Report - xso23.cfd/search/javdb/%E4%B8%80%E7%BA%BF/0.html

Report Overview

Visitedpublic

2025-06-27 03:20:51

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
xso23.cfd	unknown	2025-01-17	2025-05-25	2025-06-27	912 B	2.6 kB	104.21.112.1
xn--0626-2xyunsocom-pb4x493dp5pyia2518ac1ta.xyunso0022.top	unknown	2025-05-27	2025-06-26	2025-06-26	578 B	6.2 kB	104.21.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-06-27	medium	xyunso0022.top	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	xso23.cfd/search/javdb/%E4%B8%80%E7%BA%BF/0.html	ScriptElement	199 B	2025-06-27	2025-06-27
URL xso23.cfd/search/javdb/%E4%B8%80%E7%BA%BF/0.html IP / ASN 104.21.112.1 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 2025-06-27 Last Seen 2025-06-27 Times Seen 1 Size 199 B (199 bytes) MD5 f791f09c9095fd2f0d7da05c50bb42ef SHA1 b741a6f5203c84c432be8e6a0fe7a4024d65b646 SHA256 3e9795403cb9ed15cb2a090a378881b4b9d27df0955bd30d40eccc668961d6c5 Format Code Loading...

	xn--0626-2xyunsocom-pb4x493dp5pyia2518ac1ta.xyunso0022.top/?m=search&u=javdb&k=%E4%B8%80%E7%BA%BF&p=0&mod=jump	ScriptElement	226 B	2025-06-26	2025-06-27
URL xn--0626-2xyunsocom-pb4x493dp5pyia2518ac1ta.xyunso0022.top/?m=search&u=javdb&k=%E4%B8%80%E7%BA%BF&p=0&mod=jump IP / ASN 104.21.96.1 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded true Resource Info First Seen 2025-06-26 Last Seen 2025-06-27 Times Seen 8 Size 226 B (226 bytes) MD5 bf9fe7f6224d425edb23ac8670979580 SHA1 4298025964dba625d35e3b6ac52990e5b60b402b SHA256 5faf9cc901440585fa5e4160dc178db2762728c2c0e87d5cd3d4d4dc0b509ca6 Format Code Loading...

HTTP Transactions (3)

URL IP Response Size

GET xso23.cfd/favicon.ico

104.21.112.1

404 Not Found

146 B

URL

xso23.cfd/favicon.ico

IP / ASN

104.21.112.1

#13335 CLOUDFLARENET

Requested byhttps://xso23.cfd/search/javdb/%E4%B8%80%E7%BA%BF/0.html

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-03-07

Last Seen2025-08-02

Times Seen211046

Size146 B (146 bytes)

MD58eec510e57f5f732fd2cce73df7b73ef

SHA13c0af39ecb3753c5fee3b53d063c7286019eac3b

SHA25655f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

Certificate Info

IssuerCLOUDFLARE, INC.

Subjectxso23.cfd

FingerprintC8:F5:95:DA:59:A8:99:46:BB:92:08:87:CF:AC:BD:8F:2A:EC:FD:BF

ValidityThu, 15 May 2025 09:48:54 GMT - Wed, 13 Aug 2025 09:56:00 GMT

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: xso23.cfd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Fri, 27 Jun 2025 03:20:30 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: EXPIRED
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=HP6Kv6LPvuZjuxfjKtZPSZK6d07Vrao%2F2lbCi8Oc0NdW5THjwG2Id3pu6V89ruR9MbQQeGTVw16o2TNAqDm7IFxFv9BhjOU%3D"}]}
content-encoding: br
cf-ray: 9561cf134df5569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET xn--0626-2xyunsocom-pb4x493dp5pyia2518ac1ta.xyunso0022.top/?m=search&u=javdb&k=%E4%B8%80%E7%BA%BF&p=0&mod=jump

104.21.96.1

200 OK

5.5 kB

URL

xn--0626-2xyunsocom-pb4x493dp5pyia2518ac1ta.xyunso0022.top/?m=search&u=javdb&k=%E4%B8%80%E7%BA%BF&p=0&mod=jump

IP / ASN

104.21.96.1

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text

First Seen2025-06-27

Last Seen2025-06-27

Times Seen1

Size5.5 kB (5548 bytes)

MD5415ef43e58763738ce2582c40d8f8bb3

SHA1d6001a0fc8eb210ec1f02efb1382c73cc27c6840

SHA256bc616484aad32b9ea6de03b1a4e6463e7f61dd998b13e0517a6d1716f3f8859c

Certificate Info

IssuerGoogle Trust Services

Subjectxyunso0022.top

Fingerprint70:8E:1E:7F:B5:CE:25:37:BE:76:B8:A5:9A:18:B6:D8:BE:40:D7:2B

ValidityTue, 27 May 2025 08:10:31 GMT - Mon, 25 Aug 2025 09:09:11 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?m=search&u=javdb&k=%E4%B8%80%E7%BA%BF&p=0&mod=jump HTTP/1.1
Host: xn--0626-2xyunsocom-pb4x493dp5pyia2518ac1ta.xyunso0022.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 27 Jun 2025 03:20:31 GMT
content-type: text/html;charset=utf-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=YZ71uY5tzG%2Fg72%2BmEWP9HbeOixEzOb5jq84K%2FFx3ES4pRK4L%2FS6sJZwPewsW0zIVJR4mcSLYBuqF%2B8gB17Ke%2FOxLMDpz31VT11sKbEfKjFdXeoj8vntxItysNx2dl%2BRdrQAxc60fI5zCSDzSDyb32gccsf0XeWOh"}]}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 9561cf181ac6b4ff-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET xso23.cfd/search/javdb/%E4%B8%80%E7%BA%BF/0.html

104.21.112.1

200 OK

1.4 kB

URL

xso23.cfd/search/javdb/%E4%B8%80%E7%BA%BF/0.html

IP / ASN

104.21.112.1

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text

First Seen2025-06-27

Last Seen2025-06-27

Times Seen1

Size1.4 kB (1380 bytes)

MD57cf046e9f0d7c3a8f163a053d1d12490

SHA1039e3fb82f2a1b49c3f5ecf0e411e6b70757264d

SHA25678fa80aa09442a224cbf1939f5c9fe53f88293e48d860ea059a43267874a4f3c

Certificate Info

IssuerCLOUDFLARE, INC.

Subjectxso23.cfd

FingerprintC8:F5:95:DA:59:A8:99:46:BB:92:08:87:CF:AC:BD:8F:2A:EC:FD:BF

ValidityThu, 15 May 2025 09:48:54 GMT - Wed, 13 Aug 2025 09:56:00 GMT

HTTP Headers

GET /search/javdb/%E4%B8%80%E7%BA%BF/0.html HTTP/1.1
Host: xso23.cfd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 27 Jun 2025 03:20:29 GMT
content-type: text/html;charset=utf-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=XETj1ZgjXdv9kY6lOM6VFGeWf66H4LckVyszom2KwaPg2adJJ3o%2BWEfty5gzJ0xdxdirpTwBLx0TWVhfCRPwheuJVxvbH58%3D"}]}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 9561cf0d6bdd569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2