IP 14.128.63.96:443
ASN#152194 CTG Server Limited
CertificateIssuerLet's Encrypt Subject*.69tx-40.xyz FingerprintB0:E0:10:F0:64:3B:D0:B9:91:C1:0C:73:96:ED:9B:40:D7:42:39:A3 ValidityThu, 01 May 2025 13:58:40 GMT - Wed, 30 Jul 2025 13:58:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 8b2.69tx-40.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
access-control-allow-origin:
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-type: text/html; charset=utf-8
date: Wed, 18 Jun 2025 07:52:05 GMT
location: https://8b2.jiejie51-f1342.cc/?fromxyz=1
server: openresty
vary: Origin, Accept-Encoding
x-cache: BYPASS
x-frame-options: SAMEORIGIN
content-length: 111
X-Firefox-Spdy: h2
|
| GET 8b2.jiejie51-f1342.cc/?fromxyz=1 | 14.128.63.96 | 200 OK | 9.4 kB |
URL User Request GET 8b2.jiejie51-f1342.cc/?fromxyz=1 IP14.128.63.96:443 ASN#152194 CTG Server Limited
CertificateIssuerLet's Encrypt Subject*.jiejie51-f1342.cc Fingerprint23:A3:1E:25:52:13:39:D7:D3:83:79:6B:26:21:51:DA:48:15:FA:37 ValidityWed, 07 May 2025 03:44:57 GMT - Tue, 05 Aug 2025 03:44:56 GMT
File typeHTML document, ASCII text, with very long lines (9448), with no line terminators Hashe7fa1bd6912ddeea02a284c0558ffee8 e5190240b5efb84d903a76f5261a541685d68529 f75e85932b8d7974a72d301cad30751d38824ae051bf25d6dff5321b79fe0558
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?fromxyz=1 HTTP/1.1
Host: 8b2.jiejie51-f1342.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin:
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
content-encoding: gzip
content-type: text/html;charset=utf-8
date: Wed, 18 Jun 2025 07:52:06 GMT
server: openresty
vary: Origin, Accept-Encoding
x-cache: BYPASS
x-frame-options: SAMEORIGIN
content-length: 1959
X-Firefox-Spdy: h2
|
| GET 8b2.jiejie51-f1342.cc/favicon.ico | 14.128.63.96 | 200 OK | 9.7 kB |
URL GET 8b2.jiejie51-f1342.cc/favicon.ico IP14.128.63.96:443 ASN#152194 CTG Server Limited
Requested byhttps://8b2.jiejie51-f1342.cc/?fromxyz=1 CertificateIssuerLet's Encrypt Subject*.jiejie51-f1342.cc Fingerprint23:A3:1E:25:52:13:39:D7:D3:83:79:6B:26:21:51:DA:48:15:FA:37 ValidityWed, 07 May 2025 03:44:57 GMT - Tue, 05 Aug 2025 03:44:56 GMT
File typeMS Windows icon resource - 1 icon, 48x48, 32 bits/pixel Hash3331070cee004f8847884177ab747e20 41f1edcbb7ee7fc352acd7890b755c1a36b05daa 0b0bc70778f9a4f293440285444a35c6b02fe48ac0cd2b426227e490dae0492f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 8b2.jiejie51-f1342.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8b2.jiejie51-f1342.cc/?fromxyz=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin:
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cache-control: max-age=15552000, public, max-age=15552000, immutable
content-type: image/vnd.microsoft.icon
date: Wed, 18 Jun 2025 07:52:06 GMT
expires: Mon, 15 Dec 2025 07:52:06 GMT
last-modified: Fri, 10 Jan 2025 12:00:23 GMT
server: openresty
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
x-cache: UPDATING
x-content-type-options: nosniff
x-ua-compatible: IE=edge
x-xss-protection: 1; mode=block
content-length: 9662
X-Firefox-Spdy: h2
|