Report - wsajj.icu/login.php

Report Overview

Submitted URL
wsajj.icu/login.php
IP
47.91.17.233
ASN
#45102 Alibaba US Technology Co., Ltd.
Submitted
2023-06-07 02:16:47
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
wsajj.icu	unknown	2023-06-06	2023-06-06	2023-06-07	1.9 kB	1.5 kB	47.91.17.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-07 02:16:29	medium	Client IP	Internal IP	ET INFO DNS Query for Suspicious .icu Domain
2023-06-07 02:16:30	medium	Client IP	47.91.17.233	ET INFO Suspicious Domain (*.icu) in TLS SNI

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	wsajj.icu/login.php	47.91.17.233	301 Moved Permanently	0 B
URL User Request GET HTTP/1.1 wsajj.icu/login.php IP 47.91.17.233:80 ASN #45102 Alibaba US Technology Co., Ltd. File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /login.php HTTP/1.1 Host: wsajj.icu User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 404 Not Found expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: PHPSESSID=t74nvf8c62pcbjboakti2emrvr; path=/ content-length: 0 content-type: text/html; charset=utf-8 date: Wed, 07 Jun 2023 02:16:31 GMT server: Apache X-Firefox-Spdy: h2`

	wsajj.icu/login.php	47.91.17.233	301 Moved Permanently	294 B
URL User Request GET HTTP/1.1 wsajj.icu/login.php IP 47.91.17.233:80 ASN #45102 Alibaba US Technology Co., Ltd. File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 294 B (294 bytes) Hash 0e20dc2be4130ceaf03901e9091fd3c8 420831bf1ecd15b17418a9679cd93a506ebd773d 3357d0033100a15fadaca3959adaf580166e529711cc2eae3678c0206631fcfd HTTP Headers `GET /login.php HTTP/1.1 Host: wsajj.icu User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Cookie: PHPSESSID=t74nvf8c62pcbjboakti2emrvr Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Date: Wed, 07 Jun 2023 02:16:32 GMT Server: Apache Location: https://wsajj.icu/login.php Content-Length: 294 Connection: close Content-Type: text/html; charset=iso-8859-1`

	wsajj.icu/login.php	47.91.17.233	301 Moved Permanently	0 B
URL User Request GET HTTP/1.1 wsajj.icu/login.php IP 47.91.17.233:80 ASN #45102 Alibaba US Technology Co., Ltd. File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /login.php HTTP/1.1 Host: wsajj.icu User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: PHPSESSID=t74nvf8c62pcbjboakti2emrvr Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 404 Not Found expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache content-length: 0 content-type: text/html; charset=utf-8 date: Wed, 07 Jun 2023 02:16:32 GMT server: Apache X-Firefox-Spdy: h2`

	wsajj.icu/favicon.ico	47.91.17.233	404 Not Found	256 B
URL GET HTTP/2 wsajj.icu/favicon.ico IP 47.91.17.233:443 ASN #45102 Alibaba US Technology Co., Ltd. Requested by https://wsajj.icu/login.php Certificate IssuerLet's Encrypt Subjectwsaff.xyz Fingerprint2C:54:84:1B:06:B9:35:2E:EE:C3:E3:98:FD:F5:8A:2F:5A:82:07:19 ValidityTue, 06 Jun 2023 16:06:20 GMT - Mon, 04 Sep 2023 16:06:19 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 256 B (256 bytes) Hash 5a0b5f58e1ca970f2112b43c50290c89 c1854adb6fc996c083523f727420c75aa819593b d279dfa30cc56831853f5bc281110b5b525d80181074e74b4d33115f37d779d3 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: wsajj.icu User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://wsajj.icu/login.php Cookie: PHPSESSID=t74nvf8c62pcbjboakti2emrvr Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 404 Not Found content-length: 256 content-type: text/html; charset=iso-8859-1 date: Wed, 07 Jun 2023 02:16:32 GMT server: Apache X-Firefox-Spdy: h2`