Report - fritzhfhi.000webhostapp.com/index.php

Report Overview

Visited public
2023-11-29 13:26:45
Tags
URL
fritzhfhi.000webhostapp.com/index.php
Finishing URL
fritzhfhi.000webhostapp.com/index.php
IP / ASN
145.14.145.187
#204915 Hostinger International Limited
Title
Office 365

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fritzhfhi.000webhostapp.com	unknown	unknown	No data	No data	1.0 kB	42 kB	145.14.145.187
140.127.86.199	unknown	unknown	No data	No data	428 B	0 B	0.0.0.0
cdn.000webhost.com	102231	2007-05-24	2018-03-27 20:52:13	2023-11-28 05:10:05	493 B	2.5 kB	104.17.162.41
webmail.meduniwien.ac.at	unknown	unknown	2013-12-17 21:21:05	2023-11-20 12:48:32	486 B	18 kB	149.148.224.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-11-29 13:26:29	low	Client IP	Internal IP	ET INFO Observed Free Hosting Domain (*.000webhostapp .com in DNS Lookup)
2023-11-29 13:26:29	low	Client IP	Internal IP	ET INFO Observed Free Hosting Domain (*.000webhostapp .com in DNS Lookup)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-11-29	medium	140.127.86.199	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

URL IP Response Size

cdn.000webhost.com/000webhost/logo/footer-powered-by-000webhost-white2.png

104.17.162.41

200 OK

1.7 kB

URL GET HTTP/2
cdn.000webhost.com/000webhost/logo/footer-powered-by-000webhost-white2.png
IP
104.17.162.41:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fritzhfhi.000webhostapp.com/index.php
Certificate
IssuerSectigo Limited
Subject*.000webhost.com
Fingerprint57:A6:58:B9:EE:C0:CF:19:A1:83:5C:EC:4C:8D:37:AF:A5:F2:77:64
ValidityTue, 10 Jan 2023 00:00:00 GMT - Sat, 10 Feb 2024 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image\012- data
Size
1.7 kB (1696 bytes)
Hash
4f8ead9b4116b3a5098cf60e0e4195b3
4a783b5ab6cf8a075d89b16fb67250b5f5ed9a5b
86f2673ec74a632865109a76b2232f4f5b3587daa219e07a17ef1d9c76a0fda5

HTTP Headers

GET /000webhost/logo/footer-powered-by-000webhost-white2.png HTTP/1.1
Host: cdn.000webhost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fritzhfhi.000webhostapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 29 Nov 2023 13:26:25 GMT
content-type: image/webp
content-length: 1696
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2046
content-disposition: inline; filename="footer-powered-by-000webhost-white2.webp"
etag: "653fa162-7fe"
last-modified: Mon, 30 Oct 2023 12:28:18 GMT
strict-transport-security: max-age=2592000
vary: Accept
x-content-type-options: nosniff
x-frame-options: sameorigin
x-hostinger-datacenter: srv
x-hostinger-node: nl-srv-cdn2
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 6666
expires: Wed, 29 Nov 2023 17:26:25 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 82db2eaaebfe569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

webmail.meduniwien.ac.at/skins/elastic/images/logo.svg?s=1621418142

149.148.224.106

18 kB

URL
webmail.meduniwien.ac.at/skins/elastic/images/logo.svg?s=1621418142
IP
149.148.224.106:0
ASN
#2494 MUWNET MUWNET Autonomous System

File type
SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size
18 kB (17627 bytes)
Hash
251c2a5bdfe667ae9ceb164ec96a7751
4e1423eac6de9c30acfa597ecc9cb200d8fe125c
009c2827f8b08307eb82a40cdd6658bdf5e63c474abd87ef3d86bda08ba17c23

HTTP Headers

GET /skins/elastic/images/logo.svg?s=1621418142 HTTP/1.1
Host: webmail.meduniwien.ac.at
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fritzhfhi.000webhostapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 29 Nov 2023 13:26:26 GMT
Server: Apache/2.4.37 (Red Hat Enterprise Linux) OpenSSL/1.1.1k mod_fcgid/2.3.9
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
Last-Modified: Wed, 19 May 2021 09:55:42 GMT
ETag: "44db-5c2abd463b1d9"
Accept-Ranges: bytes
Content-Length: 17627
Access-Control-Allow-Origin: *
Keep-Alive: timeout=2, max=200
Connection: Keep-Alive
Content-Type: image/svg+xml

fritzhfhi.000webhostapp.com/data/openwebmail/images/backgrounds/Globe.gif

145.14.145.187

404 Not Found

21 kB

URL GET HTTP/2
fritzhfhi.000webhostapp.com/data/openwebmail/images/backgrounds/Globe.gif
IP
145.14.145.187:443
ASN
#204915 Hostinger International Limited

Requested by
https://fritzhfhi.000webhostapp.com/index.php
Certificate
IssuerDigiCert Inc
Subject*.000webhostapp.com
FingerprintB0:57:03:97:AE:15:06:79:FC:86:0E:E2:79:B6:B0:9D:37:04:A5:49
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT

File type

Size
21 kB (20651 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /data/openwebmail/images/backgrounds/Globe.gif HTTP/1.1
Host: fritzhfhi.000webhostapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fritzhfhi.000webhostapp.com/index.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Wed, 29 Nov 2023 13:26:25 GMT
content-type: text/html; charset=UTF-8
server: awex
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-request-id: cfb708265f79649d0afb47ef983f4574
content-encoding: gzip
X-Firefox-Spdy: h2

fritzhfhi.000webhostapp.com/openwebmail/images/backgrounds/Globe.gif

145.14.145.187

404 Not Found

21 kB

URL GET HTTP/2
fritzhfhi.000webhostapp.com/openwebmail/images/backgrounds/Globe.gif
IP
145.14.145.187:443
ASN
#204915 Hostinger International Limited

Requested by
https://fritzhfhi.000webhostapp.com/index.php
Certificate
IssuerDigiCert Inc
Subject*.000webhostapp.com
FingerprintB0:57:03:97:AE:15:06:79:FC:86:0E:E2:79:B6:B0:9D:37:04:A5:49
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT

File type

Size
21 kB (20651 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /openwebmail/images/backgrounds/Globe.gif HTTP/1.1
Host: fritzhfhi.000webhostapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fritzhfhi.000webhostapp.com/index.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Wed, 29 Nov 2023 13:26:25 GMT
content-type: text/html; charset=UTF-8
server: awex
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-request-id: dddb55636f0fa41d448584052e12b769
content-encoding: gzip
X-Firefox-Spdy: h2

140.127.86.199/data/openwebmail/images/openwebmail.ico

0.0.0.0

0 B

URL GET
140.127.86.199/data/openwebmail/images/openwebmail.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://fritzhfhi.000webhostapp.com/index.php

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /data/openwebmail/images/openwebmail.ico HTTP/1.1
Host: 140.127.86.199
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (5)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers