Report - 1wertv.s3.ap-southeast-2.wasabisys.com/n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline#~Zy5qdW5pb3JAdm9sdGFsaWEuY29t

Report Overview

Submitted URL
1wertv.s3.ap-southeast-2.wasabisys.com/n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline#~Zy5qdW5pb3JAdm9sdGFsaWEuY29t
IP
206.148.5.101
ASN
#395717 BLUEARCHIVE-ZONE-1
Submitted
2024-04-19 10:35:42
Access
public
Website Title
1wertv.s3.ap-southeast-2.wasabisys.com/n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline#~Zy5qdW5pb3JAdm9sdGFsaWEuY29t
Final URL
1wertv.s3.ap-southeast-2.wasabisys.com/n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline#~Zy5qdW5pb3JAdm9sdGFsaWEuY29t
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
1wertv.s3.ap-southeast-2.wasabisys.com	unknown	unknown	No data	No data	3.7 kB	4.3 kB	206.148.5.103

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-19 10:35:18	low	Client IP	206.148.5.103	ET INFO Commonly Abused File Sharing Domain (wasabisys .com) in TLS SNI
2024-04-19 10:35:18	low	Client IP	206.148.5.102	ET INFO Commonly Abused File Sharing Domain (wasabisys .com) in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Response	Size
	1wertv.s3.ap-southeast-2.wasabisys.com/n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline	206.148.5.103		408 B
URL 1wertv.s3.ap-southeast-2.wasabisys.com/n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline IP 206.148.5.103:0 ASN #395717 BLUEARCHIVE-ZONE-1 File type XML 1.0 document, ASCII text, with very long lines (369) Size 408 B (408 bytes) Hash 8782bf3a29ac13e900527fdebb43d166 6e59eb34c26d21c2cdc762c419f18dd6de842e85 d3f51fe07dcfd47d5d0f0e723ac112388f62313c0660cc08f658717692709f73 HTTP Headers GET /n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline HTTP/1.1 Host: 1wertv.s3.ap-southeast-2.wasabisys.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 403 Forbidden Content-Disposition: inline Content-Type: application/xml Date: Fri, 19 Apr 2024 10:35:19 GMT Server: WasabiS3/7.18.4828-2024-02-12-543e1ba234 (head4) x-amz-id-2: GR9wGWU77PG3R7Q3DluWtg6Z4WUon8rTJBdyZHKMkvi3HooxeiFkSdwk+4+31/28r5KFBW+nZLbY x-amz-request-id: E0A9F380D2878E67:B x-wasabi-cm-reference-id: 1713522918050 206.148.5.103 ConID:310121439/EngineConID:2992919/Core:11 Transfer-Encoding: chunked`

	1wertv.s3.ap-southeast-2.wasabisys.com/n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline	206.148.5.103		408 B
URL 1wertv.s3.ap-southeast-2.wasabisys.com/n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline IP 206.148.5.103:0 ASN #395717 BLUEARCHIVE-ZONE-1 File type XML 1.0 document, ASCII text, with very long lines (369) Size 408 B (408 bytes) Hash e9e05cc018050110f14410c4b3298faf 6c37fc1af8ed64e5a3c6bc26be549b64d5721ea9 93982d19195dad288f0e8796b2d905f48e2e9648c57df8cefc413f217b023e98 HTTP Headers GET /n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline HTTP/1.1 Host: 1wertv.s3.ap-southeast-2.wasabisys.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 403 Forbidden Content-Disposition: inline Content-Type: application/xml Date: Fri, 19 Apr 2024 10:35:20 GMT Server: WasabiS3/7.18.4828-2024-02-12-543e1ba234 (head4) x-amz-id-2: 8dJVNbFW9V4tvIqP+nJ9kuFzGLYMbG20fZpiWXRIzYEywiT+7GTX6+QdfibbawzMesuKa23FIK6X x-amz-request-id: 3B781ADCF796BC03:B x-wasabi-cm-reference-id: 1713522919978 206.148.5.103 ConID:310121827/EngineConID:2985435/Core:57 Transfer-Encoding: chunked`

	1wertv.s3.ap-southeast-2.wasabisys.com/favicon.ico	206.148.5.102	403 Forbidden	480 B
URL GET HTTP/1.1 1wertv.s3.ap-southeast-2.wasabisys.com/favicon.ico IP 206.148.5.102:80 ASN #395717 BLUEARCHIVE-ZONE-1 Requested by http://1wertv.s3.ap-southeast-2.wasabisys.com/n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline#~Zy5qdW5pb3JAdm9sdGFsaWEuY29t File type XML 1.0 document, ASCII text, with very long lines (441) Size 480 B (480 bytes) Hash 3e561ee083fbc7d3a123b69278c62221 f76b9d3c3c38d52cef82b22b1425182fb7c64ef0 c9a03fed215e5cb23cc7514c080ac1ff20ea0a735dfdce12cd472f4f9f43cbf8 HTTP Headers GET /favicon.ico HTTP/1.1 Host: 1wertv.s3.ap-southeast-2.wasabisys.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://1wertv.s3.ap-southeast-2.wasabisys.com/n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 403 Forbidden Content-Type: application/xml Date: Fri, 19 Apr 2024 10:35:20 GMT Server: WasabiS3/7.18.4828-2024-02-12-543e1ba234 (R112-U11) x-amz-id-2: o3N7O5PzwSWQwAOlXERDg1N4q3wIEKjK6BoqadgRUn5ezrDXPkU/Y2KG8gbaH3SUS1CQl52hFgJ+ x-amz-request-id: B28B8D0B8E57BD01:A x-wasabi-cm-reference-id: 1713522920256 206.148.5.102 ConID:310121864/EngineConID:2973356/Core:102 Transfer-Encoding: chunked`

	1wertv.s3.ap-southeast-2.wasabisys.com/n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline	206.148.5.103	403 Forbidden	408 B
URL User Request GET HTTP/1.1 1wertv.s3.ap-southeast-2.wasabisys.com/n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline IP 206.148.5.103:80 ASN #395717 BLUEARCHIVE-ZONE-1 File type XML document, ASCII text, with very long lines (413), with no line terminators Size 408 B (408 bytes) Hash 1cde8aaaf08dbc4491683dcb200b2a06 36e0faa56de8573e174cc5b2e1bbce35a131800b 963f38f92921fea7cff41e100ef1cf9e7fc8fe66184a73f3c7c794b8c11a9bf5 HTTP Headers GET /n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline HTTP/1.1 Host: 1wertv.s3.ap-southeast-2.wasabisys.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 403 Forbidden Content-Disposition: inline Content-Type: application/xml Date: Fri, 19 Apr 2024 10:35:20 GMT Server: WasabiS3/7.18.4828-2024-02-12-543e1ba234 (head4) x-amz-id-2: 8dJVNbFW9V4tvIqP+nJ9kuFzGLYMbG20fZpiWXRIzYEywiT+7GTX6+QdfibbawzMesuKa23FIK6X x-amz-request-id: 3B781ADCF796BC03:B x-wasabi-cm-reference-id: 1713522919978 206.148.5.103 ConID:310121827/EngineConID:2985435/Core:57 Transfer-Encoding: chunked`

	1wertv.s3.ap-southeast-2.wasabisys.com/n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline	206.148.5.103	403 Forbidden	408 B
URL User Request GET HTTP/1.1 1wertv.s3.ap-southeast-2.wasabisys.com/n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline IP 206.148.5.103:443 ASN #395717 BLUEARCHIVE-ZONE-1 Certificate IssuerDigiCert Inc Subject.s3.ap-southeast-2.wasabisys.com FingerprintAA:80:A8:85:CB:42:E8:EC:5D:3B:C4:F1:49:97:D8:8A:91:85:B8:60 ValidityWed, 19 Apr 2023 00:00:00 GMT - Sun, 19 May 2024 23:59:59 GMT File type XML document, ASCII text, with very long lines (413), with no line terminators Size 408 B (408 bytes) Hash 89d8e1d84fb123742203582844b0983f 0f867cb2748e3900ae638340648c1c3531106dfc 0988fe91147ad7d72fe478df303b959a66a6447f8aaa40995872b4bdfd08950a HTTP Headers GET /n1.htm?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=EH36JHUYD2IAIM1EH50P/20240418/ap-southeast-2/s3/aws4_request&X-Amz-Date=20240418T124123Z&X-Amz-Expires=604796&X-Amz-Signature=1edca3f13a5c45355c8211d3f2d291f11c03c864e7a3b78146aab12c4745747c&X-Amz-SignedHeaders=host&response-content-disposition=inline HTTP/1.1 Host: 1wertv.s3.ap-southeast-2.wasabisys.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 403 Forbidden Content-Disposition: inline Content-Type: application/xml Date: Fri, 19 Apr 2024 10:35:19 GMT Server: WasabiS3/7.18.4828-2024-02-12-543e1ba234 (head4) x-amz-id-2: GR9wGWU77PG3R7Q3DluWtg6Z4WUon8rTJBdyZHKMkvi3HooxeiFkSdwk+4+31/28r5KFBW+nZLbY x-amz-request-id: E0A9F380D2878E67:B x-wasabi-cm-reference-id: 1713522918050 206.148.5.103 ConID:310121439/EngineConID:2992919/Core:11 Transfer-Encoding: chunked`

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (5)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers