Report - 8xbe282.com/

Report Overview

Submitted URL
8xbe282.com/
IP
16.163.250.89
ASN
#16509 AMAZON-02
Submitted
2024-04-24 19:36:11
Access
public
Website Title
8Xbet - Official Betting Partner of Manchester City FC
Final URL
8xbe282.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
22

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
vd001-fxh9-api.hgfhog.8xojdfudud.com	unknown	2023-09-17	2024-03-02	2024-03-02	936 B	2.9 kB	143.204.55.123
fe-source.hgfhog.8xojdfudud.com	unknown	2023-09-17	2024-04-08	2024-04-08	938 B	189 kB	143.204.55.60
vd001-tiger-restrictions.hgfhog.8xojdfudud.com	unknown	2023-09-17	2024-02-05	2024-02-05	3.2 kB	185 kB	143.204.55.60
8xbe282.com	unknown	unknown	No data	No data	466 B	13 kB	16.163.250.89

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	8xbe282.com/	18 kB	2024-04-24	2024-04-24
Pretty URL 8xbe282.com/ IP 16.163.250.89 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 21:36:18 Last Seen2024-04-24 21:36:18 Times Seen1 Hash e234fd26e8402143ae8dcad719fcf920 0f9b6323858221a8cf7c242aed7a6efc2f97ecd6 730b139a35ae7eef4934e5db7b32ab281ff90a93a8f850c7bbc8240cfb13c7da Loading...

	vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.js	66 kB	2024-04-24	2024-04-25
Pretty URL vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.js IP 143.204.55.60 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 08:25:55 Last Seen2024-04-25 09:33:35 Times Seen4 Hash 1a9ae9a58a1e9efd00aad0de2f979398 c0c104bce63812f87b640b519d8747de415d02ba 917042d4db9ee2f6c4fb679fa3c71a9abff7ae35131a4bf487d6a5df127ae35e Loading...

HTTP Transactions (12)

URL IP Response Size

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/global.css

143.204.55.60

200 OK

905 B

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/global.css
IP
143.204.55.60:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe282.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
Unicode text, UTF-8 text
Size
905 B (905 bytes)
Hash
616346cbb102c779adde7abfa328655d
81f40c4121c48395d2d7c001a07fa415a87eae71
b03fb2ebcadf4ef2c46e7f89ed275b154c81a698e79181880aaff05cd5b6576f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /global.css HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe282.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
content-length: 905
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:26 GMT
last-modified: Wed, 25 Oct 2023 06:08:18 GMT
etag: "616346cbb102c779adde7abfa328655d"
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IsrqMqqhr1Sq-XxYH4JXLGq3G4c1cWOTNmHliornBIGcZdupSl2HnA==
age: 47422
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/ipBlock.png

143.204.55.60

200 OK

117 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/ipBlock.png
IP
143.204.55.60:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe282.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced
Size
117 kB (117273 bytes)
Hash
5e78e406a8faf40f4e8ff65e8635f75c
faa9b2397c1de81364e49ef9a417adbecd87d045
bb62ce1e42487411bdef915d87497fa02b7ed8a0749e37949a4d68d699bd5428

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/vd001/ipBlock.png HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe282.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 117273
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:28 GMT
last-modified: Wed, 24 Apr 2024 05:14:38 GMT
etag: "5e78e406a8faf40f4e8ff65e8635f75c"
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nolgadmUNLUHgJ7Sff09tknnyw_2bcVdbFNn9vd9lRpYP31Hh1rUKg==
age: 47420
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.css

143.204.55.60

200 OK

9.3 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.css
IP
143.204.55.60:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe282.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
gzip compressed data, from Unix
Size
9.3 kB (9317 bytes)
Hash
652c7871c0f4eaa95b1b68dbe0e2824c
78e922aca044e65703cb2eb716ae0a867e1d6c00
6b5fe3a541069bb3adf7373e6e9968eee6197e949b008bfcc3ceca95f88cad1f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /build/bundle.css HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe282.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:26 GMT
last-modified: Wed, 25 Oct 2023 06:08:18 GMT
etag: W/"7b0e06c54eed7230097904bdd2d37df6"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KqDjNz2I2QmrlnkXhrq9AtP0kN5iRE30idVcCO-xTsGxH2FGnQikMw==
age: 47422
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/

143.204.55.60

200 OK

478 B

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/
IP
143.204.55.60:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe282.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
HTML document, ASCII text
Size
478 B (478 bytes)
Hash
1ba740e0d2a2a280bbac2e026cd8575e
fc2140fd08a6f5b49a0606e295c49b1372110c64
c4c759a620393fb964391c42deb29ec94f5f10093299f2ce1172f2198d3ebaa6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe282.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/html
content-length: 478
server: nginx/1.14.1
date: Wed, 24 Apr 2024 19:35:48 GMT
cache-control: max-age=0
last-modified: Wed, 24 Apr 2024 05:14:39 GMT
access-control-allow-origin: *
etag: "1ba740e0d2a2a280bbac2e026cd8575e"
x-cache: Miss from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: H5ndfZnlB1qZGywVEwy2n7BWgGATv39y4ToJN0Bd_-eMPGoNdnon5Q==
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/favicon.ico

143.204.55.60

200 OK

15 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/favicon.ico
IP
143.204.55.60:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe282.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
15 kB (15406 bytes)
Hash
e99394e28cc030ec6a9fba59f1d6b6c4
2302f950165add3df24fe352e4cc4f0afd12006d
362e0797eeccdabc55a1eea0413e75fa677ccd2ecc816b7074dccd09bab463f0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/vd001/favicon.ico HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe282.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 15406
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:28 GMT
last-modified: Wed, 24 Apr 2024 05:14:38 GMT
etag: "e99394e28cc030ec6a9fba59f1d6b6c4"
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 49dO8zm4rRe0-rMHPwEpJruFayy6DMnhutJ5v9rT1pdsMSHW9UEjhQ==
age: 47421
X-Firefox-Spdy: h2

8xbe282.com/

16.163.250.89

200 OK

13 kB

URL User Request GET HTTP/2
8xbe282.com/
IP
16.163.250.89:443
ASN
#16509 AMAZON-02

Certificate
IssuerGoDaddy.com, Inc.
Subject8xbe251.com
FingerprintDB:F7:7A:8C:1D:94:D5:32:98:BA:86:1A:8B:45:99:30:45:75:E5:E9
ValidityMon, 04 Mar 2024 09:08:13 GMT - Tue, 04 Mar 2025 09:08:13 GMT

File type
gzip compressed data, from Unix
Size
13 kB (12847 bytes)
Hash
7ac49589e1ab40dd052ecf9bb81f81e8
fa442bfe6a5578a27a87f4f4f3541981cccdcd6c
9c474fee1cea9a643cd6826d52b10f41a19ef05eb23e02238c2f56767527bcc0

HTTP Headers

GET / HTTP/1.1
Host: 8xbe282.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 19:35:47 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
access-control-allow-origin: *
etag: W/"49c3-XwPriN+kgA/5EXEs1JyvDNGmncc"
x-envoy-upstream-service-time: 264
content-encoding: gzip
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.js

143.204.55.60

200 OK

35 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.js
IP
143.204.55.60:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe282.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
gzip compressed data, from Unix
Size
35 kB (34990 bytes)
Hash
06fd6aa08b0d2a19d4c815432470fd49
47950c1439cd9f02855a4ed06d50f8f14716c9db
c6587fbf9b6e51742e83cc8c1d1302691189ba7b24c86e56282441a650b3dc0b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /build/bundle.js HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe282.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:26 GMT
last-modified: Wed, 24 Apr 2024 05:14:37 GMT
etag: W/"1a9ae9a58a1e9efd00aad0de2f979398"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: t98gDjgpwqfW3eSRJCAJEgDL3rFlVCx5d1g50tE_Oo0AvAjGOgkAaA==
age: 47422
X-Firefox-Spdy: h2

vd001-fxh9-api.hgfhog.8xojdfudud.com/platform/sysmaintenance/customerService

143.204.55.123

200 OK

238 B

URL GET HTTP/2
vd001-fxh9-api.hgfhog.8xojdfudud.com/platform/sysmaintenance/customerService
IP
143.204.55.123:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe282.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
238 B (238 bytes)
Hash
f891b4effa060b675d2f703168b482d7
b4e5d8a5f6e8b4a2cfae81b65f3d8505dce15d44
dc936a7f1f4e902ee6e7d2cad91fddd5303acada01cb53767ae54455c2da05ad

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /platform/sysmaintenance/customerService HTTP/1.1
Host: vd001-fxh9-api.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://8xbe282.com/
Origin: https://8xbe282.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
date: Wed, 24 Apr 2024 19:35:49 GMT
x-envoy-upstream-service-time: 10
server: istio-envoy
access-control-allow-origin: https://8xbe282.com
access-control-allow-credentials: true
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aIl566SS_OKPktik5PqGnppCtOeINA9M3nbt6R2nybPVxUWfaufWYw==
X-Firefox-Spdy: h2

fe-source.hgfhog.8xojdfudud.com/app/CountryList/country-list.json

143.204.55.60

200 OK

180 kB

URL GET HTTP/2
fe-source.hgfhog.8xojdfudud.com/app/CountryList/country-list.json
IP
143.204.55.60:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe282.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type

Size
180 kB (179587 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /app/CountryList/country-list.json HTTP/1.1
Host: fe-source.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://8xbe282.com/
Origin: https://8xbe282.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:28 GMT
last-modified: Wed, 20 Jul 2022 03:05:19 GMT
etag: W/"9d17676cfae2cc43fcd89a0f90b30e84"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: exr3F_pqnYnHA231WpfPEn_LYy9FnpkNqZEKvzTpiDexzT8Azs02yw==
age: 47420
X-Firefox-Spdy: h2

fe-source.hgfhog.8xojdfudud.com/frontend/prod/fe-images/vd001/logo/primary_logo.png

143.204.55.60

200 OK

8.2 kB

URL GET HTTP/2
fe-source.hgfhog.8xojdfudud.com/frontend/prod/fe-images/vd001/logo/primary_logo.png
IP
143.204.55.60:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe282.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
PNG image data, 276 x 64, 8-bit/color RGBA, non-interlaced
Size
8.2 kB (8174 bytes)
Hash
4d393031bf35176af1683667bf120842
edd2470edd6209fbc0c3d8dcd20df72dbbf20f14
ba8e83b21b5ee236511191d58252930ff622e8aeb8485fca515ac486f5e0db56

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /frontend/prod/fe-images/vd001/logo/primary_logo.png HTTP/1.1
Host: fe-source.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe282.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 8174
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:27 GMT
last-modified: Wed, 24 Apr 2024 04:52:41 GMT
etag: "4d393031bf35176af1683667bf120842"
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hDeoB1DS30nSprXpO_SSetTlireNP70uEM-02OBpGsKkJYFIsLm55Q==
age: 47421
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/service.svg

143.204.55.60

200 OK

3.4 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/service.svg
IP
143.204.55.60:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe282.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
SVG Scalable Vector Graphics image
Size
3.4 kB (3399 bytes)
Hash
7b7d846ee75ed105c829d05aacc8fcad
32ab8a92fba25efcf7da7cb90956aa7a02c00b82
e6ec5c6f286f3e3fd21c96d34cc997c69e89f7f16d512aa8209a6d49d5b338ea

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/vd001/service.svg HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe282.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/svg+xml
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:27 GMT
last-modified: Wed, 24 Apr 2024 05:14:38 GMT
etag: W/"3af446670f3ea28982c82376e327d071"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: w63xc7nxPyQfdlg3skzUeIMeOuamA97_wao775rMneq2WBxuXkZJWQ==
age: 47421
X-Firefox-Spdy: h2

vd001-fxh9-api.hgfhog.8xojdfudud.com/platform/user/merchantSetting

143.204.55.123

200 OK

1.8 kB

URL GET HTTP/2
vd001-fxh9-api.hgfhog.8xojdfudud.com/platform/user/merchantSetting
IP
143.204.55.123:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe282.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (1961), with no line terminators
Size
1.8 kB (1757 bytes)
Hash
92e9ef3d15d8c70df200d69cbc00db13
835168475d8c7edb97371938d9800541fc406e38
5f967f9cde952e593c07ed7221dde2e91940da64344f179a92931af7ea5ecbd9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /platform/user/merchantSetting HTTP/1.1
Host: vd001-fxh9-api.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://8xbe282.com/
Origin: https://8xbe282.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
date: Wed, 24 Apr 2024 19:35:49 GMT
x-envoy-upstream-service-time: 17
server: istio-envoy
access-control-allow-origin: https://8xbe282.com
access-control-allow-credentials: true
x-cache: Miss from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cE2VsOsok1jo8mN6XPbShyPYFKpd0xAqcITJ1Y6FJxK5Q5VK_Xj-Yw==
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections