Report - Av4.us

Report Overview

Visited public
2025-05-12 04:40:02
Tags
URL
Av4.us
Finishing URL
ww1.av4.us/?usid=102&utid=0374eac5fadf22c8fe6dfd502e933ec2
IP / ASN
172.233.219.49
#63949 Akamai Connected Cloud
Title
ww1.av4.us/?usid=102&utid=0374eac5fadf22c8fe6dfd502e933ec2

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
router.parklogic.com	unknown	2007-02-28	2025-03-19	2025-05-11	482 B	211 B	172.234.216.100
ww1.av4.us	unknown	2015-04-24	2025-02-04	2025-02-04	1.4 kB	506 B	64.190.63.136
av4.us	unknown	2015-04-24	2015-05-17	2025-05-09	894 B	5.1 kB	172.233.219.78

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	av4.us/	ScriptElement	4.2 kB	2025-05-12	2025-05-12
Pretty URL av4.us/ IP 172.233.219.78 ASN #63949 Akamai Connected Cloud Introduced by scriptElement Embedded in HTML true Observations First Seen2025-05-12 04:40 Last Seen2025-05-12 04:40 Times Seen1 Hash 4564420cb65d9f53837f3b71496f0dea 687cf96ade784389424ff224b8bd1cb9c87fdffa 61f5ccba91ff438078a4f1f7b78412a038b827f52d3684adc403fd8a7e94fa39 Loading...

HTTP Transactions (6)

	URL	IP	Response	Size
	ww1.av4.us/?usid=102&utid=0374eac5fadf22c8fe6dfd502e933ec2	64.190.63.136	403 Forbidden	93 B
URL User Request GET ww1.av4.us/?usid=102&utid=0374eac5fadf22c8fe6dfd502e933ec2 IP 64.190.63.136:80 ASN #47846 SEDO GmbH File type HTML document, ASCII text Size 93 B (93 bytes) Hash b0d506893d4802090edf1644f5f082cd 4bf0d7ecb70703857c7029754fa02a7496313b63 0d3e98ca727fc1201b436170af5a63f23348aaf146a3ac6234f6c4da283e8b34 HTTP Headers `GET /?usid=102&utid=0374eac5fadf22c8fe6dfd502e933ec2 HTTP/1.1 Host: ww1.av4.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden content-length: 93 cache-control: no-cache content-type: text/html`

	ww1.av4.us/favicon.ico	64.190.63.136	403 Forbidden	93 B
URL GET ww1.av4.us/favicon.ico IP 64.190.63.136:80 ASN #47846 SEDO GmbH Requested by http://ww1.av4.us/?usid=102&utid=0374eac5fadf22c8fe6dfd502e933ec2 File type HTML document, ASCII text Size 93 B (93 bytes) Hash b0d506893d4802090edf1644f5f082cd 4bf0d7ecb70703857c7029754fa02a7496313b63 0d3e98ca727fc1201b436170af5a63f23348aaf146a3ac6234f6c4da283e8b34 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: ww1.av4.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://ww1.av4.us/?usid=102&utid=0374eac5fadf22c8fe6dfd502e933ec2 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden content-length: 93 cache-control: no-cache content-type: text/html`

	av4.us/	172.233.219.78	200 OK	4.2 kB
URL User Request GET av4.us/ IP 172.233.219.78:443 ASN #63949 Akamai Connected Cloud Certificate IssuerLet's Encrypt Subjectav4.us Fingerprint1F:36:F2:FA:FE:0D:32:36:9D:67:2A:DF:78:D8:D3:83:DA:46:14:88 ValiditySun, 27 Apr 2025 21:16:48 GMT - Sat, 26 Jul 2025 21:16:47 GMT File type JavaScript source, ASCII text, with very long lines (4247), with no line terminators Size 4.2 kB (4247 bytes) Hash 861e98558418473783280150ce4d2f87 183d2ad5c5ea5be985612f029f56bb3c471ee08a 61c74250afffed7c4c215f1777fc815789c9049c1bd1fee6c3637a74275f7e98 HTTP Headers `GET / HTTP/1.1 Host: av4.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Mon, 12 May 2025 04:39:42 GMT content-type: text/html cache-control: no-store, max-age=0 accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64 permissions-policy: ch-ua=(self "https://.parklogic.com"), ch-ua-arch=(self "https://.parklogic.com"), ch-ua-bitness=(self "https://.parklogic.com"), ch-ua-full-version=(self "https://.parklogic.com"), ch-ua-full-version-list=(self "https://.parklogic.com"), ch-ua-mobile=(self "https://.parklogic.com"), ch-ua-model=(self "https://.parklogic.com"), ch-ua-platform=(self "https://.parklogic.com"), ch-ua-platform-version=(self "https://.parklogic.com"), ch-ua-wow64=(self "https://.parklogic.com") content-encoding: gzip X-Firefox-Spdy: h2

	av4.us/favicon.ico	0.0.0.0		0 B
URL GET av4.us/favicon.ico IP 0.0.0.0:0 ASN #0 Requested by https://av4.us/ Certificate IssuerLet's Encrypt Subjectav4.us Fingerprint1F:36:F2:FA:FE:0D:32:36:9D:67:2A:DF:78:D8:D3:83:DA:46:14:88 ValiditySun, 27 Apr 2025 21:16:48 GMT - Sat, 26 Jul 2025 21:16:47 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: av4.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://av4.us/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache`

	router.parklogic.com/	172.234.216.100	200 OK	65 B
URL POST router.parklogic.com/ IP 172.234.216.100:443 ASN #63949 Akamai Connected Cloud Requested by https://av4.us/ Certificate IssuerLet's Encrypt Subjectrouter-lb01.parklogic.com FingerprintF3:F4:E5:93:6E:2E:88:F7:76:2A:C5:7C:FC:83:E7:EA:5F:A8:33:FA ValidityTue, 29 Apr 2025 10:34:22 GMT - Mon, 28 Jul 2025 10:34:21 GMT File type ASCII text, with no line terminators Size 65 B (65 bytes) Hash 91b3272fb71c4211d970bd061f555c88 aa3c1cc5aa14dea0de2c253802f6d0a1f357f92b 1bc495b847418e6f270a70a0f57426af54bff22ab3d16cb06fd8c61f6bda3baa HTTP Headers `POST / HTTP/1.1 Host: router.parklogic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain;charset=UTF-8 Content-Length: 328 Origin: https://av4.us DNT: 1 Connection: keep-alive Referer: https://av4.us/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Mon, 12 May 2025 04:39:43 GMT content-type: text/html; charset=UTF-8 access-control-allow-origin: * X-Firefox-Spdy: h2`

	ww1.av4.us/?usid=102&utid=0374eac5fadf22c8fe6dfd502e933ec2	64.190.63.136	439 No Reason Phrase	0 B
URL User Request GET ww1.av4.us/?usid=102&utid=0374eac5fadf22c8fe6dfd502e933ec2 IP 64.190.63.136:443 ASN #47846 SEDO GmbH Certificate IssuerDigiCert Inc Subjectww1.av4.us Fingerprint21:3C:49:F6:50:6A:C2:EC:1D:8A:09:A0:DC:C2:C6:36:F6:9C:63:54 ValidityThu, 06 Jun 2024 00:00:00 GMT - Thu, 05 Jun 2025 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /?usid=102&utid=0374eac5fadf22c8fe6dfd502e933ec2 HTTP/1.1 Host: ww1.av4.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 439 No Reason Phrase date: Mon, 12 May 2025 04:39:43 GMT server: Parking/1.0 content-length: 0 X-Firefox-Spdy: h2`