Report - f0660206.xsph.ru/

Report Overview

Submitted URL
f0660206.xsph.ru/
IP
141.8.193.236
ASN
#35278 Sprinthost.ru LLC
Submitted
2023-06-02 17:30:07
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
7
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
f0660206.xsph.ru	unknown	2008-07-30	2023-01-13	2023-05-15	1.7 kB	3.2 kB	141.8.193.236

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-02 17:29:48	low	Client IP	Internal IP	ET INFO Observed DNS Query to xsph .ru Domain
2023-06-02 17:29:48	low	Client IP	Internal IP	ET INFO Observed DNS Query to xsph .ru Domain
2023-06-02 17:29:49	low	Client IP	Internal IP	ET INFO Observed DNS Query to xsph .ru Domain
2023-06-02 17:29:49	low	Client IP	Internal IP	ET INFO Observed DNS Query to xsph .ru Domain
2023-06-02 17:29:49	low	Client IP	Internal IP	ET INFO Observed DNS Query to xsph .ru Domain
2023-06-02 17:29:49	low	Client IP	Internal IP	ET INFO Observed DNS Query to xsph .ru Domain
2023-06-02 17:29:49	low	Client IP	Internal IP	ET INFO Observed DNS Query to xsph .ru Domain

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Response	Size
	f0660206.xsph.ru/	141.8.193.236	200 OK	686 B
URL User Request GET HTTP/1.1 f0660206.xsph.ru/ IP 141.8.193.236:80 ASN #35278 Sprinthost.ru LLC File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text Size 686 B (686 bytes) Hash 2c3408c51946a946bd04ff2ec19d8058 3cb31fa1556ccb7993ec738c9da7df721b94a7b7 364ffa6b178f90f7d5fdfff2cb1d5f164462bd85defedb052e1727152892ad15 HTTP Headers `GET / HTTP/1.1 Host: f0660206.xsph.ru User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: openresty Date: Fri, 02 Jun 2023 17:29:49 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Tue, 05 Jul 2022 18:08:00 GMT ETag: W/"819-5e312bba14128" Content-Encoding: gzip`

	f0660206.xsph.ru/index.css	141.8.193.236	200 OK	73 B
URL GET HTTP/1.1 f0660206.xsph.ru/index.css IP 141.8.193.236:80 ASN #35278 Sprinthost.ru LLC Requested by http://f0660206.xsph.ru/ File type assembler source, ASCII text Size 73 B (73 bytes) Hash db809e06014df11e17bbfc19f2304db1 b09b94d2496d19140afd0fe61c103e1cde436a0f a802cc0f1d1dc52f0724fbf0e876fa6fbe00a17590af2caed63a5bab29962784 HTTP Headers `GET /index.css HTTP/1.1 Host: f0660206.xsph.ru User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://f0660206.xsph.ru/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: openresty Date: Fri, 02 Jun 2023 17:29:49 GMT Content-Type: text/css Content-Length: 73 Last-Modified: Tue, 05 Jul 2022 18:07:51 GMT Connection: keep-alive ETag: "62c47df7-49" Expires: Fri, 09 Jun 2023 17:29:49 GMT Cache-Control: max-age=604800 Accept-Ranges: bytes`

	f0660206.xsph.ru/secret.png	141.8.193.236	200 OK	636 B
URL GET HTTP/1.1 f0660206.xsph.ru/secret.png IP 141.8.193.236:80 ASN #35278 Sprinthost.ru LLC Requested by http://f0660206.xsph.ru/ File type PNG image data, 264 x 40, 8-bit/color RGBA, non-interlaced\012- data Size 636 B (636 bytes) Hash 7be5c046001260a2444c542e2fe25022 aff4e891fe1be4d4a69a4b06364df54309b9a106 6c3119dcab20e600b766f73ca44d8d34cd0eeae0246f57efb7012754a6cf70d3 HTTP Headers `GET /secret.png HTTP/1.1 Host: f0660206.xsph.ru User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://f0660206.xsph.ru/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: openresty Date: Fri, 02 Jun 2023 17:29:49 GMT Content-Type: image/png Content-Length: 636 Last-Modified: Tue, 05 Jul 2022 18:08:03 GMT Connection: keep-alive ETag: "62c47e03-27c" Expires: Fri, 09 Jun 2023 17:29:49 GMT Cache-Control: max-age=604800 Accept-Ranges: bytes`

	f0660206.xsph.ru/dist/renderer.js	141.8.193.236	404 Not Found	286 B
URL GET HTTP/1.1 f0660206.xsph.ru/dist/renderer.js IP 141.8.193.236:80 ASN #35278 Sprinthost.ru LLC Requested by http://f0660206.xsph.ru/ File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 286 B (286 bytes) Hash 6789d49c3c01ce32343df7afdd7cfd82 c5d5ce09017e638a20d076e49935ea4cd7a626f4 f47403e24e8743b018629bada7df4512e9a86b28a8b5added0078aed48b12133 HTTP Headers `GET /dist/renderer.js HTTP/1.1 Host: f0660206.xsph.ru User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://f0660206.xsph.ru/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Server: openresty Date: Fri, 02 Jun 2023 17:29:49 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 286 Connection: keep-alive`

	f0660206.xsph.ru/favicon.ico	141.8.193.236	404 Not Found	281 B
URL GET HTTP/1.1 f0660206.xsph.ru/favicon.ico IP 141.8.193.236:80 ASN #35278 Sprinthost.ru LLC Requested by http://f0660206.xsph.ru/ File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 281 B (281 bytes) Hash 12a117b2ce8270a0ce2a256d83db0285 e9fba6a544a1abf67b6bc1c558fdb71792d7f15b 40841eda35365620ce8192bc24781110faa358ec1d4f472892dc1949872018a7 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: f0660206.xsph.ru User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://f0660206.xsph.ru/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Server: openresty Date: Fri, 02 Jun 2023 17:29:50 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 281 Connection: keep-alive`