Report - 122.11.185.41/

Report Overview

Visited public
2023-12-01 19:04:10
Tags
URL
122.11.185.41/
Finishing URL
122.11.185.41/
IP / ASN
122.11.185.41
#45474 NEXUSGUARD LIMITED
Title
122.11.185.41/

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
122.11.185.41	unknown	unknown	2021-10-22 11:04:54	2023-04-18 11:50:18	745 B	2.4 kB	122.11.185.41
ocsp2.globalsign.com	1544	1999-04-19	2012-05-23 20:10:04	2023-12-01 05:09:12	358 B	1.9 kB	104.18.21.226
speresources.nexusguard.com	unknown	2008-09-25	2018-06-27 05:11:58	2023-11-10 17:45:32	5.0 kB	631 kB	207.192.152.190
ocsp.entrust.net	1208	1997-07-28	2014-01-10 03:18:45	2023-12-01 05:17:52	340 B	2.0 kB	23.38.202.187

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-12-01	medium	122.11.185.41	Sinkholed
2023-12-01	medium	122.11.185.41	Sinkholed

ThreatFox

No alerts detected

JavaScript (18)

	URL	From	Size	First Seen	Last Seen
	speresources.nexusguard.com/errpage/js/angular.js	ScriptElement	1.0 MB	2023-03-12	2025-01-13
Pretty URL speresources.nexusguard.com/errpage/js/angular.js IP 207.192.152.190 ASN #63005 NEXUS-22-63005 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 14:55 Last Seen2025-01-13 05:11 Times Seen20 Hash 7ee4960c3fdfa8a88b3b540e19fcf7ff bede50a38baeba3db7a4df460695d01ecb437273 9a30224971ba19d73b34a1de0ffff57fa3561367f477fe81d62a17ce4b12a5aa Loading...

	unknown	Function	26 B	2023-04-11	2025-05-09
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:13 Last Seen2025-05-09 09:16 Times Seen127381 Hash 1c862db5f2555377c2dc1e62ed7b3981 c29e6dc25c08a70995127ec13ded6f80d9a36174 27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac Loading...

	speresources.nexusguard.com/errpage/js/angular-material.js	ScriptElement	536 kB	2023-03-29	2025-01-13
Pretty URL speresources.nexusguard.com/errpage/js/angular-material.js IP 207.192.152.190 ASN #63005 NEXUS-22-63005 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 21:09 Last Seen2025-01-13 05:11 Times Seen17 Hash beaf324b04ad7920a54fd6e69531ee50 50ab3e549f7aaf0226ddbe03b2129d68d48a0f5b 27c3225afdbbf9f8717904c5f85c38d52a2ac66bf233162312263a297f4870f8 Loading...

	speresources.nexusguard.com/errpage/js/angular-sanitize.min.js	ScriptElement	6.0 kB	2023-03-12	2025-04-16
Pretty URL speresources.nexusguard.com/errpage/js/angular-sanitize.min.js IP 207.192.152.190 ASN #63005 NEXUS-22-63005 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 14:55 Last Seen2025-04-16 07:20 Times Seen21 Hash bacfe60d661bf26faa119cebc50c6518 83b0f02d070149b4c3ae4643c9c656afb0acf433 4713972b2c0b51aa082d103989f04db5614f162c070944e98f6bc3e94140062d Loading...

	unknown	Function	672 B	2023-06-14	2025-01-13
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-06-14 18:46 Last Seen2025-01-13 05:11 Times Seen17 Hash c3c4ce7e1ea58ce7f0c1defa96059b0d 4f5766935abfcfe274b8ea87597a0fa3a054fff6 9135b1f611a7385b38f3c1c84e639ff8baf3412f872bd51f58f3936f5d44ea60 Loading...

	unknown	Function	522 B	2023-06-14	2025-01-13
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-06-14 18:46 Last Seen2025-01-13 05:11 Times Seen17 Hash f834b92ed938cb83883f403a68e63c56 e2a730ef92383a83bffed51402e4624a524a6f1c e696f1eb0deda36ff4a17edf07af301a6a6739e6a80ba25edc3196e35d27d2d4 Loading...

	unknown	Function	408 B	2023-06-14	2025-01-13
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-06-14 18:46 Last Seen2025-01-13 05:11 Times Seen17 Hash d91e321516bcca1882635cdecf44df7a 57cc28f1532aec80f186ac816e7ec6e279f51f65 a202af67c6e4dc8d8dced2ad0e02043d9353793566a1e44b813a74b3c877b301 Loading...

	unknown	Function	440 B	2023-06-14	2025-01-13
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-06-14 18:46 Last Seen2025-01-13 05:11 Times Seen17 Hash d1f2f8f0a7e0602c506f8332096e2d5b 91c0d9bf1f4170b976c07dfc22452e53fea43794 f10dbc383da22978bb3dbacd89ac3c302d645301937676df954b8b46452c4273 Loading...

	122.11.185.41/	ScriptElement	0 B	0001-01-01	2025-05-09
Pretty URL 122.11.185.41/ IP 122.11.185.41 ASN #45474 NEXUSGUARD LIMITED Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-09 09:44 Times Seen4635144 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	speresources.nexusguard.com/errpage/js/angular-aria.min.js	ScriptElement	3.3 kB	2023-03-12	2025-03-24
Pretty URL speresources.nexusguard.com/errpage/js/angular-aria.min.js IP 207.192.152.190 ASN #63005 NEXUS-22-63005 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 14:55 Last Seen2025-03-24 18:24 Times Seen22 Hash b204841f02b10a0960f35f84a4a1dc98 d1eb244f908af297549a805a772a5de33a5ec945 55b807de0d07c7c4f7c6eb0768f98c852883f1d1ff44f768a6c8d28dd8313e3b Loading...

	speresources.nexusguard.com/errpage/error.html#404;91.90.42.154;gSYJDQAAAAAAAAAAW1oqmvAk;4040	ScriptElement	0 B	0001-01-01	2025-05-09
Pretty URL speresources.nexusguard.com/errpage/error.html#404;91.90.42.154;gSYJDQAAAAAAAAAAW1oqmvAk;4040 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-09 09:44 Times Seen4635144 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	unknown	Function	533 B	2023-06-14	2025-03-16
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-06-14 18:46 Last Seen2025-03-16 05:33 Times Seen19 Hash a9bb4dba3805f4606872ad46f8a21bf9 bb06d6fba744e3312f366e5250319d36cae83ef9 e416d585a1e75a79a97b882b0093617acfb3a20f69ad4e90014ea0ffba1de79c Loading...

	unknown	Function	672 B	2023-06-14	2025-01-13
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-06-14 18:46 Last Seen2025-01-13 05:11 Times Seen17 Hash b08b2091247bffb55c5d163a8fbf84d1 3a09b336d3bfa34374ca5b8a53f85029c9afa75b 8eb698dd305a6323d0dc985d1f325d668ab30ce139736c66fdec004a0f1b9569 Loading...

	unknown	Function	510 B	2023-06-14	2025-01-13
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-06-14 18:46 Last Seen2025-01-13 05:11 Times Seen17 Hash 2e3462a430564bd0b9439f00460ea6db b8320493529963623604ef6041395f916fdff601 b1f31deb287d88b7ca0f9f9e5bb89107017492ffd584282abe49750681b9d2c4 Loading...

	unknown	Function	432 B	2023-05-14	2025-01-13
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-05-14 12:09 Last Seen2025-01-13 05:11 Times Seen23 Hash 9c39beedd868a73b377e2ff04c0f6b0c 1e40cddc1e429e094acc975e992d0dfdc127c94b b6adeb022089548d30aff209597e9cc6fba6f730c6476d2b63462ae434951a11 Loading...

	unknown	Function	456 B	2023-06-14	2025-01-13
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-06-14 18:46 Last Seen2025-01-13 05:11 Times Seen16 Hash fa0287f4794e74c1b65b70a640a5bb20 00af9cd28b935479aa65a2a757343344ab0be03d cc2c24e06914dc088f1941f8e4310af4d4ec91943a48750e9378f29dad1e56c1 Loading...

	speresources.nexusguard.com/errpage/js/angular-animate.js	ScriptElement	134 kB	2023-03-12	2025-01-13
Pretty URL speresources.nexusguard.com/errpage/js/angular-animate.js IP 207.192.152.190 ASN #63005 NEXUS-22-63005 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 14:55 Last Seen2025-01-13 05:11 Times Seen18 Hash 11974f7151cb3bc9c5d4820756c60d18 09c68134b9303c813919123a6bacf995c8271b15 bd3b762fa5922fe8096e6f1534006c5185a2a9a033e38977879a94f36e3d8b90 Loading...

	unknown	Function	672 B	2023-06-14	2025-01-13
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-06-14 18:46 Last Seen2025-01-13 05:11 Times Seen16 Hash 0852eb1437d8e02539e4a6bec6b38440 15b396539395112f5067cb36e122b7522b1d97e1 a90e38c0c929f900cadb20037b101c0f5f4cda49501080b88029e815509ea89e Loading...

HTTP Transactions (14)

URL IP Response Size

ocsp.entrust.net/

23.38.202.187

1.6 kB

URL
ocsp.entrust.net/
IP
23.38.202.187:0
ASN
#16625 AKAMAI-AS

File type
data
Size
1.6 kB (1588 bytes)
Hash
8d477519307c582164e1e67cb4174681
5dc22e6b1229c12b130ea91ca67ce92221e1a213
5e2e5ab6bfd55e0ed6224960e4b611d42e3111fd9719b00934ecd972ff1a0221

HTTP Headers

POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "5E2E5AB6BFD55E0ED6224960E4B611D42E3111FD9719B00934ECD972FF1A0221"
Last-Modified: Fri, 01 Dec 2023 08:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3576
Expires: Fri, 01 Dec 2023 20:03:28 GMT
Date: Fri, 01 Dec 2023 19:03:52 GMT
Connection: keep-alive

122.11.185.41/

122.11.185.41

1.0 kB

URL User Request GET
122.11.185.41/
IP
122.11.185.41:0
ASN
#45474 NEXUSGUARD LIMITED

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
1.0 kB (1013 bytes)
Hash
cab73a53010d7cc193e6cf5a11aa5a10
c8b076df36904f839150b38e439ef4823d220d2a
f054fbe799b2d9a8549f1f97202d38e251d3e5eb6f7b47415e2ee13ddde46271

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 122.11.185.41
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
server: 01_1695174841
content-type: text/html;charset=utf-8
content-length: 1013
expires: -1
pragma: no-cache
cache-control: no-cache,no-store

122.11.185.41/favicon.ico

122.11.185.41

200 OK

1.0 kB

URL GET HTTP/1.1
122.11.185.41/favicon.ico
IP
122.11.185.41:80
ASN
#45474 NEXUSGUARD LIMITED

Requested by
http://122.11.185.41/

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
1.0 kB (1013 bytes)
Hash
9364cca635c3aaab204535d1f31f921e
6f2f3b14cca016d21541d357e9f8e9673708d3d2
6cc1c72430b909ad5841ff769494850afd110d9678a361b7ea47c0a72d52c95f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 122.11.185.41
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://122.11.185.41/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
server: 01_1695174841
content-type: text/html;charset=utf-8
content-length: 1013
expires: -1
pragma: no-cache
cache-control: no-cache,no-store

ocsp2.globalsign.com/cloudsslsha2g3

104.18.21.226

1.4 kB

URL
ocsp2.globalsign.com/cloudsslsha2g3
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1439 bytes)
Hash
40a0d5672556c799dddec40d4a382a6f
f82a57c83763e45ec0ba7c6ed8113b00abbde529
bc7a7167cb1086f52077893b115578021e24f077c98aef78d8eedcf71a570ed3

HTTP Headers

POST /cloudsslsha2g3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 19:03:53 GMT
Content-Type: application/ocsp-response
Content-Length: 1439
Connection: keep-alive
Expires: Tue, 05 Dec 2023 19:03:52 GMT
ETag: "f82a57c83763e45ec0ba7c6ed8113b00abbde529"
Last-Modified: Fri, 01 Dec 2023 19:03:53 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82ed97be291cb4f4-OSL

speresources.nexusguard.com/errpage/error.html

207.192.152.190

2.2 kB

URL
speresources.nexusguard.com/errpage/error.html
IP
207.192.152.190:0
ASN
#63005 NEXUS-22-63005

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
2.2 kB (2211 bytes)
Hash
d1f151a49c6ea43eb46ae6d816f8b049
23f1cd8adb2a9d1da984e35281e8fe5a9a0b93bf
0bb4f50cdc491f35ef329dcf2fd27cae66abd03ee8d8d632969cc160470bc264

HTTP Headers

GET /errpage/error.html HTTP/1.1
Host: speresources.nexusguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://122.11.185.41/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: 2.0.0
date: Fri, 01 Dec 2023 09:26:31 GMT
content-type: text/html
last-modified: Thu, 18 Jul 2019 00:05:13 GMT
etag: W/"5d2fb7b9-1463"
expires: Fri, 01 Dec 2023 12:26:31 GMT
cache-control: max-age=10800
content-encoding: gzip
vary: Accept-Encoding
x-nxg: 816190823 664436874
age: 34641
cache-stat: HIT
accept-ranges: bytes
content-length: 2211
strict-transport-security: max-age=86400
X-Firefox-Spdy: h2

speresources.nexusguard.com/errpage/css/angular-material.css

207.192.152.190

200 OK

38 kB

URL GET HTTP/2
speresources.nexusguard.com/errpage/css/angular-material.css
IP
207.192.152.190:443
ASN
#63005 NEXUS-22-63005

Requested by
https://speresources.nexusguard.com/errpage/error.html#404;91.90.42.154;gSYJDQAAAAAAAAAAW1oqmvAk;4040
Certificate
IssuerGlobalSign nv-sa
Subjectnexusguard.com
FingerprintDF:53:C7:9B:C4:F5:CB:FD:6E:D9:75:3F:C2:6C:4D:62:2C:05:8F:1E
ValidityTue, 10 Jan 2023 08:21:04 GMT - Sun, 11 Feb 2024 08:21:03 GMT

File type
ASCII text, with very long lines (459)
Size
38 kB (37637 bytes)
Hash
07955e0222e324c7b6c75c0918977297
b12c40b1315894c4f657fff1de5eecac2da6ad8f
f41a41375cd04d6d7d8fa31d929d70e553981bc8ab0c5ce3828910e16f936498

HTTP Headers

GET /errpage/css/angular-material.css HTTP/1.1
Host: speresources.nexusguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://speresources.nexusguard.com/errpage/error.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: 2.0.0
date: Fri, 01 Dec 2023 09:33:18 GMT
content-type: text/css
last-modified: Thu, 20 Sep 2018 07:21:38 GMT
etag: W/"5ba34a82-3c63f"
expires: Fri, 01 Dec 2023 12:33:18 GMT
cache-control: max-age=10800
content-encoding: gzip
vary: Accept-Encoding
x-nxg: 816516975 739082673
age: 34234
cache-stat: HIT
accept-ranges: bytes
content-length: 37637
strict-transport-security: max-age=86400
X-Firefox-Spdy: h2

speresources.nexusguard.com/errpage/js/angular-aria.min.js

207.192.152.190

200 OK

1.4 kB

URL GET HTTP/2
speresources.nexusguard.com/errpage/js/angular-aria.min.js
IP
207.192.152.190:443
ASN
#63005 NEXUS-22-63005

Requested by
https://speresources.nexusguard.com/errpage/error.html#404;91.90.42.154;gSYJDQAAAAAAAAAAW1oqmvAk;4040
Certificate
IssuerGlobalSign nv-sa
Subjectnexusguard.com
FingerprintDF:53:C7:9B:C4:F5:CB:FD:6E:D9:75:3F:C2:6C:4D:62:2C:05:8F:1E
ValidityTue, 10 Jan 2023 08:21:04 GMT - Sun, 11 Feb 2024 08:21:03 GMT

File type
ASCII text, with very long lines (542)
Size
1.4 kB (1389 bytes)
Hash
b204841f02b10a0960f35f84a4a1dc98
d1eb244f908af297549a805a772a5de33a5ec945
55b807de0d07c7c4f7c6eb0768f98c852883f1d1ff44f768a6c8d28dd8313e3b

HTTP Headers

GET /errpage/js/angular-aria.min.js HTTP/1.1
Host: speresources.nexusguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://speresources.nexusguard.com/errpage/error.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: 2.0.0
date: Fri, 01 Dec 2023 09:33:18 GMT
content-type: application/javascript
last-modified: Thu, 20 Sep 2018 07:21:38 GMT
etag: W/"5ba34a82-d05"
expires: Fri, 01 Dec 2023 12:33:18 GMT
cache-control: max-age=10800
content-encoding: gzip
vary: Accept-Encoding
x-nxg: 808569795 350519799
age: 34234
cache-stat: HIT
accept-ranges: bytes
content-length: 1389
strict-transport-security: max-age=86400
X-Firefox-Spdy: h2

speresources.nexusguard.com/errpage/js/angular-animate.js

207.192.152.190

200 OK

42 kB

URL GET HTTP/2
speresources.nexusguard.com/errpage/js/angular-animate.js
IP
207.192.152.190:443
ASN
#63005 NEXUS-22-63005

Requested by
https://speresources.nexusguard.com/errpage/error.html#404;91.90.42.154;gSYJDQAAAAAAAAAAW1oqmvAk;4040
Certificate
IssuerGlobalSign nv-sa
Subjectnexusguard.com
FingerprintDF:53:C7:9B:C4:F5:CB:FD:6E:D9:75:3F:C2:6C:4D:62:2C:05:8F:1E
ValidityTue, 10 Jan 2023 08:21:04 GMT - Sun, 11 Feb 2024 08:21:03 GMT

File type
ASCII text, with very long lines (339)
Size
42 kB (42286 bytes)
Hash
11974f7151cb3bc9c5d4820756c60d18
09c68134b9303c813919123a6bacf995c8271b15
bd3b762fa5922fe8096e6f1534006c5185a2a9a033e38977879a94f36e3d8b90

HTTP Headers

GET /errpage/js/angular-animate.js HTTP/1.1
Host: speresources.nexusguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://speresources.nexusguard.com/errpage/error.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: 2.0.0
date: Fri, 01 Dec 2023 09:33:18 GMT
content-type: application/javascript
last-modified: Thu, 20 Sep 2018 07:21:38 GMT
etag: W/"5ba34a82-20c3a"
expires: Fri, 01 Dec 2023 12:33:18 GMT
cache-control: max-age=10800
content-encoding: gzip
vary: Accept-Encoding
x-nxg: 808202693 751665569
age: 34234
cache-stat: HIT
accept-ranges: bytes
content-length: 42286
strict-transport-security: max-age=86400
X-Firefox-Spdy: h2

speresources.nexusguard.com/errpage/js/angular-sanitize.min.js

207.192.152.190

200 OK

3.2 kB

URL GET HTTP/2
speresources.nexusguard.com/errpage/js/angular-sanitize.min.js
IP
207.192.152.190:443
ASN
#63005 NEXUS-22-63005

Requested by
https://speresources.nexusguard.com/errpage/error.html#404;91.90.42.154;gSYJDQAAAAAAAAAAW1oqmvAk;4040
Certificate
IssuerGlobalSign nv-sa
Subjectnexusguard.com
FingerprintDF:53:C7:9B:C4:F5:CB:FD:6E:D9:75:3F:C2:6C:4D:62:2C:05:8F:1E
ValidityTue, 10 Jan 2023 08:21:04 GMT - Sun, 11 Feb 2024 08:21:03 GMT

File type
exported SGML document, ASCII text, with very long lines (1253)
Size
3.2 kB (3228 bytes)
Hash
bacfe60d661bf26faa119cebc50c6518
83b0f02d070149b4c3ae4643c9c656afb0acf433
4713972b2c0b51aa082d103989f04db5614f162c070944e98f6bc3e94140062d

HTTP Headers

GET /errpage/js/angular-sanitize.min.js HTTP/1.1
Host: speresources.nexusguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://speresources.nexusguard.com/errpage/error.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: 2.0.0
date: Fri, 01 Dec 2023 09:33:18 GMT
content-type: application/javascript
last-modified: Thu, 20 Sep 2018 07:21:38 GMT
etag: W/"5ba34a82-178b"
expires: Fri, 01 Dec 2023 12:33:18 GMT
cache-control: max-age=10800
content-encoding: gzip
vary: Accept-Encoding
x-nxg: 808569797 648905028
age: 34234
cache-stat: HIT
accept-ranges: bytes
content-length: 3228
strict-transport-security: max-age=86400
X-Firefox-Spdy: h2

speresources.nexusguard.com/errpage/js/angular.js

207.192.152.190

200 OK

316 kB

URL GET HTTP/2
speresources.nexusguard.com/errpage/js/angular.js
IP
207.192.152.190:443
ASN
#63005 NEXUS-22-63005

Requested by
https://speresources.nexusguard.com/errpage/error.html#404;91.90.42.154;gSYJDQAAAAAAAAAAW1oqmvAk;4040
Certificate
IssuerGlobalSign nv-sa
Subjectnexusguard.com
FingerprintDF:53:C7:9B:C4:F5:CB:FD:6E:D9:75:3F:C2:6C:4D:62:2C:05:8F:1E
ValidityTue, 10 Jan 2023 08:21:04 GMT - Sun, 11 Feb 2024 08:21:03 GMT

File type
ASCII text
Size
316 kB (315769 bytes)
Hash
7ee4960c3fdfa8a88b3b540e19fcf7ff
bede50a38baeba3db7a4df460695d01ecb437273
9a30224971ba19d73b34a1de0ffff57fa3561367f477fe81d62a17ce4b12a5aa

HTTP Headers

GET /errpage/js/angular.js HTTP/1.1
Host: speresources.nexusguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://speresources.nexusguard.com/errpage/error.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: 2.0.0
date: Fri, 01 Dec 2023 09:33:18 GMT
content-type: application/javascript
last-modified: Thu, 20 Sep 2018 07:21:38 GMT
etag: W/"5ba34a82-fe2f3"
expires: Fri, 01 Dec 2023 12:33:18 GMT
cache-control: max-age=10800
content-encoding: gzip
vary: Accept-Encoding
x-nxg: 813512700 485425490
age: 34234
cache-stat: HIT
accept-ranges: bytes
content-length: 315769
strict-transport-security: max-age=86400
X-Firefox-Spdy: h2

speresources.nexusguard.com/errpage/js/angular-material.js

207.192.152.190

200 OK

162 kB

URL GET HTTP/2
speresources.nexusguard.com/errpage/js/angular-material.js
IP
207.192.152.190:443
ASN
#63005 NEXUS-22-63005

Requested by
https://speresources.nexusguard.com/errpage/error.html#404;91.90.42.154;gSYJDQAAAAAAAAAAW1oqmvAk;4040
Certificate
IssuerGlobalSign nv-sa
Subjectnexusguard.com
FingerprintDF:53:C7:9B:C4:F5:CB:FD:6E:D9:75:3F:C2:6C:4D:62:2C:05:8F:1E
ValidityTue, 10 Jan 2023 08:21:04 GMT - Sun, 11 Feb 2024 08:21:03 GMT

File type
Unicode text, UTF-8 text, with very long lines (1197)
Size
162 kB (161515 bytes)
Hash
beaf324b04ad7920a54fd6e69531ee50
50ab3e549f7aaf0226ddbe03b2129d68d48a0f5b
27c3225afdbbf9f8717904c5f85c38d52a2ac66bf233162312263a297f4870f8

HTTP Headers

GET /errpage/js/angular-material.js HTTP/1.1
Host: speresources.nexusguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://speresources.nexusguard.com/errpage/error.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: 2.0.0
date: Fri, 01 Dec 2023 09:33:19 GMT
content-type: application/javascript
last-modified: Thu, 20 Sep 2018 07:21:38 GMT
etag: W/"5ba34a82-82d22"
expires: Fri, 01 Dec 2023 12:33:18 GMT
cache-control: max-age=10800
content-encoding: gzip
vary: Accept-Encoding
x-nxg: 808202695 464392385
age: 34234
cache-stat: HIT
accept-ranges: bytes
content-length: 161515
strict-transport-security: max-age=86400
X-Firefox-Spdy: h2

speresources.nexusguard.com/errpage/json/4040.json

207.192.152.190

200 OK

574 B

URL GET HTTP/2
speresources.nexusguard.com/errpage/json/4040.json
IP
207.192.152.190:443
ASN
#63005 NEXUS-22-63005

Requested by
https://speresources.nexusguard.com/errpage/error.html#404;91.90.42.154;gSYJDQAAAAAAAAAAW1oqmvAk;4040
Certificate
IssuerGlobalSign nv-sa
Subjectnexusguard.com
FingerprintDF:53:C7:9B:C4:F5:CB:FD:6E:D9:75:3F:C2:6C:4D:62:2C:05:8F:1E
ValidityTue, 10 Jan 2023 08:21:04 GMT - Sun, 11 Feb 2024 08:21:03 GMT

File type
JSON data\012- , Unicode text, UTF-8 text
Size
574 B (574 bytes)
Hash
d9fd7c1a47cc6fdc01ff34e1c6579aec
e043886e73e393b510be12fcd9dbbeb3f1dc101b
6207d0d870e861924f9da2239f81390e76af5631cb2840c4908c65767b45a2e7

HTTP Headers

GET /errpage/json/4040.json HTTP/1.1
Host: speresources.nexusguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://speresources.nexusguard.com/errpage/error.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: 2.0.0
date: Fri, 01 Dec 2023 09:45:29 GMT
content-type: application/json
last-modified: Thu, 20 Sep 2018 07:21:38 GMT
etag: W/"5ba34a82-482"
expires: Fri, 01 Dec 2023 12:45:29 GMT
cache-control: max-age=10800
content-encoding: gzip
vary: Accept-Encoding
x-nxg: 615232061 680789045
age: 33504
cache-stat: HIT
accept-ranges: bytes
content-length: 574
strict-transport-security: max-age=86400
X-Firefox-Spdy: h2

speresources.nexusguard.com/errpage/img/erro-page-img.jpg

207.192.152.190

200 OK

57 kB

URL GET HTTP/2
speresources.nexusguard.com/errpage/img/erro-page-img.jpg
IP
207.192.152.190:443
ASN
#63005 NEXUS-22-63005

Requested by
https://speresources.nexusguard.com/errpage/error.html#404;91.90.42.154;gSYJDQAAAAAAAAAAW1oqmvAk;4040
Certificate
IssuerGlobalSign nv-sa
Subjectnexusguard.com
FingerprintDF:53:C7:9B:C4:F5:CB:FD:6E:D9:75:3F:C2:6C:4D:62:2C:05:8F:1E
ValidityTue, 10 Jan 2023 08:21:04 GMT - Sun, 11 Feb 2024 08:21:03 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 315x538, components 3\012- data
Size
57 kB (56746 bytes)
Hash
4589b5cd16fcae4f4088b0f194121283
f17ff4d175152dda2979cf3b758f3ae852c3efca
d5f26e127998a77326305b5c216dcd11796052587ab57495180a5cb79774c338

HTTP Headers

GET /errpage/img/erro-page-img.jpg HTTP/1.1
Host: speresources.nexusguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://speresources.nexusguard.com/errpage/error.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: 2.0.0
date: Fri, 01 Dec 2023 19:03:54 GMT
content-type: image/jpeg
last-modified: Thu, 20 Sep 2018 07:21:38 GMT
etag: W/"5ba34a82-ddaa"
expires: Fri, 01 Dec 2023 22:03:54 GMT
cache-control: max-age=10800
content-encoding: gzip
vary: Accept-Encoding
x-nxg: 809332560
age: 0
cache-stat: MISS
accept-ranges: bytes
strict-transport-security: max-age=86400
X-Firefox-Spdy: h2

speresources.nexusguard.com/errpage/error.html

207.192.152.190

200 OK

5.2 kB

URL GET HTTP/2
speresources.nexusguard.com/errpage/error.html
IP
207.192.152.190:443
ASN
#63005 NEXUS-22-63005

Requested by
http://122.11.185.41/
Certificate
IssuerGlobalSign nv-sa
Subjectnexusguard.com
FingerprintDF:53:C7:9B:C4:F5:CB:FD:6E:D9:75:3F:C2:6C:4D:62:2C:05:8F:1E
ValidityTue, 10 Jan 2023 08:21:04 GMT - Sun, 11 Feb 2024 08:21:03 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5782), with no line terminators
Size
5.2 kB (5219 bytes)
Hash
8e9447f5bdfde8f6c4f0db100518a4d1
251ca36ffb7bb32137b140cb97042ed8a2de54c3
6b432ea1923d17e38ba4d0da9e6e8be7777edd7303223be57563c76bca4a0678

HTTP Headers

GET /errpage/error.html HTTP/1.1
Host: speresources.nexusguard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://122.11.185.41/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: 2.0.0
date: Fri, 01 Dec 2023 09:26:31 GMT
content-type: text/html
last-modified: Thu, 18 Jul 2019 00:05:13 GMT
etag: W/"5d2fb7b9-1463"
expires: Fri, 01 Dec 2023 12:26:31 GMT
cache-control: max-age=10800
content-encoding: gzip
vary: Accept-Encoding
x-nxg: 816190823 664436874
age: 34641
cache-stat: HIT
accept-ranges: bytes
content-length: 2211
strict-transport-security: max-age=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (18)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by