Report - ewigni.pw/a210

Report Overview

Submitted URL
ewigni.pw/a210
IP
104.42.225.122
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2023-06-04 01:21:13
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
7
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ewigni.pw	unknown	2017-11-30	2015-08-28	2023-06-04	721 B	494 B	104.42.225.122

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-04 01:20:56	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-06-04 01:20:56	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-06-04 01:20:56	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-06-04 01:20:57	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-06-04 01:20:57	low	Client IP	104.42.225.122	ET INFO HTTP Request to a *.pw domain
2023-06-04 01:20:57	medium	Client IP	Internal IP	ET DNS Query to a *.pw domain - Likely Hostile
2023-06-04 01:20:57	low	Client IP	104.42.225.122	ET INFO HTTP Request to a *.pw domain

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

ewigni.pw/a210

104.42.225.122

200 OK

39 B

URL User Request GET HTTP/1.1
ewigni.pw/a210
IP
104.42.225.122:80
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with no line terminators
Size
39 B (39 bytes)
Hash
3321156b06e001baeb110a1ffb002a22
2277d396b4bc41ce7720053b0c5e6fd9c31c85db
1d0a21e87a85c54e6dea265e3fac3a0524f3a52817c847303cd0dfc8b41e6291

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.pw domain

HTTP Headers

GET /a210 HTTP/1.1
Host: ewigni.pw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Jun 2023 01:20:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

ewigni.pw/favicon.ico

104.42.225.122

200 OK

39 B

URL GET HTTP/1.1
ewigni.pw/favicon.ico
IP
104.42.225.122:80
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
http://ewigni.pw/a210

File type
ASCII text, with no line terminators
Size
39 B (39 bytes)
Hash
3321156b06e001baeb110a1ffb002a22
2277d396b4bc41ce7720053b0c5e6fd9c31c85db
1d0a21e87a85c54e6dea265e3fac3a0524f3a52817c847303cd0dfc8b41e6291

Detections

NIDS	Severity	Alert
suricata	low	ET INFO HTTP Request to a *.pw domain

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ewigni.pw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ewigni.pw/a210
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 04 Jun 2023 01:20:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers