Report - a0982955.xsph.ru/

Report Overview

Visited public
2024-05-21 04:12:36
Tags
URL
a0982955.xsph.ru/
Finishing URL
a0982955.xsph.ru/
IP / ASN
141.8.192.6
#35278 Sprinthost.ru LLC
Title
404 Not Found

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
a0982955.xsph.ru	unknown	unknown	No data	No data	730 B	869 B	141.8.192.6

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-21 04:12:11	medium	141.8.192.6	Client IP	ETPRO HUNTING HTTP 200 Stat Code with 404 in Body
2024-05-21 04:12:11	medium	141.8.192.6	Client IP	ETPRO HUNTING HTTP 200 Stat Code with 404 in Body

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

GET a0982955.xsph.ru/

141.8.192.6

200 OK

181 B

URL User Request GET HTTP/1.1
a0982955.xsph.ru/
IP
141.8.192.6:80
ASN
#35278 Sprinthost.ru LLC

File type
HTML document, ASCII text, with CRLF line terminators
Size
181 B (181 bytes)
Hash
6211e5cf16517b52b0c9fdb43939b4af
e635cec58b21886ca44f51baa0201458424eb6f3
1ad6d6d87863c0b0365f8c1b34be571a7694a5238860f5d57dd9b598cffd1d39

Detections

NIDS	Severity	Alert
suricata	medium	ETPRO HUNTING HTTP 200 Stat Code with 404 in Body
suricata	medium	ETPRO HUNTING HTTP 200 Stat Code with 404 in Body

HTTP Headers

GET / HTTP/1.1
Host: a0982955.xsph.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Tue, 21 May 2024 04:12:11 GMT
Content-Type: text/html
Content-Length: 181
Connection: keep-alive
Last-Modified: Mon, 13 May 2024 20:34:38 GMT
ETag: "b5-6185bd06cbe98"
Accept-Ranges: bytes

GET a0982955.xsph.ru/favicon.ico

141.8.192.6

404 Not Found

281 B

URL GET HTTP/1.1
a0982955.xsph.ru/favicon.ico
IP
141.8.192.6:80
ASN
#35278 Sprinthost.ru LLC

Requested by
http://a0982955.xsph.ru/

File type
HTML document, ASCII text
Size
281 B (281 bytes)
Hash
b0a0b5aa8c14561f614279c70070df98
77e4937ef0a6a49ed54242ac16b20f7f9dbcb7d3
368d30b2d4f8ba81aa141b26e7d5dba71b187f794f7597bedb3e26e3bd0c45db

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: a0982955.xsph.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://a0982955.xsph.ru/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: openresty
Date: Tue, 21 May 2024 04:12:11 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 281
Connection: keep-alive

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers