Report - tt9yuahbb.cc.rs6.net/tn.jsp?f=001Z4p50NqUPcEHU_eKSOQq1P1dWjUMMy3z8Uu90IbxQHCfGZBpTReY7-WSewxe5JmWP2IzUF2RjaEnLj9BhoLm8pDvU-ctoLDFhRWNTAsGiB2-24DZpAfKWr1D79funia1SaA_5Cx6Nbx8jL8ifVDEdyB1U45x_UHH&c=baEtVQtbchJ2KerAYz-6eT-CIC-tRgDzwcecKV-xik3cn2bqShesew==&ch=&_

Report Overview

Submitted URL
tt9yuahbb.cc.rs6.net/tn.jsp?f=001Z4p50NqUPcEHU_eKSOQq1P1dWjUMMy3z8Uu90IbxQHCfGZBpTReY7-WSewxe5JmWP2IzUF2RjaEnLj9BhoLm8pDvU-ctoLDFhRWNTAsGiB2-24DZpAfKWr1D79funia1SaA_5Cx6Nbx8jL8ifVDEdyB1U45x_UHH&c=baEtVQtbchJ2KerAYz-6eT-CIC-tRgDzwcecKV-xik3cn2bqShesew==&ch=&__=cGF0LnN1bGxpdmFuQG5hdnkubWls
IP
208.75.122.11
ASN
#40444 ASN-CC
Submitted
2024-04-16 19:24:34
Access
public
Website Title
Webmail
Final URL
pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/index.html#pat.sullivan@navy.mil
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
nazwassl2sha2.ocsp-certum.com	266727	2013-12-19	2016-03-16	2024-04-16	341 B	1.8 kB	95.101.10.107
mail.agrohurt.com	unknown	2005-03-09	2022-07-15	2024-04-16	463 B	0 B	0.0.0.0
tt9yuahbb.cc.rs6.net	unknown	unknown	No data	No data	742 B	376 B	208.75.122.11
www.thewebdesignhub.dev	unknown	2020-07-02	2020-09-17	2024-04-16	506 B	292 B	99.162.252.129
pub-b12616a38122420f81f363b8bfbd2b44.r2.dev	unknown	unknown	No data	No data	1.0 kB	36 kB	104.18.3.35
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-16	437 B	31 kB	151.101.66.137
serograf.com	unknown	2004-10-11	2017-09-08	2024-03-23	442 B	82 kB	185.5.125.5

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/index.html#pat.sullivan@navy.mil	1.7 kB	2024-04-16	2024-04-16
Pretty URL pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/index.html#pat.sullivan@navy.mil IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-16 19:14:26 Last Seen2024-04-16 21:24:40 Times Seen2 Hash fbddd41980cb16b74939d3e6501c5419 2cafbaaa0a869b976146256e446bc06cc13a1845 3931394d38b70cc2f137560ef2ee38e8be75b3d0ab60421ea6de826dbf6aec39 Loading...

	unknown	9 B	2023-04-11	2024-04-29
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-11 04:37:13 Last Seen2024-04-29 18:52:45 Times Seen1044 Hash 8330d67045d053b17fa969ef2bdb5e54 041174325b27a7b4d2d1b1a0e353fa82d1cb6431 ceecf99c8bd1f6e5f89a26d3b40e009d48860d674231297254ff75d817b9a883 Loading...

	code.jquery.com/jquery-3.1.1.min.js	87 kB	2023-03-07	2024-04-30
Pretty URL code.jquery.com/jquery-3.1.1.min.js IP 151.101.66.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-04-30 01:03:02 Times Seen264692 Hash e071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf Loading...

	pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/index.html#pat.sullivan@navy.mil	5.9 kB	2024-04-16	2024-04-16
Pretty URL pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/index.html#pat.sullivan@navy.mil IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-16 19:14:26 Last Seen2024-04-16 21:24:40 Times Seen2 Hash 48a9a59891bee694e188e5034190f07e 5daeead0a041f06022589556d1ab1b085f820f1d 77b5e00043f8e304c3f2292dc57b009b6ff79600c02db81322056496fd6fd017 Loading...

HTTP Transactions (8)

	URL	IP	Response	Size
	tt9yuahbb.cc.rs6.net/tn.jsp?f=001Z4p50NqUPcEHU_eKSOQq1P1dWjUMMy3z8Uu90IbxQHCfGZBpTReY7-WSewxe5JmWP2IzUF2RjaEnLj9BhoLm8pDvU-ctoLDFhRWNTAsGiB2-24DZpAfKWr1D79funia1SaA_5Cx6Nbx8jL8ifVDEdyB1U45x_UHH&c=baEtVQtbchJ2KerAYz-6eT-CIC-tRgDzwcecKV-xik3cn2bqShesew==&ch=&__=cGF0LnN1bGxpdmFuQG5hdnkubWls	208.75.122.11	302 Found	0 B
URL User Request GET HTTP/1.1 tt9yuahbb.cc.rs6.net/tn.jsp?f=001Z4p50NqUPcEHU_eKSOQq1P1dWjUMMy3z8Uu90IbxQHCfGZBpTReY7-WSewxe5JmWP2IzUF2RjaEnLj9BhoLm8pDvU-ctoLDFhRWNTAsGiB2-24DZpAfKWr1D79funia1SaA_5Cx6Nbx8jL8ifVDEdyB1U45x_UHH&c=baEtVQtbchJ2KerAYz-6eT-CIC-tRgDzwcecKV-xik3cn2bqShesew==&ch=&__=cGF0LnN1bGxpdmFuQG5hdnkubWls IP 208.75.122.11:443 ASN #40444 ASN-CC Certificate IssuerGlobalSign nv-sa Subjectrs6.net Fingerprint8E:9A:B3:CF:52:99:93:DA:8B:D9:17:47:3B:F6:C4:57:8A:37:CE:91 ValidityThu, 15 Feb 2024 02:12:01 GMT - Mon, 17 Jun 2024 21:06:27 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /tn.jsp?f=001Z4p50NqUPcEHU_eKSOQq1P1dWjUMMy3z8Uu90IbxQHCfGZBpTReY7-WSewxe5JmWP2IzUF2RjaEnLj9BhoLm8pDvU-ctoLDFhRWNTAsGiB2-24DZpAfKWr1D79funia1SaA_5Cx6Nbx8jL8ifVDEdyB1U45x_UHH&c=baEtVQtbchJ2KerAYz-6eT-CIC-tRgDzwcecKV-xik3cn2bqShesew==&ch=&__=cGF0LnN1bGxpdmFuQG5hdnkubWls HTTP/1.1 Host: tt9yuahbb.cc.rs6.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 302 Found Date: Tue, 16 Apr 2024 19:24:09 GMT Server: Apache P3P: CP="CAO DSP TAIa OUR NOR UNI" Location: https://www.thewebdesignhub.dev/cGF0LnN1bGxpdmFuQG5hdnkubWls Content-Length: 0 Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate, no-cache="Set-Cookie" Pragma: no-cache Connection: close Content-Type: text/html;charset=ISO-8859-1`

	www.thewebdesignhub.dev/cGF0LnN1bGxpdmFuQG5hdnkubWls	99.162.252.129	302 Found	1 B
URL User Request GET HTTP/2 www.thewebdesignhub.dev/cGF0LnN1bGxpdmFuQG5hdnkubWls IP 99.162.252.129:443 ASN #7018 ATT-INTERNET4 Certificate IssuercPanel, Inc. Subjectthewebdesignhub.dev FingerprintA8:3E:6B:F1:DF:05:2B:B7:BB:78:69:B1:BD:4F:71:4B:B6:F0:8B:69 ValiditySun, 25 Feb 2024 00:00:00 GMT - Sat, 25 May 2024 23:59:59 GMT File type very short file (no magic) Size 1 B (1 bytes) Hash eccbc87e4b5ce2fe28308fd9f2a7baf3 77de68daecd823babbb58edb1c8e14d7106e83bb 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce HTTP Headers `GET /cGF0LnN1bGxpdmFuQG5hdnkubWls HTTP/1.1 Host: www.thewebdesignhub.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found location: https://pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/index.html#pat.sullivan@navy.mil vary: Accept-Encoding content-encoding: br content-length: 1 content-type: text/html; charset=UTF-8 date: Tue, 16 Apr 2024 19:24:10 GMT server: Apache X-Firefox-Spdy: h2`

	pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/index.html	104.18.3.35		18 kB
URL pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/index.html IP 104.18.3.35:0 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with CRLF line terminators Size 18 kB (17484 bytes) Hash 208ac5d0a783e763420c1b16ad717eaf 0d8a3cb14222a4aa904e96bd274130c01533e198 34ab05db5adc2d8434ff7644dee41977314e84e746216f5c6d0957d8f6a3d51a HTTP Headers `GET /index.html HTTP/1.1 Host: pub-b12616a38122420f81f363b8bfbd2b44.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:24:11 GMT Content-Type: text/html Content-Length: 17484 Connection: keep-alive Accept-Ranges: bytes ETag: "208ac5d0a783e763420c1b16ad717eaf" Last-Modified: Thu, 11 Apr 2024 08:49:37 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 87568dd7ebf256c7-OSL`

	code.jquery.com/jquery-3.1.1.min.js	151.101.66.137	200 OK	30 kB
URL GET HTTP/2 code.jquery.com/jquery-3.1.1.min.js IP 151.101.66.137:443 ASN #54113 FASTLY Requested by https://pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/index.html#pat.sullivan@navy.mil Certificate IssuerSectigo Limited Subject.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT File type JavaScript source, ASCII text, with very long lines (32030) Size 30 kB (30070 bytes) Hash e071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf HTTP Headers `GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx content-type: application/javascript; charset=utf-8 last-modified: Fri, 18 Oct 1991 12:00:00 GMT etag: W/"28feccc0-152b5" cache-control: public, max-age=31536000, stale-while-revalidate=604800 access-control-allow-origin: * content-encoding: gzip via: 1.1 varnish, 1.1 varnish accept-ranges: bytes date: Tue, 16 Apr 2024 19:24:11 GMT age: 18494851 x-served-by: cache-lga21947-LGA, cache-hel1410020-HEL x-cache: HIT, HIT x-cache-hits: 118, 105070 x-timer: S1713295451.334185,VS0,VE0 vary: Accept-Encoding content-length: 30070 X-Firefox-Spdy: h2

	serograf.com/wp/styles.css	185.5.125.5	200 OK	82 kB
URL GET HTTP/1.1 serograf.com/wp/styles.css IP 185.5.125.5:443 ASN #202207 Aspa Cloud Sl Requested by https://pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/index.html#pat.sullivan@navy.mil Certificate IssuerLet's Encrypt Subjectserograf.com Fingerprint2B:73:EE:B3:6E:19:BD:98:7B:87:91:91:ED:F1:23:27:88:0B:57:9F ValiditySat, 23 Mar 2024 16:58:28 GMT - Fri, 21 Jun 2024 16:58:27 GMT File type ASCII text Size 82 kB (81457 bytes) Hash 58b13cac097e4fba04e3b972e666f6b8 a9e427b02b30f39790a9c7a11ad7cd660dad0db8 51a3a12fe81af9913837711e540a2d5a341ae4d22ee22808b5ac2389f88d9cf1 HTTP Headers `GET /wp/styles.css HTTP/1.1 Host: serograf.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:24:11 GMT Server: Apache Last-Modified: Wed, 10 Apr 2024 17:19:03 GMT Accept-Ranges: bytes Content-Length: 81457 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/css`

	nazwassl2sha2.ocsp-certum.com/	95.101.10.107		1.5 kB
URL nazwassl2sha2.ocsp-certum.com/ IP 95.101.10.107:0 ASN #20940 Akamai International B.V. File type data Size 1.5 kB (1505 bytes) Hash ff8a38ad2d51ff45c8f35c6f14a03fdc de5e87e4a4e15fea1350935fd972a08d40398434 34fd5b8d561929d82816651f91fbfcd3d0f7f53141d3e528157599cdeb584a68 HTTP Headers `POST / HTTP/1.1 Host: nazwassl2sha2.ocsp-certum.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 1505 X-Cached: STALE Strict-Transport-Security: max-age=63072000,includeSubDomains,preload Cache-Control: max-age=456 Date: Tue, 16 Apr 2024 19:24:12 GMT Connection: keep-alive X-N: S`

	pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/index.html	104.18.3.35	200 OK	18 kB
URL User Request GET HTTP/1.1 pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/index.html IP 104.18.3.35:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subject.r2.dev Fingerprint48:74:F0:98:E0:A1:57:3E:86:18:BF:B3:DC:C9:7A:5B:53:50:FE:E0 ValidityFri, 05 Apr 2024 15:25:24 GMT - Thu, 04 Jul 2024 15:25:23 GMT File type HTML document, ASCII text, with CRLF line terminators Size 18 kB (17484 bytes) Hash 208ac5d0a783e763420c1b16ad717eaf 0d8a3cb14222a4aa904e96bd274130c01533e198 34ab05db5adc2d8434ff7644dee41977314e84e746216f5c6d0957d8f6a3d51a HTTP Headers `GET /index.html HTTP/1.1 Host: pub-b12616a38122420f81f363b8bfbd2b44.r2.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:24:11 GMT Content-Type: text/html Content-Length: 17484 Connection: keep-alive Accept-Ranges: bytes ETag: "208ac5d0a783e763420c1b16ad717eaf" Last-Modified: Thu, 11 Apr 2024 08:49:37 GMT Vary: Accept-Encoding Server: cloudflare CF-RAY: 87568dd7ebf256c7-OSL`

	mail.agrohurt.com/img/logo/favicon.ico	0.0.0.0		0 B
URL GET mail.agrohurt.com/img/logo/favicon.ico IP 0.0.0.0:0 ASN #0 Requested by https://pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/index.html#pat.sullivan@navy.mil File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /img/logo/favicon.ico HTTP/1.1 Host: mail.agrohurt.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://pub-b12616a38122420f81f363b8bfbd2b44.r2.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate