Report - 45.148.120.140:8080/

Report Overview

Submitted URL
45.148.120.140:8080/
IP
45.148.120.140
ASN
#49042 Phanes Networks B.V.
Submitted
2024-04-24 23:24:06
Access
public
Website Title
Cland Beta
Final URL
45.148.120.140:8080/cland/#/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
14

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
45.148.120.140:8080	unknown	unknown	No data	No data	2.6 kB	1.5 MB	45.148.120.140

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	45.148.120.140	Sinkholed
2024-04-24	medium	45.148.120.140	Sinkholed
2024-04-24	medium	45.148.120.140	Sinkholed
2024-04-24	medium	45.148.120.140	Sinkholed
2024-04-24	medium	45.148.120.140	Sinkholed
2024-04-24	medium	45.148.120.140	Sinkholed
2024-04-24	medium	45.148.120.140	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	45.148.120.140:8080/cland/js/chunk-vendors.001d14a9.js	1.1 MB	2024-04-25	2024-04-25
Pretty URL 45.148.120.140:8080/cland/js/chunk-vendors.001d14a9.js IP 45.148.120.140 ASN #49042 Phanes Networks B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 01:24:13 Last Seen2024-04-25 01:24:13 Times Seen2 Hash 32335515e7e146dbe1ddac501970203b 963a9ee2ad27d9015339654b8b3f52cf3ac980d7 c833b516aa28cb84856433f9c9d4cc2b9a1f6b97cbeaafdebc7192dc282a0d08 Loading...

	45.148.120.140:8080/cland/js/app.0fc625de.js	36 kB	2024-04-25	2024-04-25
Pretty URL 45.148.120.140:8080/cland/js/app.0fc625de.js IP 45.148.120.140 ASN #49042 Phanes Networks B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 01:24:13 Last Seen2024-04-25 01:24:13 Times Seen2 Hash 381cdda0ca3999a6bbdd077ea1f2a62b 9fc16d941479bbdf0cbc49242f2ba10e1241e8a3 e5cae34d3f3910f4802d9abfe6c6ae26d14c35c38eec474a340d0967f3478e1f Loading...

HTTP Transactions (7)

URL IP Response Size

45.148.120.140:8080/

45.148.120.140

307 Temporary Redirect

43 B

URL User Request GET HTTP/1.1
45.148.120.140:8080/
IP
45.148.120.140:8080
ASN
#49042 Phanes Networks B.V.

File type
HTML document, ASCII text
Size
43 B (43 bytes)
Hash
6df77dc0de345505b3e2f491f5ecc484
88e3322f42b4f4da0c0192d2dc9c20f4be133b4c
dbfb13fb4c899a47a22ac39f2999d5fac2910b9f5cf4d0071b153c5b7ef2b904

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 45.148.120.140:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 307 Temporary Redirect
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; object-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'; media-src 'self'; frame-src 'self'; font-src 'self' data:; connect-src 'self'
Content-Type: text/html; charset=utf-8
Location: /cland/
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Wed, 24 Apr 2024 23:23:41 GMT
Content-Length: 43

45.148.120.140:8080/cland/

45.148.120.140

200 OK

1.6 kB

URL User Request GET HTTP/1.1
45.148.120.140:8080/cland/
IP
45.148.120.140:8080
ASN
#49042 Phanes Networks B.V.

File type
HTML document, ASCII text, with very long lines (1587), with no line terminators
Size
1.6 kB (1587 bytes)
Hash
7ef8dc7889d79072ce16c52435500979
ce8bb5f3711bf0a690ed3f3d157cea5f293ad1b1
392cd3be37f21850f70618775360c97758e36e14ef8eb69dbf5e0e02f851c957

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cland/ HTTP/1.1
Host: 45.148.120.140:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 1587
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; object-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'; media-src 'self'; frame-src 'self'; font-src 'self' data:; connect-src 'self'
Content-Type: text/html; charset=utf-8
Last-Modified: Thu, 18 May 2023 06:13:15 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Wed, 24 Apr 2024 23:23:41 GMT

45.148.120.140:8080/cland/css/app.10b3c02a.css

45.148.120.140

200 OK

5.4 kB

URL GET HTTP/1.1
45.148.120.140:8080/cland/css/app.10b3c02a.css
IP
45.148.120.140:8080
ASN
#49042 Phanes Networks B.V.

Requested by
http://45.148.120.140:8080/cland/

File type
ASCII text, with very long lines (5382), with no line terminators
Size
5.4 kB (5382 bytes)
Hash
66192bcc72f405681fc1560efbe63a65
46525fcbe22d1d2509be8744a6f6dc601e6de6a6
dcc3301e9586ac07b8c88011a7e127aa06f97e6f51b399509172620f79b741e8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cland/css/app.10b3c02a.css HTTP/1.1
Host: 45.148.120.140:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.148.120.140:8080/cland/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 5382
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; object-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'; media-src 'self'; frame-src 'self'; font-src 'self' data:; connect-src 'self'
Content-Type: text/css; charset=utf-8
Last-Modified: Thu, 18 May 2023 06:13:15 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Wed, 24 Apr 2024 23:23:41 GMT

45.148.120.140:8080/cland/js/app.0fc625de.js

45.148.120.140

200 OK

36 kB

URL GET HTTP/1.1
45.148.120.140:8080/cland/js/app.0fc625de.js
IP
45.148.120.140:8080
ASN
#49042 Phanes Networks B.V.

Requested by
http://45.148.120.140:8080/cland/

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (35422), with no line terminators
Size
36 kB (36288 bytes)
Hash
381cdda0ca3999a6bbdd077ea1f2a62b
9fc16d941479bbdf0cbc49242f2ba10e1241e8a3
e5cae34d3f3910f4802d9abfe6c6ae26d14c35c38eec474a340d0967f3478e1f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cland/js/app.0fc625de.js HTTP/1.1
Host: 45.148.120.140:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.148.120.140:8080/cland/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 36288
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; object-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'; media-src 'self'; frame-src 'self'; font-src 'self' data:; connect-src 'self'
Content-Type: application/javascript
Last-Modified: Thu, 18 May 2023 06:13:15 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Wed, 24 Apr 2024 23:23:41 GMT

45.148.120.140:8080/cland/css/chunk-vendors.a7925a4c.css

45.148.120.140

200 OK

272 kB

URL GET HTTP/1.1
45.148.120.140:8080/cland/css/chunk-vendors.a7925a4c.css
IP
45.148.120.140:8080
ASN
#49042 Phanes Networks B.V.

Requested by
http://45.148.120.140:8080/cland/

File type
ASCII text, with very long lines (65536), with no line terminators
Size
272 kB (272326 bytes)
Hash
fd13b5715b03244e84897e97c78547ac
ebcfc0eae85037c59c2e85cea685105f65a7b1de
755069ed84239027de9ce3efa42d5024d190915622fe5888684b4d6adeaf601e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cland/css/chunk-vendors.a7925a4c.css HTTP/1.1
Host: 45.148.120.140:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.148.120.140:8080/cland/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 272326
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; object-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'; media-src 'self'; frame-src 'self'; font-src 'self' data:; connect-src 'self'
Content-Type: text/css; charset=utf-8
Last-Modified: Thu, 18 May 2023 06:13:15 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Wed, 24 Apr 2024 23:23:41 GMT

45.148.120.140:8080/cland/js/chunk-vendors.001d14a9.js

45.148.120.140

200 OK

1.1 MB

URL GET HTTP/1.1
45.148.120.140:8080/cland/js/chunk-vendors.001d14a9.js
IP
45.148.120.140:8080
ASN
#49042 Phanes Networks B.V.

Requested by
http://45.148.120.140:8080/cland/

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
1.1 MB (1105771 bytes)
Hash
32335515e7e146dbe1ddac501970203b
963a9ee2ad27d9015339654b8b3f52cf3ac980d7
c833b516aa28cb84856433f9c9d4cc2b9a1f6b97cbeaafdebc7192dc282a0d08

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cland/js/chunk-vendors.001d14a9.js HTTP/1.1
Host: 45.148.120.140:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.148.120.140:8080/cland/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 1105771
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; object-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'; media-src 'self'; frame-src 'self'; font-src 'self' data:; connect-src 'self'
Content-Type: application/javascript
Last-Modified: Thu, 18 May 2023 06:13:15 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Wed, 24 Apr 2024 23:23:41 GMT

45.148.120.140:8080/cland/favicon.ico

45.148.120.140

200 OK

93 kB

URL GET HTTP/1.1
45.148.120.140:8080/cland/favicon.ico
IP
45.148.120.140:8080
ASN
#49042 Phanes Networks B.V.

Requested by
http://45.148.120.140:8080/cland/

File type
MS Windows icon resource - 1 icon, -106x-106, 32 bits/pixel
Size
93 kB (93062 bytes)
Hash
2fdaf65cb9342b76c97b027fc6f545e8
cd0abbc16c55f03edc9c8e9aee67f636792d01ea
8740b59257189cbc1bf20a75625d0ea4f85b0b9f7eb9cbf77a9c2b27554f5751

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cland/favicon.ico HTTP/1.1
Host: 45.148.120.140:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.148.120.140:8080/cland/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 93062
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; object-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'; media-src 'self'; frame-src 'self'; font-src 'self' data:; connect-src 'self'
Content-Type: image/vnd.microsoft.icon
Last-Modified: Thu, 18 May 2023 06:13:15 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Date: Wed, 24 Apr 2024 23:23:41 GMT

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (7)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type