Report - xn--1225-2xyunsocom-pb4x493dp5pyia2518ac1ta.xso11.cfd/play/javdb/RkKbWp.html

Report Overview

Visited public
2025-06-23 03:51:50
Tags
Submit Tags
URL
xn--1225-2xyunsocom-pb4x493dp5pyia2518ac1ta.xso11.cfd/play/javdb/RkKbWp.html
Finishing URL
xn--0622-2xyunsocom-pb4x493dp5pyia2518ac1ta.xyunso0022.top/?m=play&u=javdb&k=RkKbWp&p=&mod=jump
IP / ASN
104.21.47.81
#13335 CLOUDFLARENET
Title
0622-2永久地址xyunso点com卍.xyunso0022.top/?m=play&u=javdb&k=RkKbWp&p=&mod=jump

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
xn--1225-2xyunsocom-pb4x493dp5pyia2518ac1ta.xso11.cfd	unknown	2024-12-08	2025-05-22	2025-05-22	984 B	2.7 kB	104.21.47.81
xn--0622-2xyunsocom-pb4x493dp5pyia2518ac1ta.xyunso0022.top	unknown	2025-05-27	2025-06-23	2025-06-23	563 B	6.1 kB	104.21.112.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-06-23	medium	xyunso0022.top	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	xn--1225-2xyunsocom-pb4x493dp5pyia2518ac1ta.xso11.cfd/play/javdb/RkKbWp.html	ScriptElement	184 B	2025-06-23	2025-06-23
Pretty URL xn--1225-2xyunsocom-pb4x493dp5pyia2518ac1ta.xso11.cfd/play/javdb/RkKbWp.html IP 104.21.47.81 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-23 03:51 Last Seen2025-06-23 03:51 Times Seen1 Hash 777aa3ee70145e497ad0af86efc8002e f75e8d13007fae17e4210be7de5f2c72bcab619f 0fa451c45ce2dd6adebb6410276bffd99f0e792de1f206c48c3e9a6b779944a1 Loading...

	xn--0622-2xyunsocom-pb4x493dp5pyia2518ac1ta.xyunso0022.top/?m=play&u=javdb&k=RkKbWp&p=&mod=jump	ScriptElement	226 B	2025-06-23	2025-06-23
Pretty URL xn--0622-2xyunsocom-pb4x493dp5pyia2518ac1ta.xyunso0022.top/?m=play&u=javdb&k=RkKbWp&p=&mod=jump IP 104.21.112.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-06-23 01:34 Last Seen2025-06-23 06:30 Times Seen4 Hash e7216719d58e203ec0186586cd4857f7 46b7eb766495bcb2bab98b7fdc6a34006ba065bb e64ac7b1df510a5eb4e11c0257efe438a6cc04e71261d90e97fc53425525089a Loading...

HTTP Transactions (3)

URL IP Response Size

GET xn--1225-2xyunsocom-pb4x493dp5pyia2518ac1ta.xso11.cfd/play/javdb/RkKbWp.html

104.21.47.81

200 OK

1.4 kB

URL User Request GET
xn--1225-2xyunsocom-pb4x493dp5pyia2518ac1ta.xso11.cfd/play/javdb/RkKbWp.html
IP
104.21.47.81:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectxso11.cfd
Fingerprint6A:21:79:FC:1B:F8:49:8C:5A:84:0C:53:7C:20:0B:03:35:44:FB:F3
ValidityTue, 03 Jun 2025 18:11:57 GMT - Mon, 01 Sep 2025 19:09:35 GMT

File type
HTML document, Unicode text, UTF-8 text
Size
1.4 kB (1350 bytes)
Hash
1b0bb9054946deefceddf35299d587d9
3af120d4d047d7f23f9df44e8cff03df88a0e559
cb55d01f55b104338d3d3be3741e95768701768d6b104bbc9d267a0f85b04566

HTTP Headers

GET /play/javdb/RkKbWp.html HTTP/1.1
Host: xn--1225-2xyunsocom-pb4x493dp5pyia2518ac1ta.xso11.cfd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 03:51:28 GMT
content-type: text/html;charset=utf-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ZjGq%2FBjrnY4MBNM8Q8YNGkUVksJe3jMzcNgLTi6rWwzMFvCLevuV7wiipAWxYqzzO65YkFW2GLKn0UzfPZq6VIF49kTkamOR4vkijS4oT9YR3XSHp54xAKqXhFcy89ToukYhajiyI3qdb5h1wxgUM7kLVA%3D%3D"}]}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 954106ee5ad31bfa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET xn--1225-2xyunsocom-pb4x493dp5pyia2518ac1ta.xso11.cfd/favicon.ico

104.21.47.81

404 Not Found

146 B

URL GET
xn--1225-2xyunsocom-pb4x493dp5pyia2518ac1ta.xso11.cfd/favicon.ico
IP
104.21.47.81:443
ASN
#13335 CLOUDFLARENET

Requested by
https://xn--1225-2xyunsocom-pb4x493dp5pyia2518ac1ta.xso11.cfd/play/javdb/RkKbWp.html
Certificate
IssuerGoogle Trust Services
Subjectxso11.cfd
Fingerprint6A:21:79:FC:1B:F8:49:8C:5A:84:0C:53:7C:20:0B:03:35:44:FB:F3
ValidityTue, 03 Jun 2025 18:11:57 GMT - Mon, 01 Sep 2025 19:09:35 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: xn--1225-2xyunsocom-pb4x493dp5pyia2518ac1ta.xso11.cfd
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Mon, 23 Jun 2025 03:51:29 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: MISS
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=t0%2BPWu5IeJrLzKmOSWcrr3nMw52%2BK0LIiXic0lzyNrtHCTwT7a10IkZn1sEHalHgzj3XKrDFyl6RCm5ukLaE7j9xOmSGt4V3veqD%2B4biHRBnERizz0Vcf9eCxR47pn%2FqB7i3jsqnVSSiSuLuSArlcNtxXQ%3D%3D"}]}
content-encoding: br
cf-ray: 954106f40c951bfa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET xn--0622-2xyunsocom-pb4x493dp5pyia2518ac1ta.xyunso0022.top/?m=play&u=javdb&k=RkKbWp&p=&mod=jump

104.21.112.1

200 OK

5.5 kB

URL User Request GET
xn--0622-2xyunsocom-pb4x493dp5pyia2518ac1ta.xyunso0022.top/?m=play&u=javdb&k=RkKbWp&p=&mod=jump
IP
104.21.112.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectxyunso0022.top
Fingerprint70:8E:1E:7F:B5:CE:25:37:BE:76:B8:A5:9A:18:B6:D8:BE:40:D7:2B
ValidityTue, 27 May 2025 08:10:31 GMT - Mon, 25 Aug 2025 09:09:11 GMT

File type
HTML document, Unicode text, UTF-8 text
Size
5.5 kB (5518 bytes)
Hash
1e7be16d8e22839f51cf6e5a4b4745e0
70ebccb8f656402a16e0ba9d59a176c31eeab618
76ac3045a56706228a650974af18c809eac186c5d443f7c3fca523b632f5a9b3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?m=play&u=javdb&k=RkKbWp&p=&mod=jump HTTP/1.1
Host: xn--0622-2xyunsocom-pb4x493dp5pyia2518ac1ta.xyunso0022.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 23 Jun 2025 03:51:30 GMT
content-type: text/html;charset=utf-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=vjiiR7%2FpFbnvgm14YAmXLPXVVDdRqAPihRQ62iepuj6FDo7JINA2517SgzCu2cdD77X5YCkueTHLLgatV3PhZ0jw8167rXHGO9c1%2BKXgDzPZZj55OkpXDabFS0sAdhxvLJp9j0c9Et7IrKue6%2F%2FvIeRs2USBW4SC"}]}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 954106f93c90b4f3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (3)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers