Report - cstaft.com/

Report Overview

Submitted URL
cstaft.com/
IP
204.11.56.48
ASN
#40034 CONFLUENCE-NETWORK-INC
Submitted
2024-04-25 05:53:28
Access
public
Website Title
cstaft.com/
Final URL
cstaft.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
16

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cstaft.com	unknown	unknown	No data	No data	1.7 kB	64 kB	204.11.56.48
sedoparking.com	50712	2001-09-18	2012-06-01	2019-03-28	420 B	863 B	64.190.63.136

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2024-03-29	medium	cstaft.com/	Steam
2024-03-29	medium	cstaft.com/px.js?ch=1	Steam
2024-03-29	medium	cstaft.com/px.js?ch=2	Steam
2024-03-29	medium	cstaft.com/favicon.ico	Steam

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	cstaft.com	Sinkholed
2024-04-25	medium	cstaft.com	Sinkholed
2024-04-25	medium	cstaft.com	Sinkholed
2024-04-25	medium	cstaft.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	cstaft.com/	8 B	2023-03-07	2024-05-04
Pretty URL cstaft.com/ IP 204.11.56.48 ASN #40034 CONFLUENCE-NETWORK-INC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:33 Last Seen2024-05-04 19:05:15 Times Seen10926 Hash 883fa82f6169ed5ddd95e0c34cf36450 52fcfe1e375b542d4847a9c963bff266b98bfbc2 dca6253c1f2bdadb922b559c83bee52fbe1411e3a159adcb922ff3b45c623185 Loading...

	cstaft.com/px.js?ch=1	346 B	2023-03-07	2024-05-04
Pretty URL cstaft.com/px.js?ch=1 IP 204.11.56.48 ASN #40034 CONFLUENCE-NETWORK-INC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-05-04 19:05:15 Times Seen44061 Hash f84f931c0dd37448e03f0dabf4e4ca9f 9c2c50edcf576453ccc07bf65668bd23c76e8663 5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584 Loading...

	cstaft.com/	503 B	2024-04-25	2024-04-25
Pretty URL cstaft.com/ IP 204.11.56.48 ASN #40034 CONFLUENCE-NETWORK-INC Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 07:53:34 Last Seen2024-04-25 07:53:34 Times Seen1 Hash 94dff9634cacba619563c3d8d742a0ca 854d99f4ae5b4a19773d1e8c888cc851e3a9e5c0 b36d20dbee724c9890173e7f74e9ccf47b8a4b804ca434e2d9e0eaa395f31880 Loading...

	cstaft.com/	60 kB	2024-04-22	2024-05-01
Pretty URL cstaft.com/ IP 204.11.56.48 ASN #40034 CONFLUENCE-NETWORK-INC Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-22 23:41:07 Last Seen2024-05-01 08:17:41 Times Seen22 Hash cf951d14f458b138eeb87892c6fc6d2a 77aa4e4e2ff8271ea966b66bb110ca1c3c12c2c1 eb3b12ade1369041d60872005c2cedef4451c3e669d93d59ff35dc0caa335554 Loading...

	cstaft.com/	239 B	2023-03-08	2024-04-29
Pretty URL cstaft.com/ IP 204.11.56.48 ASN #40034 CONFLUENCE-NETWORK-INC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 01:57:18 Last Seen2024-04-29 07:41:02 Times Seen87 Hash a6f820b72dfe05d7b8b6911b80b79c88 537ad5cf36ad9d855ea4c2ec8958df97a09d3f1e ab4587203080c1cab45250cd737c885d04feffb9a6d7e18e8f3a48ef78f9dc58 Loading...

	cstaft.com/	77 B	2023-03-07	2024-05-02
Pretty URL cstaft.com/ IP 204.11.56.48 ASN #40034 CONFLUENCE-NETWORK-INC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:24:26 Last Seen2024-05-02 10:54:56 Times Seen350 Hash d5630c59e7893a1368ebb34a973c8956 fdb0bc9c507522a0b946c99bae6bda6fa96a690e 01d9b1f2503cb005dbd83ba5643ca5ab30c7c6a2abe967ab704873d62aabc0e3 Loading...

	sedoparking.com/frmpark/cstaft.com/Skenzor6/park.js	1.3 kB	2024-04-25	2024-04-25
Pretty URL sedoparking.com/frmpark/cstaft.com/Skenzor6/park.js IP 64.190.63.136 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 07:53:35 Last Seen2024-04-25 07:53:35 Times Seen1 Hash 656cc2dde5f05be4cdb5a0437328b0af c758e92242a1d46b5949ebe7dbf811c9fd0f2694 eeef5161f5f3d565fda0e0afe25a5a9acd7d68a0a81732760a8b73a5e16a92f2 Loading...

	cstaft.com/	281 B	2024-04-25	2024-04-25
Pretty URL cstaft.com/ IP 204.11.56.48 ASN #40034 CONFLUENCE-NETWORK-INC Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 07:53:35 Last Seen2024-04-25 07:53:35 Times Seen1 Hash 891e4a3bf985a33619c07fa51f01075f 9c49e8fb91a97a039b4a89b152c6579188e57394 ab0ae1d2e322a2c662501ae64e61a2a3020ab8f509701018aa0c47b8a91e6ef2 Loading...

		Size	First Seen	Last Seen
	#1 Write - b03ff2477a7e518e064fccefd19b2875	121 B	2024-04-25	2024-04-25
Pretty Observations First Seen2024-04-25 07:53:35 Last Seen2024-04-25 07:53:35 Times Seen1 Hash b03ff2477a7e518e064fccefd19b2875 e8c37074194a1f4f7282d701087a04c91bf1a1ab 4956e84150588b085990ae7ba64bf3c746501c2b71423270ec4c5565a1d017fe Loading...

HTTP Transactions (5)

URL IP Response Size

cstaft.com/

204.11.56.48

200 OK

63 kB

URL User Request GET HTTP/1.1
cstaft.com/
IP
204.11.56.48:443
ASN
#40034 CONFLUENCE-NETWORK-INC

Certificate
IssuerZeroSSL
Subjectcstaft.com
FingerprintFB:98:65:B3:2F:9C:86:F9:D9:BE:6A:7E:74:BB:76:55:62:1C:B6:11
ValidityTue, 02 Apr 2024 00:00:00 GMT - Mon, 01 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (59546), with CRLF, LF line terminators
Size
63 kB (62585 bytes)
Hash
5ae549888c3b2e0ab8a874c0946d198b
5292f568defea60f66b8516e8db1b261d94ae9e9
1ce5d6264526e3d9bc09c36a675d30abe4f1b7cb7965ee9a124bc34d01c38822

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Steam
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: cstaft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Thu, 25 Apr 2024 05:53:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_VKgVIu6L44tD4tOJlZiQ1Ri6wnK/W72ApkLLK1uKCembY73cFygs29Hr1atubm6MUZ93WiGT7e12NIc14QJuGg==

cstaft.com/px.js?ch=1

204.11.56.48

200 OK

346 B

URL GET HTTP/1.1
cstaft.com/px.js?ch=1
IP
204.11.56.48:443
ASN
#40034 CONFLUENCE-NETWORK-INC

Requested by
https://cstaft.com/
Certificate
IssuerZeroSSL
Subjectcstaft.com
FingerprintFB:98:65:B3:2F:9C:86:F9:D9:BE:6A:7E:74:BB:76:55:62:1C:B6:11
ValidityTue, 02 Apr 2024 00:00:00 GMT - Mon, 01 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (346), with no line terminators
Size
346 B (346 bytes)
Hash
f84f931c0dd37448e03f0dabf4e4ca9f
9c2c50edcf576453ccc07bf65668bd23c76e8663
5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Steam
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /px.js?ch=1 HTTP/1.1
Host: cstaft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cstaft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Thu, 25 Apr 2024 05:53:05 GMT
Content-Type: application/javascript
Content-Length: 346
Connection: keep-alive
Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT
ETag: "15a-5b952a63b81f1"
Accept-Ranges: bytes

cstaft.com/px.js?ch=2

204.11.56.48

200 OK

346 B

URL GET HTTP/1.1
cstaft.com/px.js?ch=2
IP
204.11.56.48:443
ASN
#40034 CONFLUENCE-NETWORK-INC

Requested by
https://cstaft.com/
Certificate
IssuerZeroSSL
Subjectcstaft.com
FingerprintFB:98:65:B3:2F:9C:86:F9:D9:BE:6A:7E:74:BB:76:55:62:1C:B6:11
ValidityTue, 02 Apr 2024 00:00:00 GMT - Mon, 01 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (346), with no line terminators
Size
346 B (346 bytes)
Hash
f84f931c0dd37448e03f0dabf4e4ca9f
9c2c50edcf576453ccc07bf65668bd23c76e8663
5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Steam
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /px.js?ch=2 HTTP/1.1
Host: cstaft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cstaft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Thu, 25 Apr 2024 05:53:05 GMT
Content-Type: application/javascript
Content-Length: 346
Connection: keep-alive
Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT
ETag: "15a-5b952a63b81f1"
Accept-Ranges: bytes

sedoparking.com/frmpark/cstaft.com/Skenzor6/park.js

64.190.63.136

200 OK

605 B

URL GET HTTP/2
sedoparking.com/frmpark/cstaft.com/Skenzor6/park.js
IP
64.190.63.136:443
ASN
#47846 SEDO GmbH

Requested by
https://cstaft.com/
Certificate
IssuerDigiCert Inc
Subjectsedoparking.com
Fingerprint55:E4:60:4D:0F:A1:FE:75:A6:FB:1C:8E:3F:AF:7C:D2:E0:3F:94:97
ValidityFri, 05 Jan 2024 00:00:00 GMT - Sun, 05 Jan 2025 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
605 B (605 bytes)
Hash
15241c372656f9aad6a26ffa2c53c9d8
7901db0724a963bd28a85ba1559cad17d07f7661
95af63d8ea1f2a5e8a75c174223ec4a99aca97f13e13029041a789f0d5340336

HTTP Headers

GET /frmpark/cstaft.com/Skenzor6/park.js HTTP/1.1
Host: sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cstaft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Thu, 25 Apr 2024 05:53:05 GMT
server: NginX
vary: Accept-Encoding
x-cache-miss-from: parking-55fd589654-9qszh
x-powered-by: PHP/8.1.17
X-Firefox-Spdy: h2

cstaft.com/favicon.ico

204.11.56.48

404 Not Found

10 B

URL GET HTTP/1.1
cstaft.com/favicon.ico
IP
204.11.56.48:443
ASN
#40034 CONFLUENCE-NETWORK-INC

Requested by
https://cstaft.com/
Certificate
IssuerZeroSSL
Subjectcstaft.com
FingerprintFB:98:65:B3:2F:9C:86:F9:D9:BE:6A:7E:74:BB:76:55:62:1C:B6:11
ValidityTue, 02 Apr 2024 00:00:00 GMT - Mon, 01 Jul 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
10 B (10 bytes)
Hash
6608dd3e21ca3beabd4bdfa625a0b221
e926d0f8694a4bc4013308afaca7af51e4c9fd9f
c75eb01138771bfb2a5517aeae882356733782767c4560cc9601c34d2591ca75

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Steam
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: cstaft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cstaft.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: openresty
Date: Thu, 25 Apr 2024 05:53:05 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 10
Connection: keep-alive

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML