Report - pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html

Report Overview

Visited public
2025-05-08 17:54:01
Tags
suspicious
URL
pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Finishing URL
pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
IP / ASN
172.66.1.30
#13335 CLOUDFLARENET
Title
RAM - Confirm & Payment
Suspicious - Suspicious Javascript code

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev	unknown	2022-08-23	2025-05-04	2025-05-04	4.6 kB	4.1 MB	172.66.1.30

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-05-07	medium	pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html	RAM Hand-to-Hand Couriers

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html	ScriptElement	847 B	2023-03-07	2025-05-14
Pretty URL pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html IP 172.66.1.30 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-05-14 10:39 Times Seen1301 Hash 261fa5f948bd99fdf005f80595805744 51d57156b1974322b3ba8542f48893082199d5e1 1dcf3b0e1f92d593867169c5ee26771d2f3b77f552eee6c73beba961b91d61b7 Loading...

	pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html	ScriptElement	3.9 MB	2024-10-12	2025-05-08
Pretty URL pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html IP 172.66.1.30 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-10-12 13:51 Last Seen2025-05-08 17:54 Times Seen4 Hash 020115626411fdf0c46410b080db1af7 d787376a6185174a316e4a9cfb801644234daffd dc471e66fb33f6a5299a296341465a45ce6034f2764fdba273331ef50f9372d7 Loading...

	pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html	ScriptElement	446 B	2023-03-08	2025-05-17
Pretty URL pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html IP 172.66.1.30 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 02:29 Last Seen2025-05-17 11:46 Times Seen359 Hash 99684bd207f06a682b3ccc42304586a9 d88dda7dc43aa77cd01f3b8630ab1e3b5b7f6504 6588d1d53d02e5b08792d3fada49aee451bc0d0f8df1b186fa5d96e853cad06c Loading...

		Size	First Seen	Last Seen
	#1 Write - 86e5dae5a6a424c8d44128c0fb707d96	1.3 MB	2024-10-12 13:51	2025-05-08 17:54
Pretty Observations First Seen2024-10-12 13:51 Last Seen2025-05-08 17:54 Times Seen4 Hash 86e5dae5a6a424c8d44128c0fb707d96 956aa30cc5fb60694c2eca76fd92651dc7f5fad4 0fc4954b159ab5b15e66ae2a0e43b89fc0f6f0901b8b63073d6aeb4050a95a8d Loading...

HTTP Transactions (8)

URL IP Response Size

pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/pag1_files/saved_resource(1).html

172.66.1.30

404 Not Found

27 kB

URL GET
pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/pag1_files/saved_resource(1).html
IP
172.66.1.30:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Certificate
IssuerLet's Encrypt
Subject*.r2.dev
FingerprintB5:A8:AD:86:09:9A:90:92:96:24:0C:B5:31:B4:70:40:B0:04:5C:F5
ValidityTue, 25 Mar 2025 11:48:11 GMT - Mon, 23 Jun 2025 11:48:10 GMT

File type
HTML document, ASCII text, with very long lines (611)
Size
27 kB (27150 bytes)
Hash
46dd133ee00dc1bae5e4eeba7b88432f
8af86a4ac91ce48c062216fb94a6e1d57618a19b
9eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66

HTTP Headers

GET /pag1_files/saved_resource(1).html HTTP/1.1
Host: pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Cf-Ray: 93cad1196eba5689-OSL
Content-Length: 27150
Date: Thu, 08 May 2025 17:53:28 GMT

pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/pag1_files/saved_resource(3).html

162.159.141.34

404 Not Found

27 kB

URL GET
pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/pag1_files/saved_resource(3).html
IP
162.159.141.34:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Certificate
IssuerLet's Encrypt
Subject*.r2.dev
FingerprintB5:A8:AD:86:09:9A:90:92:96:24:0C:B5:31:B4:70:40:B0:04:5C:F5
ValidityTue, 25 Mar 2025 11:48:11 GMT - Mon, 23 Jun 2025 11:48:10 GMT

File type
HTML document, ASCII text, with very long lines (611)
Size
27 kB (27150 bytes)
Hash
46dd133ee00dc1bae5e4eeba7b88432f
8af86a4ac91ce48c062216fb94a6e1d57618a19b
9eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66

HTTP Headers

GET /pag1_files/saved_resource(3).html HTTP/1.1
Host: pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Cf-Ray: 93cad119abea56c4-OSL
Content-Length: 27150
Date: Thu, 08 May 2025 17:53:28 GMT

pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html

172.66.1.30

200 OK

3.9 MB

URL User Request GET
pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
IP
172.66.1.30:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subject*.r2.dev
FingerprintB5:A8:AD:86:09:9A:90:92:96:24:0C:B5:31:B4:70:40:B0:04:5C:F5
ValidityTue, 25 Mar 2025 11:48:11 GMT - Mon, 23 Jun 2025 11:48:10 GMT

File type
HTML document, ASCII text, with very long lines (65536), with no line terminators
Size
3.9 MB (3884286 bytes)
Hash
5b74c8707349cb0b0e019d2dac3606bf
78250096aadef135c04a0bcb3de185a9e1d25b9b
6ee23bffb7328768af05feaf63c3e1526c65a849d81bde222edf95fc6a92a248

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Suspicious Javascript code
OpenPhish	phishing	RAM Hand-to-Hand Couriers

HTTP Headers

GET /home.html HTTP/1.1
Host: pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Etag: "5b74c8707349cb0b0e019d2dac3606bf"
Content-Type: text/html
Last-Modified: Fri, 11 Oct 2024 22:17:11 GMT
Cf-Ray: 93cad1125eb85689-OSL
Content-Length: 3884286
Date: Thu, 08 May 2025 17:53:27 GMT

pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/pag1_files/reset.min.css

172.66.1.30

404 Not Found

27 kB

URL GET
pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/pag1_files/reset.min.css
IP
172.66.1.30:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Certificate
IssuerLet's Encrypt
Subject*.r2.dev
FingerprintB5:A8:AD:86:09:9A:90:92:96:24:0C:B5:31:B4:70:40:B0:04:5C:F5
ValidityTue, 25 Mar 2025 11:48:11 GMT - Mon, 23 Jun 2025 11:48:10 GMT

File type
HTML document, ASCII text, with very long lines (611)
Size
27 kB (27150 bytes)
Hash
46dd133ee00dc1bae5e4eeba7b88432f
8af86a4ac91ce48c062216fb94a6e1d57618a19b
9eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66

HTTP Headers

GET /pag1_files/reset.min.css HTTP/1.1
Host: pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Cf-Ray: 93cad118feb95689-OSL
Content-Length: 27150
Date: Thu, 08 May 2025 17:53:28 GMT

pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/pag1_files/saved_resource.html

162.159.141.34

404 Not Found

27 kB

URL GET
pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/pag1_files/saved_resource.html
IP
162.159.141.34:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Certificate
IssuerLet's Encrypt
Subject*.r2.dev
FingerprintB5:A8:AD:86:09:9A:90:92:96:24:0C:B5:31:B4:70:40:B0:04:5C:F5
ValidityTue, 25 Mar 2025 11:48:11 GMT - Mon, 23 Jun 2025 11:48:10 GMT

File type
HTML document, ASCII text, with very long lines (611)
Size
27 kB (27150 bytes)
Hash
46dd133ee00dc1bae5e4eeba7b88432f
8af86a4ac91ce48c062216fb94a6e1d57618a19b
9eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66

HTTP Headers

GET /pag1_files/saved_resource.html HTTP/1.1
Host: pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Cf-Ray: 93cad1199e4256c6-OSL
Content-Length: 27150
Date: Thu, 08 May 2025 17:53:28 GMT

pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/pag1_files/css

162.159.141.34

404 Not Found

27 kB

URL GET
pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/pag1_files/css
IP
162.159.141.34:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Certificate
IssuerLet's Encrypt
Subject*.r2.dev
FingerprintB5:A8:AD:86:09:9A:90:92:96:24:0C:B5:31:B4:70:40:B0:04:5C:F5
ValidityTue, 25 Mar 2025 11:48:11 GMT - Mon, 23 Jun 2025 11:48:10 GMT

File type
HTML document, ASCII text, with very long lines (611)
Size
27 kB (27150 bytes)
Hash
46dd133ee00dc1bae5e4eeba7b88432f
8af86a4ac91ce48c062216fb94a6e1d57618a19b
9eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66

HTTP Headers

GET /pag1_files/css HTTP/1.1
Host: pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Cf-Ray: 93cad1190ee40b41-OSL
Content-Length: 27150
Date: Thu, 08 May 2025 17:53:28 GMT

pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/pag1_files/saved_resource(2).html

162.159.141.34

404 Not Found

27 kB

URL GET
pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/pag1_files/saved_resource(2).html
IP
162.159.141.34:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Certificate
IssuerLet's Encrypt
Subject*.r2.dev
FingerprintB5:A8:AD:86:09:9A:90:92:96:24:0C:B5:31:B4:70:40:B0:04:5C:F5
ValidityTue, 25 Mar 2025 11:48:11 GMT - Mon, 23 Jun 2025 11:48:10 GMT

File type
HTML document, ASCII text, with very long lines (611)
Size
27 kB (27150 bytes)
Hash
46dd133ee00dc1bae5e4eeba7b88432f
8af86a4ac91ce48c062216fb94a6e1d57618a19b
9eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66

HTTP Headers

GET /pag1_files/saved_resource(2).html HTTP/1.1
Host: pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Cf-Ray: 93cad119aea67130-OSL
Content-Length: 27150
Date: Thu, 08 May 2025 17:53:28 GMT

pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/pag1_files/saved_resource(4).html

162.159.141.34

404 Not Found

27 kB

URL GET
pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/pag1_files/saved_resource(4).html
IP
162.159.141.34:443
ASN
#13335 CLOUDFLARENET

Requested by
https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Certificate
IssuerLet's Encrypt
Subject*.r2.dev
FingerprintB5:A8:AD:86:09:9A:90:92:96:24:0C:B5:31:B4:70:40:B0:04:5C:F5
ValidityTue, 25 Mar 2025 11:48:11 GMT - Mon, 23 Jun 2025 11:48:10 GMT

File type
HTML document, ASCII text, with very long lines (611)
Size
27 kB (27150 bytes)
Hash
46dd133ee00dc1bae5e4eeba7b88432f
8af86a4ac91ce48c062216fb94a6e1d57618a19b
9eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66

HTTP Headers

GET /pag1_files/saved_resource(4).html HTTP/1.1
Host: pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Cf-Ray: 93cad119af1bb4ee-OSL
Content-Length: 27150
Date: Thu, 08 May 2025 17:53:28 GMT

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (8)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash