Report - www.discardless.eu/twitter.com/login62b1.html

Report Overview

Submitted URL
www.discardless.eu/twitter.com/login62b1.html
IP
194.167.76.140
ASN
#2200 Renater
Submitted
2024-04-19 00:01:46
Access
public
Website Title
Login on Twitter
Final URL
www.discardless.eu/twitter.com/login62b1.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
4
Threat Detection Systems
52

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.discardless.eu	unknown	unknown	2016-09-28	2024-04-16	7.9 kB	2.1 MB	194.167.76.140

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-19 00:01:20	high	194.167.76.140	Client IP	ET PHISHING Possible Phish - Mirrored Website Comment Observed
2024-04-19 00:01:20	high	194.167.76.140	Client IP	ET PHISHING Possible Phish - Mirrored Website Comment Observed
2024-04-19 00:01:20	high	194.167.76.140	Client IP	ET PHISHING Possible Phish - Mirrored Website Comment Observed
2024-04-19 00:01:20	high	194.167.76.140	Client IP	ET PHISHING Possible Phish - Mirrored Website Comment Observed

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	www.discardless.eu/twitter.com/login62b1.html	Twitter, Inc.
2024-04-16	medium	www.discardless.eu/twitter.com/login62b1.html	Twitter, Inc.
2024-04-16	medium	www.discardless.eu/twitter.com/login62b1.html	Twitter, Inc.
2024-04-16	medium	www.discardless.eu/twitter.com/login62b1.html	Twitter, Inc.
2024-04-16	medium	www.discardless.eu/twitter.com/login62b1.html	Twitter, Inc.
2024-04-16	medium	www.discardless.eu/twitter.com/login62b1.html	Twitter, Inc.
2024-04-16	medium	www.discardless.eu/twitter.com/login62b1.html	Twitter, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed
2024-04-19	medium	discardless.eu	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	www.discardless.eu/twitter.com/login62b1.html	228 B	2023-03-07	2024-04-24
Pretty URL www.discardless.eu/twitter.com/login62b1.html IP 194.167.76.140 ASN #2200 Renater Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 21:26:21 Last Seen2024-04-24 02:02:58 Times Seen18 Hash bec6344485269f51a6806614b5aab01e 805e21f8d321e6a1cdc2dac67d801b1c21af954b f2b3656593d5e4396ae9a457a4813412b570d479d216cd6bacd2019995ee5c7b Loading...

	www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics	13 kB	2024-01-18	2024-04-24
Pretty URL www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics IP 194.167.76.140 ASN #2200 Renater Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-18 23:15:35 Last Seen2024-04-24 02:02:59 Times Seen178 Hash 18e9ec06b823e97dec974a58f1130307 589f8ec60ed87213ea0c3821efab4914b91631d1 a643bab01c2c86d8b4f2739f840d534eb0e377e7bff5b8c1547916fd9ab36d0e Loading...

	www.discardless.eu/twitter.com/login62b1.html#	0 B	2023-03-07	2024-05-02
Pretty URL www.discardless.eu/twitter.com/login62b1.html# IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-02 01:32:29 Times Seen37259984 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.discardless.eu/twitter.com/login62b1.html	108 B	2023-03-07	2024-04-24
Pretty URL www.discardless.eu/twitter.com/login62b1.html IP 194.167.76.140 ASN #2200 Renater Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 21:26:21 Last Seen2024-04-24 02:02:58 Times Seen18 Hash 45fec27eff301ca5471ad6eab47d9839 7267a8ee99dc90962ecba157d3eb93c35c37d2a5 58175fca4fe4bb55353c0b248c25f19a2a4ed165d284b2fae1f4dd39843aa89c Loading...

	www.discardless.eu/twitter.com/login62b1.html	2.6 kB	2023-03-07	2024-04-24
Pretty URL www.discardless.eu/twitter.com/login62b1.html IP 194.167.76.140 ASN #2200 Renater Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 21:26:21 Last Seen2024-04-24 02:02:58 Times Seen19 Hash 9175484a52d4d5350f9277c43c2f6f1e 9e60fd5f20dd36567e91ddba6e334429155e6c5d af6a39b88462c0372c211fbdbf1e75c6262671d63ef59189a10e81fc3f1ce2d8 Loading...

	www.discardless.eu/twitter.com/login62b1.html	280 B	2023-03-07	2024-04-24
Pretty URL www.discardless.eu/twitter.com/login62b1.html IP 194.167.76.140 ASN #2200 Renater Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 21:26:21 Last Seen2024-04-24 02:02:58 Times Seen19 Hash f7a42d2767e524a25ff48dffc9ba9cb9 bfd719da11ce2d9a61ebc037a18eb64f173863d3 8f82e46837e9e72d748a703260b197551272f14cfc3ecd1eaa6347f942269348 Loading...

	www.discardless.eu/twitter.com/login62b1.html	120 B	2023-03-07	2024-04-24
Pretty URL www.discardless.eu/twitter.com/login62b1.html IP 194.167.76.140 ASN #2200 Renater Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:44:30 Last Seen2024-04-24 02:02:58 Times Seen26 Hash c0a157ce5e88d99a38d39bbf2a774cb5 f2e0b89ea4f46abe7c6d8d89a4b7f04da1e27803 334939d7aa45c63cf81d83dece556cb76acd2dbb7794b62d395ee975a25965a5 Loading...

HTTP Transactions (19)

URL IP Response Size

www.discardless.eu/twitter.com/login62b1.html

194.167.76.140

278 kB

URL User Request GET
www.discardless.eu/twitter.com/login62b1.html
IP
194.167.76.140:0
ASN
#2200 Renater

File type
HTML document, Unicode text, UTF-8 text, with very long lines (9077)
Size
278 kB (277458 bytes)
Hash
0e35977388cc6c80b058732f6cf71b72
625b9a49f4f05e6bfb22ef762d570c5b4539858e
9fc15091b8a280ad6c5520c49ab1b1ccf6d8138b2f313c47b71ee9d8e4b903e8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Twitter, Inc.
Quad9 DNS	malicious	Sinkholed

NIDS	Severity	Alert
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed

HTTP Headers

GET /twitter.com/login62b1.html HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:20 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:02:26 GMT
ETag: "43bd2-5de59fc1c9739"
Accept-Ranges: bytes
Content-Length: 277458
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics

194.167.76.140

200 OK

13 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type
ASCII text, with very long lines (12387)
Size
13 kB (13366 bytes)
Hash
18e9ec06b823e97dec974a58f1130307
589f8ec60ed87213ea0c3821efab4914b91631d1
a643bab01c2c86d8b4f2739f840d534eb0e377e7bff5b8c1547916fd9ab36d0e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /twitter.com/i/js_inst3fb2?c_name=ui_metrics HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:20 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:05:24 GMT
ETag: "3436-5de5a06b095c7"
Accept-Ranges: bytes
Content-Length: 13366
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive

www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics

194.167.76.140

200 OK

13 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type
ASCII text, with very long lines (12387)
Size
13 kB (13366 bytes)
Hash
18e9ec06b823e97dec974a58f1130307
589f8ec60ed87213ea0c3821efab4914b91631d1
a643bab01c2c86d8b4f2739f840d534eb0e377e7bff5b8c1547916fd9ab36d0e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /twitter.com/i/js_inst3fb2?c_name=ui_metrics HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:20 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:05:24 GMT
ETag: "3436-5de5a06b095c7"
Accept-Ranges: bytes
Content-Length: 13366
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive

www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics

194.167.76.140

200 OK

13 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type
ASCII text, with very long lines (12387)
Size
13 kB (13366 bytes)
Hash
18e9ec06b823e97dec974a58f1130307
589f8ec60ed87213ea0c3821efab4914b91631d1
a643bab01c2c86d8b4f2739f840d534eb0e377e7bff5b8c1547916fd9ab36d0e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /twitter.com/i/js_inst3fb2?c_name=ui_metrics HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:20 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:05:24 GMT
ETag: "3436-5de5a06b095c7"
Accept-Ranges: bytes
Content-Length: 13366
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive

www.discardless.eu/twitter.com/login62b1.html

194.167.76.140

278 kB

URL User Request GET
www.discardless.eu/twitter.com/login62b1.html
IP
194.167.76.140:0
ASN
#2200 Renater

File type
HTML document, Unicode text, UTF-8 text, with very long lines (9077)
Size
278 kB (277458 bytes)
Hash
0e35977388cc6c80b058732f6cf71b72
625b9a49f4f05e6bfb22ef762d570c5b4539858e
9fc15091b8a280ad6c5520c49ab1b1ccf6d8138b2f313c47b71ee9d8e4b903e8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Twitter, Inc.
Quad9 DNS	malicious	Sinkholed

NIDS	Severity	Alert
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed

HTTP Headers

GET /twitter.com/login62b1.html HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:20 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:02:26 GMT
ETag: "43bd2-5de59fc1c9739"
Accept-Ranges: bytes
Content-Length: 277458
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

www.discardless.eu/twitter.com/login62b1.html

194.167.76.140

278 kB

URL User Request GET
www.discardless.eu/twitter.com/login62b1.html
IP
194.167.76.140:0
ASN
#2200 Renater

File type
HTML document, Unicode text, UTF-8 text, with very long lines (9077)
Size
278 kB (277458 bytes)
Hash
0e35977388cc6c80b058732f6cf71b72
625b9a49f4f05e6bfb22ef762d570c5b4539858e
9fc15091b8a280ad6c5520c49ab1b1ccf6d8138b2f313c47b71ee9d8e4b903e8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Twitter, Inc.
Quad9 DNS	malicious	Sinkholed

NIDS	Severity	Alert
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed

HTTP Headers

GET /twitter.com/login62b1.html HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:20 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:02:26 GMT
ETag: "43bd2-5de59fc1c9739"
Accept-Ranges: bytes
Content-Length: 277458
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

www.discardless.eu/twitter.com/login62b1.html

194.167.76.140

278 kB

URL User Request GET
www.discardless.eu/twitter.com/login62b1.html
IP
194.167.76.140:0
ASN
#2200 Renater

File type
HTML document, Unicode text, UTF-8 text, with very long lines (9077)
Size
278 kB (277458 bytes)
Hash
0e35977388cc6c80b058732f6cf71b72
625b9a49f4f05e6bfb22ef762d570c5b4539858e
9fc15091b8a280ad6c5520c49ab1b1ccf6d8138b2f313c47b71ee9d8e4b903e8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Twitter, Inc.
Quad9 DNS	malicious	Sinkholed

NIDS	Severity	Alert
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed

HTTP Headers

GET /twitter.com/login62b1.html HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:20 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:02:26 GMT
ETag: "43bd2-5de59fc1c9739"
Accept-Ranges: bytes
Content-Length: 277458
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics

194.167.76.140

200 OK

13 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type
ASCII text, with very long lines (12387)
Size
13 kB (13366 bytes)
Hash
18e9ec06b823e97dec974a58f1130307
589f8ec60ed87213ea0c3821efab4914b91631d1
a643bab01c2c86d8b4f2739f840d534eb0e377e7bff5b8c1547916fd9ab36d0e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /twitter.com/i/js_inst3fb2?c_name=ui_metrics HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:20 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:05:24 GMT
ETag: "3436-5de5a06b095c7"
Accept-Ranges: bytes
Content-Length: 13366
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive

www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics

194.167.76.140

200 OK

13 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type
ASCII text, with very long lines (12387)
Size
13 kB (13366 bytes)
Hash
18e9ec06b823e97dec974a58f1130307
589f8ec60ed87213ea0c3821efab4914b91631d1
a643bab01c2c86d8b4f2739f840d534eb0e377e7bff5b8c1547916fd9ab36d0e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /twitter.com/i/js_inst3fb2?c_name=ui_metrics HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:20 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:05:24 GMT
ETag: "3436-5de5a06b095c7"
Accept-Ranges: bytes
Content-Length: 13366
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive

www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics

194.167.76.140

200 OK

13 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type
ASCII text, with very long lines (12387)
Size
13 kB (13366 bytes)
Hash
18e9ec06b823e97dec974a58f1130307
589f8ec60ed87213ea0c3821efab4914b91631d1
a643bab01c2c86d8b4f2739f840d534eb0e377e7bff5b8c1547916fd9ab36d0e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /twitter.com/i/js_inst3fb2?c_name=ui_metrics HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:20 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:05:24 GMT
ETag: "3436-5de5a06b095c7"
Accept-Ranges: bytes
Content-Length: 13366
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive

www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics

194.167.76.140

200 OK

13 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type
ASCII text, with very long lines (12387)
Size
13 kB (13366 bytes)
Hash
18e9ec06b823e97dec974a58f1130307
589f8ec60ed87213ea0c3821efab4914b91631d1
a643bab01c2c86d8b4f2739f840d534eb0e377e7bff5b8c1547916fd9ab36d0e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /twitter.com/i/js_inst3fb2?c_name=ui_metrics HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:21 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:05:24 GMT
ETag: "3436-5de5a06b095c7"
Accept-Ranges: bytes
Content-Length: 13366
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive

www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics

194.167.76.140

200 OK

13 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type
ASCII text, with very long lines (12387)
Size
13 kB (13366 bytes)
Hash
18e9ec06b823e97dec974a58f1130307
589f8ec60ed87213ea0c3821efab4914b91631d1
a643bab01c2c86d8b4f2739f840d534eb0e377e7bff5b8c1547916fd9ab36d0e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /twitter.com/i/js_inst3fb2?c_name=ui_metrics HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:21 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:05:24 GMT
ETag: "3436-5de5a06b095c7"
Accept-Ranges: bytes
Content-Length: 13366
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive

www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics

194.167.76.140

200 OK

13 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type
ASCII text, with very long lines (12387)
Size
13 kB (13366 bytes)
Hash
18e9ec06b823e97dec974a58f1130307
589f8ec60ed87213ea0c3821efab4914b91631d1
a643bab01c2c86d8b4f2739f840d534eb0e377e7bff5b8c1547916fd9ab36d0e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /twitter.com/i/js_inst3fb2?c_name=ui_metrics HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:21 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:05:24 GMT
ETag: "3436-5de5a06b095c7"
Accept-Ranges: bytes
Content-Length: 13366
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive

www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics

194.167.76.140

200 OK

13 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type
ASCII text, with very long lines (12387)
Size
13 kB (13366 bytes)
Hash
18e9ec06b823e97dec974a58f1130307
589f8ec60ed87213ea0c3821efab4914b91631d1
a643bab01c2c86d8b4f2739f840d534eb0e377e7bff5b8c1547916fd9ab36d0e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /twitter.com/i/js_inst3fb2?c_name=ui_metrics HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:21 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:05:24 GMT
ETag: "3436-5de5a06b095c7"
Accept-Ranges: bytes
Content-Length: 13366
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive

www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics

194.167.76.140

200 OK

13 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type
ASCII text, with very long lines (12387)
Size
13 kB (13366 bytes)
Hash
18e9ec06b823e97dec974a58f1130307
589f8ec60ed87213ea0c3821efab4914b91631d1
a643bab01c2c86d8b4f2739f840d534eb0e377e7bff5b8c1547916fd9ab36d0e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /twitter.com/i/js_inst3fb2?c_name=ui_metrics HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:21 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:05:24 GMT
ETag: "3436-5de5a06b095c7"
Accept-Ranges: bytes
Content-Length: 13366
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive

www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics

194.167.76.140

200 OK

13 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/i/js_inst3fb2?c_name=ui_metrics
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type
ASCII text, with very long lines (12387)
Size
13 kB (13366 bytes)
Hash
18e9ec06b823e97dec974a58f1130307
589f8ec60ed87213ea0c3821efab4914b91631d1
a643bab01c2c86d8b4f2739f840d534eb0e377e7bff5b8c1547916fd9ab36d0e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /twitter.com/i/js_inst3fb2?c_name=ui_metrics HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:21 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:05:24 GMT
ETag: "3436-5de5a06b095c7"
Accept-Ranges: bytes
Content-Length: 13366
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive

www.discardless.eu/twitter.com/login62b1.html

194.167.76.140

200 OK

278 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/login62b1.html
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type

Size
278 kB (277458 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Twitter, Inc.
Quad9 DNS	malicious	Sinkholed

NIDS	Severity	Alert
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed

HTTP Headers

GET /twitter.com/login62b1.html HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:20 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:02:26 GMT
ETag: "43bd2-5de59fc1c9739"
Accept-Ranges: bytes
Content-Length: 277458
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

www.discardless.eu/twitter.com/login62b1.html

194.167.76.140

200 OK

278 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/login62b1.html
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type

Size
278 kB (277458 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Twitter, Inc.
Quad9 DNS	malicious	Sinkholed

NIDS	Severity	Alert
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed

HTTP Headers

GET /twitter.com/login62b1.html HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:20 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:02:26 GMT
ETag: "43bd2-5de59fc1c9739"
Accept-Ranges: bytes
Content-Length: 277458
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

www.discardless.eu/twitter.com/login62b1.html

194.167.76.140

200 OK

278 kB

URL GET HTTP/1.1
www.discardless.eu/twitter.com/login62b1.html
IP
194.167.76.140:80
ASN
#2200 Renater

Requested by
http://www.discardless.eu/twitter.com/login62b1.html

File type

Size
278 kB (277458 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Twitter, Inc.
Quad9 DNS	malicious	Sinkholed

NIDS	Severity	Alert
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed
suricata	high	ET PHISHING Possible Phish - Mirrored Website Comment Observed

HTTP Headers

GET /twitter.com/login62b1.html HTTP/1.1
Host: www.discardless.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.discardless.eu/twitter.com/login62b1.html
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 00:01:20 GMT
Server: Apache/2.4.54 (Fedora Linux) OpenSSL/1.1.1q mod_wsgi/4.9.0 Python/3.10
Last-Modified: Fri, 06 May 2022 16:02:26 GMT
ETag: "43bd2-5de59fc1c9739"
Accept-Ranges: bytes
Content-Length: 277458
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (19)

URL User Request GET

IP

ASN

File type