Report - diractclicker.com/survey/NG/Chest-Airtel/

Report Overview

Submitted URL
diractclicker.com/survey/NG/Chest-Airtel/
IP
138.68.64.85
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2023-05-26 15:58:20
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
diractclicker.com	unknown	2022-11-15	2022-11-15	2023-05-26	4.7 kB	215 kB	138.68.64.85
oungimuk.net	335656	2021-02-06	2021-02-10	2023-05-26	996 B	18 kB	139.45.197.251

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator
2023-05-26	medium	diractclicker.com/survey/NG/Chest-Airtel/
2023-05-26	medium	diractclicker.com/survey/NG/Chest-Airtel/img/landers/pick-a-prize/chest.webp
2023-05-26	medium	diractclicker.com/survey/NG/Chest-Airtel/js/app.js
2023-05-26	medium	diractclicker.com/survey/NG/Chest-Airtel/prize.webp
2023-05-26	medium	diractclicker.com/survey/NG/Chest-Airtel/js/landers/pick-a-prize/app.js
2023-05-26	medium	diractclicker.com/sw-check-permissions-f6451.js

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	unknown	182 B	2023-04-14	2023-05-27
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-14 13:15:54 Last Seen2023-05-27 15:44:47 Times Seen10 Hash 9fda0cc082f9f300ec040dd8dd024dce 4551f28d0dbb6c61d6a9e45eb3534ab5cab499db 6e52b06dcddd004e298b75323d2ba9b1caa1c4a8a9e6853acf63a57279d7f78e Loading...

	diractclicker.com/survey/NG/Chest-Airtel/#	0 B	2023-03-07	2024-04-25
Pretty URL diractclicker.com/survey/NG/Chest-Airtel/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-25 03:15:31 Times Seen37053196 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	diractclicker.com/survey/NG/Chest-Airtel/#	0 B	2023-03-07	2024-04-25
Pretty URL diractclicker.com/survey/NG/Chest-Airtel/# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-25 03:15:31 Times Seen37053196 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	unknown	3.8 kB	2023-05-21	2023-05-26
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-05-21 17:58:19 Last Seen2023-05-26 17:58:21 Times Seen5 Hash 58ccfc7b6ad1575ed8d8b966ccaf49dd 7781d2d4f9a5c561d39194e90026aa5c79a69f6d 789b91501ee44397cfc07b461f1940fa12aecef16e56b9fbb4015cb17031a862 Loading...

	unknown	152 B	2023-04-13	2024-01-28
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-13 16:18:25 Last Seen2024-01-28 16:01:03 Times Seen133 Hash a3922c63c6ca8faa27ad2ccd9fa07d9c 5c0e1abd9a50adfaf8ad87c74b1cc91e3a35c587 4804da34043c422b303fa16de66ec5fbd11568f676fcda96d1e561c21c06aab9 Loading...

	diractclicker.com/survey/NG/Chest-Airtel/js/app.js	19 kB	2023-03-07	2024-04-13
Pretty URL diractclicker.com/survey/NG/Chest-Airtel/js/app.js IP 138.68.64.85 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:10 Last Seen2024-04-13 17:46:53 Times Seen1052 Hash d75b4cfe9b4f0f2f3a56f5dad32d6c7d 7c462194003560634a65f7725b8bd553b9fdce41 0a9b16afee4ee7fa81b369cfe3d69c3a6d4ff580726b9d9c10f398deb2fc3c22 Loading...

	diractclicker.com/survey/NG/Chest-Airtel/js/landers/pick-a-prize/app.js	152 kB	2023-03-07	2024-04-13
Pretty URL diractclicker.com/survey/NG/Chest-Airtel/js/landers/pick-a-prize/app.js IP 138.68.64.85 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:17:09 Last Seen2024-04-13 17:46:53 Times Seen390 Hash bfd772a30bce4255c289a505a156b671 6aa0157308b7254179d7e35e699a541d11407ae8 29398b7f7adcec92cd657dc9b4a68e770b5eedd6e21c41ba973ef480c56d5313 Loading...

	oungimuk.net/pfe/current/micro.tag.min.js?z=5857532&sw=/sw-check-permissions-f6451.js	42 kB	2023-05-11	2023-05-29
Pretty URL oungimuk.net/pfe/current/micro.tag.min.js?z=5857532&sw=/sw-check-permissions-f6451.js IP 139.45.197.251 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-11 16:26:45 Last Seen2023-05-29 09:32:34 Times Seen6742 Hash d44fd7b96fceca8f81b472766025d0d2 237541097413baf5cd3e703413f8bc9ea538a4db b6c7c1e7fb1a437f100bdcb253df8b0468f130835fbb82c5687505a099997d16 Loading...

HTTP Transactions (12)

URL IP Response Size

diractclicker.com/survey/NG/Chest-Airtel/

138.68.64.85

200 OK

2.0 kB

URL User Request GET HTTP/1.1
diractclicker.com/survey/NG/Chest-Airtel/
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (752)
Size
2.0 kB (1965 bytes)
Hash
1b36b97e98702eb773875349547c92f2
f11c150614cf8bd1abc96fdb273eeb6fc7a8c14e
eb5fa6dc86ae693be092ad3983854a610f590dd4756faa5b298f5134796df187

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /survey/NG/Chest-Airtel/ HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 15:58:01 GMT
Content-Type: text/html
Last-Modified: Fri, 26 May 2023 03:40:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"64702a3d-18b8"
Content-Encoding: gzip

diractclicker.com/survey/NG/Chest-Airtel/css/app.css

138.68.64.85

200 OK

69 B

URL GET HTTP/1.1
diractclicker.com/survey/NG/Chest-Airtel/css/app.css
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/NG/Chest-Airtel/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
ASCII text
Size
69 B (69 bytes)
Hash
2fbe2d9a9a40ca9b2489f46d1b5520c1
a8b5e5629deabf1912d969b4036ed3c9159756bb
94d8599586a5ee9c62dc15b45ca083b69d060d0c12bf2be3673b19a9820216ea

HTTP Headers

GET /survey/NG/Chest-Airtel/css/app.css HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/NG/Chest-Airtel/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 15:58:02 GMT
Content-Type: text/css
Content-Length: 69
Last-Modified: Fri, 26 May 2023 03:52:03 GMT
Connection: keep-alive
ETag: "64702ce3-45"
Accept-Ranges: bytes

diractclicker.com/survey/NG/Chest-Airtel/css/landers/pick-a-prize/app.css

138.68.64.85

200 OK

5.2 kB

URL GET HTTP/1.1
diractclicker.com/survey/NG/Chest-Airtel/css/landers/pick-a-prize/app.css
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/NG/Chest-Airtel/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
ASCII text, with very long lines (5174)
Size
5.2 kB (5210 bytes)
Hash
9adad73dbb8583d1eff519228da810a2
cf3418ab99ae0d027d19b893d3ec06eccca9ee78
1e52a8f88ff9e9f93431ba5f6546e790dcfc0f491b007d709b899d990605dfd4

HTTP Headers

GET /survey/NG/Chest-Airtel/css/landers/pick-a-prize/app.css HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/NG/Chest-Airtel/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 15:58:02 GMT
Content-Type: text/css
Content-Length: 5210
Last-Modified: Fri, 26 May 2023 03:58:12 GMT
Connection: keep-alive
ETag: "64702e54-145a"
Accept-Ranges: bytes

diractclicker.com/survey/NG/Chest-Airtel/logo.png

138.68.64.85

200 OK

10 kB

URL GET HTTP/1.1
diractclicker.com/survey/NG/Chest-Airtel/logo.png
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/NG/Chest-Airtel/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3\012- data
Size
10 kB (10513 bytes)
Hash
a545188a4de0aa2a9ab3342a0d0c7085
cbbdaf03c62caf9256cbd121ec81be2e77e8c0ae
5cc506206b859febe30203fe1b79356d271dc085314bf69c5521c4c206dfd639

HTTP Headers

GET /survey/NG/Chest-Airtel/logo.png HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/NG/Chest-Airtel/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 15:58:02 GMT
Content-Type: image/png
Content-Length: 10513
Last-Modified: Fri, 26 May 2023 03:40:45 GMT
Connection: keep-alive
ETag: "64702a3d-2911"
Accept-Ranges: bytes

diractclicker.com/survey/NG/Chest-Airtel/img/landers/pick-a-prize/chest.webp

138.68.64.85

200 OK

4.2 kB

URL GET HTTP/1.1
diractclicker.com/survey/NG/Chest-Airtel/img/landers/pick-a-prize/chest.webp
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/NG/Chest-Airtel/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size
4.2 kB (4198 bytes)
Hash
a19d25b80753f78d4438ef8fc5235191
14251c60fbe00e0494097bba7553507cfa542dec
e30435214d467c8e14c948e1c1abb52009f01915700e6d73af2bf03b1ee159f5

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /survey/NG/Chest-Airtel/img/landers/pick-a-prize/chest.webp HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/NG/Chest-Airtel/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 15:58:02 GMT
Content-Type: image/webp
Content-Length: 4198
Last-Modified: Fri, 26 May 2023 03:58:14 GMT
Connection: keep-alive
ETag: "64702e56-1066"
Accept-Ranges: bytes

diractclicker.com/survey/NG/Chest-Airtel/js/app.js

138.68.64.85

200 OK

19 kB

URL GET HTTP/1.1
diractclicker.com/survey/NG/Chest-Airtel/js/app.js
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/NG/Chest-Airtel/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
Unicode text, UTF-8 text, with very long lines (18544)
Size
19 kB (18577 bytes)
Hash
d75b4cfe9b4f0f2f3a56f5dad32d6c7d
7c462194003560634a65f7725b8bd553b9fdce41
0a9b16afee4ee7fa81b369cfe3d69c3a6d4ff580726b9d9c10f398deb2fc3c22

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /survey/NG/Chest-Airtel/js/app.js HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/NG/Chest-Airtel/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 15:58:02 GMT
Content-Type: application/javascript
Content-Length: 18577
Last-Modified: Fri, 26 May 2023 03:52:04 GMT
Connection: keep-alive
ETag: "64702ce4-4891"
Accept-Ranges: bytes

diractclicker.com/survey/NG/Chest-Airtel/prize.webp

138.68.64.85

200 OK

20 kB

URL GET HTTP/1.1
diractclicker.com/survey/NG/Chest-Airtel/prize.webp
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/NG/Chest-Airtel/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 570x416, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size
20 kB (19666 bytes)
Hash
02a36bd0c6e01fc62ccf6058f814afbd
42d68d212c6df3ae143c4d01038e723bae9eae14
05beb7f2b7a4b4cb88a536d770cc085277317897aa23960f206049b468cd40dc

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /survey/NG/Chest-Airtel/prize.webp HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/NG/Chest-Airtel/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 15:58:02 GMT
Content-Type: image/webp
Content-Length: 19666
Last-Modified: Fri, 26 May 2023 03:40:45 GMT
Connection: keep-alive
ETag: "64702a3d-4cd2"
Accept-Ranges: bytes

diractclicker.com/survey/NG/Chest-Airtel/js/landers/pick-a-prize/app.js

138.68.64.85

200 OK

152 kB

URL GET HTTP/1.1
diractclicker.com/survey/NG/Chest-Airtel/js/landers/pick-a-prize/app.js
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/NG/Chest-Airtel/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
Unicode text, UTF-8 text, with very long lines (65443)
Size
152 kB (151505 bytes)
Hash
bfd772a30bce4255c289a505a156b671
6aa0157308b7254179d7e35e699a541d11407ae8
29398b7f7adcec92cd657dc9b4a68e770b5eedd6e21c41ba973ef480c56d5313

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /survey/NG/Chest-Airtel/js/landers/pick-a-prize/app.js HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/NG/Chest-Airtel/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 15:58:02 GMT
Content-Type: application/javascript
Content-Length: 151505
Last-Modified: Fri, 26 May 2023 03:58:13 GMT
Connection: keep-alive
ETag: "64702e55-24fd1"
Accept-Ranges: bytes

diractclicker.com/favicon.ico

138.68.64.85

404 Not Found

123 B

URL GET HTTP/1.1
diractclicker.com/favicon.ico
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/NG/Chest-Airtel/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
123 B (123 bytes)
Hash
1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/NG/Chest-Airtel/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 15:58:02 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip

diractclicker.com/sw-check-permissions-f6451.js

138.68.64.85

200 OK

566 B

URL GET HTTP/1.1
diractclicker.com/sw-check-permissions-f6451.js
IP
138.68.64.85:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://diractclicker.com/survey/NG/Chest-Airtel/
Certificate
IssuerLet's Encrypt
Subjectdiractclicker.com
FingerprintBE:23:C7:D9:D5:DE:4A:AE:19:34:33:5D:38:15:08:27:84:DA:D1:8E
ValidityFri, 26 May 2023 02:37:52 GMT - Thu, 24 Aug 2023 02:37:51 GMT

File type
Java source, ASCII text
Size
566 B (566 bytes)
Hash
0702e0ed99b8c0592873f6730041cc82
fad9bd352b4e3d5d1a4ea69dd929d52067ca8305
9988a6fd4fd7a7b05e21b6ace3d756a989f4d79023dadb34fac95c09fbdf4a2a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /sw-check-permissions-f6451.js HTTP/1.1
Host: diractclicker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/survey/NG/Chest-Airtel/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 26 May 2023 15:58:02 GMT
Content-Type: application/javascript
Content-Length: 566
Last-Modified: Fri, 26 May 2023 03:36:41 GMT
Connection: keep-alive
ETag: "64702949-236"
Accept-Ranges: bytes

oungimuk.net/zone?&pub=0&zone_id=5857532&is_mobile=false&domain=diractclicker.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest

139.45.197.251

200 OK

0 B

URL POST HTTP/2
oungimuk.net/zone?&pub=0&zone_id=5857532&is_mobile=false&domain=diractclicker.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://diractclicker.com/survey/NG/Chest-Airtel/
Certificate
IssuerLet's Encrypt
Subjectoungimuk.net
FingerprintB5:D5:BF:00:7F:18:31:13:AA:49:DF:C7:2E:C9:A6:8F:6E:D3:6C:CE
ValidityMon, 17 Apr 2023 05:17:56 GMT - Sun, 16 Jul 2023 05:17:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /zone?&pub=0&zone_id=5857532&is_mobile=false&domain=diractclicker.com&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest HTTP/1.1
Host: oungimuk.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://diractclicker.com
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 26 May 2023 15:58:02 GMT
content-length: 0
x-trace-id: 16a50f1866706fdf9af908457087e4af
access-control-allow-origin: https://diractclicker.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

oungimuk.net/pfe/current/micro.tag.min.js?z=5857532&sw=/sw-check-permissions-f6451.js

139.45.197.251

200 OK

17 kB

URL GET HTTP/2
oungimuk.net/pfe/current/micro.tag.min.js?z=5857532&sw=/sw-check-permissions-f6451.js
IP
139.45.197.251:443
ASN
#9002 RETN Limited

Requested by
https://diractclicker.com/survey/NG/Chest-Airtel/
Certificate
IssuerLet's Encrypt
Subjectoungimuk.net
FingerprintB5:D5:BF:00:7F:18:31:13:AA:49:DF:C7:2E:C9:A6:8F:6E:D3:6C:CE
ValidityMon, 17 Apr 2023 05:17:56 GMT - Sun, 16 Jul 2023 05:17:55 GMT

File type
C source, Unicode text, UTF-8 text, with very long lines (41994)
Size
17 kB (16796 bytes)
Hash
d660aeb8b88b1d102c0e91ad0c7ccb02
3b1c71ef29fa1f2133d2746860836fc00335be04
039f082d64926717c3cf27313466f9088f1b1e675eaeb7ea5eeba8e97f94028a

HTTP Headers

GET /pfe/current/micro.tag.min.js?z=5857532&sw=/sw-check-permissions-f6451.js HTTP/1.1
Host: oungimuk.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://diractclicker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 26 May 2023 15:58:02 GMT
content-type: application/javascript
last-modified: Thu, 11 May 2023 14:20:13 GMT
etag: W/"645cf99d-a3fb"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size