Report - storage.googleapis.com/0ffres-for-y0u/hreflon.htm#4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11

Report Overview

Visited public
2025-04-22 15:55:48
Tags
URL
storage.googleapis.com/0ffres-for-y0u/hreflon.htm#4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11
Finishing URL
gremorygame.net/t/4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11
IP / ASN
142.250.178.123
#15169 GOOGLE
Title
gremorygame.net/t/4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.fast4redirect.com	unknown	2024-06-26	2024-09-05	2025-04-22	588 B	315 B	104.21.66.53
storage.googleapis.com	420	2005-01-25	2012-08-06	2025-04-16	517 B	978 B	142.250.74.59
gremorygame.net	unknown	2023-09-19	2025-04-22	2025-04-22	1.7 kB	1.4 kB	94.142.139.143

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	storage.googleapis.com/0ffres-for-y0u/hreflon.htm#4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11	ScriptElement	223 B	2025-04-22	2025-04-22
Pretty URL storage.googleapis.com/0ffres-for-y0u/hreflon.htm#4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11 IP 142.250.74.59 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2025-04-22 15:41 Last Seen2025-04-22 15:55 Times Seen2 Hash 0109ffc0d53b58f805b014c59e0992a0 10f1c08ac4b96faaa711d0a093f00ea9fd349b06 f109f6498596afa9f5c8a6185d93812aad7324482147d26676931b5192ec5116 Loading...

	gremorygame.net/t/4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11	ScriptElement	286 B	2025-04-22	2025-04-22
Pretty URL gremorygame.net/t/4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11 IP 94.142.139.143 ASN #209641 I-servers Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2025-04-22 15:41 Last Seen2025-04-22 15:55 Times Seen2 Hash edde288ba55b12f92533b1ffca84de64 e213378c1f941860af1554d15c6745275fb54650 9a3df12dfa9fe4b855c2f6d7ca4a42e2e277434e7d1d9a52b42e0733eb218121 Loading...

HTTP Transactions (5)

	URL	IP	Response	Size
	storage.googleapis.com/0ffres-for-y0u/hreflon.htm#4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11	142.250.74.59	200 OK	249 B
URL User Request GET storage.googleapis.com/0ffres-for-y0u/hreflon.htm#4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11 IP 142.250.74.59:443 ASN #15169 GOOGLE Certificate IssuerGoogle Trust Services Subjectstorage.googleapis.com FingerprintD0:2B:8B:CB:89:00:9D:0F:F9:50:47:00:D0:07:9B:BA:03:D0:C1:FE ValidityMon, 31 Mar 2025 08:58:44 GMT - Mon, 23 Jun 2025 08:58:43 GMT File type HTML document, ASCII text, with CRLF line terminators Size 249 B (249 bytes) Hash 2619c237b00f4b09d5218e54cc256a68 941044088331369f313765b799c881a09d32181b 1971b8b08b5d93b2def10ffe2bd8091b40e89e51db6ccfd75002da866fba76b9 HTTP Headers `GET /0ffres-for-y0u/hreflon.htm HTTP/1.1 Host: storage.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK x-guploader-uploadid: AAO2VwrdK6cB7G3e8M_Uob1YdDYbXdn8u_nDXg0vzBQe451fgafl-cT0cPBOxDRRgPXpQskCUOx6IRo x-goog-generation: 1712722572352454 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 249 x-goog-hash: crc32c=denTAA==, md5=JhnCN7APSwnVIY5UzCVqaA== x-goog-storage-class: STANDARD accept-ranges: bytes content-length: 249 server: UploadServer date: Tue, 22 Apr 2025 15:55:27 GMT expires: Tue, 22 Apr 2025 16:55:27 GMT cache-control: public, max-age=3600 last-modified: Wed, 10 Apr 2024 04:16:12 GMT etag: "2619c237b00f4b09d5218e54cc256a68" content-type: text/html age: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	gremorygame.net/rd/4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11	94.142.139.143	200 OK	235 B
URL User Request GET gremorygame.net/rd/4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11 IP 94.142.139.143:443 ASN #209641 I-servers Ltd Certificate IssuerLet's Encrypt Subjectgremorygame.net Fingerprint51:5C:69:7E:8D:7C:79:AD:DB:76:22:6C:0F:E0:6E:29:74:BB:ED:F2 ValidityTue, 25 Mar 2025 19:09:56 GMT - Mon, 23 Jun 2025 19:09:55 GMT File type HTML document, ASCII text Size 235 B (235 bytes) Hash 41735c0e24be1e5bd89c1f6531207494 9eae1bfa3b43e52c21e87fabcd63a4c2a3e55554 a594b117bc9c64745935f48b866c3caa70cded9c35ee02841a28277f3e75ffe3 HTTP Headers GET /rd/4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11 HTTP/1.1 Host: gremorygame.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK content-type: text/html; charset=utf-8 x-address: gin_throttle_mw_7200000000_91.90.42.154 x-ratelimit-limit: 500 x-ratelimit-remaining: 497 x-ratelimit-reset: 1745340383 content-length: 235 date: Tue, 22 Apr 2025 15:55:28 GMT X-Firefox-Spdy: h2`

	gremorygame.net/t/4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11	94.142.139.143	200 OK	312 B
URL User Request GET gremorygame.net/t/4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11 IP 94.142.139.143:443 ASN #209641 I-servers Ltd Certificate IssuerLet's Encrypt Subjectgremorygame.net Fingerprint51:5C:69:7E:8D:7C:79:AD:DB:76:22:6C:0F:E0:6E:29:74:BB:ED:F2 ValidityTue, 25 Mar 2025 19:09:56 GMT - Mon, 23 Jun 2025 19:09:55 GMT File type JavaScript source, ASCII text Size 312 B (312 bytes) Hash 4ae96671d9673d9624858d2f69d87b2e 3f963312fb3185a802fae9194a1da676938922e6 3dfad76ea2e638daad073d582812956ff68ece7ec22062014dde5bfc14d2b3ae HTTP Headers GET /t/4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11 HTTP/1.1 Host: gremorygame.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://gremorygame.net/rd/4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK content-type: text/html; charset=utf-8 x-address: gin_throttle_mw_7200000000_91.90.42.154 x-ratelimit-limit: 500 x-ratelimit-remaining: 496 x-ratelimit-reset: 1745340383 content-length: 312 date: Tue, 22 Apr 2025 15:55:29 GMT X-Firefox-Spdy: h2`

	gremorygame.net/favicon.ico	94.142.139.143	404 Not Found	0 B
URL GET gremorygame.net/favicon.ico IP 94.142.139.143:443 ASN #209641 I-servers Ltd Requested by https://gremorygame.net/t/4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11 Certificate IssuerLet's Encrypt Subjectgremorygame.net Fingerprint51:5C:69:7E:8D:7C:79:AD:DB:76:22:6C:0F:E0:6E:29:74:BB:ED:F2 ValidityTue, 25 Mar 2025 19:09:56 GMT - Mon, 23 Jun 2025 19:09:55 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: gremorygame.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://gremorygame.net/t/4EqTOJ6936MvyF317nwgejudrmu4482PXTFXTOGUUTERRN197402UWTO18878V11 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 404 Not Found content-type: text/plain; charset=utf-8 x-address: gin_throttle_mw_7200000000_91.90.42.154 x-ratelimit-limit: 500 x-ratelimit-remaining: 495 x-ratelimit-reset: 1745340383 content-length: 0 date: Tue, 22 Apr 2025 15:55:29 GMT X-Firefox-Spdy: h2`

	www.fast4redirect.com/264JNHSD/7FL8P72Q/?sub1=11&sub2=317-6936&sub3=4482-197402-18878	104.21.66.53	204 No Content	0 B
URL User Request GET www.fast4redirect.com/264JNHSD/7FL8P72Q/?sub1=11&sub2=317-6936&sub3=4482-197402-18878 IP 104.21.66.53:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectfast4redirect.com Fingerprint25:D6:EC:BC:AB:68:07:B0:28:6E:BF:3A:6C:D5:C0:D3:F0:0C:9D:54 ValidityThu, 17 Apr 2025 22:59:35 GMT - Wed, 16 Jul 2025 23:56:58 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /264JNHSD/7FL8P72Q/?sub1=11&sub2=317-6936&sub3=4482-197402-18878 HTTP/1.1 Host: www.fast4redirect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://gremorygame.net/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 204 No Content date: Tue, 22 Apr 2025 15:55:30 GMT server: cloudflare accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model vary: Origin x-eflow-request-id: 18b649b0-d7b0-4cc6-9482-ed979bdbdd9e cf-cache-status: DYNAMIC cf-ray: 93464e4a1a6856ab-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2`