Report - awjaltob-ly.com/alpha-prm/%E3%82%A6%E3%82%A7%E3%83%96/%E9%83%B5%E4%BE%BF/?uid=3mail@b.c

Report Overview

Visited public
2025-04-11 12:51:18
Tags
URL
awjaltob-ly.com/alpha-prm/%E3%82%A6%E3%82%A7%E3%83%96/%E9%83%B5%E4%BE%BF/?uid=3mail@b.c
Finishing URL
awjaltob-ly.com/alpha-prm/%E3%82%A6%E3%82%A7%E3%83%96/%E9%83%B5%E4%BE%BF/?uid=3mail@b.c
IP / ASN
192.185.157.254
#19871 NETWORK-SOLUTIONS-HOSTING
Title
Webmail :: Welcome to Webmail

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
awjaltob-ly.com	unknown	2023-08-13	2025-04-11	2025-04-11	543 B	37 kB	192.185.157.254
ajax.googleapis.com	12905	2005-01-25	2012-05-22	2025-04-09	432 B	89 kB	142.250.178.74

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-04-10	medium	awjaltob-ly.com/alpha-prm/%E3%82%A6%E3%82%A7%E3%83%96/%E9%83%B5%E4%BE%BF/?uid=3mail@b.c	Webmail Providers

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-04-11	medium	awjaltob-ly.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	awjaltob-ly.com/alpha-prm/%E3%82%A6%E3%82%A7%E3%83%96/%E9%83%B5%E4%BE%BF/?uid=3mail@b.c	Function	79 B	2023-04-11	2025-05-21
Pretty URL awjaltob-ly.com/alpha-prm/%E3%82%A6%E3%82%A7%E3%83%96/%E9%83%B5%E4%BE%BF/?uid=3mail@b.c IP 192.185.157.254 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:38 Last Seen2025-05-21 03:39 Times Seen113083 Hash aa049e2749b8531cb8f233c2f64fc2b2 b611a5a62c1813ae5b4763378b3a4a565556530a e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2 Loading...

	awjaltob-ly.com/alpha-prm/%E3%82%A6%E3%82%A7%E3%83%96/%E9%83%B5%E4%BE%BF/?uid=3mail@b.c	Function	37 B	2023-04-11	2025-05-21
Pretty URL awjaltob-ly.com/alpha-prm/%E3%82%A6%E3%82%A7%E3%83%96/%E9%83%B5%E4%BE%BF/?uid=3mail@b.c IP 192.185.157.254 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:31 Last Seen2025-05-21 03:39 Times Seen265707 Hash 29d0c84b9d1d8da446a6062c6a840ad9 6d6b3a6065667c7c50d92f3889c85ed65a9ad784 3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1 Loading...

	awjaltob-ly.com/alpha-prm/%E3%82%A6%E3%82%A7%E3%83%96/%E9%83%B5%E4%BE%BF/?uid=3mail@b.c	ScriptElement	21 kB	2025-04-11	2025-04-11
Pretty URL awjaltob-ly.com/alpha-prm/%E3%82%A6%E3%82%A7%E3%83%96/%E9%83%B5%E4%BE%BF/?uid=3mail@b.c IP 192.185.157.254 ASN #19871 NETWORK-SOLUTIONS-HOSTING Introduced by scriptElement Embedded in HTML true Observations First Seen2025-04-11 12:51 Last Seen2025-04-11 12:51 Times Seen1 Hash d4eec3507d840e9b1885d263f2e28451 92b21b02225d034de17cec2209ec3010c4c38f68 4a99e7598f42c035c9ce10f4b5463b2d989f4968f89e892ff24b92ed4c9a5442 Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js	ScriptElement	88 kB	2023-03-07	2025-05-21
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js IP 142.250.178.74 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-21 01:00 Times Seen68635 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

HTTP Transactions (2)

URL IP Response Size

awjaltob-ly.com/alpha-prm/%E3%82%A6%E3%82%A7%E3%83%96/%E9%83%B5%E4%BE%BF/?uid=3mail@b.c

192.185.157.254

200 OK

37 kB

URL User Request GET
awjaltob-ly.com/alpha-prm/%E3%82%A6%E3%82%A7%E3%83%96/%E9%83%B5%E4%BE%BF/?uid=3mail@b.c
IP
192.185.157.254:443
ASN
#19871 NETWORK-SOLUTIONS-HOSTING

Certificate
IssuerLet's Encrypt
Subject*.awjaltob-ly.com
Fingerprint96:5B:8E:52:92:A9:34:09:01:80:A1:1F:C5:A3:66:98:FC:1D:4B:60
ValidityFri, 14 Feb 2025 01:50:40 GMT - Thu, 15 May 2025 01:50:39 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (20840)
Size
37 kB (36594 bytes)
Hash
e05250f497c26cbc348b249ed3b31216
64af47152549aee1b030c63b5c8a547f643017ec
af4c9069d8e3dcc6fcfa59eff64b2815b09b9a917656a774f40d323576a85f98

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Webmail Providers
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /alpha-prm/%E3%82%A6%E3%82%A7%E3%83%96/%E9%83%B5%E4%BE%BF/?uid=3mail@b.c HTTP/1.1
Host: awjaltob-ly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Fri, 11 Apr 2025 12:50:57 GMT
server: Apache
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js

142.250.178.74

200 OK

88 kB

URL GET
ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP
142.250.178.74:443
ASN
#15169 GOOGLE

Requested by
https://awjaltob-ly.com/alpha-prm/%E3%82%A6%E3%82%A7%E3%83%96/%E9%83%B5%E4%BE%BF/?uid=3mail@b.c
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint3C:2E:67:30:A6:95:F3:D3:61:49:AB:AC:BC:D1:CF:77:3E:33:8F:B7
ValidityThu, 20 Mar 2025 11:19:46 GMT - Thu, 12 Jun 2025 11:19:45 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
88 kB (88145 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awjaltob-ly.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Apr 2025 03:38:51 GMT
expires: Thu, 09 Apr 2026 03:38:51 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 205927
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (2)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers