Report - 8xbe279.com/

Report Overview

Submitted URL
8xbe279.com/
IP
16.163.250.89
ASN
#16509 AMAZON-02
Submitted
2024-04-24 22:16:33
Access
public
Website Title
8Xbet - Official Betting Partner of Manchester City FC
Final URL
8xbe279.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
22

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
8xbe279.com	unknown	unknown	No data	No data	468 B	19 kB	16.163.250.89
vd001-tiger-restrictions.hgfhog.8xojdfudud.com	unknown	2023-09-17	2024-02-05	2024-02-05	3.2 kB	213 kB	143.204.55.56
fe-source.hgfhog.8xojdfudud.com	unknown	2023-09-17	2024-04-08	2024-04-08	950 B	189 kB	143.204.55.56
vd001-fxh9-api.hgfhog.8xojdfudud.com	unknown	2023-09-17	2024-03-02	2024-03-02	934 B	12 kB	143.204.55.94

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	8xbe279.com/	18 kB	2024-04-25	2024-04-25
Pretty URL 8xbe279.com/ IP 16.163.250.89 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 00:16:39 Last Seen2024-04-25 00:16:39 Times Seen1 Hash 0bed62ab3f9d3eb193610e6587f6990e 6b8fc39d484e1e6c07b8064e5b8d817625cefd0a 3095ad663926131bf2f536ed1b01075a18b227bfe962038a0616d6a7213f4421 Loading...

	vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.js	66 kB	2024-04-24	2024-04-25
Pretty URL vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.js IP 143.204.55.56 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 08:25:55 Last Seen2024-04-25 09:33:35 Times Seen4 Hash 1a9ae9a58a1e9efd00aad0de2f979398 c0c104bce63812f87b640b519d8747de415d02ba 917042d4db9ee2f6c4fb679fa3c71a9abff7ae35131a4bf487d6a5df127ae35e Loading...

HTTP Transactions (12)

URL IP Response Size

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/global.css

143.204.55.56

200 OK

905 B

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/global.css
IP
143.204.55.56:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe279.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
Unicode text, UTF-8 text
Size
905 B (905 bytes)
Hash
616346cbb102c779adde7abfa328655d
81f40c4121c48395d2d7c001a07fa415a87eae71
b03fb2ebcadf4ef2c46e7f89ed275b154c81a698e79181880aaff05cd5b6576f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /global.css HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe279.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
content-length: 905
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:26 GMT
last-modified: Wed, 25 Oct 2023 06:08:18 GMT
etag: "616346cbb102c779adde7abfa328655d"
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: myqiXTWIoHPSLxq8BwtZU-5swklfJYh2KwkYH_gzEHrriEpf8FhFyQ==
age: 57044
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/ipBlock.png

143.204.55.56

200 OK

117 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/ipBlock.png
IP
143.204.55.56:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe279.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced
Size
117 kB (117273 bytes)
Hash
5e78e406a8faf40f4e8ff65e8635f75c
faa9b2397c1de81364e49ef9a417adbecd87d045
bb62ce1e42487411bdef915d87497fa02b7ed8a0749e37949a4d68d699bd5428

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/vd001/ipBlock.png HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe279.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 117273
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:28 GMT
last-modified: Wed, 24 Apr 2024 05:14:38 GMT
etag: "5e78e406a8faf40f4e8ff65e8635f75c"
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: i_B4M2888zmTqSNLy3pDEjox2j2gJJ1LNZB5dS0r1mhdTTcUU6733A==
age: 57042
X-Firefox-Spdy: h2

fe-source.hgfhog.8xojdfudud.com/frontend/prod/fe-images/vd001/logo/primary_logo.png

143.204.55.56

200 OK

8.2 kB

URL GET HTTP/2
fe-source.hgfhog.8xojdfudud.com/frontend/prod/fe-images/vd001/logo/primary_logo.png
IP
143.204.55.56:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe279.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
PNG image data, 276 x 64, 8-bit/color RGBA, non-interlaced
Size
8.2 kB (8174 bytes)
Hash
4d393031bf35176af1683667bf120842
edd2470edd6209fbc0c3d8dcd20df72dbbf20f14
ba8e83b21b5ee236511191d58252930ff622e8aeb8485fca515ac486f5e0db56

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /frontend/prod/fe-images/vd001/logo/primary_logo.png HTTP/1.1
Host: fe-source.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe279.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 8174
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:27 GMT
last-modified: Wed, 24 Apr 2024 04:52:41 GMT
etag: "4d393031bf35176af1683667bf120842"
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0AIjAhxS9sFSxmsKNGKWNHvj-Er-ThLKvro1sQEsF47z0LLZvk6UOg==
age: 57043
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/favicon.ico

143.204.55.56

200 OK

15 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/favicon.ico
IP
143.204.55.56:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe279.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
15 kB (15406 bytes)
Hash
e99394e28cc030ec6a9fba59f1d6b6c4
2302f950165add3df24fe352e4cc4f0afd12006d
362e0797eeccdabc55a1eea0413e75fa677ccd2ecc816b7074dccd09bab463f0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/vd001/favicon.ico HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe279.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 15406
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:28 GMT
last-modified: Wed, 24 Apr 2024 05:14:38 GMT
etag: "e99394e28cc030ec6a9fba59f1d6b6c4"
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hPLxKWgnvWkXYCYEO18ZE-hl0R7HmzLdza11JRCCnj6A6ZrcgnPMrQ==
age: 57042
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/

143.204.55.56

200 OK

478 B

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/
IP
143.204.55.56:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe279.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
HTML document, ASCII text
Size
478 B (478 bytes)
Hash
1ba740e0d2a2a280bbac2e026cd8575e
fc2140fd08a6f5b49a0606e295c49b1372110c64
c4c759a620393fb964391c42deb29ec94f5f10093299f2ce1172f2198d3ebaa6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe279.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/html
content-length: 478
server: nginx/1.14.1
date: Wed, 24 Apr 2024 22:16:10 GMT
cache-control: max-age=0
last-modified: Wed, 24 Apr 2024 05:14:39 GMT
access-control-allow-origin: *
etag: "1ba740e0d2a2a280bbac2e026cd8575e"
x-cache: Miss from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cYLkKtL6sN8dla1GK0V6hjqlRIOyylXVB0COHbp5o15Dd2hUf7HNAA==
X-Firefox-Spdy: h2

vd001-fxh9-api.hgfhog.8xojdfudud.com/platform/sysmaintenance/customerService

143.204.55.94

200 OK

9.3 kB

URL GET HTTP/2
vd001-fxh9-api.hgfhog.8xojdfudud.com/platform/sysmaintenance/customerService
IP
143.204.55.94:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe279.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
data
Size
9.3 kB (9299 bytes)
Hash
b32371b8a448113cc1aaf0a35ff0e386
af1b67ec9e9213696d90571e9748ffaf1e4d6fb2
175ad9563fd9f0031a1b1646ba58142d8255e747f5bf89953526e29cacf8e87d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /platform/sysmaintenance/customerService HTTP/1.1
Host: vd001-fxh9-api.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://8xbe279.com/
Origin: https://8xbe279.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
date: Wed, 24 Apr 2024 22:16:10 GMT
x-envoy-upstream-service-time: 9
server: istio-envoy
access-control-allow-origin: https://8xbe279.com
access-control-allow-credentials: true
x-cache: Miss from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BzIksQ2MwzCYUxt90gsLxUaSBoegk74Qa4c-6r1bbuavtL_SEJbk1w==
X-Firefox-Spdy: h2

vd001-fxh9-api.hgfhog.8xojdfudud.com/platform/user/merchantSetting

143.204.55.94

200 OK

1.8 kB

URL GET HTTP/2
vd001-fxh9-api.hgfhog.8xojdfudud.com/platform/user/merchantSetting
IP
143.204.55.94:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe279.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (1961), with no line terminators
Size
1.8 kB (1757 bytes)
Hash
f2bb5a5491b0a448e8d2bd7179132588
24066415bb0b47e8e6fac5601c2cea6617d5aadb
901b23b3fbf0fd6a7ca402644e7a2d9ceb474a01f87aaf0b69eac86d8b4771e4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /platform/user/merchantSetting HTTP/1.1
Host: vd001-fxh9-api.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://8xbe279.com/
Origin: https://8xbe279.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
date: Wed, 24 Apr 2024 22:16:10 GMT
x-envoy-upstream-service-time: 20
server: istio-envoy
access-control-allow-origin: https://8xbe279.com
access-control-allow-credentials: true
x-cache: Miss from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cBpaBT_SGaGWyvRi3SPafBLEOS-e8ZfcBF_KaspP3g3I-YUskwkaAA==
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/service.svg

143.204.55.56

200 OK

3.4 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/service.svg
IP
143.204.55.56:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe279.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
SVG Scalable Vector Graphics image
Size
3.4 kB (3399 bytes)
Hash
7b7d846ee75ed105c829d05aacc8fcad
32ab8a92fba25efcf7da7cb90956aa7a02c00b82
e6ec5c6f286f3e3fd21c96d34cc997c69e89f7f16d512aa8209a6d49d5b338ea

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/vd001/service.svg HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe279.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/svg+xml
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:27 GMT
last-modified: Wed, 24 Apr 2024 05:14:38 GMT
etag: W/"3af446670f3ea28982c82376e327d071"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JUnCcuXSdUa8ojQUmFGKZ1WXEWjBFYyeUY1qAkiEqoYmR9qCsKP15Q==
age: 57043
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.js

143.204.55.56

200 OK

66 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.js
IP
143.204.55.56:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe279.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type

Size
66 kB (65987 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /build/bundle.js HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe279.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:26 GMT
last-modified: Wed, 24 Apr 2024 05:14:37 GMT
etag: W/"1a9ae9a58a1e9efd00aad0de2f979398"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: k_vSZkcXemsiIYKjKmsZvLCBQKSRIkP5-sgm4o72r86Vftb8nD2Tbw==
age: 57044
X-Firefox-Spdy: h2

fe-source.hgfhog.8xojdfudud.com/app/CountryList/country-list.json

143.204.55.60

200 OK

180 kB

URL GET HTTP/2
fe-source.hgfhog.8xojdfudud.com/app/CountryList/country-list.json
IP
143.204.55.60:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe279.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type

Size
180 kB (179587 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /app/CountryList/country-list.json HTTP/1.1
Host: fe-source.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://8xbe279.com/
Origin: https://8xbe279.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:28 GMT
last-modified: Wed, 20 Jul 2022 03:05:19 GMT
etag: W/"9d17676cfae2cc43fcd89a0f90b30e84"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jKUG0CHHRaQRAgMiBLo0gGeKALmrGQIfJtEmia9t1pfDS6ssLk1EIg==
age: 57042
X-Firefox-Spdy: h2

8xbe279.com/

16.163.250.89

200 OK

18 kB

URL User Request GET HTTP/2
8xbe279.com/
IP
16.163.250.89:443
ASN
#16509 AMAZON-02

Certificate
IssuerGoDaddy.com, Inc.
Subject8xbe251.com
FingerprintDB:F7:7A:8C:1D:94:D5:32:98:BA:86:1A:8B:45:99:30:45:75:E5:E9
ValidityMon, 04 Mar 2024 09:08:13 GMT - Tue, 04 Mar 2025 09:08:13 GMT

File type

Size
18 kB (18521 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: 8xbe279.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 22:16:09 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
access-control-allow-origin: *
etag: W/"4859-iZUFuQec7tWPdtDz+09BElP6r9U"
x-envoy-upstream-service-time: 161
content-encoding: gzip
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.css

143.204.55.56

200 OK

6.5 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.css
IP
143.204.55.56:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe279.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
ASCII text, with very long lines (6525), with no line terminators
Size
6.5 kB (6525 bytes)
Hash
7b0e06c54eed7230097904bdd2d37df6
9fc056797cd17132ebccd37b28769fb7f142b3de
f203bda91b5b137c4157d959c4ecfebd96152151c6f8cc130c0717f884d1d145

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /build/bundle.css HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe279.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:26 GMT
last-modified: Wed, 25 Oct 2023 06:08:18 GMT
etag: W/"7b0e06c54eed7230097904bdd2d37df6"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: G6sfX2x6_ckJYt7KjqPZXWFUNBqfRwyvXie-EGCmkGlZtxi6KHUVCQ==
age: 57044
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections