Report - chud.win/

Report Overview

Visited public
2024-11-23 00:10:27
Tags
URL
chud.win/
Finishing URL
chud.win/
IP / ASN
172.67.190.170
#13335 CLOUDFLARENET
Title
chud.win | 520: Web server is returning an unknown error

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
chud.win	unknown	2024-08-20	2024-11-23	2024-11-23	4.5 kB	180 kB	172.67.190.170

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	chud.win/	ScriptElement	393 B	2023-04-05	2025-03-02
Pretty URL chud.win/ IP 172.67.190.170 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 04:39 Last Seen2025-03-02 06:13 Times Seen143291 Hash 34ad0a116707d3b794129a6720af92d7 424de9dbb8bc774e2a2d4ade100d90f5ac0ecbf4 d011a9449a990f2086894be870adc6fbb53595dc593b410a83e45e40bfbc7262 Loading...

HTTP Transactions (10)

	URL	IP	Response	Size
	chud.win/	172.67.190.170	520 No Reason Phrase	7.1 kB
URL User Request GET HTTP/1.1 chud.win/ IP 172.67.190.170:80 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (525) Size 7.1 kB (7137 bytes) Hash b66c07734fa75da24d37c28748796d13 636d35edde0146cd29e5aeec36c287d9bc273377 e2819fee9bc78f19c894c3c74533f12bf2adef7056239f23523e6202b51c3830 HTTP Headers `GET / HTTP/1.1 Host: chud.win User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 520 No Reason Phrase date: Sat, 23 Nov 2024 00:10:04 GMT content-type: text/html; charset=UTF-8 content-length: 7137 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zqMb9WoI9RWdHAMjAy0hI4ZmUkGC3CBXCZPQrQLoa31t%2FT5AUgAAaLYGo2YYnLNboi%2BDvjOm33eOnFJYIK0gFbSahTLCbaCRcWB4KPHgpw7A1zReHr2lowApwA%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} x-frame-options: SAMEORIGIN referrer-policy: same-origin cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT server: cloudflare cf-ray: 8e6cef195ea9b509-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=22384&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3263&recv_bytes=1233&delivery_rate=262128&cwnd=254&unsent_bytes=0&cid=4c820398e8ddafec&ts=996&x=0" X-Firefox-Spdy: h2

	chud.win/	172.67.190.170	301 Moved Permanently	167 B
URL User Request GET HTTP/1.1 chud.win/ IP 172.67.190.170:80 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with CRLF line terminators Size 167 B (167 bytes) Hash 0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f HTTP Headers `GET / HTTP/1.1 Host: chud.win User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 301 Moved Permanently Date: Sat, 23 Nov 2024 00:10:04 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sat, 23 Nov 2024 01:10:04 GMT Location: https://chud.win/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zMiD01YnIhRWvbow3LRt8i12nUc2tC5drSmwigFa5iXLFgLDCVpEY%2BbyQtONzAMNNrmOK85pjLR%2FqDlM6UIaOGZevyeIUbyLRj7E9ywAiRCqy47XPZQZKzCbAw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 8e6cef203d290b69-OSL alt-svc: h2=":443"; ma=60 server-timing: cfL4;desc="?proto=TCP&rtt=16528&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=381&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

	chud.win/	172.67.190.170	520 No Reason Phrase	7.1 kB
URL User Request GET HTTP/1.1 chud.win/ IP 172.67.190.170:80 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (525) Size 7.1 kB (7137 bytes) Hash e49498a19173bda10d4efd814c40329c 7dfecd81b5e3ea02993d50c5454f2629f319ac17 d02b2416fb684a889697036d8954eff38fd425a734ddfcc10b13b7ebb2c5a577 HTTP Headers `GET / HTTP/1.1 Host: chud.win User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 520 No Reason Phrase date: Sat, 23 Nov 2024 00:10:04 GMT content-type: text/html; charset=UTF-8 content-length: 7137 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EUzzCZfkZy80nGJBsrxuWhDgrOgkSdMikDg2vKgqmPowp3KX73hcI%2BUA2rt%2FCwUxpEpNFfDktcu9c%2B5NzcVMlUDXJunjOsQdFTrL%2BwHUtxj6JQrtAWEZCkJliQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} x-frame-options: SAMEORIGIN referrer-policy: same-origin cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT server: cloudflare cf-ray: 8e6cef206cd5b509-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18766&sent=15&recv=19&lost=0&retrans=0&sent_bytes=11254&recv_bytes=1300&delivery_rate=611966&cwnd=257&unsent_bytes=0&cid=4c820398e8ddafec&ts=1546&x=0" X-Firefox-Spdy: h2

	chud.win/cdn-cgi/styles/main.css	172.67.190.170	200 OK	2.7 kB
URL GET HTTP/2 chud.win/cdn-cgi/styles/main.css IP 172.67.190.170:443 ASN #13335 CLOUDFLARENET Requested by https://chud.win/ Certificate IssuerGoogle Trust Services Subjectchud.win Fingerprint58:A2:EF:D7:3A:25:BB:E9:2B:26:F4:4D:A5:F7:FD:6C:FD:4C:D8:42 ValidityFri, 18 Oct 2024 10:36:01 GMT - Thu, 16 Jan 2025 10:36:00 GMT File type gzip compressed data, from Unix Size 2.7 kB (2660 bytes) Hash e5371a01ecb7bf70cac3242e590065fc 9a5416cd5abc04093a125803babb5217734e7823 dfe9b84b58f8d82baeebd6a736ff6185955c9e6cc1c3b00eb7e21d90851e5baf HTTP Headers `GET /cdn-cgi/styles/main.css HTTP/1.1 Host: chud.win User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://chud.win/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK date: Sat, 23 Nov 2024 00:10:04 GMT content-type: text/css last-modified: Wed, 20 Nov 2024 12:19:03 GMT etag: W/"673dd3b7-1f4d" server: cloudflare cf-ray: 8e6cef23cf7ab509-OSL x-frame-options: DENY x-content-type-options: nosniff vary: Accept-Encoding expires: Sat, 23 Nov 2024 02:10:04 GMT cache-control: max-age=7200, public content-encoding: gzip X-Firefox-Spdy: h2`

	chud.win/cdn-cgi/images/cf-icon-ok.png	172.67.190.170	200 OK	946 B
URL GET HTTP/2 chud.win/cdn-cgi/images/cf-icon-ok.png IP 172.67.190.170:443 ASN #13335 CLOUDFLARENET Requested by https://chud.win/ Certificate IssuerGoogle Trust Services Subjectchud.win Fingerprint58:A2:EF:D7:3A:25:BB:E9:2B:26:F4:4D:A5:F7:FD:6C:FD:4C:D8:42 ValidityFri, 18 Oct 2024 10:36:01 GMT - Thu, 16 Jan 2025 10:36:00 GMT File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced Size 946 B (946 bytes) Hash dfaf0fbb758c874be231335db178381d 8f2597eb7ba4c89892aac0559816db3f5280b23e ed732380ee3ff0f2d841784da213c8c05d2b5ae187a5217b419d21cae5cedb1b HTTP Headers `GET /cdn-cgi/images/cf-icon-ok.png HTTP/1.1 Host: chud.win User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://chud.win/cdn-cgi/styles/main.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK date: Sat, 23 Nov 2024 00:10:04 GMT content-type: image/png content-length: 946 last-modified: Wed, 20 Nov 2024 12:19:03 GMT etag: "673dd3b7-3b2" server: cloudflare cf-ray: 8e6cef240f95b509-OSL x-frame-options: DENY x-content-type-options: nosniff vary: Accept-Encoding expires: Sat, 23 Nov 2024 02:10:04 GMT cache-control: max-age=7200, public accept-ranges: bytes X-Firefox-Spdy: h2`

	chud.win/cdn-cgi/images/cf-icon-cloud.png	172.67.190.170	200 OK	1.5 kB
URL GET HTTP/2 chud.win/cdn-cgi/images/cf-icon-cloud.png IP 172.67.190.170:443 ASN #13335 CLOUDFLARENET Requested by https://chud.win/ Certificate IssuerGoogle Trust Services Subjectchud.win Fingerprint58:A2:EF:D7:3A:25:BB:E9:2B:26:F4:4D:A5:F7:FD:6C:FD:4C:D8:42 ValidityFri, 18 Oct 2024 10:36:01 GMT - Thu, 16 Jan 2025 10:36:00 GMT File type PNG image data, 152 x 77, 8-bit colormap, non-interlaced Size 1.5 kB (1484 bytes) Hash 3ec81e5e3a4de9fec46ce9e6999b9e27 8f03b6857ab8d31feb65f97b1ae6b678efdc2ddd 3a223426c67a0a33ff57af68a57fb589fea36af2a6e8f9dae7798c77471e0e58 HTTP Headers `GET /cdn-cgi/images/cf-icon-cloud.png HTTP/1.1 Host: chud.win User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://chud.win/cdn-cgi/styles/main.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK date: Sat, 23 Nov 2024 00:10:04 GMT content-type: image/png content-length: 1484 last-modified: Wed, 20 Nov 2024 12:19:03 GMT etag: "673dd3b7-5cc" server: cloudflare cf-ray: 8e6cef241f9bb509-OSL x-frame-options: DENY x-content-type-options: nosniff vary: Accept-Encoding expires: Sat, 23 Nov 2024 02:10:04 GMT cache-control: max-age=7200, public accept-ranges: bytes X-Firefox-Spdy: h2`

	chud.win/cdn-cgi/images/cf-icon-server.png	172.67.190.170	200 OK	1.4 kB
URL GET HTTP/2 chud.win/cdn-cgi/images/cf-icon-server.png IP 172.67.190.170:443 ASN #13335 CLOUDFLARENET Requested by https://chud.win/ Certificate IssuerGoogle Trust Services Subjectchud.win Fingerprint58:A2:EF:D7:3A:25:BB:E9:2B:26:F4:4D:A5:F7:FD:6C:FD:4C:D8:42 ValidityFri, 18 Oct 2024 10:36:01 GMT - Thu, 16 Jan 2025 10:36:00 GMT File type PNG image data, 95 x 75, 8-bit colormap, non-interlaced Size 1.4 kB (1384 bytes) Hash 2c11e67182601007f577f8bf2c72fee8 01dc915d4745f00632021c05d3eef634747a9c3d 41553a537f85839927155af093b7bfa1987215f474ed038714609cc48812ea3b HTTP Headers `GET /cdn-cgi/images/cf-icon-server.png HTTP/1.1 Host: chud.win User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://chud.win/cdn-cgi/styles/main.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK date: Sat, 23 Nov 2024 00:10:04 GMT content-type: image/png content-length: 1384 last-modified: Wed, 20 Nov 2024 12:19:03 GMT etag: "673dd3b7-568" server: cloudflare cf-ray: 8e6cef241f9cb509-OSL x-frame-options: DENY x-content-type-options: nosniff vary: Accept-Encoding expires: Sat, 23 Nov 2024 02:10:04 GMT cache-control: max-age=7200, public accept-ranges: bytes X-Firefox-Spdy: h2`

	chud.win/cdn-cgi/images/cf-icon-error.png	172.67.190.170	200 OK	854 B
URL GET HTTP/2 chud.win/cdn-cgi/images/cf-icon-error.png IP 172.67.190.170:443 ASN #13335 CLOUDFLARENET Requested by https://chud.win/ Certificate IssuerGoogle Trust Services Subjectchud.win Fingerprint58:A2:EF:D7:3A:25:BB:E9:2B:26:F4:4D:A5:F7:FD:6C:FD:4C:D8:42 ValidityFri, 18 Oct 2024 10:36:01 GMT - Thu, 16 Jan 2025 10:36:00 GMT File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced Size 854 B (854 bytes) Hash e5577f04b6d92590410e26bd2292933b 16946b2c99d98a57f83eac170ce94b012b7d1a7b 67f70597a183fbca7fac55d609fbaac5c34bb4d4d32a0530bbbbb42591f2de2f HTTP Headers `GET /cdn-cgi/images/cf-icon-error.png HTTP/1.1 Host: chud.win User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://chud.win/cdn-cgi/styles/main.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK date: Sat, 23 Nov 2024 00:10:04 GMT content-type: image/png content-length: 854 last-modified: Wed, 20 Nov 2024 12:19:03 GMT etag: "673dd3b7-356" server: cloudflare cf-ray: 8e6cef241f9db509-OSL x-frame-options: DENY x-content-type-options: nosniff vary: Accept-Encoding expires: Sat, 23 Nov 2024 02:10:04 GMT cache-control: max-age=7200, public accept-ranges: bytes X-Firefox-Spdy: h2`

	chud.win/favicon.ico	172.67.190.170	200 OK	152 kB
URL GET HTTP/2 chud.win/favicon.ico IP 172.67.190.170:443 ASN #13335 CLOUDFLARENET Requested by https://chud.win/ Certificate IssuerGoogle Trust Services Subjectchud.win Fingerprint58:A2:EF:D7:3A:25:BB:E9:2B:26:F4:4D:A5:F7:FD:6C:FD:4C:D8:42 ValidityFri, 18 Oct 2024 10:36:01 GMT - Thu, 16 Jan 2025 10:36:00 GMT File type MS Windows icon resource - 1 icon, -64x-64, 32 bits/pixel Size 152 kB (152126 bytes) Hash 74ecf39a91e0652838a1055cfa7a3a61 0ed78bceddc0c3cbdfa7e834da55a8d0e79e672b d71481abdd84078d9168c48dcfe6bb16960ac666ee73bdc415937a0983329ad6 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: chud.win User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://chud.win/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK date: Sat, 23 Nov 2024 00:10:05 GMT content-length: 152126 last-modified: Thu, 05 Sep 2024 06:38:34 GMT expires: Fri, 22 Nov 2024 18:58:49 GMT content-security-policy: script-src 'self'; cache-control: max-age=300 cf-cache-status: STALE age: 18676 accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zbkRkbN9Ek%2BFNTJjS92ZzH4wJ9PS0OI92VBrUL%2B9YU%2FiQ%2BWpXfdyEhe3C2urXFXh2%2B44GPq1frOEsep2M123GTjuuGepUOq4Sfpwbl3EGrqdfAhh43Ablp6xRg%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 8e6cef245fc1b509-OSL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=16961&sent=48&recv=42&lost=0&retrans=0&sent_bytes=27336&recv_bytes=2018&delivery_rate=890400&cwnd=257&unsent_bytes=0&cid=4c820398e8ddafec&ts=2092&x=0" X-Firefox-Spdy: h2

	chud.win/cdn-cgi/images/cf-icon-browser.png	172.67.190.170	200 OK	484 B
URL GET HTTP/2 chud.win/cdn-cgi/images/cf-icon-browser.png IP 172.67.190.170:443 ASN #13335 CLOUDFLARENET Requested by https://chud.win/ Certificate IssuerGoogle Trust Services Subjectchud.win Fingerprint58:A2:EF:D7:3A:25:BB:E9:2B:26:F4:4D:A5:F7:FD:6C:FD:4C:D8:42 ValidityFri, 18 Oct 2024 10:36:01 GMT - Thu, 16 Jan 2025 10:36:00 GMT File type PNG image data, 100 x 80, 8-bit colormap, non-interlaced Size 484 B (484 bytes) Hash 59caf3c7eb63af78f12db37f41433779 8024e688e78e910ae1ea3bc25be7a7ab65444b02 78a7d8b29cabf16831417dba1b9bbe36fae0d060a35a495e8f10e9663b3c9e65 HTTP Headers `GET /cdn-cgi/images/cf-icon-browser.png HTTP/1.1 Host: chud.win User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://chud.win/cdn-cgi/styles/main.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Sat, 23 Nov 2024 00:10:04 GMT content-type: image/png content-length: 484 last-modified: Wed, 20 Nov 2024 12:19:03 GMT etag: "673dd3b7-1e4" server: cloudflare cf-ray: 8e6cef240f94b509-OSL x-frame-options: DENY x-content-type-options: nosniff vary: Accept-Encoding expires: Sat, 23 Nov 2024 02:10:04 GMT cache-control: max-age=7200, public accept-ranges: bytes X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Mnemonic Secure DNS

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP