Report - xejrps.cc/

Report Overview

Submitted URL
xejrps.cc/
IP
23.247.42.84
ASN
#46573 LAYER-HOST
Submitted
2023-06-06 12:30:12
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
8
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
xejrps.cc	unknown	2023-06-05	2023-06-05	2023-06-05	3.1 kB	10 kB	23.247.42.84

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-06 12:29:54	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 12:29:54	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 12:29:54	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 12:29:55	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 12:29:55	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 12:29:55	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 12:29:56	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-06 12:29:56	medium	Client IP	Internal IP	ET DNS Query for .cc TLD

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

	URL	IP	Response	Size
	xejrps.cc/	23.247.42.84		601 B
URL xejrps.cc/ IP 23.247.42.84:0 ASN #46573 LAYER-HOST File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size 601 B (601 bytes) Hash 975cc298396fb5ad468fb3af061178be 88211a19ac8919cd533aa0d2c37c0160dc0e294d fc331febfaa28238f6a46cba4053d5d86b126256a708e72bd5495a73df78b036 HTTP Headers `GET / HTTP/1.1 Host: xejrps.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: PHPSESSID=vk9nb72kqt92s0jp5v93ae60k3; path=/ _amkc=d4612052-b176-44ec-bf5a-169ae1e19079; expires=Tue, 06-Jun-2023 12:54:55 GMT; Max-Age=1500; path=/; domain=xejrps.cc 62345ba76168db0033ce8ae6a90ce5a762956614=nwcMGFHjQc7nDOZDxhWlbg%3D%3D; expires=Tue, 06-Jun-2023 12:54:55 GMT; Max-Age=1500; path=/; domain=xejrps.cc vary: Accept-Encoding content-encoding: gzip content-length: 601 content-type: text/html; charset=UTF-8 date: Tue, 06 Jun 2023 12:29:55 GMT server: Apache X-Firefox-Spdy: h2

	xejrps.cc/vendor/vendor.23238u92u82.js	23.247.42.84		1.9 kB
URL xejrps.cc/vendor/vendor.23238u92u82.js IP 23.247.42.84:0 ASN #46573 LAYER-HOST File type ASCII text, with very long lines (325), with CRLF line terminators Size 1.9 kB (1907 bytes) Hash 48de24bb73af029e4812c12060509b28 e715a83cbf612971f0275ffdfba2e45604be742a ae9da3c9a568a7b3602dc54e10c324166db3abe1d3a6892770d6ce6a7cc8c1c6 HTTP Headers GET /vendor/vendor.23238u92u82.js HTTP/1.1 Host: xejrps.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://xejrps.cc/ Cookie: PHPSESSID=vk9nb72kqt92s0jp5v93ae60k3; _amkc=d4612052-b176-44ec-bf5a-169ae1e19079; 62345ba76168db0033ce8ae6a90ce5a762956614=nwcMGFHjQc7nDOZDxhWlbg%3D%3D Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK last-modified: Fri, 15 Jul 2022 08:28:54 GMT etag: "1375-5e3d3ceff5d80-gzip" accept-ranges: bytes vary: Accept-Encoding content-encoding: gzip content-length: 1907 content-type: application/javascript date: Tue, 06 Jun 2023 12:29:56 GMT server: Apache X-Firefox-Spdy: h2`

	xejrps.cc/index123.php?t=f4e67fffd93903b152c5dfac39d5a0e277848b3a05c35b6901bca7d78c0541b8	23.247.42.84	302 Found	2.4 kB
URL User Request GET HTTP/2 xejrps.cc/index123.php?t=f4e67fffd93903b152c5dfac39d5a0e277848b3a05c35b6901bca7d78c0541b8 IP 23.247.42.84:443 ASN #46573 LAYER-HOST Certificate IssuerLet's Encrypt Subjectxejrps.cc Fingerprint98:B0:65:7B:32:BE:49:43:12:EE:CA:4B:2B:64:1C:1D:C9:08:22:DE ValidityMon, 05 Jun 2023 06:05:20 GMT - Sun, 03 Sep 2023 06:05:19 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4514), with CRLF line terminators Size 2.4 kB (2379 bytes) Hash 2bd942bbce634f69dad64da040b7fcf7 43a47471e61de186a998ec4f3ae268911da3eeb6 8947213ac54b7f728228b9676a0ba3966cc5c7503b0fcf574cdbcf83244a89b0 HTTP Headers GET /index123.php?t=f4e67fffd93903b152c5dfac39d5a0e277848b3a05c35b6901bca7d78c0541b8 HTTP/1.1 Host: xejrps.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://xejrps.cc/ Cookie: PHPSESSID=vk9nb72kqt92s0jp5v93ae60k3; _amkc=d4612052-b176-44ec-bf5a-169ae1e19079; 62345ba76168db0033ce8ae6a90ce5a762956614=nwcMGFHjQc7nDOZDxhWlbg%3D%3D Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 302 Found expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: _amkc=76047be8-3b5e-421c-88b4-c74f1682a977; expires=Tue, 06-Jun-2023 12:54:56 GMT; Max-Age=1500; path=/; domain=xejrps.cc 62345ba76168db0033ce8ae6a90ce5a762956614=nwcMGFHjQc7nDOZDxhWlbg%3D%3D; expires=Tue, 06-Jun-2023 12:54:56 GMT; Max-Age=1500; path=/; domain=xejrps.cc location: ./index.php vary: Accept-Encoding content-encoding: gzip content-length: 2379 content-type: text/html; charset=UTF-8 date: Tue, 06 Jun 2023 12:29:56 GMT server: Apache X-Firefox-Spdy: h2

	xejrps.cc/index.php	23.247.42.84	403 Forbidden	0 B
URL User Request GET HTTP/2 xejrps.cc/index.php IP 23.247.42.84:443 ASN #46573 LAYER-HOST Certificate IssuerLet's Encrypt Subjectxejrps.cc Fingerprint98:B0:65:7B:32:BE:49:43:12:EE:CA:4B:2B:64:1C:1D:C9:08:22:DE ValidityMon, 05 Jun 2023 06:05:20 GMT - Sun, 03 Sep 2023 06:05:19 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /index.php HTTP/1.1 Host: xejrps.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://xejrps.cc/ DNT: 1 Connection: keep-alive Cookie: PHPSESSID=vk9nb72kqt92s0jp5v93ae60k3; _amkc=76047be8-3b5e-421c-88b4-c74f1682a977; 62345ba76168db0033ce8ae6a90ce5a762956614=nwcMGFHjQc7nDOZDxhWlbg%3D%3D Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 403 Forbidden content-length: 0 content-type: text/html; charset=UTF-8 date: Tue, 06 Jun 2023 12:29:56 GMT server: Apache X-Firefox-Spdy: h2`

	xejrps.cc/favicon.ico	23.247.42.84	200 OK	3.4 kB
URL GET HTTP/2 xejrps.cc/favicon.ico IP 23.247.42.84:443 ASN #46573 LAYER-HOST Requested by https://xejrps.cc/index.php Certificate IssuerLet's Encrypt Subjectxejrps.cc Fingerprint98:B0:65:7B:32:BE:49:43:12:EE:CA:4B:2B:64:1C:1D:C9:08:22:DE ValidityMon, 05 Jun 2023 06:05:20 GMT - Sun, 03 Sep 2023 06:05:19 GMT File type MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data Size 3.4 kB (3371 bytes) Hash 80ff56a61a09f06c0994ed28dcdd3ccc ced81f81a951fe2c14853d673b18267b09169270 25fd0bac8a462dda7d3363101e16dfc48604bca738efa306c9930ad8eb080db6 HTTP Headers GET /favicon.ico HTTP/1.1 Host: xejrps.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://xejrps.cc/index.php Cookie: PHPSESSID=vk9nb72kqt92s0jp5v93ae60k3; _amkc=76047be8-3b5e-421c-88b4-c74f1682a977; 62345ba76168db0033ce8ae6a90ce5a762956614=nwcMGFHjQc7nDOZDxhWlbg%3D%3D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK last-modified: Wed, 03 Nov 2021 13:57:40 GMT etag: "423e-5cfe2cb10fd00-gzip" accept-ranges: bytes vary: Accept-Encoding content-encoding: gzip content-length: 3371 content-type: image/x-icon date: Tue, 06 Jun 2023 12:29:56 GMT server: Apache X-Firefox-Spdy: h2`