Report - holding-990.cf

Report Overview

Visited public
2023-10-26 19:54:05
Tags
URL
holding-990.cf
Finishing URL
holding-990.cf/
IP / ASN
66.45.227.171
#19318 IS-AS-1
Title
My Blog - My WordPress Blog

Detections

urlquery

0

Network Intrusion Detection

2

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.comodoca.com	1696	2002-11-13	2012-05-21 09:01:17	2023-10-26 20:03:05	331 B	1.0 kB	104.18.14.101
holding-990.cf	unknown	unknown	2022-09-12 15:30:08	2023-04-28 01:55:49	1.8 kB	6.1 kB	66.45.227.171

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-10-26 19:53:48	low	Client IP	Internal IP	ET INFO DNS Query for Suspicious .cf Domain
2023-10-26 19:53:48	low	Client IP	66.45.227.171	ET INFO Suspicious Domain (*.cf) in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Response	Size
	ocsp.comodoca.com/	104.18.14.101		472 B
URL ocsp.comodoca.com/ IP 104.18.14.101:0 ASN #13335 CLOUDFLARENET File type data Size 472 B (472 bytes) Hash 03a7db6c71ea3684711e53b7645b58b6 f52fe662279a7ac0cefccc2a2c0c3eecdb45612c 3b957881af811413f5d26f7fd145e3f71d41cf7a21fb68fbc8ca2fac7be79d18 HTTP Headers `POST / HTTP/1.1 Host: ocsp.comodoca.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Thu, 26 Oct 2023 19:53:47 GMT Content-Type: application/ocsp-response Content-Length: 472 Connection: keep-alive Last-Modified: Wed, 25 Oct 2023 16:05:59 GMT Expires: Wed, 01 Nov 2023 16:05:58 GMT Etag: "f52fe662279a7ac0cefccc2a2c0c3eecdb45612c" Cache-Control: max-age=504130,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb5 X-Frame-Options: SAMEORIGIN CF-Cache-Status: MISS Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 81c53f596abcb4f1-OSL

	holding-990.cf/	66.45.227.171	200 OK	1.2 kB
URL User Request GET HTTP/2 holding-990.cf/ IP 66.45.227.171:443 ASN #19318 IS-AS-1 Certificate IssuercPanel, Inc. Subjectholding-990.cf Fingerprint1C:A6:00:B5:5A:4A:3C:DA:0D:4C:B1:5B:D3:91:9A:9F:44:87:D5:12 ValidityThu, 05 Oct 2023 00:00:00 GMT - Wed, 03 Jan 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 1.2 kB (1220 bytes) Hash 2a7cd81729e44d3b1ee591f4570462e0 63a4818ec99b6b2e17e1526ed541a8e98f70aac6 d9c938d61dcc03cc1f6227ed5a71a399f0ee4ee65bde59d693bd499106ae8cb3 HTTP Headers `GET / HTTP/1.1 Host: holding-990.cf User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-type: text/html last-modified: Sat, 29 Jul 2023 07:37:29 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 1220 date: Thu, 26 Oct 2023 19:53:47 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Firefox-Spdy: h2`

	holding-990.cf/style.css	66.45.227.171	404 Not Found	1.2 kB
URL GET HTTP/2 holding-990.cf/style.css IP 66.45.227.171:443 ASN #19318 IS-AS-1 Requested by https://holding-990.cf/ Certificate IssuercPanel, Inc. Subjectholding-990.cf Fingerprint1C:A6:00:B5:5A:4A:3C:DA:0D:4C:B1:5B:D3:91:9A:9F:44:87:D5:12 ValidityThu, 05 Oct 2023 00:00:00 GMT - Wed, 03 Jan 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators Size 1.2 kB (1238 bytes) Hash 0bde7d4b3da67537eaf9188e6f8049cf 64300fc482d01d38b40ab20e15960b6509665e5a 5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807 HTTP Headers `GET /style.css HTTP/1.1 Host: holding-990.cf User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://holding-990.cf/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 404 Not Found cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Thu, 26 Oct 2023 19:53:48 GMT server: LiteSpeed X-Firefox-Spdy: h2`

	holding-990.cf/favicon.ico	66.45.227.171	404 Not Found	1.2 kB
URL GET HTTP/2 holding-990.cf/favicon.ico IP 66.45.227.171:443 ASN #19318 IS-AS-1 Requested by https://holding-990.cf/ Certificate IssuercPanel, Inc. Subjectholding-990.cf Fingerprint1C:A6:00:B5:5A:4A:3C:DA:0D:4C:B1:5B:D3:91:9A:9F:44:87:D5:12 ValidityThu, 05 Oct 2023 00:00:00 GMT - Wed, 03 Jan 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators Size 1.2 kB (1238 bytes) Hash 0bde7d4b3da67537eaf9188e6f8049cf 64300fc482d01d38b40ab20e15960b6509665e5a 5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: holding-990.cf User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://holding-990.cf/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 404 Not Found cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Thu, 26 Oct 2023 19:53:48 GMT server: LiteSpeed X-Firefox-Spdy: h2`

	holding-990.cf/Quicksand-Regular.ttf	66.45.227.171	404 Not Found	1.2 kB
URL GET HTTP/2 holding-990.cf/Quicksand-Regular.ttf IP 66.45.227.171:443 ASN #19318 IS-AS-1 Requested by https://holding-990.cf/ Certificate IssuercPanel, Inc. Subjectholding-990.cf Fingerprint1C:A6:00:B5:5A:4A:3C:DA:0D:4C:B1:5B:D3:91:9A:9F:44:87:D5:12 ValidityThu, 05 Oct 2023 00:00:00 GMT - Wed, 03 Jan 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators Size 1.2 kB (1238 bytes) Hash 0bde7d4b3da67537eaf9188e6f8049cf 64300fc482d01d38b40ab20e15960b6509665e5a 5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807 HTTP Headers `GET /Quicksand-Regular.ttf HTTP/1.1 Host: holding-990.cf User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://holding-990.cf/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 404 Not Found cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Thu, 26 Oct 2023 19:53:48 GMT server: LiteSpeed X-Firefox-Spdy: h2`