Report - bersead-aid87825412.surge.sh

Report Overview

Visited public
2024-11-21 04:56:04
Tags
URL
bersead-aid87825412.surge.sh
Finishing URL
bersead-aid87825412.surge.sh/
IP / ASN
138.68.112.220
#14061 DIGITALOCEAN-ASN
Title
Unavailable

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
bersead-aid87825412.surge.sh	unknown	2014-07-25	2024-10-24	2024-11-07	1.2 kB	26 kB	138.68.112.220
code.cdn.mozilla.net	92169	1998-01-31	2014-07-28	2024-11-20	961 B	75 kB	34.36.212.39

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-10-07	medium	bersead-aid87825412.surge.sh/	Facebook, Inc.
2024-10-07	medium	bersead-aid87825412.surge.sh/	Facebook, Inc.
2024-10-07	medium	bersead-aid87825412.surge.sh/	Facebook, Inc.

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

URL IP Response Size

bersead-aid87825412.surge.sh/

138.68.112.220

451 Unavailable For Legal Reasons

8.2 kB

URL User Request GET HTTP/1.1
bersead-aid87825412.surge.sh/
IP
138.68.112.220:80
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document, ASCII text, with very long lines (6818)
Size
8.2 kB (8241 bytes)
Hash
cb520de79b4fe60d8e435a3bc968e9dc
920b67afed5e48a6c5c515e93568eee7f31e94e6
816a611afc1d4189db44c5613e84519e16f1c1eabd90960389a9baabc2954ae4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET / HTTP/1.1
Host: bersead-aid87825412.surge.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 451 Unavailable For Legal Reasons
Server: Surge
Surge-Cache: HIT
Surge-Stamp: 624::1728206184946
Content-Type: text/html; charset=utf-8
Content-Length: 8241
ETag: W/"2031-kgtnr+1eSKbFxRXpNWju5/MelOY"
Date: Thu, 21 Nov 2024 04:55:39 GMT
Connection: close

bersead-aid87825412.surge.sh/

138.68.112.220

451 Unavailable For Legal Reasons

8.2 kB

URL User Request GET HTTP/1.1
bersead-aid87825412.surge.sh/
IP
138.68.112.220:80
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document, ASCII text, with very long lines (6818)
Size
8.2 kB (8241 bytes)
Hash
cb520de79b4fe60d8e435a3bc968e9dc
920b67afed5e48a6c5c515e93568eee7f31e94e6
816a611afc1d4189db44c5613e84519e16f1c1eabd90960389a9baabc2954ae4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET / HTTP/1.1
Host: bersead-aid87825412.surge.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 451 Unavailable For Legal Reasons
Server: Surge
Surge-Cache: HIT
Surge-Stamp: 17709::1728206184946
Content-Type: text/html; charset=utf-8
Content-Length: 8241
ETag: W/"2031-kgtnr+1eSKbFxRXpNWju5/MelOY"
Date: Thu, 21 Nov 2024 04:55:39 GMT
Connection: close

code.cdn.mozilla.net/fonts/fira.css

34.36.212.39

200 OK

7.4 kB

URL GET HTTP/2
code.cdn.mozilla.net/fonts/fira.css
IP
34.36.212.39:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
http://bersead-aid87825412.surge.sh/
Certificate
IssuerLet's Encrypt
Subjectcode.cdn.mozilla.net
Fingerprint16:6D:FD:63:9C:AB:DF:60:B9:C2:DD:7D:0E:96:62:DB:18:A5:6C:2D
ValidityWed, 16 Oct 2024 16:56:43 GMT - Tue, 14 Jan 2025 16:56:42 GMT

File type
ASCII text
Size
7.4 kB (7379 bytes)
Hash
31e09cb4d1cde58406e024ed28e10684
dbbdefe12853e114656b9a2beaf1e296c07545b1
72d14ac1f6c48e1f8839832c8cea08851d6f00c69ed979584dde1592a18dd204

HTTP Headers

GET /fonts/fira.css HTTP/1.1
Host: code.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://bersead-aid87825412.surge.sh/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-goog-generation: 1687439144771125
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7379
x-goog-meta-goog-reserved-file-mtime: 1454368388
x-goog-hash: crc32c=nlpD9g==, md5=MeCctNHN5YQG4CTtKOEGhA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 7379
access-control-allow-origin: *
access-control-expose-headers: Content-Type
x-guploader-uploadid: AFiumC4Vt1RXoP-reeXY0oq468dG8c3cwbXMO4pHnmh7oVVLOMQpXMrhQqVzYEXEKVkXuCxDj2lOR9ho6Q
server: UploadServer
date: Thu, 21 Nov 2024 04:00:13 GMT
age: 3327
last-modified: Thu, 22 Jun 2023 13:05:44 GMT
etag: "31e09cb4d1cde58406e024ed28e10684"
content-type: text/css
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

bersead-aid87825412.surge.sh/favicon.ico

138.68.112.220

451 Unavailable For Legal Reasons

8.2 kB

URL GET HTTP/1.1
bersead-aid87825412.surge.sh/favicon.ico
IP
138.68.112.220:80
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://bersead-aid87825412.surge.sh/

File type
HTML document, ASCII text, with very long lines (6818)
Size
8.2 kB (8241 bytes)
Hash
cb520de79b4fe60d8e435a3bc968e9dc
920b67afed5e48a6c5c515e93568eee7f31e94e6
816a611afc1d4189db44c5613e84519e16f1c1eabd90960389a9baabc2954ae4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: bersead-aid87825412.surge.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bersead-aid87825412.surge.sh/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 451 Unavailable For Legal Reasons
Server: Surge
Surge-Cache: HIT
Surge-Stamp: 17709::1728206184946
Content-Type: text/html; charset=utf-8
Content-Length: 8241
ETag: W/"2031-kgtnr+1eSKbFxRXpNWju5/MelOY"
Date: Thu, 21 Nov 2024 04:55:40 GMT
Connection: close

code.cdn.mozilla.net/fonts/woff/FiraMono-Regular.woff

34.36.212.39

200 OK

66 kB

URL GET HTTP/2
code.cdn.mozilla.net/fonts/woff/FiraMono-Regular.woff
IP
34.36.212.39:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
http://bersead-aid87825412.surge.sh/
Certificate
IssuerLet's Encrypt
Subjectcode.cdn.mozilla.net
Fingerprint16:6D:FD:63:9C:AB:DF:60:B9:C2:DD:7D:0E:96:62:DB:18:A5:6C:2D
ValidityWed, 16 Oct 2024 16:56:43 GMT - Tue, 14 Jan 2025 16:56:42 GMT

File type
Web Open Font Format, TrueType, length 66108, version 0.0
Size
66 kB (66108 bytes)
Hash
690950e8d89c92cba41eeeb13f1de93e
043311d55e32467d93959372eca237160d6d8ce3
ce68868d9c9faa72b0f9457ba548d64d5e014dffc01644d36509267fae4f8379

HTTP Headers

GET /fonts/woff/FiraMono-Regular.woff HTTP/1.1
Host: code.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://bersead-aid87825412.surge.sh
DNT: 1
Connection: keep-alive
Referer: https://code.cdn.mozilla.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-goog-generation: 1687439192166767
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 66108
x-goog-meta-goog-reserved-file-mtime: 1454368547
x-goog-hash: crc32c=KWATtA==, md5=aQlQ6NicksukHu6xPx3pPg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 66108
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
x-guploader-uploadid: AFiumC5BksjnU-4FoATtKrCqCUJEjoIMNVa0ibdjgySGNax8YJ7jkTb3n5rN39jsPRdDTraL5D8
server: UploadServer
date: Thu, 21 Nov 2024 04:21:17 GMT
age: 2063
last-modified: Thu, 22 Jun 2023 13:06:32 GMT
etag: "690950e8d89c92cba41eeeb13f1de93e"
content-type: font/woff
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Mnemonic Secure DNS

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (5)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers