Report - 56xbett.cc/

Report Overview

Visitedpublic

2025-06-08 18:35:09

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
217.156.66.94	unknown	unknown	No data	No data	1.8 kB	1.1 MB	217.156.66.94
56xbett.cc	unknown	2024-09-24	2025-06-08	2025-06-08	479 B	8.1 kB	104.21.76.11

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-06-08	medium	217.156.66.94	Sinkholed
2025-06-08	medium	217.156.66.94	Sinkholed
2025-06-08	medium	217.156.66.94	Sinkholed
2025-06-08	medium	217.156.66.94	Sinkholed
2025-06-08	medium	217.156.66.94	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	217.156.66.94/js/lianjie.js	ScriptElement	1.5 kB	2025-06-06	2025-06-08
URL 217.156.66.94/js/lianjie.js IP / ASN 217.156.66.94 #48753 Ava Host Srl Introduced by ScriptElement Embedded false Resource Info First Seen 2025-06-06 Last Seen 2025-06-08 Times Seen 5 Size 1.5 kB (1504 bytes) MD5 bcac7a076ea43f2e5612454c42df0a09 SHA1 efbcdcb3c4498c8890866716d26c6f79dc7b1dff SHA256 d14a6527a8dee8fcc297779f28814a8172056f3053d6f1ef52c0d57c9c58aa32 Format Code Loading...

HTTP Transactions (6)

URL IP Response Size

GET 217.156.66.94/js/lianjie.js

217.156.66.94

200 OK

1.5 kB

URL

217.156.66.94/js/lianjie.js

IP / ASN

217.156.66.94

#48753 Ava Host Srl

Requested byhttp://217.156.66.94/

Resource Info

File typeASCII text

First Seen2025-06-06

Last Seen2025-06-08

Times Seen5

Size1.5 kB (1504 bytes)

MD5bcac7a076ea43f2e5612454c42df0a09

SHA1efbcdcb3c4498c8890866716d26c6f79dc7b1dff

SHA256d14a6527a8dee8fcc297779f28814a8172056f3053d6f1ef52c0d57c9c58aa32

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/lianjie.js HTTP/1.1
Host: 217.156.66.94
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.156.66.94/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Jun 2025 18:34:46 GMT
Content-Type: application/javascript
Last-Modified: Thu, 05 Jun 2025 12:26:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"68418ce0-5e0"
Expires: Mon, 09 Jun 2025 06:34:46 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip

GET 217.156.66.94/images/logo.png

217.156.66.94

200 OK

12 kB

URL

217.156.66.94/images/logo.png

IP / ASN

217.156.66.94

#48753 Ava Host Srl

Requested byhttp://217.156.66.94/

Resource Info

File typePNG image data, 169 x 57, 8-bit/color RGBA, non-interlaced

First Seen2024-12-02

Last Seen2025-07-31

Times Seen87

Size12 kB (12431 bytes)

MD58728e323ffd7073ad996d11cd0e195b5

SHA1e0bf37d8d6908b551467d371041f4b4b588f6138

SHA2568f9dc458d864ee1e7de3996f5dfdf9437cbb760be7440812632ad160a203a7c0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/logo.png HTTP/1.1
Host: 217.156.66.94
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.156.66.94/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Jun 2025 18:34:46 GMT
Content-Type: image/png
Last-Modified: Thu, 28 Nov 2024 16:00:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"67489396-308f"
Expires: Tue, 08 Jul 2025 18:34:46 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip

GET 217.156.66.94/images/1.png

217.156.66.94

200 OK

1.1 MB

URL

217.156.66.94/images/1.png

IP / ASN

217.156.66.94

#48753 Ava Host Srl

Requested byhttp://217.156.66.94/

Resource Info

File typePNG image data, 1280 x 720, 8-bit/color RGB, non-interlaced

First Seen2025-02-22

Last Seen2025-07-26

Times Seen56

Size1.1 MB (1103388 bytes)

MD585cf19b710002bc192a1c64115ee7b8a

SHA1403eb9ef91610c86c85b21653b8da56ae13fd16d

SHA256bc28866cfb4386a0dc326203a3a8e40e668280fe48c827eb4b6bb4238f4aaacf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/1.png HTTP/1.1
Host: 217.156.66.94
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.156.66.94/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Jun 2025 18:34:46 GMT
Content-Type: image/png
Last-Modified: Sun, 16 Feb 2025 13:36:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"67b1e9f4-10d61c"
Expires: Tue, 08 Jul 2025 18:34:46 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip

GET 217.156.66.94/favicon.ico

217.156.66.94

200 OK

3.3 kB

URL

217.156.66.94/favicon.ico

IP / ASN

217.156.66.94

#48753 Ava Host Srl

Requested byhttp://217.156.66.94/

Resource Info

File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

First Seen2024-12-02

Last Seen2025-07-31

Times Seen87

Size3.3 kB (3307 bytes)

MD53d778b65938e7317a489a94297edd7f0

SHA18be734cc48958b6aac0918e85b8f7f2cf59393cb

SHA256ebb23a3ee739ee448b9b6d638eae0fadca047d7ccc0109d2025951799e405eb9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 217.156.66.94
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.156.66.94/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Jun 2025 18:34:46 GMT
Content-Type: image/x-icon
Content-Length: 3307
Last-Modified: Wed, 04 Jun 2025 13:16:54 GMT
Connection: keep-alive
ETag: "68404746-ceb"
Accept-Ranges: bytes

GET 56xbett.cc/

104.21.76.11

301 Moved Permanently

7.6 kB

URL

56xbett.cc/

IP / ASN

104.21.76.11

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606674

Size7.6 kB (7557 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerGoogle Trust Services

Subject56xbett.cc

Fingerprint07:B0:DF:BF:4C:F4:B8:B2:2E:51:5B:36:2B:EE:2F:0F:6F:A0:6C:D2

ValidityMon, 19 May 2025 17:07:54 GMT - Sun, 17 Aug 2025 18:05:39 GMT

HTTP Headers

GET / HTTP/1.1
Host: 56xbett.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Sun, 08 Jun 2025 18:34:46 GMT
content-type: text/html
location: http://217.156.66.94
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=AYbbBgKv9maWLdbL1%2B831Ir6iDWBgpAugTUVm9BZl78lofEO60%2FULxo1kyJfmjJyM7cXwupUB4Tn3qpZMk6F19rFUBHyqDvc"}]}
cf-ray: 94ca7c369c5f5690-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET 217.156.66.94/

217.156.66.94

200 OK

7.6 kB

URL

217.156.66.94/

IP / ASN

217.156.66.94

#48753 Ava Host Srl

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text

First Seen2025-05-26

Last Seen2025-07-31

Times Seen32

Size7.6 kB (7557 bytes)

MD5ac74764cb59ee40116b5a02b045c0bf8

SHA1ff3839dcf09c6c60ca19a5e0613d1289baaa91f8

SHA2566c01a10cb5c5d870e1bb14330db69087d458757a25d92765694e98bb3f13fff9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 217.156.66.94
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 08 Jun 2025 18:34:46 GMT
Content-Type: text/html
Last-Modified: Wed, 04 Jun 2025 13:16:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"68404746-1d85"
Content-Encoding: gzip