Report - helpid100235789238974.web.app/

Report Overview

Submitted URL
helpid100235789238974.web.app/
IP
199.36.158.100
ASN
#54113 FASTLY
Submitted
2023-11-30 04:53:23
Access
public
Website Title
Server Not Found
Final URL
about:neterror?e=dnsNotFound&u=https%3A//metahelpid.10096101534410096410.com/%3Ffbclid%3D7945621009419810%26google_error%3D10&c=UTF-8&d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20metahelpid.10096101534410096410.com.
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cm.g.doubleclick.net	202	1996-01-16	2012-05-22	2023-11-28	594 B	770 B	142.250.74.98
metahelpid.10096101534410096410.com	unknown	2022-12-09	2023-01-10	2023-01-12	544 B	0 B	0.0.0.0
helpid100235789238974.web.app	unknown	2019-01-08	2023-01-12	2023-11-14	496 B	785 B	199.36.158.100

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

Scan Date	Severity	Indicator	Alert
2023-01-12	medium	helpid100235789238974.web.app/	Other

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-11-30	medium	helpid100235789238974.web.app	Sinkholed
2023-11-30	medium	10096101534410096410.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

helpid100235789238974.web.app/

199.36.158.100

163 B

URL
helpid100235789238974.web.app/
IP
199.36.158.100:0
ASN
#54113 FASTLY

File type
HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
163 B (163 bytes)
Hash
ca831184697074e4543863257301d31e
51dae4924ce10da5829575944e17f09a7ce50c38
5c1d5a51295fdbe94c0fd0e0bac1665a68305a273a72dd58e3a49e0201e51aab

Detections

Analyzer	Verdict	Alert
PhishTank	phishing	Other
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: helpid100235789238974.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/html; charset=utf-8
etag: "28d09fcc0adff168ce3fafa81b5bdc0eeb40ccdaf9fcd092248b4577c3cf4239-br"
last-modified: Wed, 11 Jan 2023 19:48:45 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Thu, 30 Nov 2023 04:53:06 GMT
x-served-by: cache-bma1632-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1701319986.955450,VS0,VE154
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 163
X-Firefox-Spdy: h2

cm.g.doubleclick.net/pixel?google_nid=ucfunnel&google_redir=https://metahelpid.10096101534410096410.com/?fbclid=7945621009419810

142.250.74.98

302 Found

285 B

URL User Request GET HTTP/2
cm.g.doubleclick.net/pixel?google_nid=ucfunnel&google_redir=https://metahelpid.10096101534410096410.com/?fbclid=7945621009419810
IP
142.250.74.98:443
ASN
#15169 GOOGLE

Certificate
IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint6C:2A:75:F2:3F:EF:4F:43:B1:8D:C3:B7:E9:2E:4A:EF:40:6A:FC:92
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size
285 B (285 bytes)
Hash
f617bd136e4dcb68330c7aeb52f91690
2e513c21a0a068b393af2613a20c5bf6f9e7aca3
390bc6e6180a7a6a3fe62cfd9b46b6ef4aa2b692a6fee965ba0ff4c0852b4a58

HTTP Headers

GET /pixel?google_nid=ucfunnel&google_redir=https://metahelpid.10096101534410096410.com/?fbclid=7945621009419810 HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://metahelpid.10096101534410096410.com/?fbclid=7945621009419810&google_error=10
date: Thu, 30 Nov 2023 04:53:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 285
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

metahelpid.10096101534410096410.com/?fbclid=7945621009419810&google_error=10

0.0.0.0

0 B

URL User Request GET
metahelpid.10096101534410096410.com/?fbclid=7945621009419810&google_error=10
IP
0.0.0.0:0
ASN
#0

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?fbclid=7945621009419810&google_error=10 HTTP/1.1
Host: metahelpid.10096101534410096410.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (3)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers