Report - api.yu3.io/ke0s5h

Report Overview

Visited public
2025-02-11 13:25:58
Tags
Submit Tags
URL
api.yu3.io/ke0s5h
Finishing URL
uupdaateoonlinenow.freewebhostmost.com/dd/
IP / ASN
172.67.195.69
#13335 CLOUDFLARENET
Title
404 Not Found

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
uupdaateoonlinenow.freewebhostmost.com	unknown	2023-12-02	2025-02-11	2025-02-11	1.3 kB	3.5 kB	66.78.41.25
api.yu3.io	unknown	2024-04-25	2024-07-01	2025-02-11	483 B	12 kB	104.21.21.5

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-02-10	medium	uupdaateoonlinenow.freewebhostmost.com/dd/	DHL Airways, Inc.
2025-02-10	medium	uupdaateoonlinenow.freewebhostmost.com/dd/	DHL Airways, Inc.
2025-02-10	medium	api.yu3.io/ke0s5h	DHL Airways, Inc.

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-02-11	medium	freewebhostmost.com	Sinkholed
2025-02-11	medium	freewebhostmost.com	Sinkholed
2025-02-11	medium	freewebhostmost.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

URL IP Response Size

GET uupdaateoonlinenow.freewebhostmost.com/dd/

66.78.41.25

404 Not Found

796 B

URL User Request GET HTTP/1.1
uupdaateoonlinenow.freewebhostmost.com/dd/
IP
66.78.41.25:80
ASN
#400859 EXO-BROADBAND

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
796 B (796 bytes)
Hash
265e51037981a14ed99a5fc8c5ec1b51
d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a
c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /dd/ HTTP/1.1
Host: uupdaateoonlinenow.freewebhostmost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 796
date: Tue, 11 Feb 2025 13:25:28 GMT
server: LiteSpeed
vary: User-Agent
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

GET uupdaateoonlinenow.freewebhostmost.com/dd/

66.78.41.25

404 Not Found

796 B

URL User Request GET HTTP/1.1
uupdaateoonlinenow.freewebhostmost.com/dd/
IP
66.78.41.25:80
ASN
#400859 EXO-BROADBAND

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
796 B (796 bytes)
Hash
265e51037981a14ed99a5fc8c5ec1b51
d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a
c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /dd/ HTTP/1.1
Host: uupdaateoonlinenow.freewebhostmost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 796
date: Tue, 11 Feb 2025 13:25:28 GMT
server: LiteSpeed
vary: User-Agent
x-content-type-options: nosniff

GET uupdaateoonlinenow.freewebhostmost.com/favicon.ico

66.78.41.25

404 Not Found

796 B

URL GET HTTP/1.1
uupdaateoonlinenow.freewebhostmost.com/favicon.ico
IP
66.78.41.25:80
ASN
#400859 EXO-BROADBAND

Requested by
http://uupdaateoonlinenow.freewebhostmost.com/dd/

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
796 B (796 bytes)
Hash
265e51037981a14ed99a5fc8c5ec1b51
d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a
c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: uupdaateoonlinenow.freewebhostmost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://uupdaateoonlinenow.freewebhostmost.com/dd/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 796
date: Tue, 11 Feb 2025 13:25:28 GMT
server: LiteSpeed
vary: User-Agent
x-content-type-options: nosniff

GET api.yu3.io/ke0s5h

104.21.21.5

302 Found

11 kB

URL User Request GET HTTP/2
api.yu3.io/ke0s5h
IP
104.21.21.5:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectyu3.io
Fingerprint00:D4:06:8B:5C:6F:68:FF:93:A4:74:31:E1:3C:B1:9F:8C:E0:CD:C5
ValidityFri, 10 Jan 2025 15:57:45 GMT - Thu, 10 Apr 2025 16:55:20 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3
Size
11 kB (10728 bytes)
Hash
5163f42b8bf8a5896b8fe7a7370e3e6c
b09dcd10ad5928dc9db9e35200ea8e4d501ec479
c558090961c9ba37fd0a190ff5cda44fe9a5b12bf5540869267d57e833ac496c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	DHL Airways, Inc.

HTTP Headers

GET /ke0s5h HTTP/1.1
Host: api.yu3.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Tue, 11 Feb 2025 13:25:28 GMT
content-type: text/html; charset=utf-8
location: https://uupdaateoonlinenow.freewebhostmost.com/dd/
cf-ray: 9104aa42082156bf-OSL
cf-cache-status: DYNAMIC
cache-control: no-store, no-cache, must-revalidate
strict-transport-security: max-age=31536000; includeSubDomains
vary: origin, Cookie, Accept-Encoding
cross-origin-opener-policy: same-origin
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: DENY
x-robots-tag: noindex, nofollow
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QkgLHgHGRErYcqcYY2pQyVdaGy0hvZRF1H39Bx4VkBJI2V08r2ubZLVvBspCiOccWMeLv3qNUsD1dGlIgdB%2BoQZ09Jdt5UcgIUJFYyC7hokWUj5bJNeUG896YTqi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=5907&min_rtt=438&rtt_var=10963&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3179&recv_bytes=1126&delivery_rate=7970642&cwnd=254&unsent_bytes=0&cid=a03b274b78f78685&ts=164&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (4)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers