Report - aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319

Report Overview

Visited public
2025-05-31 21:06:37
Tags
URL
aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319
Finishing URL
aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319
IP / ASN
45.133.44.1
#39572 DataWeb Global Group B.V.
Title
Browser Recommended

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
aha.ofcuboneom.com	unknown	2025-03-17	2025-03-29	2025-05-29	5.6 kB	16 kB	45.133.44.2

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-05-31 21:06:16	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2025-05-31 21:06:29	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2025-05-31 21:06:31	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319	ScriptElement	768 B	2025-05-31	2025-05-31
Pretty URL aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 IP 45.133.44.2 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML true Observations First Seen2025-05-31 21:06 Last Seen2025-05-31 21:06 Times Seen1 Hash c38f7f80be085eeeae26c4d1f3eca78b abc7dae22aa083409ebbcf30eeae792151e06f2f b8dc8f938f4f111b941ff1951e04cd279c438745fd7106eb323eed428ffa6f21 Loading...

	aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319	ScriptElement	1.0 kB	2025-05-31	2025-05-31
Pretty URL aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 IP 45.133.44.2 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML true Observations First Seen2025-05-31 21:06 Last Seen2025-05-31 21:06 Times Seen1 Hash 1e10197b96b6e6676ed19398d0827507 f66e6bbf21d0759d5f67f013a5963b817a265654 ecf13884d63288808cb72d449f3d3d9f5454a3624162c92ec1c2721fa5c1a8f1 Loading...

HTTP Transactions (13)

	URL	IP	Response	Size
	aha.ofcuboneom.com/NC-8952/assets/like.svg	45.133.44.2	200 OK	458 B
URL GET aha.ofcuboneom.com/NC-8952/assets/like.svg IP 45.133.44.2:443 ASN #39572 DataWeb Global Group B.V. Requested by https://aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 Certificate IssuerLet's Encrypt Subjectaha.ofcuboneom.com Fingerprint28:92:6F:F9:7D:5E:4E:78:6C:5C:BA:C7:17:A2:FF:61:08:F9:CF:D7 ValidityFri, 16 May 2025 08:32:56 GMT - Thu, 14 Aug 2025 08:32:55 GMT File type SVG Scalable Vector Graphics image Size 458 B (458 bytes) Hash 8450cb2b1dd6998c8f29053ac111d5a1 8c6c1e094fd57267555811700f73ff3c60df3b38 821917b1431835ab33287155fa188a461b45894625624df4170cfd3da92f6542 HTTP Headers `GET /NC-8952/assets/like.svg HTTP/1.1 Host: aha.ofcuboneom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Sat, 31 May 2025 21:06:15 GMT content-type: image/svg+xml content-length: 458 server: nginx last-modified: Thu, 29 May 2025 15:08:20 GMT etag: "68387864-1ca" strict-transport-security: max-age=1 x-content-type-options: nosniff expires: Mon, 02 Jun 2025 21:06:15 GMT cache-control: max-age=172800 vary: Accept-Encoding x-cdn-host-id: ah0543 x-proxy-cache: HIT accept-ranges: bytes X-Firefox-Spdy: h2`

	aha.ofcuboneom.com/NC-8952/assets/play-small.svg	45.133.44.2	200 OK	183 B
URL GET aha.ofcuboneom.com/NC-8952/assets/play-small.svg IP 45.133.44.2:443 ASN #39572 DataWeb Global Group B.V. Requested by https://aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 Certificate IssuerLet's Encrypt Subjectaha.ofcuboneom.com Fingerprint28:92:6F:F9:7D:5E:4E:78:6C:5C:BA:C7:17:A2:FF:61:08:F9:CF:D7 ValidityFri, 16 May 2025 08:32:56 GMT - Thu, 14 Aug 2025 08:32:55 GMT File type SVG Scalable Vector Graphics image Size 183 B (183 bytes) Hash eae776981630e5afa25710ffba323d24 94188f9baaae29763f7a2da64aad359b3d2bda98 5836072a17988185ee9476076c5f86d300766377f78c9c425ad9901b5ba460bb HTTP Headers `GET /NC-8952/assets/play-small.svg HTTP/1.1 Host: aha.ofcuboneom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Sat, 31 May 2025 21:06:15 GMT content-type: image/svg+xml content-length: 183 server: nginx last-modified: Thu, 29 May 2025 15:08:20 GMT etag: "68387864-b7" strict-transport-security: max-age=1 x-content-type-options: nosniff expires: Mon, 02 Jun 2025 21:06:15 GMT cache-control: max-age=172800 vary: Accept-Encoding x-cdn-host-id: ah0543 x-proxy-cache: HIT accept-ranges: bytes X-Firefox-Spdy: h2`

	aha.ofcuboneom.com/NC-8952/assets/full-screen.svg	45.133.44.2	200 OK	207 B
URL GET aha.ofcuboneom.com/NC-8952/assets/full-screen.svg IP 45.133.44.2:443 ASN #39572 DataWeb Global Group B.V. Requested by https://aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 Certificate IssuerLet's Encrypt Subjectaha.ofcuboneom.com Fingerprint28:92:6F:F9:7D:5E:4E:78:6C:5C:BA:C7:17:A2:FF:61:08:F9:CF:D7 ValidityFri, 16 May 2025 08:32:56 GMT - Thu, 14 Aug 2025 08:32:55 GMT File type SVG Scalable Vector Graphics image Size 207 B (207 bytes) Hash fe516c2e9356f7fa5b710b057e1189fb 9bce9b715ab8ac4b07000b1b02c396b7ad363510 c9440909a5e4b44552b683b32546aca6148c994cdae4284b3c05aa937ab31611 HTTP Headers `GET /NC-8952/assets/full-screen.svg HTTP/1.1 Host: aha.ofcuboneom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Sat, 31 May 2025 21:06:15 GMT content-type: image/svg+xml content-length: 207 server: nginx last-modified: Thu, 29 May 2025 15:08:20 GMT etag: "68387864-cf" strict-transport-security: max-age=1 x-content-type-options: nosniff expires: Mon, 02 Jun 2025 21:06:15 GMT cache-control: max-age=172800 vary: Accept-Encoding x-cdn-host-id: ah0543 x-proxy-cache: HIT accept-ranges: bytes X-Firefox-Spdy: h2`

	aha.ofcuboneom.com/NC-8952/assets/volume.svg	45.133.44.2	200 OK	705 B
URL GET aha.ofcuboneom.com/NC-8952/assets/volume.svg IP 45.133.44.2:443 ASN #39572 DataWeb Global Group B.V. Requested by https://aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 Certificate IssuerLet's Encrypt Subjectaha.ofcuboneom.com Fingerprint28:92:6F:F9:7D:5E:4E:78:6C:5C:BA:C7:17:A2:FF:61:08:F9:CF:D7 ValidityFri, 16 May 2025 08:32:56 GMT - Thu, 14 Aug 2025 08:32:55 GMT File type SVG Scalable Vector Graphics image Size 705 B (705 bytes) Hash d064e887c9ec4de7d7020f24b9bb1a6d e2186563fed4d093abfcace6ef8a2ecffcfb7237 188810463e4854a21af07ad895773a638109c579208c8ddecfe0d925f153e3d5 HTTP Headers `GET /NC-8952/assets/volume.svg HTTP/1.1 Host: aha.ofcuboneom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Sat, 31 May 2025 21:06:15 GMT content-type: image/svg+xml content-length: 705 server: nginx last-modified: Thu, 29 May 2025 15:08:20 GMT etag: "68387864-2c1" strict-transport-security: max-age=1 x-content-type-options: nosniff expires: Mon, 02 Jun 2025 21:06:15 GMT cache-control: max-age=172800 vary: Accept-Encoding x-cdn-host-id: ah0543 x-proxy-cache: HIT accept-ranges: bytes X-Firefox-Spdy: h2`

	aha.ofcuboneom.com/NC-8952/locales/en.json	45.133.44.2	200 OK	162 B
URL GET aha.ofcuboneom.com/NC-8952/locales/en.json IP 45.133.44.2:443 ASN #39572 DataWeb Global Group B.V. Requested by https://aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 Certificate IssuerLet's Encrypt Subjectaha.ofcuboneom.com Fingerprint28:92:6F:F9:7D:5E:4E:78:6C:5C:BA:C7:17:A2:FF:61:08:F9:CF:D7 ValidityFri, 16 May 2025 08:32:56 GMT - Thu, 14 Aug 2025 08:32:55 GMT File type JSON text data Size 162 B (162 bytes) Hash 2aa3e944fd04a5fc21f38c3d01878869 3b6d88a902f33cc92c19a17f5a36aa4417a61ec9 a41b106551228258df380516a3581c20432ad590c0cfaa7cf6eeea1067c44420 HTTP Headers `GET /NC-8952/locales/en.json HTTP/1.1 Host: aha.ofcuboneom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Sat, 31 May 2025 21:06:15 GMT content-type: application/json server: nginx last-modified: Thu, 29 May 2025 15:08:20 GMT etag: W/"68387864-a2" strict-transport-security: max-age=1 x-content-type-options: nosniff content-encoding: br expires: Mon, 02 Jun 2025 21:06:15 GMT cache-control: max-age=172800 vary: Accept-Encoding x-cdn-host-id: ah0543 x-proxy-cache: HIT X-Firefox-Spdy: h2`

	aha.ofcuboneom.com/NC-8952/locales/comments/en.json	45.133.44.2	404 Not Found	548 B
URL GET aha.ofcuboneom.com/NC-8952/locales/comments/en.json IP 45.133.44.2:443 ASN #39572 DataWeb Global Group B.V. Requested by https://aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 Certificate IssuerLet's Encrypt Subjectaha.ofcuboneom.com Fingerprint28:92:6F:F9:7D:5E:4E:78:6C:5C:BA:C7:17:A2:FF:61:08:F9:CF:D7 ValidityFri, 16 May 2025 08:32:56 GMT - Thu, 14 Aug 2025 08:32:55 GMT File type HTML document, ASCII text, with CRLF line terminators Size 548 B (548 bytes) Hash 370e16c3b7dba286cff055f93b9a94d8 65f3537c3c798f7da146c55aef536f7b5d0cb943 d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090 HTTP Headers `GET /NC-8952/locales/comments/en.json HTTP/1.1 Host: aha.ofcuboneom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 404 Not Found date: Sat, 31 May 2025 21:06:15 GMT content-type: text/html; charset=utf-8 server: nginx content-encoding: br x-cdn-host-id: ah0543 x-proxy-cache: HIT X-Firefox-Spdy: h2`

	aha.ofcuboneom.com/NC-8952/assets/play-big.svg	45.133.44.2	200 OK	253 B
URL GET aha.ofcuboneom.com/NC-8952/assets/play-big.svg IP 45.133.44.2:443 ASN #39572 DataWeb Global Group B.V. Requested by https://aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 Certificate IssuerLet's Encrypt Subjectaha.ofcuboneom.com Fingerprint28:92:6F:F9:7D:5E:4E:78:6C:5C:BA:C7:17:A2:FF:61:08:F9:CF:D7 ValidityFri, 16 May 2025 08:32:56 GMT - Thu, 14 Aug 2025 08:32:55 GMT File type SVG Scalable Vector Graphics image Size 253 B (253 bytes) Hash 146aa58893300b36b98f9f5f629b3c4d ffc1bf73989d43ca42305c19132e8cedd28683fd 7978370e610e272ffe3e677b8e7b499d8f452c11db323fea29bf78c3141401df HTTP Headers `GET /NC-8952/assets/play-big.svg HTTP/1.1 Host: aha.ofcuboneom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Sat, 31 May 2025 21:06:15 GMT content-type: image/svg+xml content-length: 253 server: nginx last-modified: Thu, 29 May 2025 15:08:20 GMT etag: "68387864-fd" strict-transport-security: max-age=1 x-content-type-options: nosniff expires: Mon, 02 Jun 2025 21:06:15 GMT cache-control: max-age=172800 vary: Accept-Encoding x-cdn-host-id: ah0543 x-proxy-cache: HIT accept-ranges: bytes X-Firefox-Spdy: h2`

	aha.ofcuboneom.com/NC-8952/assets/close.svg	45.133.44.2	200 OK	242 B
URL GET aha.ofcuboneom.com/NC-8952/assets/close.svg IP 45.133.44.2:443 ASN #39572 DataWeb Global Group B.V. Requested by https://aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 Certificate IssuerLet's Encrypt Subjectaha.ofcuboneom.com Fingerprint28:92:6F:F9:7D:5E:4E:78:6C:5C:BA:C7:17:A2:FF:61:08:F9:CF:D7 ValidityFri, 16 May 2025 08:32:56 GMT - Thu, 14 Aug 2025 08:32:55 GMT File type SVG Scalable Vector Graphics image Size 242 B (242 bytes) Hash 08f770d2f2310291c62dfa01c3718006 a6c97fbea66ea7bb1a2bfe987359f0c5c76416d4 b2a96a3810f8e589733a5c3c8d15a386e08b892af5b95c1a2c55211e54e27e48 HTTP Headers `GET /NC-8952/assets/close.svg HTTP/1.1 Host: aha.ofcuboneom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Sat, 31 May 2025 21:06:15 GMT content-type: image/svg+xml content-length: 242 server: nginx last-modified: Thu, 29 May 2025 15:08:20 GMT etag: "68387864-f2" strict-transport-security: max-age=1 x-content-type-options: nosniff expires: Mon, 02 Jun 2025 21:06:15 GMT cache-control: max-age=172800 vary: Accept-Encoding x-cdn-host-id: ah0543 x-proxy-cache: HIT accept-ranges: bytes X-Firefox-Spdy: h2`

	aha.ofcuboneom.com/NC-8952/locales/cookie-consent/en.json	45.133.44.2	404 Not Found	548 B
URL GET aha.ofcuboneom.com/NC-8952/locales/cookie-consent/en.json IP 45.133.44.2:443 ASN #39572 DataWeb Global Group B.V. Requested by https://aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 Certificate IssuerLet's Encrypt Subjectaha.ofcuboneom.com Fingerprint28:92:6F:F9:7D:5E:4E:78:6C:5C:BA:C7:17:A2:FF:61:08:F9:CF:D7 ValidityFri, 16 May 2025 08:32:56 GMT - Thu, 14 Aug 2025 08:32:55 GMT File type HTML document, ASCII text, with CRLF line terminators Size 548 B (548 bytes) Hash 370e16c3b7dba286cff055f93b9a94d8 65f3537c3c798f7da146c55aef536f7b5d0cb943 d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090 HTTP Headers `GET /NC-8952/locales/cookie-consent/en.json HTTP/1.1 Host: aha.ofcuboneom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 404 Not Found date: Sat, 31 May 2025 21:06:15 GMT content-type: text/html; charset=utf-8 server: nginx content-encoding: br x-cdn-host-id: ah0543 x-proxy-cache: HIT X-Firefox-Spdy: h2`

	aha.ofcuboneom.com/NC-8952/assets/player-mini.svg	45.133.44.2	200 OK	244 B
URL GET aha.ofcuboneom.com/NC-8952/assets/player-mini.svg IP 45.133.44.2:443 ASN #39572 DataWeb Global Group B.V. Requested by https://aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 Certificate IssuerLet's Encrypt Subjectaha.ofcuboneom.com Fingerprint28:92:6F:F9:7D:5E:4E:78:6C:5C:BA:C7:17:A2:FF:61:08:F9:CF:D7 ValidityFri, 16 May 2025 08:32:56 GMT - Thu, 14 Aug 2025 08:32:55 GMT File type SVG Scalable Vector Graphics image Size 244 B (244 bytes) Hash c60c35b2ade5f9bb22ccf5e7872782ad b6cb61c2d48e858e249629721eb645fbcb436f50 5a608414fb72bee8905c49c97a168ac45bc21378f968d030144abfd34d80ea45 HTTP Headers `GET /NC-8952/assets/player-mini.svg HTTP/1.1 Host: aha.ofcuboneom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Sat, 31 May 2025 21:06:15 GMT content-type: image/svg+xml content-length: 244 server: nginx last-modified: Thu, 29 May 2025 15:08:20 GMT etag: "68387864-f4" strict-transport-security: max-age=1 x-content-type-options: nosniff expires: Mon, 02 Jun 2025 21:06:15 GMT cache-control: max-age=172800 vary: Accept-Encoding x-cdn-host-id: ah0543 x-proxy-cache: HIT accept-ranges: bytes X-Firefox-Spdy: h2`

	aha.ofcuboneom.com/favicon.ico	45.133.44.2	404 Not Found	548 B
URL GET aha.ofcuboneom.com/favicon.ico IP 45.133.44.2:443 ASN #39572 DataWeb Global Group B.V. Requested by https://aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 Certificate IssuerLet's Encrypt Subjectaha.ofcuboneom.com Fingerprint28:92:6F:F9:7D:5E:4E:78:6C:5C:BA:C7:17:A2:FF:61:08:F9:CF:D7 ValidityFri, 16 May 2025 08:32:56 GMT - Thu, 14 Aug 2025 08:32:55 GMT File type HTML document, ASCII text, with CRLF line terminators Size 548 B (548 bytes) Hash 370e16c3b7dba286cff055f93b9a94d8 65f3537c3c798f7da146c55aef536f7b5d0cb943 d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: aha.ofcuboneom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 404 Not Found date: Sat, 31 May 2025 21:06:15 GMT content-type: text/html; charset=utf-8 server: nginx content-encoding: br x-cdn-host-id: ah0543 x-proxy-cache: HIT X-Firefox-Spdy: h2`

	aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319	45.133.44.2	200 OK	5.6 kB
URL User Request GET aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 IP 45.133.44.2:443 ASN #39572 DataWeb Global Group B.V. Certificate IssuerLet's Encrypt Subjectaha.ofcuboneom.com Fingerprint28:92:6F:F9:7D:5E:4E:78:6C:5C:BA:C7:17:A2:FF:61:08:F9:CF:D7 ValidityFri, 16 May 2025 08:32:56 GMT - Thu, 14 Aug 2025 08:32:55 GMT File type HTML document, ASCII text, with very long lines (5556), with no line terminators Size 5.6 kB (5556 bytes) Hash 83b2cbe33d538dd1afc89380bcc1e467 fc28339b71434e5f2c1aa759db0594f8a9188c68 c4d43b0728480bf8f1748c12a6a8d1f9fbd9b4ab8f7e07587d9ac0f182798dba HTTP Headers GET /NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 HTTP/1.1 Host: aha.ofcuboneom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK date: Sat, 31 May 2025 21:06:14 GMT content-type: text/html; charset=utf-8 server: nginx last-modified: Thu, 29 May 2025 15:08:20 GMT etag: W/"68387864-15b4" strict-transport-security: max-age=1 x-content-type-options: nosniff content-encoding: br expires: Mon, 02 Jun 2025 21:06:14 GMT cache-control: max-age=172800 vary: Accept-Encoding x-cdn-host-id: ah0543 x-proxy-cache: MISS X-Firefox-Spdy: h2`

	aha.ofcuboneom.com/NC-8952/assets/settings.svg	45.133.44.2	200 OK	871 B
URL GET aha.ofcuboneom.com/NC-8952/assets/settings.svg IP 45.133.44.2:443 ASN #39572 DataWeb Global Group B.V. Requested by https://aha.ofcuboneom.com/NC-8952/index.html?adformat=onclick&bannerid=23366289&campaignid=9259051&category={category}&cost=0.006300&geo=FR&lan={lan}&ntk=19&random=5462333&SUBID=952786515891597313&zoneid=6343319 Certificate IssuerLet's Encrypt Subjectaha.ofcuboneom.com Fingerprint28:92:6F:F9:7D:5E:4E:78:6C:5C:BA:C7:17:A2:FF:61:08:F9:CF:D7 ValidityFri, 16 May 2025 08:32:56 GMT - Thu, 14 Aug 2025 08:32:55 GMT File type SVG Scalable Vector Graphics image Size 871 B (871 bytes) Hash 5e09dff8e398fdf60cdff015134f1449 8c53331981284504370d939f63afbe3fee112f78 ae8418bc7470701a1cb8bee5a06b25a99421783689982f642f2d9e58910a21b3 HTTP Headers `GET /NC-8952/assets/settings.svg HTTP/1.1 Host: aha.ofcuboneom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Sat, 31 May 2025 21:06:15 GMT content-type: image/svg+xml content-length: 871 server: nginx last-modified: Thu, 29 May 2025 15:08:20 GMT etag: "68387864-367" strict-transport-security: max-age=1 x-content-type-options: nosniff expires: Mon, 02 Jun 2025 21:06:15 GMT cache-control: max-age=172800 vary: Accept-Encoding x-cdn-host-id: ah0543 x-proxy-cache: HIT accept-ranges: bytes X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (13)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash