Report - conjecturing-cutprice.click/

Report Overview

Submitted URL
conjecturing-cutprice.click/
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 03:58:16
Access
public
Website Title
Sind sie bereits 18?
Final URL
conjecturing-cutprice.click/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
conjecturing-cutprice.click	unknown	2023-06-28	2023-06-28	2024-01-18	2.9 kB	8.7 kB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	conjecturing-cutprice.click/	Telegram
2024-04-17	medium	conjecturing-cutprice.click/	Telegram
2024-04-17	medium	conjecturing-cutprice.click/	Telegram
2024-04-17	medium	conjecturing-cutprice.click/	Telegram

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

URL IP Response Size

conjecturing-cutprice.click/

188.114.97.1

200 OK

793 B

URL User Request GET HTTP/2
conjecturing-cutprice.click/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectconjecturing-cutprice.click
Fingerprint84:10:C1:E4:4F:12:5F:8B:3F:B0:EA:EF:3F:35:DB:85:74:2B:D4:26
ValidityMon, 19 Feb 2024 16:39:22 GMT - Sun, 19 May 2024 16:39:21 GMT

File type
HTML document, ASCII text, with very long lines (848), with no line terminators
Size
793 B (793 bytes)
Hash
48c86ae001acc491cf105d2bc76dc169
b7cea0832ba7dc219c284900bff2e5e5c8328622
0ea613fe09f9de3d59fc583ae81c6fa283b0e0d3cb91a667c6fde5d652d0eaa5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET / HTTP/1.1
Host: conjecturing-cutprice.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 03:57:51 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 18 Apr 2024 03:57:51 GMT
set-cookie: _subid=376l60j3i4rcc; expires=Sun, 19 May 2024 03:57:51 GMT; path=/
f5771=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjMyMTQ2XCI6MTcxMzQxMjY3MX0sXCJjYW1wYWlnbnNcIjp7XCIyODMzNFwiOjE3MTM0MTI2NzF9LFwidGltZVwiOjE3MTM0MTI2NzF9In0.FfYeFuE8F6VHI2IpZgTppBK2nPzgwRnpRO8mMuSHKNI; expires=Fri, 05 Aug 2078 07:55:42 GMT; path=/
_token=uuid_376l60j3i4rcc_376l60j3i4rcc66209a3f5c17d9.12644168; expires=Sun, 19 May 2024 03:57:51 GMT; path=/
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DX7h4%2FCi2eM8N%2FaJjDHzRvyqLAhnWsWr4dMiIoD1Z%2F9VY5E8J%2FSsiT%2BGROnMk2%2FUGXCQljJabxp%2Fp554c6eNuwZelc%2B93k91DYhEKom5qebfZYPF2YxjuZM3VA11FrO22RWPKzFVe%2FqDSyxGuuk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8761bbab5ca41c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

conjecturing-cutprice.click/lander/1701-bot-rus-18--new_1658407417/style.css

188.114.97.1

200 OK

704 B

URL GET HTTP/3
conjecturing-cutprice.click/lander/1701-bot-rus-18--new_1658407417/style.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://conjecturing-cutprice.click/
Certificate
IssuerGoogle Trust Services LLC
Subjectconjecturing-cutprice.click
Fingerprint84:10:C1:E4:4F:12:5F:8B:3F:B0:EA:EF:3F:35:DB:85:74:2B:D4:26
ValidityMon, 19 Feb 2024 16:39:22 GMT - Sun, 19 May 2024 16:39:21 GMT

File type
ASCII text, with very long lines (704), with no line terminators
Size
704 B (704 bytes)
Hash
b93cd6e9394d6d867ddaa497b9b1b858
1dafdc87c56d35163faa88dd2f19a56b140a1cea
7c0943178952e776dadb4290a53eb551a1e23fbe733d4b5744ffb3807219ea91

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /lander/1701-bot-rus-18--new_1658407417/style.css HTTP/1.1
Host: conjecturing-cutprice.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://conjecturing-cutprice.click/
Cookie: _subid=376l60j3i4rcc; f5771=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjMyMTQ2XCI6MTcxMzQxMjY3MX0sXCJjYW1wYWlnbnNcIjp7XCIyODMzNFwiOjE3MTM0MTI2NzF9LFwidGltZVwiOjE3MTM0MTI2NzF9In0.FfYeFuE8F6VHI2IpZgTppBK2nPzgwRnpRO8mMuSHKNI; _token=uuid_376l60j3i4rcc_376l60j3i4rcc66209a3f5c17d9.12644168
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 03:57:51 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=864000
cf-bgj: minify
cf-polished: origSize=894
etag: W/"64ae6f0b-37e"
expires: Sun, 28 Apr 2024 00:05:21 GMT
last-modified: Wed, 12 Jul 2023 09:14:51 GMT
cf-cache-status: HIT
age: 13950
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aNrBVUHwOfsxS7Y%2FTbPDFGcndOA3sM2bUsyRuhP8Lin72OBh93FtS51LlCqHSUsjAQ635T4fWSmbCYB3iOi0iNkU8auFpdUF6y%2FGs%2BdRB1ZggYIi%2B%2Brltx5x%2FvPGIdt6mKu6oIbdMHPV2ga9KJs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761bbadb8dd569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

conjecturing-cutprice.click/lander/1701-bot-rus-18--new_1658407417/logo.svg

188.114.97.1

200 OK

3.6 kB

URL GET HTTP/3
conjecturing-cutprice.click/lander/1701-bot-rus-18--new_1658407417/logo.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://conjecturing-cutprice.click/
Certificate
IssuerGoogle Trust Services LLC
Subjectconjecturing-cutprice.click
Fingerprint84:10:C1:E4:4F:12:5F:8B:3F:B0:EA:EF:3F:35:DB:85:74:2B:D4:26
ValidityMon, 19 Feb 2024 16:39:22 GMT - Sun, 19 May 2024 16:39:21 GMT

File type
SVG Scalable Vector Graphics image
Size
3.6 kB (3644 bytes)
Hash
5d2d1c6dfc9abf955f56f3d45d16b99c
5cf57f60fc3ffabd78f42b3c4a8fd76ab6adbf28
1b9b2b6d313a3c9377e76dce1625c00589811b0c6f8376f05c3e9da0210582a0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /lander/1701-bot-rus-18--new_1658407417/logo.svg HTTP/1.1
Host: conjecturing-cutprice.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://conjecturing-cutprice.click/
Cookie: _subid=376l60j3i4rcc; f5771=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjMyMTQ2XCI6MTcxMzQxMjY3MX0sXCJjYW1wYWlnbnNcIjp7XCIyODMzNFwiOjE3MTM0MTI2NzF9LFwidGltZVwiOjE3MTM0MTI2NzF9In0.FfYeFuE8F6VHI2IpZgTppBK2nPzgwRnpRO8mMuSHKNI; _token=uuid_376l60j3i4rcc_376l60j3i4rcc66209a3f5c17d9.12644168
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 03:57:51 GMT
content-type: image/svg+xml
last-modified: Thu, 21 Jul 2022 12:58:32 GMT
etag: W/"62d94d78-e3c"
expires: Thu, 25 Apr 2024 22:37:45 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: HIT
age: 192006
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YyqUPYuSLDeopOumseKM7hI8qiZUrsk%2FIg1abTlsWuDBjtYpeEX3UYhZ38L%2B2qWwZtrLN9GA%2B2IinUoKbxBXgUA1WR9tVylMzJTvwvh%2F0gELSIb8mxrnUb8bk1quMp%2Fkkx6oC7fMcu5pEYlopL8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761bbadb8df569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

conjecturing-cutprice.click/favicon.ico

188.114.97.1

404 Not Found

139 B

URL GET HTTP/3
conjecturing-cutprice.click/favicon.ico
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://conjecturing-cutprice.click/
Certificate
IssuerGoogle Trust Services LLC
Subjectconjecturing-cutprice.click
Fingerprint84:10:C1:E4:4F:12:5F:8B:3F:B0:EA:EF:3F:35:DB:85:74:2B:D4:26
ValidityMon, 19 Feb 2024 16:39:22 GMT - Sun, 19 May 2024 16:39:21 GMT

File type
HTML document, ASCII text, with no line terminators
Size
139 B (139 bytes)
Hash
0439a6deac8f0641ff2dedfce65d0c71
7e8daa3dd92c102165ea1542299bf4f714cdcd8c
8c32b65b6b0a2b2d859ce9d8ea0d1f5a9456ce37b1e1311bc07ea114a26ecccb

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: conjecturing-cutprice.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://conjecturing-cutprice.click/
Cookie: _subid=376l60j3i4rcc; f5771=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjMyMTQ2XCI6MTcxMzQxMjY3MX0sXCJjYW1wYWlnbnNcIjp7XCIyODMzNFwiOjE3MTM0MTI2NzF9LFwidGltZVwiOjE3MTM0MTI2NzF9In0.FfYeFuE8F6VHI2IpZgTppBK2nPzgwRnpRO8mMuSHKNI; _token=uuid_376l60j3i4rcc_376l60j3i4rcc66209a3f5c17d9.12644168
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 03:57:51 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xK%2Fveim4uzd768NpdZRU8GFmMzqBOE15oM7yTgj1%2FB6YRI9YBuj8tgHc819%2BULAD0DaEXjGUFm3Pi6aGD4Yv2c%2BSa%2B7%2Frtf%2F53O2zvG8d1gIEPVpMj8WxAQljI27fzi10gjcLqR1nvR9b2w9Lpg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8761bbadd8fd569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (4)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers