Report - icheepsez.com/

Report Overview

Submitted URL
icheepsez.com/
IP
172.67.216.175
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 12:14:56
Access
public
Website Title
Participate in Our Exclusive Online Survey: Share Your Insight
Final URL
icheepsez.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
26

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
icheepsez.com	unknown	2024-03-07	2024-03-08	2024-04-18	5.7 kB	271 kB	172.67.216.175

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	icheepsez.com	Sinkholed
2024-04-18	medium	icheepsez.com	Sinkholed
2024-04-18	medium	icheepsez.com	Sinkholed
2024-04-18	medium	icheepsez.com	Sinkholed
2024-04-18	medium	icheepsez.com	Sinkholed
2024-04-18	medium	icheepsez.com	Sinkholed
2024-04-18	medium	icheepsez.com	Sinkholed
2024-04-18	medium	icheepsez.com	Sinkholed
2024-04-18	medium	icheepsez.com	Sinkholed
2024-04-18	medium	icheepsez.com	Sinkholed
2024-04-18	medium	icheepsez.com	Sinkholed
2024-04-18	medium	icheepsez.com	Sinkholed
2024-04-18	medium	icheepsez.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	icheepsez.com/_next/static/chunks/main-beb6af9e60a8e042.js	109 kB	2024-02-12	2024-05-01
Pretty URL icheepsez.com/_next/static/chunks/main-beb6af9e60a8e042.js IP 172.67.216.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-12 18:57:12 Last Seen2024-05-01 15:12:51 Times Seen128 Hash 44ec1451f689d71d5f33a10d4aa44658 0f7e72050b7bf72366d9463a16038ae94e232f46 1708144463d376da261c16eab17b1d2fe5c49351847f43a46c6ae4b347fd9304 Loading...

	icheepsez.com/_next/static/chunks/pages/_app-0755fe53a86fd6ab.js	39 kB	2024-04-18	2024-04-19
Pretty URL icheepsez.com/_next/static/chunks/pages/_app-0755fe53a86fd6ab.js IP 172.67.216.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 08:03:12 Last Seen2024-04-19 13:22:06 Times Seen20 Hash 78af260e6345bb993cf649622f4d7ecf bcad2770feaa6e0df7dbb92c24da90c56da29559 cca988f276fd684064d3ff252d813ca24f18f73cb16e18a1edece86f25f60e87 Loading...

	icheepsez.com/_next/static/chunks/7903-dd238946c7924507.js	32 kB	2024-03-21	2024-05-01
Pretty URL icheepsez.com/_next/static/chunks/7903-dd238946c7924507.js IP 172.67.216.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-21 14:18:29 Last Seen2024-05-01 17:39:32 Times Seen308 Hash b5dd343db67bd22544d11da18268f5c3 069b5b221dd75af58d93192460778b3d07835e74 6347f1d4083f7a0a2ac3d8b12aae8832d9ea6914aa6e137d16a4d41869d14ea5 Loading...

	icheepsez.com/_next/static/chunks/2090-d895fd689d39c729.js	11 kB	2024-04-18	2024-04-19
Pretty URL icheepsez.com/_next/static/chunks/2090-d895fd689d39c729.js IP 172.67.216.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 08:03:12 Last Seen2024-04-19 09:40:36 Times Seen14 Hash 9dfcf70490a58a9922807765131a36dd 74a2103f2772dcbb021e6d7ed80a46505532efa1 64aa44a6c998566700666c1e4bf0abd78fe219197efb3229d6d9ffa7040926b6 Loading...

	icheepsez.com/_next/static/1f-38DmRXBlODsEZZKB18/_buildManifest.js	1.6 kB	2024-04-18	2024-04-18
Pretty URL icheepsez.com/_next/static/1f-38DmRXBlODsEZZKB18/_buildManifest.js IP 172.67.216.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 14:12:04 Last Seen2024-04-18 14:14:59 Times Seen2 Hash c409b9a6548ffb21b3dcf782f718dffd 39c08c4b07516ab2cb9d253110a31bf63ce206fc fe2a564a6472a6b6931035370bde18d64ac5d6e3f169ff4e4da595af7c1832b4 Loading...

	icheepsez.com/_next/static/1f-38DmRXBlODsEZZKB18/_ssgManifest.js	182 B	2024-04-18	2024-05-01
Pretty URL icheepsez.com/_next/static/1f-38DmRXBlODsEZZKB18/_ssgManifest.js IP 172.67.216.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 11:58:16 Last Seen2024-05-01 17:39:32 Times Seen166 Hash d78f02cd11637a888af548f5e270c3af 9c90b573305ec9d6d2e7e74837c641a863d991b4 2357fd3fc3972384c0c7a714da244191da43a7bf5d91fd865a30d2deb0b6b517 Loading...

	icheepsez.com/_next/static/chunks/webpack-3c44f12e8187f9a6.js	6.0 kB	2024-04-18	2024-04-18
Pretty URL icheepsez.com/_next/static/chunks/webpack-3c44f12e8187f9a6.js IP 172.67.216.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 14:12:04 Last Seen2024-04-18 14:14:59 Times Seen2 Hash 2e71bbae4ecbda348d67750481556e5e 609bf06aea53232a5529113c09ae1db786032b96 824136cab20b37d91d30a65a327a82759d6b420fd4e9e1c44d41e1e2c94c6f3a Loading...

	icheepsez.com/_next/static/chunks/framework-3281cb961088a9a3.js	26 kB	2024-04-02	2024-04-25
Pretty URL icheepsez.com/_next/static/chunks/framework-3281cb961088a9a3.js IP 172.67.216.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-02 14:06:40 Last Seen2024-04-25 12:54:20 Times Seen93 Hash 499fb17b15c09c2d76681f27dde9a031 5564d317c33112db56918ec372d392caabec70f2 9350c53e2fe847ec629962106d01d6af28a0d9c69feb57e7609b3c096935cdb2 Loading...

	icheepsez.com/_next/static/chunks/8550-084f8ef56ea2a7ad.js	12 kB	2024-04-13	2024-05-01
Pretty URL icheepsez.com/_next/static/chunks/8550-084f8ef56ea2a7ad.js IP 172.67.216.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-13 21:06:20 Last Seen2024-05-01 15:12:51 Times Seen54 Hash 99cedc315297bcdade48598c3f97d7d8 06bddf8f8305971fe0ac51163727a23e8181c296 8f3a92324a0f5a22aabddc3c838582e0110d1b7ba67b04f48682f9deff8f3e30 Loading...

	icheepsez.com/_next/static/chunks/pages/index-e56fa27d3c0234c6.js	9.4 kB	2024-04-18	2024-05-01
Pretty URL icheepsez.com/_next/static/chunks/pages/index-e56fa27d3c0234c6.js IP 172.67.216.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 14:12:04 Last Seen2024-05-01 15:12:51 Times Seen26 Hash 182639ed0a5954cbdfbfc1aa8f3b5f8e 3d21f535dd4aef3f37ad7dc79cb6647c3a764e69 a01c16c3a494091ba2c11ce7d752ec3c2d7e70f06c99fdaa993565066add3656 Loading...

HTTP Transactions (13)

URL IP Response Size

icheepsez.com/_next/static/chunks/2090-d895fd689d39c729.js

172.67.216.175

200 OK

3.9 kB

URL GET HTTP/3
icheepsez.com/_next/static/chunks/2090-d895fd689d39c729.js
IP
172.67.216.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://icheepsez.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecticheepsez.com
Fingerprint06:6E:50:51:DB:3F:09:C3:AB:77:D4:B6:67:FF:FF:79:1E:D9:F2:10
ValidityThu, 07 Mar 2024 09:57:22 GMT - Wed, 05 Jun 2024 09:57:21 GMT

File type
JavaScript source, ASCII text, with very long lines (10720), with no line terminators
Size
3.9 kB (3903 bytes)
Hash
9dfcf70490a58a9922807765131a36dd
74a2103f2772dcbb021e6d7ed80a46505532efa1
64aa44a6c998566700666c1e4bf0abd78fe219197efb3229d6d9ffa7040926b6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/2090-d895fd689d39c729.js HTTP/1.1
Host: icheepsez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://icheepsez.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:31 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:28:22 GMT
vary: Accept-Encoding
etag: W/"662103d6-29e0"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HxRtV6u6F6F8CHNLX%2FiEncoZglFDfyND%2BjSJi09tZeWGMwta9eT2ezNd8r6bP076S3aVAGBEZzoge5Q1nNA4IoLjgsuWYWrEWAS1dO2LSkNZ%2BbNrUUqII8P8HAb2f3Zx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493353e835695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

icheepsez.com/

172.67.216.175

200 OK

11 kB

URL User Request GET HTTP/2
icheepsez.com/
IP
172.67.216.175:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjecticheepsez.com
Fingerprint06:6E:50:51:DB:3F:09:C3:AB:77:D4:B6:67:FF:FF:79:1E:D9:F2:10
ValidityThu, 07 Mar 2024 09:57:22 GMT - Wed, 05 Jun 2024 09:57:21 GMT

File type
HTML document, ASCII text, with very long lines (2247), with no line terminators
Size
11 kB (10979 bytes)
Hash
d7bfba1db3f320666e7eeee2e04e6cff
68bfc637a6e9f665ee5b1c94c1a173eadc433aa0
8850592c0e2da9373402d1f5ba5c31e1ec208c799757ac2dbeac41c46b3491ec

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: icheepsez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 12:14:30 GMT
content-type: text/html
last-modified: Thu, 18 Apr 2024 11:28:22 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h8lLm8KruUuDlng%2BdGwOWaWvvVeJjLin8N1ElgDJv4h%2F%2F0dg7nrWNOImDuN3v%2FDSMGjv6jSJeC4ajY6vYtWQwU%2FYW0%2Bnv13td5xob%2FszNxbTW%2BliuIMvUnzsQppugy9q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8764933309f556a5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

icheepsez.com/_next/static/1f-38DmRXBlODsEZZKB18/_ssgManifest.js

172.67.216.175

200 OK

9.4 kB

URL GET HTTP/3
icheepsez.com/_next/static/1f-38DmRXBlODsEZZKB18/_ssgManifest.js
IP
172.67.216.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://icheepsez.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecticheepsez.com
Fingerprint06:6E:50:51:DB:3F:09:C3:AB:77:D4:B6:67:FF:FF:79:1E:D9:F2:10
ValidityThu, 07 Mar 2024 09:57:22 GMT - Wed, 05 Jun 2024 09:57:21 GMT

File type
ASCII text, with no line terminators
Size
9.4 kB (9362 bytes)
Hash
d78f02cd11637a888af548f5e270c3af
9c90b573305ec9d6d2e7e74837c641a863d991b4
2357fd3fc3972384c0c7a714da244191da43a7bf5d91fd865a30d2deb0b6b517

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/1f-38DmRXBlODsEZZKB18/_ssgManifest.js HTTP/1.1
Host: icheepsez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://icheepsez.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:31 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:28:22 GMT
vary: Accept-Encoding
etag: W/"662103d6-b6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GDveiutQ7XJQIp1Dm7RIP1LTeS9LLsFQwzGzrzWhNumtK3V9s4TVdwTP0HOQuvVcLHYjIuTOZVUVHg%2FH4MnWBGZjM4qswdWJG3lXBHBI2rQlFCaTqpnaMfFati%2Fdx9xF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493353e885695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

icheepsez.com/_next/static/chunks/framework-3281cb961088a9a3.js

172.67.216.175

200 OK

26 kB

URL GET HTTP/3
icheepsez.com/_next/static/chunks/framework-3281cb961088a9a3.js
IP
172.67.216.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://icheepsez.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecticheepsez.com
Fingerprint06:6E:50:51:DB:3F:09:C3:AB:77:D4:B6:67:FF:FF:79:1E:D9:F2:10
ValidityThu, 07 Mar 2024 09:57:22 GMT - Wed, 05 Jun 2024 09:57:21 GMT

File type
JavaScript source, ASCII text, with very long lines (26042), with no line terminators
Size
26 kB (26042 bytes)
Hash
499fb17b15c09c2d76681f27dde9a031
5564d317c33112db56918ec372d392caabec70f2
9350c53e2fe847ec629962106d01d6af28a0d9c69feb57e7609b3c096935cdb2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/framework-3281cb961088a9a3.js HTTP/1.1
Host: icheepsez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://icheepsez.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:31 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:28:22 GMT
vary: Accept-Encoding
etag: W/"662103d6-65ba"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m5%2F4zH1z6%2FYD2NA2%2FUHAu%2FuNYRHiqFM8gKVFIpDWx1ReYWEaH0m94OJ79h%2FRjA8%2FgVohvbg0dzWOaLD1W3rvpacJ%2F1xUdQhVM97K6KimuLADuI2iMTSRK4LgDaYwRaod"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493352e705695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

icheepsez.com/favicon.ico

172.67.216.175

204 No Content

0 B

URL GET HTTP/3
icheepsez.com/favicon.ico
IP
172.67.216.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://icheepsez.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecticheepsez.com
Fingerprint06:6E:50:51:DB:3F:09:C3:AB:77:D4:B6:67:FF:FF:79:1E:D9:F2:10
ValidityThu, 07 Mar 2024 09:57:22 GMT - Wed, 05 Jun 2024 09:57:21 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: icheepsez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://icheepsez.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 204 No Content
date: Thu, 18 Apr 2024 12:14:31 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E6Wi1bSwg8S9F0y%2BErQTbyJ%2FyGac1m2LiJ5pGOH33QlDQpKTno2FSh%2FdV4izZB8iJQfAaNQivOTRG5EDi0KGoW3aFil%2B4p7a89N6IyEuNfBCiiq17yS%2F47R1a1SXUYml"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8764933688be5695-OSL
alt-svc: h3=":443"; ma=86400

icheepsez.com/_next/static/chunks/webpack-3c44f12e8187f9a6.js

172.67.216.175

200 OK

6.0 kB

URL GET HTTP/3
icheepsez.com/_next/static/chunks/webpack-3c44f12e8187f9a6.js
IP
172.67.216.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://icheepsez.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecticheepsez.com
Fingerprint06:6E:50:51:DB:3F:09:C3:AB:77:D4:B6:67:FF:FF:79:1E:D9:F2:10
ValidityThu, 07 Mar 2024 09:57:22 GMT - Wed, 05 Jun 2024 09:57:21 GMT

File type
JavaScript source, ASCII text, with very long lines (6254), with no line terminators
Size
6.0 kB (6028 bytes)
Hash
1efe2a77929704e893a360dcaf63feda
139b31fdf2ae8225f49c9477df84ccb7efedfb00
09b62b488b8664dcbdce864f01e4443f031f3d273767125cce6bb273db480a69

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/webpack-3c44f12e8187f9a6.js HTTP/1.1
Host: icheepsez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://icheepsez.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:31 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:28:22 GMT
vary: Accept-Encoding
etag: W/"662103d6-178c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aG0F593iQArclYvXsxEQiso9KMNFpmnl%2F%2B9f1Zn6I9VRHtJfaSnG%2B%2By49tcjv%2BEcGJqVy1QJhQ6jED461nxtRDxL0RGJar865NCimn2kgPaz7hMf9LFPxiAHJzWnu2aT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493352e685695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

icheepsez.com/_next/static/chunks/7903-dd238946c7924507.js

172.67.216.175

200 OK

32 kB

URL GET HTTP/3
icheepsez.com/_next/static/chunks/7903-dd238946c7924507.js
IP
172.67.216.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://icheepsez.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecticheepsez.com
Fingerprint06:6E:50:51:DB:3F:09:C3:AB:77:D4:B6:67:FF:FF:79:1E:D9:F2:10
ValidityThu, 07 Mar 2024 09:57:22 GMT - Wed, 05 Jun 2024 09:57:21 GMT

File type
JavaScript source, ASCII text, with very long lines (31896), with no line terminators
Size
32 kB (31896 bytes)
Hash
b5dd343db67bd22544d11da18268f5c3
069b5b221dd75af58d93192460778b3d07835e74
6347f1d4083f7a0a2ac3d8b12aae8832d9ea6914aa6e137d16a4d41869d14ea5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/7903-dd238946c7924507.js HTTP/1.1
Host: icheepsez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://icheepsez.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:31 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:28:22 GMT
vary: Accept-Encoding
etag: W/"662103d6-7c98"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ru7RlJZvW2%2FfrmNFiJEQ8wMFEDi9jKnQO3WzwMwJpwV3behsZCItbA8OePOZVR%2FRAc7vf6ds%2BPF%2F%2BwbjufoMpHEGDmHrQ%2BMwr1xOcF8eDhAByR1oC%2BbdfDc%2F5XnaOxHw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493353e7f5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

icheepsez.com/_next/static/chunks/main-beb6af9e60a8e042.js

172.67.216.175

200 OK

109 kB

URL GET HTTP/3
icheepsez.com/_next/static/chunks/main-beb6af9e60a8e042.js
IP
172.67.216.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://icheepsez.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecticheepsez.com
Fingerprint06:6E:50:51:DB:3F:09:C3:AB:77:D4:B6:67:FF:FF:79:1E:D9:F2:10
ValidityThu, 07 Mar 2024 09:57:22 GMT - Wed, 05 Jun 2024 09:57:21 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
109 kB (108887 bytes)
Hash
44ec1451f689d71d5f33a10d4aa44658
0f7e72050b7bf72366d9463a16038ae94e232f46
1708144463d376da261c16eab17b1d2fe5c49351847f43a46c6ae4b347fd9304

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/main-beb6af9e60a8e042.js HTTP/1.1
Host: icheepsez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://icheepsez.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:31 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:28:22 GMT
vary: Accept-Encoding
etag: W/"662103d6-1a957"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3WY1RxXfyaMxvzLyGPLOnPTuMEC%2By0Y4dDi3f5KepSTNGq0Qt%2FsrRMNUcuqaHXGBLcI9ul0n6AF2fItRH9soD4JX7%2F6gBkTrPrY3bLwY3uvddtv3%2BNez73qAsM2x%2F2O8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493352e765695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

icheepsez.com/_next/static/chunks/pages/_app-0755fe53a86fd6ab.js

172.67.216.175

200 OK

39 kB

URL GET HTTP/3
icheepsez.com/_next/static/chunks/pages/_app-0755fe53a86fd6ab.js
IP
172.67.216.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://icheepsez.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecticheepsez.com
Fingerprint06:6E:50:51:DB:3F:09:C3:AB:77:D4:B6:67:FF:FF:79:1E:D9:F2:10
ValidityThu, 07 Mar 2024 09:57:22 GMT - Wed, 05 Jun 2024 09:57:21 GMT

File type
JavaScript source, ASCII text, with very long lines (39394), with no line terminators
Size
39 kB (39394 bytes)
Hash
78af260e6345bb993cf649622f4d7ecf
bcad2770feaa6e0df7dbb92c24da90c56da29559
cca988f276fd684064d3ff252d813ca24f18f73cb16e18a1edece86f25f60e87

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/pages/_app-0755fe53a86fd6ab.js HTTP/1.1
Host: icheepsez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://icheepsez.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:31 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:28:22 GMT
vary: Accept-Encoding
etag: W/"662103d6-99e2"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VcsmzK3TowBQmXb3Kgp2avPLsXvXIQLvil7ocPXtwYvNJr%2F1U0F6qWooh1MVS3hc6GHPERlkkof%2FlzlGDTX%2Ff7O4pxE0QhbWIIMMAFstAH1%2FVVQf2LUaxQuEJypXEegK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493353e7a5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

icheepsez.com/_next/static/chunks/8550-084f8ef56ea2a7ad.js

172.67.216.175

200 OK

12 kB

URL GET HTTP/3
icheepsez.com/_next/static/chunks/8550-084f8ef56ea2a7ad.js
IP
172.67.216.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://icheepsez.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecticheepsez.com
Fingerprint06:6E:50:51:DB:3F:09:C3:AB:77:D4:B6:67:FF:FF:79:1E:D9:F2:10
ValidityThu, 07 Mar 2024 09:57:22 GMT - Wed, 05 Jun 2024 09:57:21 GMT

File type
JavaScript source, ASCII text, with very long lines (12179), with no line terminators
Size
12 kB (12179 bytes)
Hash
99cedc315297bcdade48598c3f97d7d8
06bddf8f8305971fe0ac51163727a23e8181c296
8f3a92324a0f5a22aabddc3c838582e0110d1b7ba67b04f48682f9deff8f3e30

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/8550-084f8ef56ea2a7ad.js HTTP/1.1
Host: icheepsez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://icheepsez.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:31 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:28:22 GMT
vary: Accept-Encoding
etag: W/"662103d6-2f93"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VhVxXw9c6f9VqJpBACF%2Fyupvi%2BUWlfnwBTHM8nRcDlxGxfx54kCGjZw0lpFbb5tHNTBn%2FtY%2BCOTWO3Y6CxvWQIaIBwgYDh%2FBbaPWzLhMkpwwWYl9weQiJjCi34mNwC09"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493353e815695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

icheepsez.com/_next/static/css/0bc0cde260d08b97.css

172.67.216.175

200 OK

1.8 kB

URL GET HTTP/3
icheepsez.com/_next/static/css/0bc0cde260d08b97.css
IP
172.67.216.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://icheepsez.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecticheepsez.com
Fingerprint06:6E:50:51:DB:3F:09:C3:AB:77:D4:B6:67:FF:FF:79:1E:D9:F2:10
ValidityThu, 07 Mar 2024 09:57:22 GMT - Wed, 05 Jun 2024 09:57:21 GMT

File type
ASCII text, with very long lines (1843), with no line terminators
Size
1.8 kB (1843 bytes)
Hash
64b2b4fa42c7d558d735e2cd28ecf88a
03d6da6e55b1201b51689590520da495a9233d67
2fdb3ce9ccba8355040e5ba3dfb2283194acba81858943b5d88f70030dbb71ea

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/css/0bc0cde260d08b97.css HTTP/1.1
Host: icheepsez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://icheepsez.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:31 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 11:28:22 GMT
vary: Accept-Encoding
etag: W/"662103d6-733"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=loohq2WsR7U8akIWQjySSgdyNshkmwqYFZvwPzEKnoQTWm6mzvVovryyp03SDmU9JJP5tnr0xoemb6EJ6H0yLQMBIPHoXUFlC1aAYzfei4BiLTpO23x3MPM3jy1DKdlJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493352e645695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

icheepsez.com/_next/static/chunks/pages/index-e56fa27d3c0234c6.js

172.67.216.175

200 OK

9.4 kB

URL GET HTTP/3
icheepsez.com/_next/static/chunks/pages/index-e56fa27d3c0234c6.js
IP
172.67.216.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://icheepsez.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecticheepsez.com
Fingerprint06:6E:50:51:DB:3F:09:C3:AB:77:D4:B6:67:FF:FF:79:1E:D9:F2:10
ValidityThu, 07 Mar 2024 09:57:22 GMT - Wed, 05 Jun 2024 09:57:21 GMT

File type
JavaScript source, ASCII text, with very long lines (9665), with no line terminators
Size
9.4 kB (9412 bytes)
Hash
cfb9c27cc052b3614b681a763d188134
a968daa6705bd04b84ed5e9dd7aee41ba4ff218d
79b50ff6f603c1aa27cf161da8f3d138fed1d73e978b47b46aa631079ae074cd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/chunks/pages/index-e56fa27d3c0234c6.js HTTP/1.1
Host: icheepsez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://icheepsez.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:31 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:28:22 GMT
vary: Accept-Encoding
etag: W/"662103d6-24c4"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mhsus78md6QGaDNTPHaGQWmycUxqgBrkozZsf%2B%2BzFt7V5po4BVRiXztb8JTYzPsWU5CVZ%2F4diU03HX6YR8cu4GDKHhU6AyI%2FpBVmJEi%2FXI%2FczMMisqFrM6p%2FwIIC%2F%2B5z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493353e845695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

icheepsez.com/_next/static/1f-38DmRXBlODsEZZKB18/_buildManifest.js

172.67.216.175

200 OK

1.6 kB

URL GET HTTP/3
icheepsez.com/_next/static/1f-38DmRXBlODsEZZKB18/_buildManifest.js
IP
172.67.216.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://icheepsez.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecticheepsez.com
Fingerprint06:6E:50:51:DB:3F:09:C3:AB:77:D4:B6:67:FF:FF:79:1E:D9:F2:10
ValidityThu, 07 Mar 2024 09:57:22 GMT - Wed, 05 Jun 2024 09:57:21 GMT

File type
ASCII text, with very long lines (1697), with no line terminators
Size
1.6 kB (1605 bytes)
Hash
1047a39ea9737d4e339249d099fd5232
e6764db957aff1554426654b8a8ddc4d9b88b3bd
35d373c2429b2bd23f312eea76193445994444db46b2d63f34d7b4e1b3a22e06

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_next/static/1f-38DmRXBlODsEZZKB18/_buildManifest.js HTTP/1.1
Host: icheepsez.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://icheepsez.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:14:31 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:28:22 GMT
vary: Accept-Encoding
etag: W/"662103d6-645"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bTuPZATA3pNsIJNXiZUJ9CrTjHr%2FYN7Z4EfRziOZHdZlJ3EvfvLxQ9QyZmIuVn5mgDfC9EzxbhWLONrO4eAO%2FasvK5xLRf04tTH82DwG5%2BlA%2FZ8tlaxhJSKKZq%2FUz533"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876493353e855695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML