Report - mastermagnum.serveftp.com/

Report Overview

Submitted URL
mastermagnum.serveftp.com/
IP
189.6.79.22
ASN
#28573 Claro NXT Telecomunicacoes Ltda
Submitted
2024-05-10 22:16:22
Access
public
Website Title
RouterOS
Final URL
mastermagnum.serveftp.com/
Tags
dyndns
urlquery detections
Suspicious - DynDNS domain

Detections

urlquery
9
Network Intrusion Detection
22
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mastermagnum.serveftp.com	unknown	unknown	No data	No data	2.9 kB	13 kB	189.6.79.22

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-10 22:15:58	medium	189.6.79.22	Client IP	ET INFO TLS Handshake Failure
2024-05-10 22:15:58	medium	189.6.79.22	Client IP	ET INFO TLS Handshake Failure
2024-05-10 22:15:58	medium	189.6.79.22	Client IP	ET INFO TLS Handshake Failure
2024-05-10 22:15:58	medium	189.6.79.22	Client IP	ET INFO TLS Handshake Failure
2024-05-10 22:15:58	medium	189.6.79.22	Client IP	ET INFO TLS Handshake Failure
2024-05-10 22:15:58	medium	189.6.79.22	Client IP	ET INFO TLS Handshake Failure
2024-05-10 22:15:59	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:15:59	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:15:59	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:15:59	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:15:59	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:15:59	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:15:59	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:15:59	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:15:59	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:15:59	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:15:59	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:15:59	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:15:59	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:15:59	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:16:00	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
2024-05-10 22:16:00	medium	Client IP	189.6.79.22	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	mastermagnum.serveftp.com/script.js	797 B	2023-07-07	2024-05-11
Pretty URL mastermagnum.serveftp.com/script.js IP 189.6.79.22 ASN #28573 Claro NXT Telecomunicacoes Ltda Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-07 17:57:49 Last Seen2024-05-11 15:42:01 Times Seen132 Hash 4ee26a61843444d0c2efeace212a40c6 a2bf99c457dd0fb50e52418259988f95fb2665e5 a810815173a50d51c409fdf5a08690e20e9d15d202c701f821e049a67eb13b7e Loading...

HTTP Transactions (8)

URL IP Response Size

mastermagnum.serveftp.com/

189.6.79.22

200 OK

2.7 kB

URL User Request GET HTTP/1.1
mastermagnum.serveftp.com/
IP
189.6.79.22:80
ASN
#28573 Claro NXT Telecomunicacoes Ltda

File type
HTML document, ASCII text
Size
2.7 kB (2723 bytes)
Hash
f88b498e62d6648f10e07673c67978a7
6280adceb893747f5d559bf8a0e913af37121b2e
e2dd2d7e7a9cf514cd2e91c7e66c0462bc05cd6c821bfe4671ba7bbd6fe9a17d

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain

HTTP Headers

GET / HTTP/1.1
Host: mastermagnum.serveftp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=31536000
Connection: Keep-Alive
Content-Length: 2723
Content-Type: text/html
Date: Fri, 10 May 2024 22:15:57 GMT
Expires: Sat, 10 May 2025 22:15:57 GMT
X-Frame-Options: sameorigin

mastermagnum.serveftp.com/script.js

189.6.79.22

200 OK

797 B

URL GET HTTP/1.1
mastermagnum.serveftp.com/script.js
IP
189.6.79.22:80
ASN
#28573 Claro NXT Telecomunicacoes Ltda

Requested by
http://mastermagnum.serveftp.com/

File type
ASCII text
Size
797 B (797 bytes)
Hash
4ee26a61843444d0c2efeace212a40c6
a2bf99c457dd0fb50e52418259988f95fb2665e5
a810815173a50d51c409fdf5a08690e20e9d15d202c701f821e049a67eb13b7e

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain

HTTP Headers

GET /script.js HTTP/1.1
Host: mastermagnum.serveftp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mastermagnum.serveftp.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store
Connection: Keep-Alive
Content-Length: 797
Content-Type: application/x-javascript
Date: Fri, 10 May 2024 22:15:57 GMT
Expires: 0
Last-Modified: Wed, 24 Jan 2024 13:16:36 GMT
Pragma: no-cache
X-Frame-Options: sameorigin

mastermagnum.serveftp.com/green.png

189.6.79.22

200 OK

1.1 kB

URL GET HTTP/1.1
mastermagnum.serveftp.com/green.png
IP
189.6.79.22:80
ASN
#28573 Claro NXT Telecomunicacoes Ltda

Requested by
http://mastermagnum.serveftp.com/

File type
PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Size
1.1 kB (1083 bytes)
Hash
d1f529a58e84d7edf6bafc002f9c5e1d
9ecfffebdd80faddb0520f9a5d19dcd88428e18f
3e39b2fa11ba5c881a2742e11854237f9c53e8a4201223e95d2613dcdc17364d

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain

HTTP Headers

GET /green.png HTTP/1.1
Host: mastermagnum.serveftp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mastermagnum.serveftp.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store
Connection: Keep-Alive
Content-Length: 1083
Content-Type: image/png
Date: Fri, 10 May 2024 22:15:58 GMT
Expires: 0
Last-Modified: Wed, 24 Jan 2024 13:16:36 GMT
Pragma: no-cache
X-Frame-Options: sameorigin

mastermagnum.serveftp.com/license.png

189.6.79.22

200 OK

868 B

URL GET HTTP/1.1
mastermagnum.serveftp.com/license.png
IP
189.6.79.22:80
ASN
#28573 Claro NXT Telecomunicacoes Ltda

Requested by
http://mastermagnum.serveftp.com/

File type
PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Size
868 B (868 bytes)
Hash
f1ec583814e19b0cb07d2e21fe3bdb4f
cbfb3805d26b740e84560ff92132a98cd793491a
fb57a8c99f762d7023a8d379d63a768260e4bd62b9f26ec867b3e46f7048b746

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain

HTTP Headers

GET /license.png HTTP/1.1
Host: mastermagnum.serveftp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mastermagnum.serveftp.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store
Connection: Keep-Alive
Content-Length: 868
Content-Type: image/png
Date: Fri, 10 May 2024 22:15:58 GMT
Expires: 0
Last-Modified: Wed, 24 Jan 2024 13:16:36 GMT
Pragma: no-cache
X-Frame-Options: sameorigin

mastermagnum.serveftp.com/winbox.png

189.6.79.22

200 OK

2.0 kB

URL GET HTTP/1.1
mastermagnum.serveftp.com/winbox.png
IP
189.6.79.22:80
ASN
#28573 Claro NXT Telecomunicacoes Ltda

Requested by
http://mastermagnum.serveftp.com/

File type
PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Size
2.0 kB (1971 bytes)
Hash
7ca21aa701097c0c654d491abfca5b46
af2398ccd4e5abd17b5284d82b91c16ed610d336
041f003e165cd892ea08ab140d637468343aa737eebd1470d36f7790096445e1

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain

HTTP Headers

GET /winbox.png HTTP/1.1
Host: mastermagnum.serveftp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mastermagnum.serveftp.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store
Connection: Keep-Alive
Content-Length: 1971
Content-Type: image/png
Date: Fri, 10 May 2024 22:15:58 GMT
Expires: 0
Last-Modified: Wed, 24 Jan 2024 13:16:36 GMT
Pragma: no-cache
X-Frame-Options: sameorigin

mastermagnum.serveftp.com/help.png

189.6.79.22

200 OK

2.1 kB

URL GET HTTP/1.1
mastermagnum.serveftp.com/help.png
IP
189.6.79.22:80
ASN
#28573 Claro NXT Telecomunicacoes Ltda

Requested by
http://mastermagnum.serveftp.com/

File type
PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Size
2.1 kB (2116 bytes)
Hash
e4e0e035458e4bcc2650f3ad8c737b1a
1dc044ad430209a25661ad3211d55d83ed2c524e
904b0f8068e0d81e3dd71727a30e94aa780e77d316cf6d676843e5e907e8181c

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain

HTTP Headers

GET /help.png HTTP/1.1
Host: mastermagnum.serveftp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mastermagnum.serveftp.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store
Connection: Keep-Alive
Content-Length: 2116
Content-Type: image/png
Date: Fri, 10 May 2024 22:15:58 GMT
Expires: 0
Last-Modified: Wed, 24 Jan 2024 13:16:36 GMT
Pragma: no-cache
X-Frame-Options: sameorigin

mastermagnum.serveftp.com/mikrotik_logo.png

189.6.79.22

200 OK

1.1 kB

URL GET HTTP/1.1
mastermagnum.serveftp.com/mikrotik_logo.png
IP
189.6.79.22:80
ASN
#28573 Claro NXT Telecomunicacoes Ltda

Requested by
http://mastermagnum.serveftp.com/

File type
PNG image data, 180 x 50, 8-bit colormap, non-interlaced
Size
1.1 kB (1089 bytes)
Hash
69f936d986a200e8b450fa65f9148e38
062e758224f51278da10ee452c5340d446d319d5
b540bd26191ea801657156b713fa911a97b1e33ecc0aa9875ed24fa1cbfe9a16

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain

HTTP Headers

GET /mikrotik_logo.png HTTP/1.1
Host: mastermagnum.serveftp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mastermagnum.serveftp.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store
Connection: Keep-Alive
Content-Length: 1089
Content-Type: image/png
Date: Fri, 10 May 2024 22:15:58 GMT
Expires: 0
Last-Modified: Wed, 24 Jan 2024 13:16:36 GMT
Pragma: no-cache
X-Frame-Options: sameorigin

mastermagnum.serveftp.com/favicon.svg

189.6.79.22

200 OK

689 B

URL GET HTTP/1.1
mastermagnum.serveftp.com/favicon.svg
IP
189.6.79.22:80
ASN
#28573 Claro NXT Telecomunicacoes Ltda

Requested by
http://mastermagnum.serveftp.com/

File type
SVG Scalable Vector Graphics image
Size
689 B (689 bytes)
Hash
e18c83c6fbef6f81ae32c2847cd3d1c1
d05f2ad0fb43c4d3fb6942baaa2e3ca7396dc78e
b674ae7902192a88e82246fe8e1ba1f7b3abd6405e6d0e1fc2fdca09db085176

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - DynDNS domain

NIDS	Severity	Alert
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain
suricata	medium	ET INFO DYNAMIC_DNS HTTP Request to a *.serveftp .com Domain

HTTP Headers

GET /favicon.svg HTTP/1.1
Host: mastermagnum.serveftp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mastermagnum.serveftp.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store
Connection: Keep-Alive
Content-Length: 689
Content-Type: image/svg+xml
Date: Fri, 10 May 2024 22:15:58 GMT
Expires: 0
Last-Modified: Wed, 24 Jan 2024 13:16:36 GMT
Pragma: no-cache
X-Frame-Options: sameorigin

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP