Report - pse.is/5jfryg

Report Overview

Visitedpublic

2024-01-18 12:51:29

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
pse.is	162682	2018-05-10	2018-06-09 22:19:02	2023-11-08 01:48:30	1.8 kB	32 kB	104.21.46.142

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	pse.is/5jfryg	ScriptElement	0 B	0001-01-01	2025-08-02
URL pse.is/5jfryg IP / ASN 104.21.46.142 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 0001-01-01 Last Seen 2025-08-02 Times Seen 5606065 Size 0 B (0 bytes) MD5 d41d8cd98f00b204e9800998ecf8427e SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Format Code Loading...

	pse.is/5jfryg	ScriptElement	393 B	2023-04-05	2025-03-02
URL pse.is/5jfryg IP / ASN 104.21.46.142 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 2023-04-05 Last Seen 2025-03-02 Times Seen 143291 Size 393 B (393 bytes) MD5 34ad0a116707d3b794129a6720af92d7 SHA1 424de9dbb8bc774e2a2d4ade100d90f5ac0ecbf4 SHA256 d011a9449a990f2086894be870adc6fbb53595dc593b410a83e45e40bfbc7262 Format Code Loading...

	pse.is/5jfryg	ScriptElement	0 B	0001-01-01	2025-08-02
URL pse.is/5jfryg IP / ASN 104.21.46.142 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 0001-01-01 Last Seen 2025-08-02 Times Seen 5606065 Size 0 B (0 bytes) MD5 d41d8cd98f00b204e9800998ecf8427e SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Format Code Loading...

HTTP Transactions (4)

URL IP Response Size

GET pse.is/cdn-cgi/images/icon-exclamation.png?1376755637

104.21.46.142

200 OK

452 B

URL

pse.is/cdn-cgi/images/icon-exclamation.png?1376755637

IP / ASN

104.21.46.142

#13335 CLOUDFLARENET

Requested byhttps://pse.is/5jfryg

Resource Info

File typePNG image data, 54 x 54, 8-bit colormap, non-interlaced

First Seen2023-04-12

Last Seen2025-08-02

Times Seen200611

Size452 B (452 bytes)

MD5c33de66281e933259772399d10a6afe8

SHA1b9f9d500f8814381451011d4dcf59cd2d90ad94f

SHA256f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016

Certificate Info

IssuerLet's Encrypt

Subjectpse.is

FingerprintC2:2D:A5:C0:9D:9D:BA:DA:13:87:5B:5F:DB:92:85:DD:6D:FD:D8:87

ValidityFri, 29 Dec 2023 08:01:19 GMT - Thu, 28 Mar 2024 08:01:18 GMT

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Sinkholed / Blocked

HTTP Headers

GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1
Host: pse.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pse.is/cdn-cgi/styles/cf.errors.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Thu, 18 Jan 2024 12:51:04 GMT
content-type: image/png
content-length: 452
last-modified: Fri, 05 Jan 2024 17:29:47 GMT
etag: "65983c8b-1c4"
server: cloudflare
cf-ray: 8476f79fd9f656a8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Thu, 18 Jan 2024 14:51:04 GMT
cache-control: max-age=7200, public
accept-ranges: bytes
X-Firefox-Spdy: h2

GET pse.is/cdn-cgi/styles/cf.errors.css

104.21.46.142

200 OK

24 kB

URL

pse.is/cdn-cgi/styles/cf.errors.css

IP / ASN

104.21.46.142

#13335 CLOUDFLARENET

Requested byhttps://pse.is/5jfryg

Resource Info

File typeASCII text, with very long lines (24131)

First Seen2023-04-05

Last Seen2024-08-21

Times Seen31956

Size24 kB (24132 bytes)

MD5a1cedc21f16b5a97114857154fab35e9

SHA195e9890a15a4f7f94f7f19d2c297e4b07503c526

SHA2561103290e25ebda2712abe344a87facbac00ddaba712729be9fe5feef807bf91b

Certificate Info

IssuerLet's Encrypt

Subjectpse.is

FingerprintC2:2D:A5:C0:9D:9D:BA:DA:13:87:5B:5F:DB:92:85:DD:6D:FD:D8:87

ValidityFri, 29 Dec 2023 08:01:19 GMT - Thu, 28 Mar 2024 08:01:18 GMT

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Sinkholed / Blocked

HTTP Headers

GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: pse.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pse.is/5jfryg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Jan 2024 12:51:04 GMT
content-type: text/css
last-modified: Fri, 05 Jan 2024 17:29:47 GMT
etag: W/"65983c8b-5e44"
server: cloudflare
cf-ray: 8476f79f594856a8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Thu, 18 Jan 2024 14:51:04 GMT
cache-control: max-age=7200, public
content-encoding: gzip
X-Firefox-Spdy: h2

GET pse.is/favicon.ico

104.21.46.142

200 OK

420 B

URL

pse.is/favicon.ico

IP / ASN

104.21.46.142

#13335 CLOUDFLARENET

Requested byhttps://pse.is/5jfryg

Resource Info

File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced

First Seen2023-05-11

Last Seen2025-05-29

Times Seen17

Size420 B (420 bytes)

MD5545dafd58438b6e8323d8181005289da

SHA19ce5394cddd0bdd0572d570c2e33eb9775de33d0

SHA2569aa98a8cc54ec2f096e6697d04c8400ee43f774208621f6a4a36cb6be6268f99

Certificate Info

IssuerLet's Encrypt

Subjectpse.is

FingerprintC2:2D:A5:C0:9D:9D:BA:DA:13:87:5B:5F:DB:92:85:DD:6D:FD:D8:87

ValidityFri, 29 Dec 2023 08:01:19 GMT - Thu, 28 Mar 2024 08:01:18 GMT

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: pse.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pse.is/5jfryg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Jan 2024 12:51:04 GMT
content-type: image/vnd.microsoft.icon
last-modified: Sun, 13 Nov 2022 04:44:48 GMT
etag: W/"1a4-5ed52c85a1000"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HWJNTK8%2BKJlsAh13tybPiLazw7HYJS1WKSAhxiUrYg9WPk2xck6S%2BYX%2BYCh256j3zRg%2Fu5kGOK8eMCCA%2B%2BGjxsIFbnb%2Bpv1yqTk2Bmg3OhBIepZopa5CbTA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8476f79fea0856a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET pse.is/5jfryg

104.21.46.142

200 OK

4.4 kB

URL

pse.is/5jfryg

IP / ASN

104.21.46.142

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (4639), with no line terminators

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size4.4 kB (4395 bytes)

MD57e903d3709e1f198fc605783abc77f01

SHA1df93bb786d25f9451335f20aea3aaa2aee861fee

SHA25656e33450faeea7e1e55390828420e0b6e3d9e3ea9ad91534405c62c1855402b0

Certificate Info

IssuerLet's Encrypt

Subjectpse.is

FingerprintC2:2D:A5:C0:9D:9D:BA:DA:13:87:5B:5F:DB:92:85:DD:6D:FD:D8:87

ValidityFri, 29 Dec 2023 08:01:19 GMT - Thu, 28 Mar 2024 08:01:18 GMT

HTTP Headers

GET /5jfryg HTTP/1.1
Host: pse.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Jan 2024 12:51:03 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V%2F2tk0%2BV%2Ba0xYeO8BrjXfY4JJV3cuTORflZaNwevKV8F80zESqb7QI15PJ%2B%2Ff0K9mcUgMDOPni1fZavYcFyQSTkCDup4PnsktpC9mLnYuZ4qqLQa9vHqMlw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8476f79c3b0256a8-OSL
content-encoding: gzip
X-Firefox-Spdy: h2