Report Overview

  1. Submitted URL

    mail.grop-wavgxkwhy.zxz1.my.id/download/

  2. IP

    104.21.48.196

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2023-12-11 13:25:31

    Access

    public

  4. Website Title

  5. Final URL

    mail.grop-wavgxkwhy.zxz1.my.id/download/

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    7

  3. Threat Detection Systems

    20

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
code.jquery.com6342005-12-102012-05-212023-12-11
bagasarya.xyzunknown2022-06-302022-07-012023-12-11
i.postimg.cc238402016-06-112018-04-112023-12-10
j.top4top.io7306452019-11-192020-01-272023-12-05
services.addons.mozilla.org61611998-01-242012-05-212023-12-10
aus5.mozilla.org25481998-01-242015-10-272023-12-11
fonts.googleapis.com88772005-01-252013-06-102023-12-11
mail.grop-wavgxkwhy.zxz1.my.idunknownunknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
medium 104.21.48.196Client IP
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IPInternal IP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish
SeverityIndicatorAlert
mediummail.grop-wavgxkwhy.zxz1.my.id/download/WhatsApp
mediummail.grop-wavgxkwhy.zxz1.my.id/WhatsApp
mediummail.grop-wavgxkwhy.zxz1.my.id/WhatsApp
mediummail.grop-wavgxkwhy.zxz1.my.id/WhatsApp
mediummail.grop-wavgxkwhy.zxz1.my.id/WhatsApp
mediummail.grop-wavgxkwhy.zxz1.my.id/WhatsApp
mediummail.grop-wavgxkwhy.zxz1.my.id/WhatsApp
mediummail.grop-wavgxkwhy.zxz1.my.id/WhatsApp
mediummail.grop-wavgxkwhy.zxz1.my.id/WhatsApp
mediummail.grop-wavgxkwhy.zxz1.my.id/WhatsApp

PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (2)

HTTP Transactions (23)

URLIPResponseSize
mail.grop-wavgxkwhy.zxz1.my.id/download/
104.21.48.196200 OK2.0 kB
mail.grop-wavgxkwhy.zxz1.my.id/download/css/style.css
104.21.48.196200 OK1.2 kB
mail.grop-wavgxkwhy.zxz1.my.id/download/bagas/bagas.css
104.21.48.196 1.0 kB
mail.grop-wavgxkwhy.zxz1.my.id/download/css/dimas.css
104.21.48.196200 OK916 B
mail.grop-wavgxkwhy.zxz1.my.id/download/img/0_ptDX0HfJCYpo9Pcs.gif
104.21.48.196200 OK90 kB
mail.grop-wavgxkwhy.zxz1.my.id/download/img/karakter-anime-cantik-13-a715e.jpg.webp
104.21.48.196200 OK18 kB
code.jquery.com/jquery-3.5.1.min.js
151.101.194.137200 OK31 kB
bagasarya.xyz/img/info/navbar.png
104.21.81.99200 OK8.5 kB
bagasarya.xyz/img/info/modelFb.png
104.21.81.99200 OK32 kB
i.postimg.cc/sgzZRpSX/1651518758036.jpg
162.19.88.69200 OK122 kB
i.postimg.cc/qMyCYmNS/1651515380746.jpg
162.19.88.69200 OK118 kB
i.postimg.cc/Y2JWdcCQ/IMG-20220516-010200.jpg
162.19.88.69200 OK131 kB
mail.grop-wavgxkwhy.zxz1.my.id/download/css/bege.jpeg
104.21.48.196200 OK284 kB
i.postimg.cc/pTB8gnD0/ezgif-com-gif-maker-1.gif
162.19.88.69200 OK6.9 MB
mail.grop-wavgxkwhy.zxz1.my.id/download/css/thin.ttf
104.21.48.196404 Not Found238 B
i.postimg.cc/NfbdCGXZ/tiktokk.gif
162.19.88.69200 OK12 MB
mail.grop-wavgxkwhy.zxz1.my.id/favicon.ico
104.21.48.196404 Not Found238 B
j.top4top.io/p_2231z0iyt0.jpg
135.181.63.70200 OK84 kB
i.postimg.cc/fbsjM6YY/ezgif-com-gif-maker-2.gif
162.19.88.69 44 MB
mail.grop-wavgxkwhy.zxz1.my.id/download/css/font.ttf
104.21.48.196 238 B
services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Camazondotcom%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org&lang=en-US
54.230.111.63 82 B
aus5.mozilla.org/update/3/SystemAddons/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
35.244.181.201 42 B
fonts.googleapis.com/css2?family=Yantramanav&display=swap
142.250.74.106200 OK1.2 kB