Report - erell.net/

Report Overview

Submitted URL
erell.net/
IP
146.88.234.86
ASN
#53589 PLANETHOSTER-8
Submitted
2024-05-04 16:18:02
Access
public
Website Title
Bientôt de retour/Back online soon.
Final URL
erell.net/cgi-sys/suspendedpage.cgi
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
erell.net	unknown	2017-07-20	2017-09-06	2021-02-02	967 B	1.8 kB	146.88.234.86
www.planethoster.net	unknown	2007-12-25	2012-11-09	2024-01-07	872 B	998 B	199.16.128.180
cdn.planethoster.net	unknown	2007-12-25	2012-09-30	2024-01-28	449 B	36 kB	199.188.223.22
www.planethoster.com	unknown	2006-10-17	2018-07-08	2024-03-19	872 B	4.1 kB	185.22.111.20
assets.planethoster.com	unknown	2006-10-17	2018-12-03	2024-03-03	454 B	1.8 kB	185.22.111.21

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	erell.net/	SwissPass
2024-05-04	medium	erell.net/	SwissPass

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	erell.net	Sinkholed
2024-05-04	medium	erell.net	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (8)

URL IP Response Size

erell.net/

146.88.234.86

302 Found

227 B

URL User Request GET HTTP/2
erell.net/
IP
146.88.234.86:443
ASN
#53589 PLANETHOSTER-8

Certificate
IssuerLet's Encrypt
Subject*.zenaujardin.com
FingerprintB5:1C:32:05:0D:42:87:2C:6B:08:D5:1A:8A:FA:55:31:BC:19:E3:60
ValidityMon, 04 Mar 2024 02:39:04 GMT - Sun, 02 Jun 2024 02:39:03 GMT

File type
HTML document, ASCII text
Size
227 B (227 bytes)
Hash
c7a065b31d8a886f9f8ee27d9e3a154e
ecbdccaa4268123c2941d4dae8084ad5d5ee26a0
1f26118f853a94f1c75cb09e4af06689e1b99f24b1a03ea1211afe5c29b6c3c5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	SwissPass
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: erell.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://erell.net/cgi-sys/suspendedpage.cgi
content-length: 227
content-type: text/html; charset=iso-8859-1
date: Sat, 04 May 2024 16:17:37 GMT
server: Apache
X-Firefox-Spdy: h2

erell.net/cgi-sys/suspendedpage.cgi

146.88.234.86

200 OK

1.2 kB

URL User Request GET HTTP/2
erell.net/cgi-sys/suspendedpage.cgi
IP
146.88.234.86:443
ASN
#53589 PLANETHOSTER-8

Certificate
IssuerLet's Encrypt
Subject*.zenaujardin.com
FingerprintB5:1C:32:05:0D:42:87:2C:6B:08:D5:1A:8A:FA:55:31:BC:19:E3:60
ValidityMon, 04 Mar 2024 02:39:04 GMT - Sun, 02 Jun 2024 02:39:03 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1660), with CRLF, LF line terminators
Size
1.2 kB (1156 bytes)
Hash
7caf7c4115b78a4cf614630507f74ce8
b538460c62878ab3af3424cd6ced00428061c97e
e6c899d73cb9ac5d3973900bf8b04a8d7dc2f77908f6d6190468fd02a2aeabdb

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	SwissPass
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cgi-sys/suspendedpage.cgi HTTP/1.1
Host: erell.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
content-length: 1156
content-type: text/html
date: Sat, 04 May 2024 16:17:37 GMT
server: Apache
X-Firefox-Spdy: h2

www.planethoster.net/suspended/images/icon_page_suspension.png

199.16.128.180

301 Moved Permanently

278 B

URL GET HTTP/2
www.planethoster.net/suspended/images/icon_page_suspension.png
IP
199.16.128.180:443
ASN
#53589 PLANETHOSTER-8

Requested by
https://erell.net/cgi-sys/suspendedpage.cgi
Certificate
IssuerLet's Encrypt
Subjectplanethoster.net
Fingerprint59:BD:F6:96:4C:3C:95:26:A4:88:32:B8:46:D3:73:0F:B2:35:C8:F9
ValiditySat, 30 Mar 2024 21:35:18 GMT - Fri, 28 Jun 2024 21:35:17 GMT

File type
HTML document, ASCII text
Size
278 B (278 bytes)
Hash
39c38730dd31fb2cda58c0f2b7d7c47a
d2ec9df18eb7dd72ffbc28515fde631071fef7b0
4211ce13351ea5d6e4d5eb4eddec1a77fbd6382b81dfa04ad2670aa0bf758187

HTTP Headers

GET /suspended/images/icon_page_suspension.png HTTP/1.1
Host: www.planethoster.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://erell.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
location: https://www.planethoster.com/suspended/images/icon_page_suspension.png
content-length: 278
content-type: text/html; charset=iso-8859-1
date: Sat, 04 May 2024 16:17:38 GMT
server: Apache
X-Firefox-Spdy: h2

www.planethoster.net/favicon.ico

199.16.128.180

248 B

URL GET
www.planethoster.net/favicon.ico
IP
199.16.128.180:0
ASN
#53589 PLANETHOSTER-8

Requested by
https://erell.net/cgi-sys/suspendedpage.cgi
Certificate
IssuerLet's Encrypt
Subjectplanethoster.net
Fingerprint59:BD:F6:96:4C:3C:95:26:A4:88:32:B8:46:D3:73:0F:B2:35:C8:F9
ValiditySat, 30 Mar 2024 21:35:18 GMT - Fri, 28 Jun 2024 21:35:17 GMT

File type
HTML document, ASCII text
Size
248 B (248 bytes)
Hash
9d19c8cfb5ae91204a7865abdc8eab29
b3795f4551c7b315f3bc21f6f180a25b632eb589
4b0ec08692fd771338192116cc49c4273fe5660f4b31522630bb042c0191421d

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.planethoster.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://erell.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
location: https://www.planethoster.com/favicon.ico
content-length: 248
content-type: text/html; charset=iso-8859-1
date: Sat, 04 May 2024 16:17:38 GMT
server: Apache
X-Firefox-Spdy: h2

cdn.planethoster.net/suspended/images/bg_page_suspension.jpg

199.188.223.22

200 OK

36 kB

URL GET HTTP/2
cdn.planethoster.net/suspended/images/bg_page_suspension.jpg
IP
199.188.223.22:443
ASN
#53589 PLANETHOSTER-8

Requested by
https://erell.net/cgi-sys/suspendedpage.cgi
Certificate
IssuerLet's Encrypt
Subjectmail.cdn.planethoster.net
Fingerprint75:C7:38:18:11:F0:4B:B6:F1:8E:05:A3:32:A3:EF:A2:0D:F0:CC:09
ValidityThu, 28 Mar 2024 19:53:21 GMT - Wed, 26 Jun 2024 19:53:20 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 2000x1000, components 3
Size
36 kB (36272 bytes)
Hash
8a7dcdb3582fd3f5ca8a2127a60b41b8
8f65c6f57f37effe497d49f7bb81757856c3e8c8
d08f4d33bae58a8124dc3e865489e4e8f047226513f81c00efb93f5c3da9afb6

HTTP Headers

GET /suspended/images/bg_page_suspension.jpg HTTP/1.1
Host: cdn.planethoster.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://erell.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Tue, 22 Sep 2015 20:18:33 GMT
accept-ranges: bytes
content-length: 36272
content-type: image/jpeg
date: Sat, 04 May 2024 16:17:38 GMT
server: Apache
X-Firefox-Spdy: h2

www.planethoster.com/favicon.ico

185.22.111.20

1.1 kB

URL GET
www.planethoster.com/favicon.ico
IP
185.22.111.20:0
ASN
#53589 PLANETHOSTER-8

Requested by
https://erell.net/cgi-sys/suspendedpage.cgi
Certificate
IssuerSectigo Limited
Subjectwww.planethoster.com
Fingerprint3A:AF:A1:9D:1A:2A:DB:8A:DF:19:65:19:E4:29:23:5D:DB:52:D6:73
ValidityMon, 12 Jun 2023 00:00:00 GMT - Thu, 11 Jul 2024 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
1.1 kB (1126 bytes)
Hash
91e93e4b578788f2e340fe393c06e95e
5f96de1b57e78a0c142ecfb6f60b54f351034652
f0679ee3490bb04f587373f5a44df75664b8ce5d3401f1b9daad11601c34f1c4

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.planethoster.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://erell.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
last-modified: Wed, 11 Oct 2023 15:20:20 GMT
accept-ranges: bytes
cache-control: max-age=604800, public
expires: Sat, 11 May 2024 16:17:39 GMT
vary: Accept-Encoding,User-Agent
content-encoding: br
strict-transport-security: max-age=31536000
set-cookie: HttpOnly;Secure
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' connect.facebook.net https://fp.zenaps.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.dwin1.com/ https://www.youtube.com/iframe_api https://s.ytimg.com https://assets.planethoster.com/ https://maps.googleapis.com/ https://ads2.adverline.com/ https://tags.dynamo.one/ https://smct.co/ https://apis.google.com/ https://widget.trustpilot.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://bat.bing.com/ https://lantern.roeyecdn.com/ https://googleads.g.doubleclick.net/ https://www.clarity.ms/; img-src 'self' www.facebook.com data: https://www.planethoster.com/ https://assets.planethoster.com/ https://maps.gstatic.com/ https://smct.co/ https://www.google-analytics.com/ https://www.google.com/ https://www.google.ca/ https://www.google.fr/ https://www.google.be/ https://www.google.ch/ https://bat.bing.com/ https://lantern.roeye.com/ https://c.clarity.ms/; font-src 'self' data: fonts.gstatic.com https://assets.planethoster.com/; frame-src https://www.awin1.com/ https://www.zenaps.com/ https://ads2.adverline.com/ https://staticxx.facebook.com/ https://www.google.com/ https://www.facebook.com/ https://player.vimeo.com https://www.youtube.com/ https://tags.dynamo.one/ https://smct.co/ https://accounts.google.com/ https://widget.trustpilot.com/ https://td.doubleclick.net/; connect-src 'self' https://stats.g.doubleclick.net/ https://fp.zenaps.com/ https://assets.planethoster.com/ https://smct.co/ https://widget.trustpilot.com/ https://www.google-analytics.com/ https://pagead2.googlesyndication.com/ https://bat.bing.com/ https://z.clarity.ms/; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://assets.planethoster.com/;
content-length: 1126
content-type: image/x-icon
date: Sat, 04 May 2024 16:17:39 GMT
server: Apache
X-Firefox-Spdy: h2

www.planethoster.com/suspended/images/icon_page_suspension.png

185.22.111.20

301 Moved Permanently

281 B

URL GET HTTP/2
www.planethoster.com/suspended/images/icon_page_suspension.png
IP
185.22.111.20:443
ASN
#53589 PLANETHOSTER-8

Requested by
https://erell.net/cgi-sys/suspendedpage.cgi
Certificate
IssuerSectigo Limited
Subjectwww.planethoster.com
Fingerprint3A:AF:A1:9D:1A:2A:DB:8A:DF:19:65:19:E4:29:23:5D:DB:52:D6:73
ValidityMon, 12 Jun 2023 00:00:00 GMT - Thu, 11 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
281 B (281 bytes)
Hash
c389f90b82bf1bdbf01875b074ec2bdd
c2802c545e72cdab35cddc50c0322c7a59bb094b
f510278690cf69ae5c7b57600ef3b7f84b49221219a9379a5e07c9e0d8a8d28c

HTTP Headers

GET /suspended/images/icon_page_suspension.png HTTP/1.1
Host: www.planethoster.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://erell.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
location: https://assets.planethoster.com/suspended/images/icon_page_suspension.png
cache-control: max-age=0
expires: Sat, 04 May 2024 16:17:39 GMT
content-length: 281
content-type: text/html; charset=iso-8859-1
date: Sat, 04 May 2024 16:17:39 GMT
server: Apache
X-Firefox-Spdy: h2

assets.planethoster.com/suspended/images/icon_page_suspension.png

185.22.111.21

200 OK

1.4 kB

URL GET HTTP/2
assets.planethoster.com/suspended/images/icon_page_suspension.png
IP
185.22.111.21:443
ASN
#53589 PLANETHOSTER-8

Requested by
https://erell.net/cgi-sys/suspendedpage.cgi
Certificate
IssuerSectigo Limited
Subjectassets.planethoster.com
Fingerprint06:39:5E:02:8E:5E:99:24:71:E5:A9:6E:08:00:8D:B8:EF:66:23:EB
ValidityMon, 12 Jun 2023 00:00:00 GMT - Thu, 11 Jul 2024 23:59:59 GMT

File type
PNG image data, 95 x 100, 8-bit colormap, non-interlaced
Size
1.4 kB (1369 bytes)
Hash
b6533ac34cc45c6196acce0094deb6c4
a8aa28326d9711ee820b94c32852b4fe4b2ccda7
7dd010a3ef7057366ba853b9c2f43b81beba18c50c9de402368a2400846f6862

HTTP Headers

GET /suspended/images/icon_page_suspension.png HTTP/1.1
Host: assets.planethoster.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://erell.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
last-modified: Wed, 11 Oct 2023 15:20:22 GMT
accept-ranges: bytes
content-length: 1369
cache-control: max-age=2592000, public
expires: Mon, 03 Jun 2024 16:17:39 GMT
vary: User-Agent
strict-transport-security: max-age=31536000
x-content-security-policy: allow 'self';
x-robots-tag: noindex
content-type: image/png
date: Sat, 04 May 2024 16:17:39 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (8)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash