Report - alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60

Report Overview

Submitted URL
alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60
IP
18.233.94.87
ASN
#14618 AMAZON-AES
Submitted
2024-04-24 03:08:05
Access
public
Website Title
Phishing education page
Final URL
alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-23	484 B	26 kB	142.250.74.106
alertsnotification.com	unknown	2018-09-27	2018-12-19	2023-11-01	1.6 kB	4.5 MB	18.233.94.87
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-04-23	461 B	7.6 kB	104.18.11.207
infosec-institute.s3-us-west-2.amazonaws.com	636686	2005-08-18	2019-08-20	2024-03-08	489 B	67 kB	52.218.197.89
infosec-iq-na-customer-public.s3.amazonaws.com	453482	2005-08-18	2019-04-12	2024-03-06	507 B	4.1 kB	52.217.166.217
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-22	1.6 kB	113 kB	142.250.74.99

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	alertsnotification.com	Sinkholed
2024-04-24	medium	alertsnotification.com	Sinkholed
2024-04-24	medium	alertsnotification.com	Sinkholed
2024-04-24	medium	alertsnotification.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	alertsnotification.com/js/dist/common.9bc1ca76185c215d.js	1.9 MB	2024-04-24	2024-04-24
Pretty URL alertsnotification.com/js/dist/common.9bc1ca76185c215d.js IP 34.200.182.108 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 05:08:06 Last Seen2024-04-24 05:08:07 Times Seen2 Hash 9bc1ca76185c215d6b241b99cb526d2d 53a3d3ea9171d95b8f22f1ac5458e390af4b6261 01670eeec1a82367056ae58ab1d5654200a84764f7ab6b2d4e426adabc7a3716 Loading...

HTTP Transactions (11)

URL IP Response Size

alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60

18.233.94.87

200 OK

1.6 kB

URL User Request GET HTTP/1.1
alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60
IP
18.233.94.87:80
ASN
#14618 AMAZON-AES

File type
HTML document, ASCII text, with very long lines (437)
Size
1.6 kB (1570 bytes)
Hash
1da8bb1f8e3a921a041910b63a12c105
2fea910307fd309645d83a899c468f34ad32850b
7accdead80c2bfe8687d7a648afdd516d253f62f526cb49e3dc679eb3e61f903

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60 HTTP/1.1
Host: alertsnotification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 03:07:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
X-Frame-Options: SAMEORIGIN
Referrer-Policy: unsafe-url
Set-Cookie: csrf=o2l7TDFE3sTNeBzgf82d1WZiYmQ1Yzc3NDUzZDJkZGQ1YjE5NjgyMDIwMzYwYWQwZDgyMmEwMGU%3D; path=/; secure
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains
Content-Encoding: gzip

alertsnotification.com/css/project.e41391917b9cf200.css

18.233.94.87

200 OK

2.6 MB

URL GET HTTP/1.1
alertsnotification.com/css/project.e41391917b9cf200.css
IP
18.233.94.87:80
ASN
#14618 AMAZON-AES

Requested by
http://alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Size
2.6 MB (2554776 bytes)
Hash
e41391917b9cf2004bf6833cc3ad7b78
84cff28f813d9746aad7b5fe130abb43e0f26283
e6ecc5f6111efb7b2c575466a37ce91f4b67748a80ea7a383c8b74241c49a8f1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/project.e41391917b9cf200.css HTTP/1.1
Host: alertsnotification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 03:07:38 GMT
Content-Type: text/css
Content-Length: 2554776
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 23 Apr 2024 15:34:10 GMT
ETag: "6627d4f2-26fb98"
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains
Accept-Ranges: bytes

maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css

104.18.11.207

200 OK

6.7 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
http://alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (27303)
Size
6.7 kB (6670 bytes)
Hash
4fbd15cb6047af93373f4f895639c8bf
12d6861075de8e293265ff6ff03b1f3adcb44c76
ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5

HTTP Headers

GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://alertsnotification.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 03:07:38 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"4fbd15cb6047af93373f4f895639c8bf"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:58:32
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1047
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 25754c75fb460a03a208e88579fbc0b3
cdn-cache: HIT
cf-cache-status: HIT
age: 13031703
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8792e25fcbe3568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

alertsnotification.com/js/dist/common.9bc1ca76185c215d.js

34.200.182.108

200 OK

1.9 MB

URL GET HTTP/1.1
alertsnotification.com/js/dist/common.9bc1ca76185c215d.js
IP
34.200.182.108:80
ASN
#14618 AMAZON-AES

Requested by
http://alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
1.9 MB (1936730 bytes)
Hash
9bc1ca76185c215d6b241b99cb526d2d
53a3d3ea9171d95b8f22f1ac5458e390af4b6261
01670eeec1a82367056ae58ab1d5654200a84764f7ab6b2d4e426adabc7a3716

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/dist/common.9bc1ca76185c215d.js HTTP/1.1
Host: alertsnotification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 03:07:38 GMT
Content-Type: application/javascript
Content-Length: 1936730
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 23 Apr 2024 15:34:10 GMT
ETag: "6627d4f2-1d8d5a"
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains
Accept-Ranges: bytes

infosec-institute.s3-us-west-2.amazonaws.com/iq-education/Phishing-N2KEducationPages.png

52.218.197.89

200 OK

67 kB

URL GET HTTP/1.1
infosec-institute.s3-us-west-2.amazonaws.com/iq-education/Phishing-N2KEducationPages.png
IP
52.218.197.89:443
ASN
#16509 AMAZON-02

Requested by
http://alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60
Certificate
IssuerAmazon
Subject*.s3-us-west-2.amazonaws.com
Fingerprint6B:A0:F8:B2:43:23:23:C2:19:40:1C:DB:A4:9D:29:72:85:4C:58:C9
ValidityFri, 15 Mar 2024 00:00:00 GMT - Sat, 15 Feb 2025 23:59:59 GMT

File type
PNG image data, 383 x 309, 8-bit/color RGBA, interlaced
Size
67 kB (66902 bytes)
Hash
8572c58cc1b8a65db126f165de49c77c
0af544863b7a9a86c2a64cc48b230a6c817b14fd
bfd118d7d7de6a5e7386ed390dfd58741efebb44e2dbacdbb7019a2d3f44cb77

HTTP Headers

GET /iq-education/Phishing-N2KEducationPages.png HTTP/1.1
Host: infosec-institute.s3-us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://alertsnotification.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: hftuCl1LAU5oO0lJjnxRepLQyxmlOCEGKB6kxNe6gxfsGxUdwYBrjpyrQBe5MjdyWgk1GUwJ4ds=
x-amz-request-id: 8JW87ESH48AR0QYB
Date: Wed, 24 Apr 2024 03:07:40 GMT
Last-Modified: Mon, 17 May 2021 12:59:53 GMT
ETag: "8572c58cc1b8a65db126f165de49c77c"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 66902

infosec-iq-na-customer-public.s3.amazonaws.com/brandings/2726459c-9c4b-4344-a166-beb5a26bb70e-w120xh60.png

52.217.166.217

200 OK

3.7 kB

URL GET HTTP/1.1
infosec-iq-na-customer-public.s3.amazonaws.com/brandings/2726459c-9c4b-4344-a166-beb5a26bb70e-w120xh60.png
IP
52.217.166.217:443
ASN
#16509 AMAZON-02

Requested by
http://alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60
Certificate
IssuerAmazon
Subject*.s3.amazonaws.com
FingerprintDC:41:A6:3E:EE:32:6F:36:76:5A:EF:9D:17:AF:14:13:E3:05:C6:D1
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT

File type
PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Size
3.7 kB (3661 bytes)
Hash
0871c43064605712be9f7c257c4a6d15
8a6a43077a363bfec9d151b27b10e8fdac16221d
273599e785be051b02627cf1d3bfbfce830b15aa0f0790b2489bdbb5755cb777

HTTP Headers

GET /brandings/2726459c-9c4b-4344-a166-beb5a26bb70e-w120xh60.png HTTP/1.1
Host: infosec-iq-na-customer-public.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://alertsnotification.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: +zOv5RD3avVM4MN+G4rd/LfrIdwqWsuzRd4VFffbyGb3qsQmndlMbbQWYpzrJ6VM49MxB9y2eY8=
x-amz-request-id: 8JWFA3TME0P4EAYP
Date: Wed, 24 Apr 2024 03:07:40 GMT
Last-Modified: Tue, 14 Feb 2023 19:53:06 GMT
ETag: "0871c43064605712be9f7c257c4a6d15"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 3661

fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjoa4Omb2Rj.woff2

142.250.74.99

200 OK

14 kB

URL GET HTTP/2
fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjoa4Omb2Rj.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
http://alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14240, version 1.0
Size
14 kB (14240 bytes)
Hash
0fcb41f7117eef774816e98239ce0767
3266274fb52e0b538a60365840532237faa3d0f0
d531d2326ba02994a585f666486d2bbb664425608a707fe1ea0a6d5935f30806

HTTP Headers

GET /s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjoa4Omb2Rj.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://alertsnotification.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:44:37 GMT
expires: Wed, 23 Apr 2025 01:44:37 GMT
cache-control: public, max-age=31536000
age: 91383
last-modified: Tue, 24 Oct 2023 01:50:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

142.250.74.99

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
http://alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://alertsnotification.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 08:04:32 GMT
expires: Wed, 23 Apr 2025 08:04:32 GMT
cache-control: public, max-age=31536000
age: 68588
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

142.250.74.99

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
http://alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Size
48 kB (48236 bytes)
Hash
015c126a3520c9a8f6a27979d0266e96
2acf956561d44434a6d84204670cf849d3215d5f
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

HTTP Headers

GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://alertsnotification.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 08:04:32 GMT
expires: Wed, 23 Apr 2025 08:04:32 GMT
cache-control: public, max-age=31536000
age: 68588
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

alertsnotification.com/favicon.ico

34.200.182.108

404 Not Found

107 B

URL GET HTTP/1.1
alertsnotification.com/favicon.ico
IP
34.200.182.108:80
ASN
#14618 AMAZON-AES

Requested by
http://alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60

File type
HTML document, ASCII text, with CRLF line terminators
Size
107 B (107 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: alertsnotification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Wed, 24 Apr 2024 03:07:40 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains
Content-Encoding: gzip

fonts.googleapis.com/css?family=Open+Sans:400,400i,700,700i|Roboto+Slab:700&display=swap

142.250.74.106

200 OK

26 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Open+Sans:400,400i,700,700i|Roboto+Slab:700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
http://alertsnotification.com/landing/6174ac5c-3f5c-41fe-9247-db2e4db43b60
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text, with very long lines (1572)
Size
26 kB (25873 bytes)
Hash
67397542aa10de539ff0e4c251055ccc
955451429abd94c28836dae948bdc0452f097e68
3f47171f97a72cb1b036aae891df0716fffbbefefc29494c8e70134397b19001

HTTP Headers

GET /css?family=Open+Sans:400,400i,700,700i|Roboto+Slab:700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://alertsnotification.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 03:07:38 GMT
date: Wed, 24 Apr 2024 03:07:38 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP