Report - nes.thegioilaptrinh.net/configads_nes.php?_=1698278846241

Report Overview

Visited public
2023-10-26 09:20:52
Tags
URL
nes.thegioilaptrinh.net/configads_nes.php?_=1698278846241
Finishing URL
nes.thegioilaptrinh.net/configads_nes.php?_=1698278846241
IP / ASN
104.156.239.199
#20473 AS-CHOOPA
Title
nes.thegioilaptrinh.net/configads_nes.php?_=1698278846241

Detections

urlquery

0

Network Intrusion Detection

4

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
nes.thegioilaptrinh.net	unknown	2011-01-11	2022-11-30 02:23:18	2023-07-14 01:32:45	821 B	1.4 kB	104.156.239.199

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-10-26 09:20:36	high	104.156.239.199	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2023-10-26 09:20:36	high	104.156.239.199	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2023-10-26 09:20:37	high	104.156.239.199	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
2023-10-26 09:20:37	high	104.156.239.199	Client IP	ET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	nes.thegioilaptrinh.net/configads_nes.php?_=1698278846241	104.156.239.199	200 OK	362 B
URL User Request GET HTTP/1.1 nes.thegioilaptrinh.net/configads_nes.php?_=1698278846241 IP 104.156.239.199:80 ASN #20473 AS-CHOOPA File type JSON data\012- , ASCII text, with CRLF line terminators Size 362 B (362 bytes) Hash 81c61452cac4b271b1c5264dd95773e8 b92e2751d39c3035580cd3096069860a94504691 2c0e0378f83da923a6c910c8120b8feab1d6de874135fe3a477067d259584c23 HTTP Headers `GET /configads_nes.php?_=1698278846241 HTTP/1.1 Host: nes.thegioilaptrinh.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 26 Oct 2023 09:20:36 GMT Server: Apache/2.2.15 (CentOS) X-Powered-By: PHP/7.1.33 Access-Control-Allow-Origin: * Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: max-age:3600, public Expires: 3600 Access-Control-Allow-Headers: origin, x-requested-with, content-type Access-Control-Allow-Methods: PUT, GET, POST, DELETE, OPTIONS Access-Control-Allow-Credentials: true Content-Length: 362 Connection: close Content-Type: text/html; charset=UTF-8`

	nes.thegioilaptrinh.net/favicon.ico	104.156.239.199	404 Not Found	306 B
URL GET HTTP/1.1 nes.thegioilaptrinh.net/favicon.ico IP 104.156.239.199:80 ASN #20473 AS-CHOOPA Requested by http://nes.thegioilaptrinh.net/configads_nes.php?_=1698278846241 File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 306 B (306 bytes) Hash 86f5d0655580ff96ef4c8a1c151e6a7f dd6420ea62b3003d411284d60abcc063c31a3802 ac8c24ffc98df72b6cbb9054645c2f4c4c5a6b29693ce7e530122869c40b74a2 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: nes.thegioilaptrinh.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://nes.thegioilaptrinh.net/configads_nes.php?_=1698278846241 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Date: Thu, 26 Oct 2023 09:20:37 GMT Server: Apache/2.2.15 (CentOS) Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 306 Connection: close Content-Type: text/html; charset=iso-8859-1`