Report - bill.kfonbroadband.net/4540bf184d1b4596849f9380c4977453/fa596bab038b23d271029e6e6408aadf/

Report Overview

Visited public
2025-04-19 17:20:19
Tags
URL
bill.kfonbroadband.net/4540bf184d1b4596849f9380c4977453/fa596bab038b23d271029e6e6408aadf/
Finishing URL
bill.kfonbroadband.net/8b36697896bf847d04963939cc225898/404/
IP / ASN
103.194.69.2
#133301 DWANIRINN
Title
bill.kfonbroadband.net IPBILL 404

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
bill.kfonbroadband.net	unknown	2018-06-02	2019-08-19	2025-04-19	3.6 kB	119 kB	103.194.69.2

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-04-19 17:20:14	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	bill.kfonbroadband.net/jq.js	ScriptElement	94 kB	2023-03-07	2025-05-25
Pretty URL bill.kfonbroadband.net/jq.js IP 103.194.69.2 ASN #133301 DWANIRINN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-25 02:52 Times Seen16969 Hash e1288116312e4728f98923c79b034b67 8b6babff47b8a9793f37036fd1b1a3ad41d38423 ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32 Loading...

HTTP Transactions (7)

	URL	IP	Response	Size
	bill.kfonbroadband.net/favicon.ico	103.194.69.2	200 OK	2.7 kB
URL GET bill.kfonbroadband.net/favicon.ico IP 103.194.69.2:443 ASN #133301 DWANIRINN Requested by https://bill.kfonbroadband.net/8b36697896bf847d04963939cc225898/404/ Certificate IssuerLet's Encrypt Subjectbill.kfonbroadband.net Fingerprint4F:89:DC:E3:F4:6E:46:DC:84:89:5C:DF:E4:E6:1D:04:A5:B9:98:24 ValiditySun, 09 Mar 2025 05:02:59 GMT - Sat, 07 Jun 2025 05:02:58 GMT File type MS Windows icon resource - 2 icons, 16x11, 8 bits/pixel, 16x16, 8 bits/pixel Size 2.7 kB (2706 bytes) Hash 0a91dd86b5c1372d60a57412acf21bbe 6fde34edfbc0487424509fca8b99555a30e41430 34c243c4ecd0218c0d3611e0a1d16fe6ebac99e5eaa1487e81600769f0cc235f HTTP Headers `GET /favicon.ico HTTP/1.1 Host: bill.kfonbroadband.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bill.kfonbroadband.net/8b36697896bf847d04963939cc225898/404/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: freenginx/1.27.4 date: Sat, 19 Apr 2025 17:20:00 GMT content-type: image/x-icon x-powered-by: PHP/8.3.17 expires: Sat, 19 Apr 2025 17:25:00 GMT cache-control: public etag: "29c1-a92-4fc5e38bedb00" last-modified: Sat, 21 Jun 2014 20:11:56 GMT content-encoding: br vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains X-Firefox-Spdy: h2`

	bill.kfonbroadband.net/4540bf184d1b4596849f9380c4977453/fa596bab038b23d271029e6e6408aadf/	103.194.69.2	302 Found	4.7 kB
URL User Request GET bill.kfonbroadband.net/4540bf184d1b4596849f9380c4977453/fa596bab038b23d271029e6e6408aadf/ IP 103.194.69.2:443 ASN #133301 DWANIRINN Certificate IssuerLet's Encrypt Subjectbill.kfonbroadband.net Fingerprint4F:89:DC:E3:F4:6E:46:DC:84:89:5C:DF:E4:E6:1D:04:A5:B9:98:24 ValiditySun, 09 Mar 2025 05:02:59 GMT - Sat, 07 Jun 2025 05:02:58 GMT File type Size 4.7 kB (4689 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /4540bf184d1b4596849f9380c4977453/fa596bab038b23d271029e6e6408aadf/ HTTP/1.1 Host: bill.kfonbroadband.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 302 Found server: freenginx/1.27.4 date: Sat, 19 Apr 2025 17:19:58 GMT content-type: text/html; charset=UTF-8 x-powered-by: PHP/8.3.17 location: /8b36697896bf847d04963939cc225898/fa596bab038b23d271029e6e6408aadf content-encoding: br vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains X-Firefox-Spdy: h2`

	bill.kfonbroadband.net/8b36697896bf847d04963939cc225898/fa596bab038b23d271029e6e6408aadf	103.194.69.2	302 Found	4.7 kB
URL User Request GET bill.kfonbroadband.net/8b36697896bf847d04963939cc225898/fa596bab038b23d271029e6e6408aadf IP 103.194.69.2:443 ASN #133301 DWANIRINN Certificate IssuerLet's Encrypt Subjectbill.kfonbroadband.net Fingerprint4F:89:DC:E3:F4:6E:46:DC:84:89:5C:DF:E4:E6:1D:04:A5:B9:98:24 ValiditySun, 09 Mar 2025 05:02:59 GMT - Sat, 07 Jun 2025 05:02:58 GMT File type Size 4.7 kB (4689 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /8b36697896bf847d04963939cc225898/fa596bab038b23d271029e6e6408aadf HTTP/1.1 Host: bill.kfonbroadband.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 302 Found server: freenginx/1.27.4 date: Sat, 19 Apr 2025 17:19:58 GMT content-type: text/html; charset=UTF-8 x-powered-by: PHP/8.3.17 location: /8b36697896bf847d04963939cc225898/404/ content-encoding: br vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains X-Firefox-Spdy: h2`

	bill.kfonbroadband.net/8b36697896bf847d04963939cc225898/404/	103.194.69.2	404 Not Found	4.7 kB
URL User Request GET bill.kfonbroadband.net/8b36697896bf847d04963939cc225898/404/ IP 103.194.69.2:443 ASN #133301 DWANIRINN Certificate IssuerLet's Encrypt Subjectbill.kfonbroadband.net Fingerprint4F:89:DC:E3:F4:6E:46:DC:84:89:5C:DF:E4:E6:1D:04:A5:B9:98:24 ValiditySun, 09 Mar 2025 05:02:59 GMT - Sat, 07 Jun 2025 05:02:58 GMT File type HTML document, ASCII text, with very long lines (3464) Size 4.7 kB (4689 bytes) Hash cd587ddad639378218ff9aa41af7a2f6 c46ebc6ded43cd5e199cbc25bdc9b3801a8c8231 3a75d6a9ec049540bb5f03d0eff508962fad919ccf17afd56d82e5bffe3b94c0 HTTP Headers GET /8b36697896bf847d04963939cc225898/404/ HTTP/1.1 Host: bill.kfonbroadband.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 404 Not Found server: freenginx/1.27.4 date: Sat, 19 Apr 2025 17:19:58 GMT content-type: text/html; charset=UTF-8 x-powered-by: PHP/8.3.17 content-encoding: br vary: Accept-Encoding X-Firefox-Spdy: h2`

	bill.kfonbroadband.net/8b36697896bf847d04963939cc225898/404/	103.194.69.2	404 Not Found	4.7 kB
URL User Request GET bill.kfonbroadband.net/8b36697896bf847d04963939cc225898/404/ IP 103.194.69.2:443 ASN #133301 DWANIRINN Certificate IssuerLet's Encrypt Subjectbill.kfonbroadband.net Fingerprint4F:89:DC:E3:F4:6E:46:DC:84:89:5C:DF:E4:E6:1D:04:A5:B9:98:24 ValiditySun, 09 Mar 2025 05:02:59 GMT - Sat, 07 Jun 2025 05:02:58 GMT File type HTML document, ASCII text, with very long lines (3464) Size 4.7 kB (4689 bytes) Hash 0d5a8e57a2d30214a23d0a163b110cd4 e87f960dad67d0e19029bbf6bfda6babfc8feec7 83e55c3e0b0dffb6954074d3d57511152fe681953efd9febb66a3c9b74ba0f0e HTTP Headers GET /8b36697896bf847d04963939cc225898/404/ HTTP/1.1 Host: bill.kfonbroadband.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 404 Not Found server: freenginx/1.27.4 date: Sat, 19 Apr 2025 17:19:59 GMT content-type: text/html; charset=UTF-8 x-powered-by: PHP/8.3.17 content-encoding: br vary: Accept-Encoding X-Firefox-Spdy: h2`

	bill.kfonbroadband.net/jq.js	103.194.69.2	200 OK	94 kB
URL GET bill.kfonbroadband.net/jq.js IP 103.194.69.2:443 ASN #133301 DWANIRINN Requested by https://bill.kfonbroadband.net/8b36697896bf847d04963939cc225898/404/ Certificate IssuerLet's Encrypt Subjectbill.kfonbroadband.net Fingerprint4F:89:DC:E3:F4:6E:46:DC:84:89:5C:DF:E4:E6:1D:04:A5:B9:98:24 ValiditySun, 09 Mar 2025 05:02:59 GMT - Sat, 07 Jun 2025 05:02:58 GMT File type JavaScript source, ASCII text, with very long lines (65482), with CRLF line terminators Size 94 kB (93637 bytes) Hash e1288116312e4728f98923c79b034b67 8b6babff47b8a9793f37036fd1b1a3ad41d38423 ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32 HTTP Headers `GET /jq.js HTTP/1.1 Host: bill.kfonbroadband.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bill.kfonbroadband.net/8b36697896bf847d04963939cc225898/404/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: freenginx/1.27.4 date: Sat, 19 Apr 2025 17:19:59 GMT content-type: text/javascript;charset=UTF-8 x-powered-by: PHP/8.3.17 expires: Sat, 19 Apr 2025 17:20:00 GMT cache-control: public etag: "581e-16dc5-62f01dae24a80" last-modified: Wed, 26 Feb 2025 01:54:34 GMT content-encoding: br vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains X-Firefox-Spdy: h2`

	bill.kfonbroadband.net/ipacct.ttf	103.194.69.2	200 OK	2.0 kB
URL GET bill.kfonbroadband.net/ipacct.ttf IP 103.194.69.2:443 ASN #133301 DWANIRINN Requested by https://bill.kfonbroadband.net/8b36697896bf847d04963939cc225898/404/ Certificate IssuerLet's Encrypt Subjectbill.kfonbroadband.net Fingerprint4F:89:DC:E3:F4:6E:46:DC:84:89:5C:DF:E4:E6:1D:04:A5:B9:98:24 ValiditySun, 09 Mar 2025 05:02:59 GMT - Sat, 07 Jun 2025 05:02:58 GMT File type TrueType Font data, digitally signed, 17 tables, 1st "DSIG", 14 names, Macintosh, type 1 string Size 2.0 kB (1952 bytes) Hash 344919410be0db7ebc67b4077556d737 3477050ce3d10415f47349edb1ecf9cb29762641 a0493a33f6baf150e12f298f442f24d282e83006edabdcbf3c8c80de6219cd6e HTTP Headers GET /ipacct.ttf HTTP/1.1 Host: bill.kfonbroadband.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bill.kfonbroadband.net/8b36697896bf847d04963939cc225898/404/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: freenginx/1.27.4 date: Sat, 19 Apr 2025 17:20:00 GMT content-type: application/x-font-ttf x-powered-by: PHP/8.3.17 expires: Sat, 19 Apr 2025 17:25:00 GMT cache-control: public etag: "29e8-7a0-541b5b179f880" last-modified: Sun, 20 Nov 2016 06:31:46 GMT content-encoding: br vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (7)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers