Report - ddna.top/project/330

Report Overview

Submitted URL
ddna.top/project/330
IP
162.19.139.143
ASN
#16276 OVH SAS
Submitted
2024-04-18 10:51:10
Access
public
Website Title
Небходимо пройти провеку
Final URL
ddna.top/project/330
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ddna.top	unknown	2023-11-09	2023-11-11	2024-04-17	2.8 kB	29 kB	162.19.139.143

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	ddna.top/	PayPal Inc.
2024-04-16	medium	ddna.top/	PayPal Inc.
2024-04-16	medium	ddna.top/	PayPal Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	ddna.top	Sinkholed
2024-04-18	medium	ddna.top	Sinkholed
2024-04-18	medium	ddna.top	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

ddna.top/project/330

162.19.139.143

200 OK

1.2 kB

URL User Request GET HTTP/1.1
ddna.top/project/330
IP
162.19.139.143:443
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subjectddna.top
FingerprintD0:D7:DE:C9:F0:92:A3:CB:31:22:5D:36:07:BD:DC:BD:FE:5A:5D:5E
ValiditySat, 13 Apr 2024 08:30:08 GMT - Fri, 12 Jul 2024 08:30:07 GMT

File type
HTML document, Unicode text, UTF-8 text
Size
1.2 kB (1161 bytes)
Hash
702dc8aa02ef93f51ec98e15c96c2e0a
2691585683258fdad50a125f9f760cd172043f3c
b1939085d09a89a881f7780ae5281d4b1070a97d2b96bfd9c2841da026b2445a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	PayPal Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /project/330 HTTP/1.1
Host: ddna.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: msft=cl.b631b30b5a88107daad507607f60cdb4//69IEtZ3-_LbKBDnL0_g0BNVhDy-2E_py4K-UkNEhUY4=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/html; charset=utf-8
Date: Thu, 18 Apr 2024 10:50:46 GMT
Etag: W/"b2c-JpFYVoMlj9rVChJfn3YM0XIEPzw"
Server: CloudWarden
Set-Cookie: access=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; Max-Age=600; Path=/; Expires=Thu, 18 Apr 2024 11:00:46 GMT; HttpOnly; Secure; SameSite=Strict
uniq=true; Max-Age=600000; Path=/; Expires=Thu, 25 Apr 2024 09:30:46 GMT; HttpOnly; Secure; SameSite=Strict
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Accept-Encoding
X-Powered-By: Express
X-Ua-Compatible: IE=Edge
X-Xss-Protection: 1; mode=block

ddna.top/capcha/d2b431c2-7888-45c4-8371-ea0056406022.jpg

162.19.139.143

200 OK

11 kB

URL GET HTTP/1.1
ddna.top/capcha/d2b431c2-7888-45c4-8371-ea0056406022.jpg
IP
162.19.139.143:443
ASN
#16276 OVH SAS

Requested by
https://ddna.top/project/330
Certificate
IssuerLet's Encrypt
Subjectddna.top
FingerprintD0:D7:DE:C9:F0:92:A3:CB:31:22:5D:36:07:BD:DC:BD:FE:5A:5D:5E
ValiditySat, 13 Apr 2024 08:30:08 GMT - Fri, 12 Jul 2024 08:30:07 GMT

File type
PNG image data, 416 x 146, 8-bit/color RGBA, non-interlaced
Size
11 kB (11035 bytes)
Hash
350dda788999ea8f1f33e046071bb3d3
c539e2363e8fbc771f5e4dc1934153297175ff8c
12ef4ef24ff22faba3d8edebad869cc6e35ce3c3dd644670fc25878af419a8f8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	PayPal Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /capcha/d2b431c2-7888-45c4-8371-ea0056406022.jpg HTTP/1.1
Host: ddna.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ddna.top/project/330
Cookie: msft=cl.b631b30b5a88107daad507607f60cdb4//69IEtZ3-_LbKBDnL0_g0BNVhDy-2E_py4K-UkNEhUY4=; access=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; uniq=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 11035
Accept-Ranges: bytes
Cl-Cache: HIT
Connection: keep-alive
Content-Type: image/jpeg
Date: Thu, 18 Apr 2024 10:14:36 GMT
Etag: "657d6061-2b1b"
Last-Modified: Sat, 16 Dec 2023 08:31:29 GMT
Server: CloudWarden
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Accept-Encoding
X-Ua-Compatible: IE=Edge
X-Xss-Protection: 1; mode=block

ddna.top/favicon.ico

162.19.139.143

200 OK

15 kB

URL GET HTTP/1.1
ddna.top/favicon.ico
IP
162.19.139.143:443
ASN
#16276 OVH SAS

Requested by
https://ddna.top/project/330
Certificate
IssuerLet's Encrypt
Subjectddna.top
FingerprintD0:D7:DE:C9:F0:92:A3:CB:31:22:5D:36:07:BD:DC:BD:FE:5A:5D:5E
ValiditySat, 13 Apr 2024 08:30:08 GMT - Fri, 12 Jul 2024 08:30:07 GMT

File type
MS Windows icon resource - 1 icon, 60x60, 32 bits/pixel
Size
15 kB (14942 bytes)
Hash
3674021a7e16fd3f86d52750089dfe54
32b1749f30490250049fbc3e7dbf94d03a520b66
f3cb74c089b7fb133fbf8d63e5b563410676cde0c73c7b96dc6da8551b0629f5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	PayPal Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ddna.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ddna.top/project/330
Cookie: msft=cl.b631b30b5a88107daad507607f60cdb4//69IEtZ3-_LbKBDnL0_g0BNVhDy-2E_py4K-UkNEhUY4=; access=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; uniq=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 14942
Accept-Ranges: bytes
Cl-Cache: HIT
Connection: keep-alive
Content-Type: image/x-icon
Date: Thu, 18 Apr 2024 10:30:58 GMT
Etag: "6618937f-3a5e"
Last-Modified: Fri, 12 Apr 2024 01:50:55 GMT
Server: CloudWarden
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Accept-Encoding
X-Ua-Compatible: IE=Edge
X-Xss-Protection: 1; mode=block

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (3)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers