Report - 8xbe260.com/

Report Overview

Submitted URL
8xbe260.com/
IP
16.163.250.89
ASN
#16509 AMAZON-02
Submitted
2024-04-24 06:25:49
Access
public
Website Title
8Xbet - Official Betting Partner of Manchester City FC
Final URL
8xbe260.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
22

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
vd001-tiger-restrictions.hgfhog.8xojdfudud.com	unknown	2023-09-17	2024-02-05	2024-02-05	3.2 kB	182 kB	143.204.55.61
vd001-fxh9-api.hgfhog.8xojdfudud.com	unknown	2023-09-17	2024-03-02	2024-03-02	934 B	18 kB	143.204.55.94
fe-source.hgfhog.8xojdfudud.com	unknown	2023-09-17	2024-04-08	2024-04-08	938 B	189 kB	143.204.55.56
8xbe260.com	unknown	unknown	No data	No data	468 B	19 kB	16.163.250.89

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed
2024-04-24	medium	8xojdfudud.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	8xbe260.com/	18 kB	2024-04-24	2024-04-24
Pretty URL 8xbe260.com/ IP 16.163.250.89 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 08:25:55 Last Seen2024-04-24 08:25:55 Times Seen1 Hash aa000e3cb1a89e0635bfd774c2f251bb 9a6f20e3806360a9c77220b5394af85a358f1c6e c53a8b3f164beddc585fbee0c2330b32c72d974be7bf0a452145956a1e6e9a07 Loading...

	vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.js	66 kB	2024-04-24	2024-04-25
Pretty URL vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.js IP 143.204.55.61 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 08:25:55 Last Seen2024-04-25 09:33:35 Times Seen4 Hash 1a9ae9a58a1e9efd00aad0de2f979398 c0c104bce63812f87b640b519d8747de415d02ba 917042d4db9ee2f6c4fb679fa3c71a9abff7ae35131a4bf487d6a5df127ae35e Loading...

HTTP Transactions (12)

URL IP Response Size

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/global.css

143.204.55.61

200 OK

905 B

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/global.css
IP
143.204.55.61:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe260.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
Unicode text, UTF-8 text
Size
905 B (905 bytes)
Hash
616346cbb102c779adde7abfa328655d
81f40c4121c48395d2d7c001a07fa415a87eae71
b03fb2ebcadf4ef2c46e7f89ed275b154c81a698e79181880aaff05cd5b6576f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /global.css HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe260.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
content-length: 905
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:26 GMT
last-modified: Wed, 25 Oct 2023 06:08:18 GMT
etag: "616346cbb102c779adde7abfa328655d"
access-control-allow-origin: *
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DYwuYggBRZmLJ_2Ei1ExyFCFl8LN8u6cIUw37iQ8QbCuesNXOomlag==
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/

143.204.55.61

200 OK

478 B

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/
IP
143.204.55.61:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe260.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
HTML document, ASCII text
Size
478 B (478 bytes)
Hash
1ba740e0d2a2a280bbac2e026cd8575e
fc2140fd08a6f5b49a0606e295c49b1372110c64
c4c759a620393fb964391c42deb29ec94f5f10093299f2ce1172f2198d3ebaa6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe260.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/html
content-length: 478
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:26 GMT
cache-control: max-age=0
last-modified: Wed, 24 Apr 2024 05:14:39 GMT
etag: "1ba740e0d2a2a280bbac2e026cd8575e"
access-control-allow-origin: *
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kpVDWUUpdNZTiOIlv-NQoGknkjZizcc4qf_FW7X3C_0n36od5Moa2w==
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.js

143.204.55.61

200 OK

34 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.js
IP
143.204.55.61:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe260.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
gzip compressed data, from Unix
Size
34 kB (34417 bytes)
Hash
0a5211485e59c328a3e092e7768c251d
77de4c0f4a836020048b1517cd4f3d7211428a46
c6010e6bc25c4254d2480b4593c556b6e08eabb5bd328caac604cc475e228d53

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /build/bundle.js HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe260.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:26 GMT
last-modified: Wed, 24 Apr 2024 05:14:37 GMT
etag: W/"1a9ae9a58a1e9efd00aad0de2f979398"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VtEjZ17rPxLYOqrB89wURkZM0iggD49H3-KRFRtwdS1Mycpn1nv6qA==
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/ipBlock.png

143.204.55.61

200 OK

117 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/ipBlock.png
IP
143.204.55.61:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe260.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced
Size
117 kB (117273 bytes)
Hash
5e78e406a8faf40f4e8ff65e8635f75c
faa9b2397c1de81364e49ef9a417adbecd87d045
bb62ce1e42487411bdef915d87497fa02b7ed8a0749e37949a4d68d699bd5428

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/vd001/ipBlock.png HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe260.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 117273
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:28 GMT
last-modified: Wed, 24 Apr 2024 05:14:38 GMT
etag: "5e78e406a8faf40f4e8ff65e8635f75c"
access-control-allow-origin: *
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: g5KVZen-EcNmSU97R0V_cYKqyA-MoDhkMa_ND1JYTtM4SSM5-nBOLQ==
X-Firefox-Spdy: h2

vd001-fxh9-api.hgfhog.8xojdfudud.com/platform/sysmaintenance/customerService

143.204.55.94

200 OK

16 kB

URL GET HTTP/2
vd001-fxh9-api.hgfhog.8xojdfudud.com/platform/sysmaintenance/customerService
IP
143.204.55.94:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe260.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
data
Size
16 kB (15644 bytes)
Hash
31081b7f44518bce66b242d1bee8ad70
bb4c6ddc1d98007d55ac138abe8a0fbd01fe0fbc
c8fbc34fd45b92bf2f4a9a1fd9b49e2965fd4edec51349ef87627605d2cba46a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /platform/sysmaintenance/customerService HTTP/1.1
Host: vd001-fxh9-api.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://8xbe260.com/
Origin: https://8xbe260.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
date: Wed, 24 Apr 2024 06:25:28 GMT
x-envoy-upstream-service-time: 24
server: istio-envoy
access-control-allow-origin: https://8xbe260.com
access-control-allow-credentials: true
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: w_ztz-P9vl1mr36cbB2CjfAX6vPpIj8_cm3nZ8STt9bkVSaNezbUOQ==
X-Firefox-Spdy: h2

fe-source.hgfhog.8xojdfudud.com/app/CountryList/country-list.json

143.204.55.56

200 OK

180 kB

URL GET HTTP/2
fe-source.hgfhog.8xojdfudud.com/app/CountryList/country-list.json
IP
143.204.55.56:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe260.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type

Size
180 kB (179587 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /app/CountryList/country-list.json HTTP/1.1
Host: fe-source.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://8xbe260.com/
Origin: https://8xbe260.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:28 GMT
last-modified: Wed, 20 Jul 2022 03:05:19 GMT
etag: W/"9d17676cfae2cc43fcd89a0f90b30e84"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xa_FaKd2B8Xxg1ZfHLBmBVkVBZWhgTW3bAYwZIfEPoeTkqCa9_IXOg==
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/favicon.ico

143.204.55.61

200 OK

15 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/favicon.ico
IP
143.204.55.61:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe260.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
15 kB (15406 bytes)
Hash
e99394e28cc030ec6a9fba59f1d6b6c4
2302f950165add3df24fe352e4cc4f0afd12006d
362e0797eeccdabc55a1eea0413e75fa677ccd2ecc816b7074dccd09bab463f0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/vd001/favicon.ico HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe260.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 15406
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:28 GMT
last-modified: Wed, 24 Apr 2024 05:14:38 GMT
etag: "e99394e28cc030ec6a9fba59f1d6b6c4"
access-control-allow-origin: *
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HoAksygjK-ldx98aCsRaX3FAaBSPVGz_K27ATGdTxxSSSn2ruMufLA==
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.css

143.204.55.61

200 OK

6.5 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/build/bundle.css
IP
143.204.55.61:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe260.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
ASCII text, with very long lines (6525), with no line terminators
Size
6.5 kB (6525 bytes)
Hash
7b0e06c54eed7230097904bdd2d37df6
9fc056797cd17132ebccd37b28769fb7f142b3de
f203bda91b5b137c4157d959c4ecfebd96152151c6f8cc130c0717f884d1d145

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /build/bundle.css HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe260.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:26 GMT
last-modified: Wed, 25 Oct 2023 06:08:18 GMT
etag: W/"7b0e06c54eed7230097904bdd2d37df6"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: K_nqpDvQb02luDqi3MHrNouoP1yu-tBX4BRmoOL1umjSMgTh2G8AKQ==
X-Firefox-Spdy: h2

vd001-fxh9-api.hgfhog.8xojdfudud.com/platform/user/merchantSetting

143.204.55.94

200 OK

1.8 kB

URL GET HTTP/2
vd001-fxh9-api.hgfhog.8xojdfudud.com/platform/user/merchantSetting
IP
143.204.55.94:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe260.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (1961), with no line terminators
Size
1.8 kB (1757 bytes)
Hash
5078fd378b83167bc49ca163c07e288b
87e4bcdcb4f1ef4374640bddee8221191bbafe65
6627c7c98677792690f9ea6498e30efb886d447dafa433beb49ebbe4581710c8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /platform/user/merchantSetting HTTP/1.1
Host: vd001-fxh9-api.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://8xbe260.com/
Origin: https://8xbe260.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
date: Wed, 24 Apr 2024 06:25:28 GMT
x-envoy-upstream-service-time: 55
server: istio-envoy
access-control-allow-origin: https://8xbe260.com
access-control-allow-credentials: true
x-cache: Miss from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 40UWiUNwlkb9uV1xrx9uBAKHcV2xSfKHJQRQBitQML1Jw00xEv7W-A==
X-Firefox-Spdy: h2

fe-source.hgfhog.8xojdfudud.com/frontend/prod/fe-images/vd001/logo/primary_logo.png

143.204.55.61

200 OK

8.2 kB

URL GET HTTP/2
fe-source.hgfhog.8xojdfudud.com/frontend/prod/fe-images/vd001/logo/primary_logo.png
IP
143.204.55.61:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe260.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
PNG image data, 276 x 64, 8-bit/color RGBA, non-interlaced
Size
8.2 kB (8174 bytes)
Hash
4d393031bf35176af1683667bf120842
edd2470edd6209fbc0c3d8dcd20df72dbbf20f14
ba8e83b21b5ee236511191d58252930ff622e8aeb8485fca515ac486f5e0db56

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /frontend/prod/fe-images/vd001/logo/primary_logo.png HTTP/1.1
Host: fe-source.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe260.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 8174
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:27 GMT
last-modified: Wed, 24 Apr 2024 04:52:41 GMT
etag: "4d393031bf35176af1683667bf120842"
access-control-allow-origin: *
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Op79bn2hrIj2gN9GWRh-cMwFg9GwYz-I9wkQpoPqOZQUjijkGUjZgA==
X-Firefox-Spdy: h2

vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/service.svg

143.204.55.61

200 OK

3.4 kB

URL GET HTTP/2
vd001-tiger-restrictions.hgfhog.8xojdfudud.com/images/vd001/service.svg
IP
143.204.55.61:443
ASN
#16509 AMAZON-02

Requested by
https://8xbe260.com/
Certificate
IssuerLet's Encrypt
Subjecthgfhog.8xojdfudud.com
Fingerprint28:F8:16:9D:4D:1E:A5:3C:1E:07:DC:31:01:48:48:23:EE:04:BE:C5
ValidityFri, 05 Apr 2024 16:48:38 GMT - Thu, 04 Jul 2024 16:48:37 GMT

File type
SVG Scalable Vector Graphics image
Size
3.4 kB (3399 bytes)
Hash
7b7d846ee75ed105c829d05aacc8fcad
32ab8a92fba25efcf7da7cb90956aa7a02c00b82
e6ec5c6f286f3e3fd21c96d34cc997c69e89f7f16d512aa8209a6d49d5b338ea

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/vd001/service.svg HTTP/1.1
Host: vd001-tiger-restrictions.hgfhog.8xojdfudud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://8xbe260.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/svg+xml
server: nginx/1.14.1
date: Wed, 24 Apr 2024 06:25:27 GMT
last-modified: Wed, 24 Apr 2024 05:14:38 GMT
etag: W/"3af446670f3ea28982c82376e327d071"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pdv25NjTYOWEnUt6cpWA54NMR9_24ZjUHXYbkxzIbIzufiKpx8O7IA==
X-Firefox-Spdy: h2

8xbe260.com/

16.163.250.89

200 OK

19 kB

URL User Request GET HTTP/2
8xbe260.com/
IP
16.163.250.89:443
ASN
#16509 AMAZON-02

Certificate
IssuerGoDaddy.com, Inc.
Subject8xbe251.com
FingerprintDB:F7:7A:8C:1D:94:D5:32:98:BA:86:1A:8B:45:99:30:45:75:E5:E9
ValidityMon, 04 Mar 2024 09:08:13 GMT - Tue, 04 Mar 2025 09:08:13 GMT

File type

Size
19 kB (18596 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: 8xbe260.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 06:25:25 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
access-control-allow-origin: *
etag: W/"48a4-c1y2vsuiJWd+jU/VrjEq7iVQRdY"
x-envoy-upstream-service-time: 214
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections