Report - 8a4n.com/

Report Overview

Submitted URL
8a4n.com/
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-25 07:10:25
Access
public
Website Title
F660
Final URL
8a4n.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
20

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
8a4n.com	unknown	2023-07-28	2023-07-28	2024-03-25	4.6 kB	53 kB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	8a4n.com	Sinkholed
2024-04-25	medium	8a4n.com	Sinkholed
2024-04-25	medium	8a4n.com	Sinkholed
2024-04-25	medium	8a4n.com	Sinkholed
2024-04-25	medium	8a4n.com	Sinkholed
2024-04-25	medium	8a4n.com	Sinkholed
2024-04-25	medium	8a4n.com	Sinkholed
2024-04-25	medium	8a4n.com	Sinkholed
2024-04-25	medium	8a4n.com	Sinkholed
2024-04-25	medium	8a4n.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	8a4n.com/	0 B	2023-03-07	2024-05-04
Pretty URL 8a4n.com/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-04 20:52:57 Times Seen37345954 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	8a4n.com/js/common.js	20 kB	2023-03-07	2024-05-02
Pretty URL 8a4n.com/js/common.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:48 Last Seen2024-05-02 22:55:11 Times Seen406 Hash 2a4eac91ef5478a78dbb09dbab26cea1 3bb7367e8345e89e89e1dccb007937e87abdda09 4b0438e16a95f9211ecc82e116a5663dc9f956fac33ba73c3a7f86bf5ee444cb Loading...

	8a4n.com/js/MD5.js	4.3 kB	2023-03-07	2024-05-02
Pretty URL 8a4n.com/js/MD5.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:48 Last Seen2024-05-02 22:55:11 Times Seen637 Hash 4dc2bdae15feff31a1fcdf10239629a5 766aadeee345c8ffeca2cba2f235e2208fcbfaa6 c75b921afdca2e56cd2962cc5850fc032ebffd2d0d4932d3dd1be14abb369488 Loading...

	8a4n.com/js/pro_commom.js	7.2 kB	2023-03-07	2024-04-25
Pretty URL 8a4n.com/js/pro_commom.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:44 Last Seen2024-04-25 09:10:28 Times Seen42 Hash 96b050f240e98dc1b72a2aa21c3f11ee 63803ff1976ea878d1d665079d8a4dcdb8cff8c1 68282a994e66034c504d2b627f47aecc1846183b49b06fa5fffb92443462062b Loading...

	8a4n.com/	0 B	2023-03-07	2024-05-04
Pretty URL 8a4n.com/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-04 20:52:59 Times Seen37345955 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	unknown	16 B	2023-04-15	2024-05-02
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-15 01:58:33 Last Seen2024-05-02 22:55:11 Times Seen373 Hash ea991e2bffa607d1244cd4fe87cdeaa3 61884584126c14a54b92fdc5f859d1bdc2b02f15 c86d398130ee923e9822c39727d6bc50c9a7ef3173fad30c9ff8b85ec227969c Loading...

HTTP Transactions (10)

URL IP Response Size

8a4n.com/

188.114.97.1

200 OK

7.7 kB

URL User Request GET HTTP/2
8a4n.com/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subject8a4n.com
Fingerprint9B:1B:7B:08:9D:C1:5C:26:EA:90:B4:A5:54:B7:83:92:C6:DC:F7:5D
ValidityWed, 20 Mar 2024 17:56:18 GMT - Tue, 18 Jun 2024 17:56:17 GMT

File type
HTML document, ISO-8859 text
Size
7.7 kB (7749 bytes)
Hash
6417c0bc1ec3d131512ee7769795f4b8
24fcb7f4961ae2fa0436801a758414d1cd585083
9719f0848f3202c77aaca2d376722f1f3a3319d70b6ca0371777923911274186

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 8a4n.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 25 Apr 2024 07:10:01 GMT
content-type: text/html; charset=gb2312
cache-control: no-cache,no-store
set-cookie: _TESTCOOKIESUPPORT=1; PATH=/; HttpOnly; Secure
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'
x-frame-options: DENY
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a1Be8%2Br5FlAS9rHX4eX8DlNH%2BIS2%2B0U0Zd6iQmCA2%2B%2FPG8Xre%2F0kgswQIAI9pRuf9tISrFLDwhgsnyIOropwXq5tpaSTLqgH0udjSnn8f3FZbzAeAlc4DuaC4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879c82c32874b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

8a4n.com/css/stylech.css

188.114.97.1

200 OK

7.6 kB

URL GET HTTP/3
8a4n.com/css/stylech.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://8a4n.com/
Certificate
IssuerGoogle Trust Services LLC
Subject8a4n.com
Fingerprint9B:1B:7B:08:9D:C1:5C:26:EA:90:B4:A5:54:B7:83:92:C6:DC:F7:5D
ValidityWed, 20 Mar 2024 17:56:18 GMT - Tue, 18 Jun 2024 17:56:17 GMT

File type
assembler source, ISO-8859 text, with CRLF line terminators
Size
7.6 kB (7554 bytes)
Hash
ce44104cb3493b908bf4204c8116d48e
1ff9a9b2b302d005af86be9b68e3440d8b9d84cc
80d9079849db47f4ec180066d8f2302cce22d7c53e3a6898a9927219ba082cd2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/stylech.css HTTP/1.1
Host: 8a4n.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8a4n.com/
Cookie: _TESTCOOKIESUPPORT=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 07:10:03 GMT
content-type: text/css
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 25 Apr 2024 07:10:03 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=juiDfMAnimV1tny2bc%2F1T%2BBDejKvic9v9SKlMJ6MAajUj9WD4Sxz0Y23bIMfd%2FFlOqSkHv2e6viU4oK41l9QYL5J7N10Sgl2aZwTSqWOw9TU1wuyAFQrMdOt7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c82ca4ebc0b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

8a4n.com/js/common.js

188.114.97.1

200 OK

5.9 kB

URL GET HTTP/3
8a4n.com/js/common.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://8a4n.com/
Certificate
IssuerGoogle Trust Services LLC
Subject8a4n.com
Fingerprint9B:1B:7B:08:9D:C1:5C:26:EA:90:B4:A5:54:B7:83:92:C6:DC:F7:5D
ValidityWed, 20 Mar 2024 17:56:18 GMT - Tue, 18 Jun 2024 17:56:17 GMT

File type
ASCII text
Size
5.9 kB (5873 bytes)
Hash
2a4eac91ef5478a78dbb09dbab26cea1
3bb7367e8345e89e89e1dccb007937e87abdda09
4b0438e16a95f9211ecc82e116a5663dc9f956fac33ba73c3a7f86bf5ee444cb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/common.js HTTP/1.1
Host: 8a4n.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8a4n.com/
Cookie: _TESTCOOKIESUPPORT=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 07:10:03 GMT
content-type: application/x-javascript
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 25 Apr 2024 07:10:03 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O4nsxt86rUwOF%2FpK6t4HBGjuBQFDtjOOnjlVILuFDcQuHNlnuOTWicDJavVRkI53NW0EKyxT5nuGLYTluBJMEPVkF9Xtm4LON0UONkmtRfL8IvVDD4QqI2P78A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c82ca4ebe0b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

8a4n.com/skin/priorgreen/css/login.css

188.114.97.1

200 OK

3.8 kB

URL GET HTTP/3
8a4n.com/skin/priorgreen/css/login.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://8a4n.com/
Certificate
IssuerGoogle Trust Services LLC
Subject8a4n.com
Fingerprint9B:1B:7B:08:9D:C1:5C:26:EA:90:B4:A5:54:B7:83:92:C6:DC:F7:5D
ValidityWed, 20 Mar 2024 17:56:18 GMT - Tue, 18 Jun 2024 17:56:17 GMT

File type
assembler source, ASCII text, with CRLF line terminators
Size
3.8 kB (3806 bytes)
Hash
cff0f44ae6210e2d10115862c6678af3
36b4bf829a9c9c4b68311ce1a3937cf9fd879aec
7558e06ca6e922f86e5ddb46df8a0d2c8212a75a93dd8d59d5274aa0b446883c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /skin/priorgreen/css/login.css HTTP/1.1
Host: 8a4n.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8a4n.com/
Cookie: _TESTCOOKIESUPPORT=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 07:10:03 GMT
content-type: text/css
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 25 Apr 2024 07:10:03 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7z5SFpwbqBQfkkUaEByJHmw0uW0IlbeqdRo1U1kLrnu0dHC8DQTkc%2FZPWkYbA5E%2BxPb1yBHCMGin2pxX3ASyqgltt7MTrJccMwfu6qcjgG4SOxGlUcLaES7Cvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c82ca4ebb0b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

8a4n.com/js/MD5.js

188.114.97.1

200 OK

5.3 kB

URL GET HTTP/3
8a4n.com/js/MD5.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://8a4n.com/
Certificate
IssuerGoogle Trust Services LLC
Subject8a4n.com
Fingerprint9B:1B:7B:08:9D:C1:5C:26:EA:90:B4:A5:54:B7:83:92:C6:DC:F7:5D
ValidityWed, 20 Mar 2024 17:56:18 GMT - Tue, 18 Jun 2024 17:56:17 GMT

File type
ASCII text
Size
5.3 kB (5280 bytes)
Hash
4dc2bdae15feff31a1fcdf10239629a5
766aadeee345c8ffeca2cba2f235e2208fcbfaa6
c75b921afdca2e56cd2962cc5850fc032ebffd2d0d4932d3dd1be14abb369488

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/MD5.js HTTP/1.1
Host: 8a4n.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8a4n.com/
Cookie: _TESTCOOKIESUPPORT=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 25 Apr 2024 07:10:03 GMT
content-type: application/x-javascript
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 25 Apr 2024 07:10:03 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gi4Zz4%2FNVzo0%2BjkR4RMIMNsHLczDeGFxyNyrP2v74jHAMK97gVCGprkoGpAHQVVrLi0WiQgw5ckOeMCDzJJTw%2BXLwCQG6batOwp7adEM1n6eJqsdoYsbSCTqCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c82ca4ec00b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

8a4n.com/skin/priorgreen/img/banner.gif

188.114.97.1

200 OK

7.1 kB

URL GET HTTP/3
8a4n.com/skin/priorgreen/img/banner.gif
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://8a4n.com/
Certificate
IssuerGoogle Trust Services LLC
Subject8a4n.com
Fingerprint9B:1B:7B:08:9D:C1:5C:26:EA:90:B4:A5:54:B7:83:92:C6:DC:F7:5D
ValidityWed, 20 Mar 2024 17:56:18 GMT - Tue, 18 Jun 2024 17:56:17 GMT

File type
GIF image data, version 89a, 778 x 60
Size
7.1 kB (7106 bytes)
Hash
03d602bb92ed46b38a852750fad224f2
2f5c714100a56157cd3382901190e620d2d7d761
a495d952c09ca67c707757f2194ea69b83568f48bed3a94ec7d29a4391b1703b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /skin/priorgreen/img/banner.gif HTTP/1.1
Host: 8a4n.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8a4n.com/skin/priorgreen/css/login.css
Cookie: _TESTCOOKIESUPPORT=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 07:10:05 GMT
content-type: image/gif
content-length: 7106
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 25 Apr 2024 07:10:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GI3ZHgWWQ1a4Hca7PLUEHI75r7NAyrXKsf%2Bh8%2F7NhsMrCPpSjtqU3%2FgST7QiOiF%2FQikDRvMvuRKHfdqYefj7oXS%2B3EvcIeN99XMYKsdv9vNekUi4tkidIr0XpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c82d999ff0b4d-OSL
alt-svc: h3=":443"; ma=86400

8a4n.com/skin/priorgreen/img/login_english.gif

188.114.97.1

200 OK

157 B

URL GET HTTP/3
8a4n.com/skin/priorgreen/img/login_english.gif
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://8a4n.com/
Certificate
IssuerGoogle Trust Services LLC
Subject8a4n.com
Fingerprint9B:1B:7B:08:9D:C1:5C:26:EA:90:B4:A5:54:B7:83:92:C6:DC:F7:5D
ValidityWed, 20 Mar 2024 17:56:18 GMT - Tue, 18 Jun 2024 17:56:17 GMT

File type
GIF image data, version 89a, 68 x 19
Size
157 B (157 bytes)
Hash
7a4764b8dfb74ab075716846f8adbaa9
0b65ac4bb134346363bb0cd0072cdae48faed35e
1d83d42819960d61512160f717a0b1fcd2cf420950995974106ca3266117e703

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /skin/priorgreen/img/login_english.gif HTTP/1.1
Host: 8a4n.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8a4n.com/skin/priorgreen/css/login.css
Cookie: _TESTCOOKIESUPPORT=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 07:10:05 GMT
content-type: image/gif
content-length: 157
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 25 Apr 2024 07:10:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RxNl7%2FsP%2F5out2dCXHuMAuil6HO9hmqlw6INx%2Fed6aaBevO8t1AZElTGlF%2FHgJ3vWjoaNRBhVmQZr%2Fy4e8UVI1d9qAgY8p6lfG%2BDUCZsNIsr2hDv3FNYf7LFuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c82d99a000b4d-OSL
alt-svc: h3=":443"; ma=86400

8a4n.com/favicon.ico

188.114.97.1

404 Not Found

391 B

URL GET HTTP/3
8a4n.com/favicon.ico
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://8a4n.com/
Certificate
IssuerGoogle Trust Services LLC
Subject8a4n.com
Fingerprint9B:1B:7B:08:9D:C1:5C:26:EA:90:B4:A5:54:B7:83:92:C6:DC:F7:5D
ValidityWed, 20 Mar 2024 17:56:18 GMT - Tue, 18 Jun 2024 17:56:17 GMT

File type
HTML document, ASCII text, with very long lines (406), with no line terminators
Size
391 B (391 bytes)
Hash
55c383d487d1ac88180445cb0d4e3007
6e0c5666b0e88e05e1f2b7d0186d453b14614d65
30cd5ae193b76a08161e2ac2ca420a04beb22845d822d3280c8483683b7ac800

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 8a4n.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8a4n.com/
Cookie: _TESTCOOKIESUPPORT=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Thu, 25 Apr 2024 07:10:06 GMT
content-type: text/html; charset=gb2312
cache-control: no-cache,no-store
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7OUl6FTHdFZJJjYTDg3AsMlEbbQ%2BDcMb2oI14%2FQ2RIrYmImwFcuO7uhONQKz3mKPqN4jc2BsbIh2RWRFrwTA5Hz332cdGq%2BBxjjgI%2FDVTXPX70MiuEL5ZQ85Mg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c82dbdb800b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

8a4n.com/js/pro_commom.js

188.114.97.1

200 OK

7.2 kB

URL GET HTTP/3
8a4n.com/js/pro_commom.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://8a4n.com/
Certificate
IssuerGoogle Trust Services LLC
Subject8a4n.com
Fingerprint9B:1B:7B:08:9D:C1:5C:26:EA:90:B4:A5:54:B7:83:92:C6:DC:F7:5D
ValidityWed, 20 Mar 2024 17:56:18 GMT - Tue, 18 Jun 2024 17:56:17 GMT

File type
Unicode text, UTF-8 text, with very long lines (7936), with no line terminators
Size
7.2 kB (7226 bytes)
Hash
f3f751bf7eef7cb51dce3f4a7d23e89d
4d39b815504cb3a92b2816ec00c6a1fcd4d28b98
f01fea9b655cd16c89fdb70dc3338a84654bff646ab1727f74ba38fa58cb7018

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/pro_commom.js HTTP/1.1
Host: 8a4n.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8a4n.com/
Cookie: _TESTCOOKIESUPPORT=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 07:10:03 GMT
content-type: application/x-javascript
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 25 Apr 2024 07:10:03 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DXSphvq8sh%2B5KWSzBfdHkya8dSZsupNofskAZNAn9BgAvmMGcVym1keqewenPrKonJdxWDpm2uVQmeTYHrjmKSQmRa9tyU0gbG%2FkGmaabAIxhQZrgP3XfPahSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c82ca5ec30b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

8a4n.com/skin/priorgreen/img/pop_up_title.gif

188.114.97.1

200 OK

1.7 kB

URL GET HTTP/3
8a4n.com/skin/priorgreen/img/pop_up_title.gif
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://8a4n.com/
Certificate
IssuerGoogle Trust Services LLC
Subject8a4n.com
Fingerprint9B:1B:7B:08:9D:C1:5C:26:EA:90:B4:A5:54:B7:83:92:C6:DC:F7:5D
ValidityWed, 20 Mar 2024 17:56:18 GMT - Tue, 18 Jun 2024 17:56:17 GMT

File type
GIF image data, version 89a, 179 x 29
Size
1.7 kB (1727 bytes)
Hash
e0d48185bbc63805098c0680f312807e
83dc07b156332190fe22fb6dedb10bd2756f9297
7ac04604a310fe88d4c309db60d25f557fc65c0fa9d3331fd1eeaaa875864fa0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /skin/priorgreen/img/pop_up_title.gif HTTP/1.1
Host: 8a4n.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8a4n.com/skin/priorgreen/css/login.css
Cookie: _TESTCOOKIESUPPORT=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 25 Apr 2024 07:10:05 GMT
content-type: image/gif
content-length: 1727
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 25 Apr 2024 07:10:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mb5Zv%2F8PKNukb8zXAH5PD3%2FwGjWzxE5a3jEupGkc%2BHi%2F00zR%2BlKybk1xOnzLjhqlVQPGe5HxOEwTK79%2Bm5fEpxl4Q0XNFZYV0TgXPmP0v6Yg%2FPwlPYeJM7p%2FeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c82d999fd0b4d-OSL
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate