Report - fcjwu.tunitytostara.com/

Report Overview

Visited public
2023-12-04 06:37:54
Tags
URL
fcjwu.tunitytostara.com/
Finishing URL
fcjwu.tunitytostara.com/
IP / ASN
54.225.185.110
#14618 AMAZON-AES
Title
Title

Detections

urlquery

0

Network Intrusion Detection

2

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fcjwu.tunitytostara.com	unknown	2023-07-05	2023-09-03 20:30:48	2023-09-04 09:52:07	885 B	553 kB	54.225.185.110
encythan.online	unknown	2023-01-24	2020-11-16 13:33:05	2023-11-29 22:44:19	581 B	164 B	103.224.182.253

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-04 06:37:38	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2023-12-04 06:37:46	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	fcjwu.tunitytostara.com/service_worker.js	ScriptElement	140 kB	2023-03-10	2025-05-10
Pretty URL fcjwu.tunitytostara.com/service_worker.js IP 54.225.185.110 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 16:22 Last Seen2025-05-10 13:12 Times Seen275 Hash cbcb6557f617f149532c723cc4edd57c 051e2f9348d9ee04bad6565b3f406ad6ced1caa0 9846e67f8cd6186b03d3f831826c0c457b99ea8c9f98ea63cddcac7e0fe43251 Loading...

	fcjwu.tunitytostara.com/	ScriptElement	159 kB	2023-03-07	2025-05-10
Pretty URL fcjwu.tunitytostara.com/ IP 54.225.185.110 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:18 Last Seen2025-05-10 13:12 Times Seen62 Hash 49c61bd5a488c9a67b94959270e74ec4 1855c27bd6440afeb92315f09dc3e4b14f9db8d5 1b0a1913bfc9d20b35909b1f233fa2b69a03a2e4db4f18fbd016845ca7a64000 Loading...

	fcjwu.tunitytostara.com/	ScriptElement	59 kB	2023-03-07	2025-05-10
Pretty URL fcjwu.tunitytostara.com/ IP 54.225.185.110 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 13:14 Last Seen2025-05-10 13:12 Times Seen62 Hash b989345a8ed4162e0f6b4ef9be80bfa2 da4997358ba0b1bd0eb86b2e29903c78120964d1 e365b513984aa5083d3647268773c7e9a138c87acf176bb60995db7c1a55ffa7 Loading...

	fcjwu.tunitytostara.com/	ScriptElement	201 kB	2023-03-07	2025-05-10
Pretty URL fcjwu.tunitytostara.com/ IP 54.225.185.110 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 13:14 Last Seen2025-05-10 13:12 Times Seen62 Hash 74476f7f67770494e39f48788474d23b 50f5e695eda650990c7ba9f3347109fe526ff599 c3b3a6feadf2dac3355b2118e59c13b8a61bff6cc37d7bb6ffeddc0b7bba4921 Loading...

HTTP Transactions (3)

	URL	IP	Response	Size
	fcjwu.tunitytostara.com/	54.225.185.110	200 OK	413 kB
URL User Request GET HTTP/2 fcjwu.tunitytostara.com/ IP 54.225.185.110:443 ASN #14618 AMAZON-AES Certificate IssuerLet's Encrypt Subjecttunitytostara.com FingerprintED:17:79:91:BE:8A:4A:39:BF:78:AC:BF:A3:E4:48:D7:00:45:7B:96 ValiditySun, 29 Oct 2023 12:28:26 GMT - Sat, 27 Jan 2024 12:28:25 GMT File type gzip compressed data, max compression, from Unix\012- data Size 413 kB (413269 bytes) Hash 86a2ccc9ef67305eb6103489418d6cf9 302154c34aaf11a89537e83086cae7f7930964a5 41de4d55de2a1782809168b805b2c904d8f2ed6c57e91c379a80948cdc6fd319 HTTP Headers `GET / HTTP/1.1 Host: fcjwu.tunitytostara.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-type: text/html access-control-allow-origin: * access-control-allow-methods: GET, POST access-control-allow-headers: X-Requested-With, content-type content-encoding: gzip X-Firefox-Spdy: h2`

	encythan.online/MlpMaVNJeD8eDEcoIEtpEDI4HSNBYGNGNVEwOxx9Ri8iACdLLiMaJ1MoLUcwXTdjGjZALCUKNm0tIxs4VyhiAyAQdm4aPlR4dlh%2FECkhH3EIeH9HZxB2bh0yVQUlDXEIeHVYYwdseUt%2FECk5CwxbPn5LaRA4eQtlAT50Wn5XOS9QfgY7KVB%2BUzwoXX5UP3VaYgViLgprB21uFA	103.224.182.253	404 Not Found	0 B
URL GET HTTP/1.1 encythan.online/MlpMaVNJeD8eDEcoIEtpEDI4HSNBYGNGNVEwOxx9Ri8iACdLLiMaJ1MoLUcwXTdjGjZALCUKNm0tIxs4VyhiAyAQdm4aPlR4dlh%2FECkhH3EIeH9HZxB2bh0yVQUlDXEIeHVYYwdseUt%2FECk5CwxbPn5LaRA4eQtlAT50Wn5XOS9QfgY7KVB%2BUzwoXX5UP3VaYgViLgprB21uFA IP 103.224.182.253:443 ASN #133618 Trellian Pty. Limited Requested by https://fcjwu.tunitytostara.com/ Certificate IssuerLet's Encrypt Subjectapscert.org Fingerprint90:9A:E7:A7:B9:D9:14:16:2B:E9:1A:21:70:F6:E6:25:81:01:C0:04 ValidityThu, 30 Nov 2023 05:41:27 GMT - Wed, 28 Feb 2024 05:41:26 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /MlpMaVNJeD8eDEcoIEtpEDI4HSNBYGNGNVEwOxx9Ri8iACdLLiMaJ1MoLUcwXTdjGjZALCUKNm0tIxs4VyhiAyAQdm4aPlR4dlh%2FECkhH3EIeH9HZxB2bh0yVQUlDXEIeHVYYwdseUt%2FECk5CwxbPn5LaRA4eQtlAT50Wn5XOS9QfgY7KVB%2BUzwoXX5UP3VaYgViLgprB21uFA HTTP/1.1 Host: encythan.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/1.1 404 Not Found date: Mon, 04 Dec 2023 06:37:36 GMT server: Apache content-length: 196 content-type: text/html; charset=iso-8859-1 connection: close`

	fcjwu.tunitytostara.com/service_worker.js	54.225.185.110	200 OK	140 kB
URL GET HTTP/2 fcjwu.tunitytostara.com/service_worker.js IP 54.225.185.110:443 ASN #14618 AMAZON-AES Requested by https://fcjwu.tunitytostara.com/ Certificate IssuerLet's Encrypt Subjecttunitytostara.com FingerprintED:17:79:91:BE:8A:4A:39:BF:78:AC:BF:A3:E4:48:D7:00:45:7B:96 ValiditySun, 29 Oct 2023 12:28:26 GMT - Sat, 27 Jan 2024 12:28:25 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 140 kB (139543 bytes) Hash cbcb6557f617f149532c723cc4edd57c 051e2f9348d9ee04bad6565b3f406ad6ced1caa0 9846e67f8cd6186b03d3f831826c0c457b99ea8c9f98ea63cddcac7e0fe43251 HTTP Headers `GET /service_worker.js HTTP/1.1 Host: fcjwu.tunitytostara.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: openresty/1.21.4.1 date: Mon, 04 Dec 2023 06:37:35 GMT content-type: application/javascript access-control-allow-origin: * access-control-allow-methods: GET, POST access-control-allow-headers: X-Requested-With, content-type content-encoding: gzip X-Firefox-Spdy: h2`