-alive
ETag: "64702c01-15851"
Accept-Ranges: bytes

diractclicker.com/survey/MX/ATT/tag.min.js

138.68.64.85

200 OK

15 kB

URL GET HTTP/1.1
diractclicker.com/survey/MX/ATT/tag.min.js
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/MX/ATT/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
C source, ASCII text, with very long lines (14602), with no line terminators
Size
15 kB (14602 bytes)
Hash
87d9472427b55ed4521f876551ea39d7
d6bd6818ed1f0976b65f3c8e6edaeedc498e512c
f94100399b8b590ac26643f021f2768189cc24ba1de5cd09871b6288b0dbe8b7

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /survey/MX/ATT/tag.min.js HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/MX/ATT/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 20:38:25 GMT
Content-Type: application/javascript
Content-Length: 14602
Last-Modified: Fri, 26 May 2023 03:48:17 GMT
Connection: keep-alive
ETag: "64702c01-390a"
Accept-Ranges: bytes

diractclicker.com/survey/MX/ATT/main.css

138.68.64.85

200 OK

63 kB

URL GET HTTP/1.1
diractclicker.com/survey/MX/ATT/main.css
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/MX/ATT/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
ASCII text, with very long lines (62816), with no line terminators
Size
63 kB (62816 bytes)
Hash
46cd9d8d7e49040a70de1cee11d60163
b7da6ef378af1cd4f8f4da79b3764a7e6ec4df0b
b8345641e409fcada471fc750b47371dbf7cd40e626c3ddfde068a31bd5ab91c

HTTP Headers

GET /survey/MX/ATT/main.css HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/MX/ATT/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 20:38:25 GMT
Content-Type: text/css
Content-Length: 62816
Last-Modified: Fri, 26 May 2023 03:48:17 GMT
Connection: keep-alive
ETag: "64702c01-f560"
Accept-Ranges: bytes

diractclicker.com/survey/MX/ATT/menu.png

138.68.64.85

200 OK

409 B

URL GET HTTP/1.1
diractclicker.com/survey/MX/ATT/menu.png
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/MX/ATT/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
PNG image data, 96 x 34, 8-bit/color RGB, non-interlaced\012- data
Size
409 B (409 bytes)
Hash
4a98f87225fd8e0f1a430a48c0434ac8
be7960d7d9fc8055ed0f7ac3ba2dd8a468489b2f
41d97f40faf1d359aae3802433ea5ddf2931ee9dff59c6e55e43b03f2048ad8f

HTTP Headers

GET /survey/MX/ATT/menu.png HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/MX/ATT/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 20:38:25 GMT
Content-Type: image/png
Content-Length: 409
Last-Modified: Fri, 26 May 2023 03:48:17 GMT
Connection: keep-alive
ETag: "64702c01-199"
Accept-Ranges: bytes

diractclicker.com/survey/MX/ATT/env_prize.png

138.68.64.85

200 OK

34 kB

URL GET HTTP/1.1
diractclicker.com/survey/MX/ATT/env_prize.png
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/MX/ATT/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
PNG image data, 257 x 191, 8-bit/color RGBA, non-interlaced\012- data
Size
34 kB (33475 bytes)
Hash
80243a1222f25db28aaf548cec0b9741
7ac3a0d99e293d6265636fcb9e4b9af0539cd5e8
debbf4c50092c2060594653d5207ce19b529db44a2187dc51366ea923eff8dc7

HTTP Headers

GET /survey/MX/ATT/env_prize.png HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/MX/ATT/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 20:38:25 GMT
Content-Type: image/png
Content-Length: 33475
Last-Modified: Fri, 26 May 2023 03:48:18 GMT
Connection: keep-alive
ETag: "64702c02-82c3"
Accept-Ranges: bytes

diractclicker.com/survey/MX/ATT/env_closed.png

138.68.64.85

200 OK

2.5 kB

URL GET HTTP/1.1
diractclicker.com/survey/MX/ATT/env_closed.png
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/MX/ATT/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
PNG image data, 257 x 184, 8-bit colormap, non-interlaced\012- data
Size
2.5 kB (2537 bytes)
Hash
9adbaf1f271f2921d941cfc431705ff0
e82f0ee057bac2525d8558c431995b4f59f3a897
ec8362f7adbe35e42507491256929b59a8af11a8b369bc800f778b834e411abf

HTTP Headers

GET /survey/MX/ATT/env_closed.png HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/MX/ATT/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 20:38:25 GMT
Content-Type: image/png
Content-Length: 2537
Last-Modified: Fri, 26 May 2023 03:48:17 GMT
Connection: keep-alive
ETag: "64702c01-9e9"
Accept-Ranges: bytes

diractclicker.com/survey/MX/ATT/logo.png

138.68.64.85

200 OK

22 kB

URL GET HTTP/1.1
diractclicker.com/survey/MX/ATT/logo.png
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/MX/ATT/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
PNG image data, 640 x 263, 8-bit/color RGBA, non-interlaced\012- data
Size
22 kB (21771 bytes)
Hash
90108a5fe8f5c5749ff30f5bda156f4f
34e2f6ec094eddaa6ed7eb2f843b2c1fb03b2b76
a073cdc3163bc2c143fbf02a75b08285fb626fa88f9d07f1a5ff5762ea88533f

HTTP Headers

GET /survey/MX/ATT/logo.png HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/MX/ATT/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 20:38:25 GMT
Content-Type: image/png
Content-Length: 21771
Last-Modified: Fri, 26 May 2023 03:48:18 GMT
Connection: keep-alive
ETag: "64702c02-550b"
Accept-Ranges: bytes

diractclicker.com/survey/MX/ATT/top_r.png

138.68.64.85

404 Not Found

123 B

URL GET HTTP/1.1
diractclicker.com/survey/MX/ATT/top_r.png
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/MX/ATT/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
123 B (123 bytes)
Hash
1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87

HTTP Headers

GET /survey/MX/ATT/top_r.png HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/MX/ATT/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 20:38:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip

diractclicker.com/sw-check-permissions-f6451.js

138.68.64.85

200 OK

566 B

URL GET HTTP/1.1
diractclicker.com/sw-check-permissions-f6451.js
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/MX/ATT/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
Java source, ASCII text
Size
566 B (566 bytes)
Hash
0702e0ed99b8c0592873f6730041cc82
fad9bd352b4e3d5d1a4ea69dd929d52067ca8305
9988a6fd4fd7a7b05e21b6ace3d756a989f4d79023dadb34fac95c09fbdf4a2a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /sw-check-permissions-f6451.js HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/MX/ATT/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 20:38:26 GMT
Content-Type: application/javascript
Content-Length: 566
Last-Modified: Fri, 26 May 2023 03:36:41 GMT
Connection: keep-alive
ETag: "64702949-236"
Accept-Ranges: bytes

oungimuk.net/pfe/current/micro.tag.min.js?z=5857532&sw=/sw-check-permissions-f6451.js

139.45.197.251

200 OK

15 kB

URL GET HTTP/2
oungimuk.net/pfe/current/micro.tag.min.js?z=5857532&sw=/sw-check-permissions-f6451.js
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://diractclicker.com/survey/MX/ATT/
Certificate
IssuerLet's Encrypt
Subjectoungimuk.net
FingerprintB5:D5:BF:00:7F:18:31:13:AA:49:DF:C7:2E:C9:A6:8F:6E:D3:6C:CE
ValidityMon, 17 Apr 2023 05:17:56 GMT - Sun, 16 Jul 2023 05:17:55 GMT

File type
C source, ASCII text, with very long lines (41979), with no line terminators
Size
15 kB (14831 bytes)
Hash
d44fd7b96fceca8f81b472766025d0d2
237541097413baf5cd3e703413f8bc9ea538a4db
b6c7c1e7fb1a437f100bdcb253df8b0468f130835fbb82c5687505a099997d16

HTTP Headers

GET /pfe/current/micro.tag.min.js?z=5857532&sw=/sw-check-permissions-f6451.js HTTP/1.1
Host: oungimuk.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 May 2023 20:38:26 GMT
content-type: application/javascript
last-modified: Thu, 11 May 2023 14:20:13 GMT
etag: W/"645cf99d-a3fb"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

diractclicker.com/survey/MX/ATT/

138.68.64.85

200 OK

3.9 kB

URL User Request GET HTTP/1.1
diractclicker.com/survey/MX/ATT/
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (462)
Size
3.9 kB (3900 bytes)
Hash
e2dfc54dde732c4638c3d274c5ea1933
af277337e6b65aa539cd00654609e09d77f23272
7e3d8e477ded0839326fb48ed9ddc1df5f2b00b5ccf256e04104d74a543a06ed

Detections

Analyzer	Verdict	Alert
openphish	AT&T Inc.
fortinet	Phishing

HTTP Headers

GET /survey/MX/ATT/ HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 20:38:40 GMT
Content-Type: text/html
Last-Modified: Fri, 26 May 2023 03:48:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"64702c00-2914"
Content-Encoding: gzip

oungimuk.net/zone?&pub=0&zone_id=5857532&is_mobile=false&domain=diractclicker.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest

139.45.197.251

200 OK

0 B

URL POST HTTP/2
oungimuk.net/zone?&pub=0&zone_id=5857532&is_mobile=false&domain=diractclicker.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://diractclicker.com/survey/MX/ATT/
Certificate
IssuerLet's Encrypt
Subjectoungimuk.net
FingerprintB5:D5:BF:00:7F:18:31:13:AA:49:DF:C7:2E:C9:A6:8F:6E:D3:6C:CE
ValidityMon, 17 Apr 2023 05:17:56 GMT - Sun, 16 Jul 2023 05:17:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /zone?&pub=0&zone_id=5857532&is_mobile=false&domain=diractclicker.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest HTTP/1.1
Host: oungimuk.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://diractclicker.com
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 200 OK
server: nginx
date: Fri, 26 May 2023 20:38:26 GMT
content-length: 0
x-trace-id: a7f4af292f5ef8d7e7020eeef3589f74
access-control-allow-origin: https://diractclicker.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

teleforum.site/zaenvvodacom/favicon.ico

0.0.0.0

0 B

URL GET
teleforum.site/zaenvvodacom/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://diractclicker.com/survey/MX/ATT/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /zaenvvodacom/favicon.ico HTTP/1.1
Host: teleforum.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML