Report - cyprus.arwk.com.au/data/

Report Overview

Submitted URL
cyprus.arwk.com.au/data/
IP
122.201.80.143
ASN
#38719 Dreamscape Networks Limited
Submitted
2024-05-08 16:47:44
Access
public
Website Title
404 Not Found
Final URL
cpanel04wh.bkk1.cloud.z.com/~cp943748/ch/swiss/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cyprus.arwk.com.au	unknown	unknown	No data	No data	912 B	3.3 kB	122.201.80.143
cpanel04wh.bkk1.cloud.z.com	unknown	1997-12-19	2017-07-09	2023-07-18	1.9 kB	30 kB	163.44.198.43

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	cyprus.arwk.com.au/data/	PostFinance
2024-05-08	medium	cpanel04wh.bkk1.cloud.z.com/~cp943748/ch/swiss/	PostFinance

PhishTank

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	cpanel04wh.bkk1.cloud.z.com/~cp943748/ch/swiss/	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

URL IP Response Size

cyprus.arwk.com.au/data/

122.201.80.143

1.3 kB

URL
cyprus.arwk.com.au/data/
IP
122.201.80.143:0
ASN
#38719 Dreamscape Networks Limited

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
1.3 kB (1286 bytes)
Hash
1d8b6fa89381f8ec9338805352e5c238
37d748ffaf322296180d91c04178ba15fbf4cbf0
fa52bd5d2cec78cffe4e9b862c52d37e2ca3529e3978feb65252b5dcf8aadd6c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	PostFinance

HTTP Headers

GET /data/ HTTP/1.1
Host: cyprus.arwk.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 16:47:16 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

cyprus.arwk.com.au/favicon.ico

122.201.80.143

1.6 kB

URL
cyprus.arwk.com.au/favicon.ico
IP
122.201.80.143:0
ASN
#38719 Dreamscape Networks Limited

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
1.6 kB (1640 bytes)
Hash
bc19efc1247599331fbe9b9ad184aaad
9d14c0a408bfaafd82634c85277a1182d9f82807
2378d066ab386577e007c95869f43f2f26386600cac8d6d5c108287c6a195dab

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: cyprus.arwk.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cyprus.arwk.com.au/data/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 16:47:16 GMT
Server: Apache
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

cpanel04wh.bkk1.cloud.z.com/~cp943748/ch/swiss/

163.44.198.43

404 Not Found

10 kB

URL User Request GET HTTP/1.1
cpanel04wh.bkk1.cloud.z.com/~cp943748/ch/swiss/
IP
163.44.198.43:443
ASN
#135161 GMO-Z com NetDesign Holdings Co., Ltd.

Certificate
IssuerLet's Encrypt
Subjectcpanel04wh.bkk1.cloud.z.com
FingerprintCC:17:61:06:50:79:DE:16:5B:2E:F9:6A:59:92:8D:C9:92:E9:0D:1B
ValidityWed, 24 Apr 2024 01:49:40 GMT - Tue, 23 Jul 2024 01:49:39 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (4070)
Size
10 kB (10135 bytes)
Hash
f881c57ca6a169e1c7b2f9bfaaf83ff8
d7e4509e76c8644f8671f62e1be4dc72a89e226e
f85ec5723c3364494026ba592b22d29a2df09873f22a5190d54c48ae33516d53

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	PostFinance
PhishTank	phishing	Other

HTTP Headers

GET /~cp943748/ch/swiss/ HTTP/1.1
Host: cpanel04wh.bkk1.cloud.z.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Wed, 08 May 2024 16:47:18 GMT
Server: Apache
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html

cpanel04wh.bkk1.cloud.z.com/img-sys/server_misconfigured.png

163.44.198.43

200 OK

3.2 kB

URL GET HTTP/1.1
cpanel04wh.bkk1.cloud.z.com/img-sys/server_misconfigured.png
IP
163.44.198.43:443
ASN
#135161 GMO-Z com NetDesign Holdings Co., Ltd.

Requested by
https://cpanel04wh.bkk1.cloud.z.com/~cp943748/ch/swiss/
Certificate
IssuerLet's Encrypt
Subjectcpanel04wh.bkk1.cloud.z.com
FingerprintCC:17:61:06:50:79:DE:16:5B:2E:F9:6A:59:92:8D:C9:92:E9:0D:1B
ValidityWed, 24 Apr 2024 01:49:40 GMT - Tue, 23 Jul 2024 01:49:39 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Size
3.2 kB (3164 bytes)
Hash
f79adaf00f83dc9757086cdbe8645ff0
82f37b8be7668eab8e1a06de828cb336799c8134
944120fb6962c7484d769d645e6d830850eead9394f6a84090aed489cfc0c41f

HTTP Headers

GET /img-sys/server_misconfigured.png HTTP/1.1
Host: cpanel04wh.bkk1.cloud.z.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpanel04wh.bkk1.cloud.z.com/~cp943748/ch/swiss/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 16:47:18 GMT
Server: Apache
Last-Modified: Mon, 22 Jun 2015 11:51:01 GMT
ETag: "c5c-51919e341f647"
Accept-Ranges: bytes
Content-Length: 3164
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

cpanel04wh.bkk1.cloud.z.com/img-sys/powered_by_cpanel.svg

163.44.198.43

200 OK

5.6 kB

URL GET HTTP/1.1
cpanel04wh.bkk1.cloud.z.com/img-sys/powered_by_cpanel.svg
IP
163.44.198.43:443
ASN
#135161 GMO-Z com NetDesign Holdings Co., Ltd.

Requested by
https://cpanel04wh.bkk1.cloud.z.com/~cp943748/ch/swiss/
Certificate
IssuerLet's Encrypt
Subjectcpanel04wh.bkk1.cloud.z.com
FingerprintCC:17:61:06:50:79:DE:16:5B:2E:F9:6A:59:92:8D:C9:92:E9:0D:1B
ValidityWed, 24 Apr 2024 01:49:40 GMT - Tue, 23 Jul 2024 01:49:39 GMT

File type
SVG Scalable Vector Graphics image
Size
5.6 kB (5617 bytes)
Hash
c47b4b5200566a2a496a11ba472ec5da
3bd0da9a6ffd62217d3e781fa1356f40d9f91d4c
179a9aa9fff4c52850d9ce34a4c435404ddfd4fefa8aab9a6eb4f47b83f922d9

HTTP Headers

GET /img-sys/powered_by_cpanel.svg HTTP/1.1
Host: cpanel04wh.bkk1.cloud.z.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpanel04wh.bkk1.cloud.z.com/~cp943748/ch/swiss/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 16:47:18 GMT
Server: Apache
Last-Modified: Wed, 27 Apr 2016 03:55:20 GMT
ETag: "15f1-5316f60e67c50"
Accept-Ranges: bytes
Content-Length: 5617
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml

cpanel04wh.bkk1.cloud.z.com/favicon.ico

163.44.198.43

404 Not Found

10 kB

URL GET HTTP/1.1
cpanel04wh.bkk1.cloud.z.com/favicon.ico
IP
163.44.198.43:443
ASN
#135161 GMO-Z com NetDesign Holdings Co., Ltd.

Requested by
https://cpanel04wh.bkk1.cloud.z.com/~cp943748/ch/swiss/
Certificate
IssuerLet's Encrypt
Subjectcpanel04wh.bkk1.cloud.z.com
FingerprintCC:17:61:06:50:79:DE:16:5B:2E:F9:6A:59:92:8D:C9:92:E9:0D:1B
ValidityWed, 24 Apr 2024 01:49:40 GMT - Tue, 23 Jul 2024 01:49:39 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (4070)
Size
10 kB (10119 bytes)
Hash
2bcdf6d4eae26e0ddbf48b9eaad36075
043863200994c1c9f695f54b094816428a27619e
24999d89e2e8be78f7b8a82cb6fc5ce9981727117f598390d0474f632bbdbe4d

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: cpanel04wh.bkk1.cloud.z.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cpanel04wh.bkk1.cloud.z.com/~cp943748/ch/swiss/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Wed, 08 May 2024 16:47:18 GMT
Server: Apache
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (6)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers