Report - views-sand.vercel.app/

Report Overview

Visited public
2023-12-04 05:29:14
Tags
phishing
URL
views-sand.vercel.app/
Finishing URL
views-sand.vercel.app/
IP / ASN
76.76.21.9
#16509 AMAZON-02
Title
WeTransfer
Phishing - Generic phishing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ajax.googleapis.com	12905	2005-01-25	2013-08-16 11:51:31	2023-12-03 07:59:58	896 B	63 kB	142.250.74.10
code.jquery.com	634	2005-12-10	2012-05-21 19:28:02	2023-12-03 05:09:22	886 B	112 kB	151.101.2.137
autonets-group.com	unknown	unknown	No data	No data	2.0 kB	80 kB	68.65.122.47
views-sand.vercel.app	unknown	2020-01-28	2023-10-26 08:04:05	2023-10-26 19:12:56	488 B	13 kB	76.76.21.9

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-11-13	medium	views-sand.vercel.app/	WeTransfer

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (7)

	URL	From	Size	First Seen	Last Seen
	code.jquery.com/jquery-3.3.1.js	ScriptElement	272 kB	2023-03-07	2025-05-09
Pretty URL code.jquery.com/jquery-3.3.1.js IP 151.101.2.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 05:55 Times Seen37783 Hash 6a07da9fae934baf3f749e876bbfdd96 46a436eba01c79acdb225757ed80bf54bad6416b d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js	ScriptElement	90 kB	2023-03-07	2025-05-09
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js IP 142.250.74.10 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 06:00 Times Seen108593 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

	unknown	ScriptElement	3.5 kB	2023-10-27	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-27 02:53 Last Seen2024-08-20 22:16 Times Seen3 Hash 53746c907beb7690ebc002f99bb966e2 8aa04180e20df1846485a35567e13ad448bcc17b bbef09237ecbfb9b23e7c311b5ca299735aac208b632542f2c8648dcdae74f71 Loading...

	views-sand.vercel.app/	ScriptElement	20 kB	2023-10-27	2024-08-20
Pretty URL views-sand.vercel.app/ IP 76.76.21.9 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-27 02:53 Last Seen2024-08-20 22:16 Times Seen3 Hash a32266a827ccf5b562f09cc1623ea6ef 3e2b236feaf632c6831b93e30c6f57b32ee3846b bfb0b73ae0e2cef0b172d1faa651254b77af8a69138c1a3ea9176435feccebb1 Loading...

	ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js	ScriptElement	86 kB	2023-03-07	2025-05-09
Pretty URL ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP 142.250.74.10 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 06:53 Times Seen173881 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	code.jquery.com/jquery-3.1.1.min.js	ScriptElement	87 kB	2023-03-07	2025-05-09
Pretty URL code.jquery.com/jquery-3.1.1.min.js IP 151.101.2.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 05:55 Times Seen112193 Hash e071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf Loading...

		Size	First Seen	Last Seen
	#1 Write - 376699c9fb35d985865110abf2adcf0c	11 kB	2023-10-27 02:53	2024-08-20 22:16
Pretty Observations First Seen2023-10-27 02:53 Last Seen2024-08-20 22:16 Times Seen3 Hash 376699c9fb35d985865110abf2adcf0c 69fbb7c725472894ede1f6733aa9d1a54fb546be de2688bfc21efef71bf308dde7f9e6e4883221aef0888c469db782eb3ca7b7e8 Loading...

HTTP Transactions (9)

URL IP Response Size

ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js

142.250.74.10

200 OK

30 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
142.250.74.10:443
ASN
#15169 GOOGLE

Requested by
https://views-sand.vercel.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (32065)
Size
30 kB (30028 bytes)
Hash
2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

HTTP Headers

GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://views-sand.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 17:47:45 GMT
expires: Thu, 28 Nov 2024 17:47:45 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 387671
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js

142.250.74.10

200 OK

31 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
142.250.74.10:443
ASN
#15169 GOOGLE

Requested by
https://views-sand.vercel.app/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (65451)
Size
31 kB (31021 bytes)
Hash
dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

HTTP Headers

GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://views-sand.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 07:01:38 GMT
expires: Fri, 29 Nov 2024 07:01:38 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 340038
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.1.1.min.js

151.101.2.137

200 OK

30 kB

URL GET HTTP/2
code.jquery.com/jquery-3.1.1.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://views-sand.vercel.app/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (32030)
Size
30 kB (30070 bytes)
Hash
e071abda8fe61194711cfc2ab99fe104
f647a6d37dc4ca055ced3cf64bbc1f490070acba
85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

HTTP Headers

GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://views-sand.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 04 Dec 2023 05:28:56 GMT
age: 6867135
x-served-by: cache-lga21947-LGA, cache-bma1670-BMA
x-cache: HIT, HIT
x-cache-hits: 119, 85613
x-timer: S1701667737.789205,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.3.1.js

151.101.2.137

200 OK

80 kB

URL GET HTTP/2
code.jquery.com/jquery-3.3.1.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://views-sand.vercel.app/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
ASCII text
Size
80 kB (80268 bytes)
Hash
6a07da9fae934baf3f749e876bbfdd96
46a436eba01c79acdb225757ed80bf54bad6416b
d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad

HTTP Headers

GET /jquery-3.3.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://views-sand.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://views-sand.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-42587"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 04 Dec 2023 05:28:56 GMT
age: 6867086
x-served-by: cache-lga21980-LGA, cache-bma1658-BMA
x-cache: HIT, HIT
x-cache-hits: 73, 14782
x-timer: S1701667737.790927,VS0,VE0
vary: Accept-Encoding
content-length: 80268
X-Firefox-Spdy: h2

autonets-group.com/wecloud/we-transfer/css/main.css

68.65.122.47

200 OK

1.5 kB

URL GET HTTP/2
autonets-group.com/wecloud/we-transfer/css/main.css
IP
68.65.122.47:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://views-sand.vercel.app/
Certificate
IssuerSectigo Limited
Subjectautonets-group.com
Fingerprint65:D2:B5:5F:FF:A4:45:4B:AD:47:D0:41:ED:7C:B9:F1:13:1D:82:C1
ValidityTue, 08 Aug 2023 00:00:00 GMT - Thu, 08 Aug 2024 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
1.5 kB (1529 bytes)
Hash
a97b20e8279056606f22ab06c1856333
06affb72d653aaa63e0bdb30b679fdf92da303a6
c603c3d2fae39231eeef44eabfc7ef5d61eab4da3c21ac766afd058352bb3fd2

HTTP Headers

GET /wecloud/we-transfer/css/main.css HTTP/1.1
Host: autonets-group.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://views-sand.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 11 Dec 2023 05:28:57 GMT
content-type: text/css
last-modified: Mon, 07 Mar 2022 21:51:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1529
date: Mon, 04 Dec 2023 05:28:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

views-sand.vercel.app/

76.76.21.9

200 OK

12 kB

URL User Request GET HTTP/2
views-sand.vercel.app/
IP
76.76.21.9:443
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subject*.vercel.app
FingerprintBB:8B:2C:D9:45:95:D5:D8:FC:8A:8D:67:56:71:D5:99:AD:F6:D5:FE
ValidityMon, 25 Sep 2023 03:14:47 GMT - Sun, 24 Dec 2023 03:14:46 GMT

File type
HTML document text\012- exported SGML document, ASCII text, with very long lines (19398), with CRLF line terminators
Size
12 kB (12438 bytes)
Hash
a9ad57488fb280136c7c202f606ab02e
46e11cf832aa7ff9f2335f42b3e580141cb7c961
af2e2226345e0b19ebc7a8d4d9b7bca324fb8d7627fd609beb86350191d4b0c7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WeTransfer

HTTP Headers

GET / HTTP/1.1
Host: views-sand.vercel.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
age: 3326163
cache-control: public, max-age=0, must-revalidate
content-disposition: inline
content-encoding: br
content-type: text/html; charset=utf-8
date: Mon, 04 Dec 2023 05:28:56 GMT
etag: W/"a9ad57488fb280136c7c202f606ab02e"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::4jshm-1701667736274-e1393ebe4d59
X-Firefox-Spdy: h2

autonets-group.com/wecloud/we-transfer/img/bg.png

68.65.122.47

200 OK

67 kB

URL GET HTTP/2
autonets-group.com/wecloud/we-transfer/img/bg.png
IP
68.65.122.47:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://views-sand.vercel.app/
Certificate
IssuerSectigo Limited
Subjectautonets-group.com
Fingerprint65:D2:B5:5F:FF:A4:45:4B:AD:47:D0:41:ED:7C:B9:F1:13:1D:82:C1
ValidityTue, 08 Aug 2023 00:00:00 GMT - Thu, 08 Aug 2024 23:59:59 GMT

File type
PNG image data, 1366 x 662, 8-bit/color RGB, non-interlaced\012- data
Size
67 kB (66648 bytes)
Hash
8a5348c90c872a6c740b0347dafde418
1314ad2fab850b93b3f16cf50cedb458bd490858
2dc6d25edaeca3041ce7dfbd184de4da16a2b240487a9ef7c5d5e2522173f483

HTTP Headers

GET /wecloud/we-transfer/img/bg.png HTTP/1.1
Host: autonets-group.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://autonets-group.com/wecloud/we-transfer/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 11 Dec 2023 05:28:57 GMT
content-type: image/png
last-modified: Mon, 07 Mar 2022 17:47:12 GMT
accept-ranges: bytes
content-length: 66648
date: Mon, 04 Dec 2023 05:28:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

autonets-group.com/wecloud/we-transfer/fonts/Freight-Sans-Medium.otf

68.65.122.47

404 Not Found

1.2 kB

URL GET HTTP/2
autonets-group.com/wecloud/we-transfer/fonts/Freight-Sans-Medium.otf
IP
68.65.122.47:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://views-sand.vercel.app/
Certificate
IssuerSectigo Limited
Subjectautonets-group.com
Fingerprint65:D2:B5:5F:FF:A4:45:4B:AD:47:D0:41:ED:7C:B9:F1:13:1D:82:C1
ValidityTue, 08 Aug 2023 00:00:00 GMT - Thu, 08 Aug 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size
1.2 kB (1238 bytes)
Hash
0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807

HTTP Headers

GET /wecloud/we-transfer/fonts/Freight-Sans-Medium.otf HTTP/1.1
Host: autonets-group.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://views-sand.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://autonets-group.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Mon, 04 Dec 2023 05:28:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

autonets-group.com/wecloud/we-transfer/img/logo.png

68.65.122.47

200 OK

9.4 kB

URL GET HTTP/2
autonets-group.com/wecloud/we-transfer/img/logo.png
IP
68.65.122.47:443
ASN
#22612 NAMECHEAP-NET

Requested by
https://views-sand.vercel.app/
Certificate
IssuerSectigo Limited
Subjectautonets-group.com
Fingerprint65:D2:B5:5F:FF:A4:45:4B:AD:47:D0:41:ED:7C:B9:F1:13:1D:82:C1
ValidityTue, 08 Aug 2023 00:00:00 GMT - Thu, 08 Aug 2024 23:59:59 GMT

File type
PNG image data, 300 x 139, 8-bit/color RGBA, non-interlaced\012- data
Size
9.4 kB (9385 bytes)
Hash
507019be54750ffb69077ba64a3cc089
6b7733ce2032917185bdcc1a8b610e58acfedaf6
ee77f6a227f8001e6e1c127bfe8f67d52dd42b77fc262904a058f23147f51d70

HTTP Headers

GET /wecloud/we-transfer/img/logo.png HTTP/1.1
Host: autonets-group.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://views-sand.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 11 Dec 2023 05:28:57 GMT
content-type: image/png
last-modified: Mon, 07 Mar 2022 17:47:24 GMT
accept-ranges: bytes
content-length: 9385
date: Mon, 04 Dec 2023 05:28:57 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (9)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size