Report - web-whntsapp.top/

Report Overview

Visited public
2023-12-04 13:32:18
Tags
URL
web-whntsapp.top/
Finishing URL
web-whntsapp.top/
IP / ASN
206.238.199.66
#0
Title
Welcome to nginx!

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
web-whntsapp.top	unknown	2023-12-04	2023-12-04 08:36:40	2023-12-04 12:53:01	754 B	1.1 kB	206.238.199.66

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-04 13:32:07	medium	Client IP	Internal IP	ET DNS Query to a *.top domain - Likely Hostile
2023-12-04 13:32:08	medium	Client IP	206.238.199.66	ET INFO HTTP Request to a *.top domain
2023-12-04 13:32:18	medium	206.238.199.66	Client IP	ET INFO Unconfigured nginx Access

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-12-04	medium	web-whntsapp.top/	WhatsApp
2023-12-04	medium	web-whntsapp.top/	WhatsApp

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

web-whntsapp.top/

206.238.199.66

200 OK

615 B

URL User Request GET HTTP/1.1
web-whntsapp.top/
IP
206.238.199.66:80
ASN
#0

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
615 B (615 bytes)
Hash
7df3d7cf3358af3f470ac7229387ef94
c51a3f0e6de4eb802d5630941c3fd9e1d0efae4b
fb47468a2cd3953c7131431991afcc6a2703f14640520102eea0a685a7e8d6de

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.top domain
suricata	medium	ET INFO Unconfigured nginx Access

HTTP Headers

GET / HTTP/1.1
Host: web-whntsapp.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 13:32:02 GMT
Content-Type: text/html
Content-Length: 615
Last-Modified: Fri, 14 Jan 2022 07:23:06 GMT
Connection: keep-alive
ETag: "61e124da-267"
Accept-Ranges: bytes

web-whntsapp.top/favicon.ico

206.238.199.66

404 Not Found

146 B

URL GET HTTP/1.1
web-whntsapp.top/favicon.ico
IP
206.238.199.66:80
ASN
#0

Requested by
http://web-whntsapp.top/

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	WhatsApp

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: web-whntsapp.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://web-whntsapp.top/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 04 Dec 2023 13:32:03 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers