Report - www.announcement.edirecttransfer.com/bb/291047976033836493

Report Overview

Submitted URL
www.announcement.edirecttransfer.com/bb/291047976033836493
IP
45.145.176.75
ASN
#42881 Sc Itns.net Srl
Submitted
2024-05-10 19:17:22
Access
public
Website Title
Connection Error
Final URL
announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
8
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.announcement.edirecttransfer.com	unknown	2021-07-27	2022-06-04	2023-01-05	428 B	4.8 kB	45.145.176.75
announcement.edirecttransfer.com	unknown	2021-07-27	2022-06-04	2023-01-05	3.1 kB	20 kB	45.145.176.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-10 19:16:57	high	45.145.176.75	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2024-05-10 19:16:57	high	45.145.176.75	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2024-05-10 19:16:58	high	45.145.176.75	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2024-05-10 19:16:58	high	45.145.176.75	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2024-05-10 19:16:58	high	45.145.176.131	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2024-05-10 19:16:58	high	45.145.176.131	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2024-05-10 19:16:59	high	45.145.176.131	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2024-05-10 19:16:59	high	45.145.176.131	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w	0 B	2023-03-07	2024-05-23
Pretty URL announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w IP 45.145.176.131 ASN #42881 Sc Itns.net Srl Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-23 06:01:34 Times Seen37997459 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w	0 B	2023-03-07	2024-05-23
Pretty URL announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w IP 45.145.176.131 ASN #42881 Sc Itns.net Srl Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-23 06:01:34 Times Seen37997459 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	announcement.edirecttransfer.com/tracking/WebResource.axd?d=M0sccuGn06SxUjLI5ZV5hg0w_1Uc5hm3-sNpjbbT-qIKDM6Km1yvhQe1v1j8HI6j4QMb-7gMYXeO-b8sLeqJI4L2phWB-SDOagNYBb8iNo81&t=636403334294818574	23 kB	2023-03-07	2024-05-23
Pretty URL announcement.edirecttransfer.com/tracking/WebResource.axd?d=M0sccuGn06SxUjLI5ZV5hg0w_1Uc5hm3-sNpjbbT-qIKDM6Km1yvhQe1v1j8HI6j4QMb-7gMYXeO-b8sLeqJI4L2phWB-SDOagNYBb8iNo81&t=636403334294818574 IP 45.145.176.131 ASN #42881 Sc Itns.net Srl Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:31 Last Seen2024-05-23 06:00:48 Times Seen44714 Hash 90ea7274f19755002360945d54c2a0d7 647b5d8bf7d119a2c97895363a07a0c6eb8cd284 40732e9dcfa704cf615e4691bb07aecfd1cc5e063220a46e4a7ff6560c77f5db Loading...

HTTP Transactions (6)

	URL	IP	Response	Size
	www.announcement.edirecttransfer.com/bb/291047976033836493	45.145.176.75	302 Found	4.4 kB
URL User Request GET HTTP/1.1 www.announcement.edirecttransfer.com/bb/291047976033836493 IP 45.145.176.75:80 ASN #42881 Sc Itns.net Srl File type HTML document, ASCII text, with very long lines (430), with CRLF, LF line terminators Size 4.4 kB (4367 bytes) Hash 2412585ba1f711ccba080247286f52a5 d2fb208c6583717ca406eca5cded3e882cc5c346 2d0ea0febbabf25e807163c068e1a72ee579f0011e5bb4e0830b592c4e3c0f22 HTTP Headers `GET /bb/291047976033836493 HTTP/1.1 Host: www.announcement.edirecttransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Date: Fri, 10 May 2024 19:16:58 GMT Server: Microsoft-IIS/10.0 Cache-Control: private Content-Type: text/html; charset=utf-8 Location: http://announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 4367 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive`

	announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w	45.145.176.131	200 OK	3.1 kB
URL User Request GET HTTP/1.1 announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w IP 45.145.176.131:80 ASN #42881 Sc Itns.net Srl File type JavaScript source, Unicode text, UTF-8 text, with very long lines (332), with CRLF line terminators Size 3.1 kB (3101 bytes) Hash c0d0327ae2835ea21301e2b63d0c969d 05b3c300116f730ebb13ef4eac0175f0f9b382b4 65e576c3e50e4a73ed96640b7f61a568d61b5e9f559c7e816e1893f9e1f33f1d HTTP Headers GET /international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w HTTP/1.1 Host: announcement.edirecttransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Fri, 10 May 2024 19:16:58 GMT Server: Microsoft-IIS/10.0 Cache-Control: private Content-Type: text/html; charset=utf-8 Content-Encoding: gzip Vary: Accept-Encoding X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 3101 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive`

	announcement.edirecttransfer.com/tracking/WebResource.axd?d=M0sccuGn06SxUjLI5ZV5hg0w_1Uc5hm3-sNpjbbT-qIKDM6Km1yvhQe1v1j8HI6j4QMb-7gMYXeO-b8sLeqJI4L2phWB-SDOagNYBb8iNo81&t=636403334294818574	45.145.176.131	200 OK	6.0 kB
URL GET HTTP/1.1 announcement.edirecttransfer.com/tracking/WebResource.axd?d=M0sccuGn06SxUjLI5ZV5hg0w_1Uc5hm3-sNpjbbT-qIKDM6Km1yvhQe1v1j8HI6j4QMb-7gMYXeO-b8sLeqJI4L2phWB-SDOagNYBb8iNo81&t=636403334294818574 IP 45.145.176.131:80 ASN #42881 Sc Itns.net Srl Requested by http://announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w File type JavaScript source, ASCII text, with CRLF line terminators Size 6.0 kB (6007 bytes) Hash 90ea7274f19755002360945d54c2a0d7 647b5d8bf7d119a2c97895363a07a0c6eb8cd284 40732e9dcfa704cf615e4691bb07aecfd1cc5e063220a46e4a7ff6560c77f5db HTTP Headers GET /tracking/WebResource.axd?d=M0sccuGn06SxUjLI5ZV5hg0w_1Uc5hm3-sNpjbbT-qIKDM6Km1yvhQe1v1j8HI6j4QMb-7gMYXeO-b8sLeqJI4L2phWB-SDOagNYBb8iNo81&t=636403334294818574 HTTP/1.1 Host: announcement.edirecttransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 200 OK Date: Fri, 10 May 2024 19:16:58 GMT Server: Microsoft-IIS/10.0 Cache-Control: public Content-Type: application/x-javascript Content-Encoding: gzip Expires: Fri, 09 May 2025 22:57:01 GMT Last-Modified: Thu, 07 Sep 2017 02:23:49 GMT Vary: Accept-Encoding X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 6007 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive`

	announcement.edirecttransfer.com/tracking/ScriptResource.axd?d=0m_JWCYc_-RlfmQfsMH3d4TE6qOEFvk_8ZZNAmSF5pKf3t6EFsKui0cGvOpi5SKcs71CK1lEtTQz1pcamd_SZJRAmYxkOaqkK8FI61tIr2hWKMrsOQssSXT8n-1QZawrhqNgsWd_m3dVMsWcg4bvGUPSt1yVv4ZnLYDwMpX6KCtSjlty1mIA1zDZAk_63QIr0&t=3d6efc1f	45.145.176.75	404 Not Found	3.0 kB
URL GET HTTP/1.1 announcement.edirecttransfer.com/tracking/ScriptResource.axd?d=0m_JWCYc_-RlfmQfsMH3d4TE6qOEFvk_8ZZNAmSF5pKf3t6EFsKui0cGvOpi5SKcs71CK1lEtTQz1pcamd_SZJRAmYxkOaqkK8FI61tIr2hWKMrsOQssSXT8n-1QZawrhqNgsWd_m3dVMsWcg4bvGUPSt1yVv4ZnLYDwMpX6KCtSjlty1mIA1zDZAk_63QIr0&t=3d6efc1f IP 45.145.176.75:80 ASN #42881 Sc Itns.net Srl Requested by http://announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w File type HTML document, ASCII text, with CRLF line terminators Size 3.0 kB (3006 bytes) Hash 5a5f33b6e86e6ef6b0dcae2dccc02771 47074325e225fa34ec46e0e87aa607aa0de42b2b fc9a7e3e2e2880b8fbcdb1ca5c035802460ffc2d767fbed0edc510c1b1f77124 HTTP Headers GET /tracking/ScriptResource.axd?d=0m_JWCYc_-RlfmQfsMH3d4TE6qOEFvk_8ZZNAmSF5pKf3t6EFsKui0cGvOpi5SKcs71CK1lEtTQz1pcamd_SZJRAmYxkOaqkK8FI61tIr2hWKMrsOQssSXT8n-1QZawrhqNgsWd_m3dVMsWcg4bvGUPSt1yVv4ZnLYDwMpX6KCtSjlty1mIA1zDZAk_63QIr0&t=3d6efc1f HTTP/1.1 Host: announcement.edirecttransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found Date: Fri, 10 May 2024 19:16:59 GMT Server: Microsoft-IIS/10.0 Cache-Control: private Content-Type: text/html; charset=utf-8 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 3006 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive`

	announcement.edirecttransfer.com/tracking/ScriptResource.axd?d=IajhcJJGm1BCENvzSITUXIrCGRFoq3St9mJAPo6NHvzvdT9qAq9mLIRUxuFMIUI4CMS_FcyqqjYdqVrjNbuqJw2qcvmky37PcDvbWV9le0JMvM1ljA5VrOTO6ElOJo4kwZPwQXE3Ci7P4041bLfs4VwjeDRzOLUcHgOSLX0chz631JSBh9xlWkoQDIpRwXMP0&t=3d6efc1f	45.145.176.75	404 Not Found	3.0 kB
URL GET HTTP/1.1 announcement.edirecttransfer.com/tracking/ScriptResource.axd?d=IajhcJJGm1BCENvzSITUXIrCGRFoq3St9mJAPo6NHvzvdT9qAq9mLIRUxuFMIUI4CMS_FcyqqjYdqVrjNbuqJw2qcvmky37PcDvbWV9le0JMvM1ljA5VrOTO6ElOJo4kwZPwQXE3Ci7P4041bLfs4VwjeDRzOLUcHgOSLX0chz631JSBh9xlWkoQDIpRwXMP0&t=3d6efc1f IP 45.145.176.75:80 ASN #42881 Sc Itns.net Srl Requested by http://announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w File type HTML document, ASCII text, with CRLF line terminators Size 3.0 kB (3006 bytes) Hash 5a5f33b6e86e6ef6b0dcae2dccc02771 47074325e225fa34ec46e0e87aa607aa0de42b2b fc9a7e3e2e2880b8fbcdb1ca5c035802460ffc2d767fbed0edc510c1b1f77124 HTTP Headers GET /tracking/ScriptResource.axd?d=IajhcJJGm1BCENvzSITUXIrCGRFoq3St9mJAPo6NHvzvdT9qAq9mLIRUxuFMIUI4CMS_FcyqqjYdqVrjNbuqJw2qcvmky37PcDvbWV9le0JMvM1ljA5VrOTO6ElOJo4kwZPwQXE3Ci7P4041bLfs4VwjeDRzOLUcHgOSLX0chz631JSBh9xlWkoQDIpRwXMP0&t=3d6efc1f HTTP/1.1 Host: announcement.edirecttransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found Date: Fri, 10 May 2024 19:16:59 GMT Server: Microsoft-IIS/10.0 Cache-Control: private Content-Type: text/html; charset=utf-8 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 3006 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive`

	announcement.edirecttransfer.com/favicon.ico	45.145.176.75	200 OK	3.8 kB
URL GET HTTP/1.1 announcement.edirecttransfer.com/favicon.ico IP 45.145.176.75:80 ASN #42881 Sc Itns.net Srl Requested by http://announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w File type JavaScript source, ASCII text, with CRLF line terminators Size 3.8 kB (3788 bytes) Hash a1b93f579f4f022c94a3f0ae8a0cb8d8 efa0ce0b839be997e7d0639432a6507146265adb b7eebc438bb0b8ae2f85edac9dbcdcca16e2b126c49b3f245536fa0d49aa7d84 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: announcement.edirecttransfer.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://announcement.edirecttransfer.com/international.aspx?p=YW5ub3VuY2VtZW50LmVkaXJlY3R0cmFuc2Zlci5jb20sdG1vb3JtYW5Ad2luZGVybWVyZS5jb20sNTY4Mzc1LTE4ODQzOC0xMDkyOTktNjQxNjYtMC0w Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 10 May 2024 19:16:59 GMT Server: Microsoft-IIS/10.0 Cache-Control: private Content-Type: text/html; charset=utf-8 Content-Encoding: gzip Vary: Accept-Encoding X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 3788 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive`