Report - zyiexezl.biz/ylqukssqse

Report Overview

Visited public
2023-09-18 06:33:24
Tags
URL
zyiexezl.biz/ylqukssqse
Finishing URL
zyiexezl.biz/ylqukssqse
IP / ASN
199.21.76.77
#29791 VOXEL-DOT-NET
Title
zyiexezl.biz/ylqukssqse

Detections

urlquery

0

Network Intrusion Detection

5

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
zyiexezl.biz	unknown	2022-03-02	2022-06-03 03:23:57	2023-09-16 17:19:54	849 B	807 B	199.21.76.77

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-18 06:33:07	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .biz TLD
2023-09-18 06:33:07	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .biz TLD
2023-09-18 06:33:07	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .biz TLD
2023-09-18 06:33:08	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .biz TLD
2023-09-18 06:33:09	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .biz TLD

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	zyiexezl.biz/ylqukssqse	199.21.76.77	200 OK	20 B
URL User Request GET HTTP/1.1 zyiexezl.biz/ylqukssqse IP 199.21.76.77:80 ASN #29791 VOXEL-DOT-NET File type gzip compressed data, from Unix\012- data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers `GET /ylqukssqse HTTP/1.1 Host: zyiexezl.biz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Sep 2023 06:33:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=f97bc630e9b3afcf4813d038f7897f36\|91.90.42.154\|1695018788\|1695018788\|0\|1\|0; path=/; domain=.zyiexezl.biz; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; snkz=91.90.42.154; path=/; Expires=Thu, 15 Apr 2027 00:00:00 GMT Content-Encoding: gzip`

	zyiexezl.biz/favicon.ico	199.21.76.77	200 OK	20 B
URL GET HTTP/1.1 zyiexezl.biz/favicon.ico IP 199.21.76.77:80 ASN #29791 VOXEL-DOT-NET Requested by http://zyiexezl.biz/ylqukssqse File type gzip compressed data, from Unix\012- data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: zyiexezl.biz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://zyiexezl.biz/ylqukssqse Cookie: btst=f97bc630e9b3afcf4813d038f7897f36\|91.90.42.154\|1695018788\|1695018788\|0\|1\|0; snkz=91.90.42.154 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Mon, 18 Sep 2023 06:33:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: btst=f97bc630e9b3afcf4813d038f7897f36\|91.90.42.154\|1695018789\|1695018788\|0\|2\|0; path=/; domain=.zyiexezl.biz; Expires=Thu, 15 Apr 2027 00:00:00 GMT; HttpOnly; SameSite=Lax; Content-Encoding: gzip`