Report - 188.120.242.78:8081/FKcC67A9zp/tree.txt

Report Overview

Submitted URL
188.120.242.78:8081/FKcC67A9zp/tree.txt
IP
188.120.242.78
ASN
#29182 JSC IOT
Submitted
2024-04-17 11:57:57
Access
public
Website Title
188.120.242.78:8081 - Easy and fast file sharing from the command-line.
Final URL
188.120.242.78:8081/FKcC67A9zp/tree.txt
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
26

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
188.120.242.78:8081	unknown	unknown	No data	No data	5.2 kB	5.6 MB	188.120.242.78
camo.githubusercontent.com	23365	2014-02-06	2014-11-08	2024-04-16	610 B	796 B	185.199.111.133

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	188.120.242.78	Sinkholed
2024-04-17	medium	188.120.242.78	Sinkholed
2024-04-17	medium	188.120.242.78	Sinkholed
2024-04-17	medium	188.120.242.78	Sinkholed
2024-04-17	medium	188.120.242.78	Sinkholed
2024-04-17	medium	188.120.242.78	Sinkholed
2024-04-17	medium	188.120.242.78	Sinkholed
2024-04-17	medium	188.120.242.78	Sinkholed
2024-04-17	medium	188.120.242.78	Sinkholed
2024-04-17	medium	188.120.242.78	Sinkholed
2024-04-17	medium	188.120.242.78	Sinkholed
2024-04-17	medium	188.120.242.78	Sinkholed
2024-04-17	medium	188.120.242.78	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	188.120.242.78:8081/scripts/vendor/modernizr.js	11 kB	2023-03-07	2024-04-17
Pretty URL 188.120.242.78:8081/scripts/vendor/modernizr.js IP 188.120.242.78 ASN #29182 JSC IOT Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:11:26 Last Seen2024-04-17 13:58:04 Times Seen1710 Hash 1167e9d01ba4947354c13b262fb5933d bfd0268e4204c37d9fdd7df76b63f35582b25641 1a7c584616a7e60c85ab2cf672dfa659ed515205a5106b415be2ca4af06e937d Loading...

	188.120.242.78:8081/FKcC67A9zp/tree.txt	248 B	2024-04-17	2024-04-17
Pretty URL 188.120.242.78:8081/FKcC67A9zp/tree.txt IP 188.120.242.78 ASN #29182 JSC IOT Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-17 13:58:04 Last Seen2024-04-17 13:58:04 Times Seen1 Hash b86ff77c2d495ac4496f1509f8b3f68b 7b4a9d31d654a1ae5a337401eaf74deb2bd094fc 488881bf1f0dd23c4812712e1f815f2163790adbfd7a923847abe3d22707174d Loading...

	188.120.242.78:8081/FKcC67A9zp/tree.txt	0 B	2023-03-07	2024-04-30
Pretty URL 188.120.242.78:8081/FKcC67A9zp/tree.txt IP 188.120.242.78 ASN #29182 JSC IOT Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-30 16:23:35 Times Seen37217504 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	188.120.242.78:8081/scripts/main.js	146 kB	2023-06-16	2024-04-17
Pretty URL 188.120.242.78:8081/scripts/main.js IP 188.120.242.78 ASN #29182 JSC IOT Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-16 19:20:06 Last Seen2024-04-17 13:58:04 Times Seen975 Hash c8a36bcd41c6e7d6beebc39dac78eefd ac815c949fc22b8d825500228d35533e0aab3295 f053fae005a8e0786278b7df85302e3de76f24c4f0cce69d52507c154e55a585 Loading...

HTTP Transactions (14)

URL IP Response Size

188.120.242.78:8081/fonts/fonts.css?family=Droid+Sans+Mono

188.120.242.78

200 OK

4.1 kB

URL GET HTTP/1.1
188.120.242.78:8081/fonts/fonts.css?family=Droid+Sans+Mono
IP
188.120.242.78:8081
ASN
#29182 JSC IOT

Requested by
http://188.120.242.78:8081/FKcC67A9zp/tree.txt

File type
ASCII text, with CRLF line terminators
Size
4.1 kB (4059 bytes)
Hash
f837cf62966beb5c97b92f894f3c76f1
add1e6310cec9c04fc599d91e6328f61cfa9cb5b
a4df9d99df6efc18c30549cdb22cb577f231fd25358e0e88c6077a8d71cdc05d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/fonts.css?family=Droid+Sans+Mono HTTP/1.1
Host: 188.120.242.78:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://188.120.242.78:8081/FKcC67A9zp/tree.txt
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 4059
Content-Type: text/css; charset=utf-8
Last-Modified: Tue, 16 Apr 2024 08:43:44 GMT
Server: Transfer.sh HTTP Server
X-Made-With: <3 by DutchCoders
X-Served-By: Proudly served by DutchCoders
Date: Wed, 17 Apr 2024 11:57:29 GMT

188.120.242.78:8081/fonts/fonts.css?family=Source+Sans+Pro:100,200,300

188.120.242.78

200 OK

4.1 kB

URL GET HTTP/1.1
188.120.242.78:8081/fonts/fonts.css?family=Source+Sans+Pro:100,200,300
IP
188.120.242.78:8081
ASN
#29182 JSC IOT

Requested by
http://188.120.242.78:8081/FKcC67A9zp/tree.txt

File type
ASCII text, with CRLF line terminators
Size
4.1 kB (4059 bytes)
Hash
f837cf62966beb5c97b92f894f3c76f1
add1e6310cec9c04fc599d91e6328f61cfa9cb5b
a4df9d99df6efc18c30549cdb22cb577f231fd25358e0e88c6077a8d71cdc05d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/fonts.css?family=Source+Sans+Pro:100,200,300 HTTP/1.1
Host: 188.120.242.78:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://188.120.242.78:8081/FKcC67A9zp/tree.txt
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 4059
Content-Type: text/css; charset=utf-8
Last-Modified: Tue, 16 Apr 2024 08:43:44 GMT
Server: Transfer.sh HTTP Server
X-Made-With: <3 by DutchCoders
X-Served-By: Proudly served by DutchCoders
Date: Wed, 17 Apr 2024 11:57:29 GMT

188.120.242.78:8081/scripts/vendor/modernizr.js

188.120.242.78

200 OK

11 kB

URL GET HTTP/1.1
188.120.242.78:8081/scripts/vendor/modernizr.js
IP
188.120.242.78:8081
ASN
#29182 JSC IOT

Requested by
http://188.120.242.78:8081/FKcC67A9zp/tree.txt

File type
JavaScript source, ASCII text, with very long lines (10785), with no line terminators
Size
11 kB (10785 bytes)
Hash
1167e9d01ba4947354c13b262fb5933d
bfd0268e4204c37d9fdd7df76b63f35582b25641
1a7c584616a7e60c85ab2cf672dfa659ed515205a5106b415be2ca4af06e937d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /scripts/vendor/modernizr.js HTTP/1.1
Host: 188.120.242.78:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://188.120.242.78:8081/FKcC67A9zp/tree.txt
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 10785
Content-Type: text/javascript; charset=utf-8
Last-Modified: Tue, 16 Apr 2024 08:43:44 GMT
Server: Transfer.sh HTTP Server
X-Made-With: <3 by DutchCoders
X-Served-By: Proudly served by DutchCoders
Date: Wed, 17 Apr 2024 11:57:29 GMT

188.120.242.78:8081/styles/main.css

188.120.242.78

200 OK

134 kB

URL GET HTTP/1.1
188.120.242.78:8081/styles/main.css
IP
188.120.242.78:8081
ASN
#29182 JSC IOT

Requested by
http://188.120.242.78:8081/FKcC67A9zp/tree.txt

File type
ASCII text, with very long lines (65536), with no line terminators
Size
134 kB (134129 bytes)
Hash
c1ce729a03cef9bdf8d3d7d30636c18b
fc84879c6bcbf49a11df1b7fd1b2371127d288a3
9900057aac9358709b9df007e829afc418f3fe8123a923badfbb4047569de395

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /styles/main.css HTTP/1.1
Host: 188.120.242.78:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://188.120.242.78:8081/FKcC67A9zp/tree.txt
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 134129
Content-Type: text/css; charset=utf-8
Last-Modified: Tue, 16 Apr 2024 08:43:44 GMT
Server: Transfer.sh HTTP Server
X-Made-With: <3 by DutchCoders
X-Served-By: Proudly served by DutchCoders
Date: Wed, 17 Apr 2024 11:57:29 GMT

188.120.242.78:8081/FKcC67A9zp/tree.txt

188.120.242.78

5.3 MB

URL
188.120.242.78:8081/FKcC67A9zp/tree.txt
IP
188.120.242.78:0
ASN
#29182 JSC IOT

File type
data
Size
5.3 MB (5250811 bytes)
Hash
c91a4e2d7af57209f9cb001abb3912c0
41818b78e5bacdf4e318a80c84ee5c2145418b92
1a073e707e529f5416e25cb3fe39b2d1c1d796fc09b84a15114a3c828c251fb0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /FKcC67A9zp/tree.txt HTTP/1.1
Host: 188.120.242.78:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Transfer.sh HTTP Server
Vary: Range, Referer, X-Decrypt-Password
X-Made-With: <3 by DutchCoders
X-Served-By: Proudly served by DutchCoders
Date: Wed, 17 Apr 2024 11:57:29 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked

188.120.242.78:8081/images/Logo-orange.png

188.120.242.78

200 OK

9.1 kB

URL GET HTTP/1.1
188.120.242.78:8081/images/Logo-orange.png
IP
188.120.242.78:8081
ASN
#29182 JSC IOT

Requested by
http://188.120.242.78:8081/FKcC67A9zp/tree.txt

File type
PNG image data, 1000 x 126, 8-bit colormap, non-interlaced
Size
9.1 kB (9074 bytes)
Hash
20dddb5da8625839af8fb0d33080640d
cf9b6ec17aa2c3ba2eaff4ec15ca421dab3ce768
5a54776361c8ea5bfd434f0199f43756320886db8e93a3fe3b6ac57bca82f1d8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Logo-orange.png HTTP/1.1
Host: 188.120.242.78:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://188.120.242.78:8081/FKcC67A9zp/tree.txt
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 9074
Content-Type: image/png
Last-Modified: Tue, 16 Apr 2024 08:43:44 GMT
Server: Transfer.sh HTTP Server
X-Made-With: <3 by DutchCoders
X-Served-By: Proudly served by DutchCoders
Date: Wed, 17 Apr 2024 11:57:29 GMT

188.120.242.78:8081/scripts/main.js

188.120.242.78

200 OK

146 kB

URL GET HTTP/1.1
188.120.242.78:8081/scripts/main.js
IP
188.120.242.78:8081
ASN
#29182 JSC IOT

Requested by
http://188.120.242.78:8081/FKcC67A9zp/tree.txt

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size
146 kB (146294 bytes)
Hash
c8a36bcd41c6e7d6beebc39dac78eefd
ac815c949fc22b8d825500228d35533e0aab3295
f053fae005a8e0786278b7df85302e3de76f24c4f0cce69d52507c154e55a585

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /scripts/main.js HTTP/1.1
Host: 188.120.242.78:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://188.120.242.78:8081/FKcC67A9zp/tree.txt
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 146294
Content-Type: text/javascript; charset=utf-8
Last-Modified: Tue, 16 Apr 2024 08:43:44 GMT
Server: Transfer.sh HTTP Server
X-Made-With: <3 by DutchCoders
X-Served-By: Proudly served by DutchCoders
Date: Wed, 17 Apr 2024 11:57:29 GMT

camo.githubusercontent.com/38ef81f8aca64bb9a64448d0d70f1308ef5341ab/68747470733a2f2f73332e616d617a6f6e6177732e636f6d2f6769746875622f726962626f6e732f666f726b6d655f72696768745f6461726b626c75655f3132313632312e706e67

185.199.111.133

403 Forbidden

14 B

URL GET HTTP/2
camo.githubusercontent.com/38ef81f8aca64bb9a64448d0d70f1308ef5341ab/68747470733a2f2f73332e616d617a6f6e6177732e636f6d2f6769746875622f726962626f6e732f666f726b6d655f72696768745f6461726b626c75655f3132313632312e706e67
IP
185.199.111.133:443
ASN
#54113 FASTLY

Requested by
http://188.120.242.78:8081/FKcC67A9zp/tree.txt
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text
Size
14 B (14 bytes)
Hash
df326a1cbbfbf9ef856c5f56ef35035c
1527115e9b66b29502c06ff93caf64535cffad7a
c7804bbca2b7d140a0ffd884a2d1a6a02480a1c795d7f6d893d98ba9664f1b5b

HTTP Headers

GET /38ef81f8aca64bb9a64448d0d70f1308ef5341ab/68747470733a2f2f73332e616d617a6f6e6177732e636f6d2f6769746875622f726962626f6e732f666f726b6d655f72696768745f6461726b626c75655f3132313632312e706e67 HTTP/1.1
Host: camo.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://188.120.242.78:8081/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
cache-control: no-cache, no-store, private, must-revalidate
content-security-policy: default-src 'none'; img-src data:; style-src 'unsafe-inline'
content-type: text/plain; charset=utf-8
server: github-camo (26ae088d)
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 9292:2C0C22:2119F5E:2307C20:661FB927
accept-ranges: bytes
date: Wed, 17 Apr 2024 11:57:29 GMT
via: 1.1 varnish
x-served-by: cache-hel1410022-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713355050.805844,VS0,VE127
x-fastly-request-id: e6809ea11a62172c2102db852e12d2ebc8832ef7
timing-allow-origin: https://github.com
content-length: 14
X-Firefox-Spdy: h2

188.120.242.78:8081/fonts/source-sans-pro-200-normal-latin.woff2

188.120.242.78

200 OK

13 kB

URL GET HTTP/1.1
188.120.242.78:8081/fonts/source-sans-pro-200-normal-latin.woff2
IP
188.120.242.78:8081
ASN
#29182 JSC IOT

Requested by
http://188.120.242.78:8081/FKcC67A9zp/tree.txt

File type
Web Open Font Format (Version 2), TrueType, length 12680, version 1.0
Size
13 kB (12680 bytes)
Hash
7996b24caa1cfc66f4f15a949e974826
2523f1ff45314e977722ef1e477e34d0b2390a07
570fccbb23e47f3f48767d3b6199198988328bac118fd6933def8f5fb4478472

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/source-sans-pro-200-normal-latin.woff2 HTTP/1.1
Host: 188.120.242.78:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://188.120.242.78:8081/fonts/fonts.css?family=Droid+Sans+Mono
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 12680
Content-Type: font/woff2
Last-Modified: Tue, 16 Apr 2024 08:43:44 GMT
Server: Transfer.sh HTTP Server
X-Made-With: <3 by DutchCoders
X-Served-By: Proudly served by DutchCoders
Date: Wed, 17 Apr 2024 11:57:30 GMT

188.120.242.78:8081/images/terminal-top.svg

188.120.242.78

200 OK

3.9 kB

URL GET HTTP/1.1
188.120.242.78:8081/images/terminal-top.svg
IP
188.120.242.78:8081
ASN
#29182 JSC IOT

Requested by
http://188.120.242.78:8081/FKcC67A9zp/tree.txt

File type
SVG Scalable Vector Graphics image
Size
3.9 kB (3942 bytes)
Hash
54563a672dab3da58c5b41165827251c
6b09f65b63108b88fa880fb132fed21de0f3c862
686bf099b7482d6320f344693e933a6f0afcf9297ea51db5cb8e0091c4f5bf50

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/terminal-top.svg HTTP/1.1
Host: 188.120.242.78:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://188.120.242.78:8081/styles/main.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 3942
Content-Type: image/svg+xml
Last-Modified: Tue, 16 Apr 2024 08:43:44 GMT
Server: Transfer.sh HTTP Server
X-Made-With: <3 by DutchCoders
X-Served-By: Proudly served by DutchCoders
Date: Wed, 17 Apr 2024 11:57:30 GMT

188.120.242.78:8081/fonts/transfersh.woff

188.120.242.78

200 OK

3.1 kB

URL GET HTTP/1.1
188.120.242.78:8081/fonts/transfersh.woff
IP
188.120.242.78:8081
ASN
#29182 JSC IOT

Requested by
http://188.120.242.78:8081/FKcC67A9zp/tree.txt

File type
Web Open Font Format, CFF, length 3060, version 1.0
Size
3.1 kB (3060 bytes)
Hash
cabfd85984a9595ec5217b87afe6b743
8fc07314540a7e281b4dd83661994b1886e230c2
da0a988fdcd19ac15c792e72f8f9807b55b1b6cc6db081ff4b6ca880b703713d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/transfersh.woff HTTP/1.1
Host: 188.120.242.78:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://188.120.242.78:8081/styles/main.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 3060
Content-Type: font/woff
Last-Modified: Tue, 16 Apr 2024 08:43:44 GMT
Server: Transfer.sh HTTP Server
X-Made-With: <3 by DutchCoders
X-Served-By: Proudly served by DutchCoders
Date: Wed, 17 Apr 2024 11:57:30 GMT

188.120.242.78:8081/fonts/source-sans-pro-300-normal-latin.woff2

188.120.242.78

200 OK

13 kB

URL GET HTTP/1.1
188.120.242.78:8081/fonts/source-sans-pro-300-normal-latin.woff2
IP
188.120.242.78:8081
ASN
#29182 JSC IOT

Requested by
http://188.120.242.78:8081/FKcC67A9zp/tree.txt

File type
Web Open Font Format (Version 2), TrueType, length 12956, version 1.0
Size
13 kB (12956 bytes)
Hash
1c772d9d0531b187db80bcfc199c1786
c0c04fb334190e10dffed0dcc5c817c2a6041a15
122854df4f39cf922db317714c2ff0eccab27a1028c14a5aa2211f48b7e0eade

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/source-sans-pro-300-normal-latin.woff2 HTTP/1.1
Host: 188.120.242.78:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://188.120.242.78:8081/fonts/fonts.css?family=Droid+Sans+Mono
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 12956
Content-Type: font/woff2
Last-Modified: Tue, 16 Apr 2024 08:43:44 GMT
Server: Transfer.sh HTTP Server
X-Made-With: <3 by DutchCoders
X-Served-By: Proudly served by DutchCoders
Date: Wed, 17 Apr 2024 11:57:30 GMT

188.120.242.78:8081/fonts/droid-sans-mono-400-normal-latin.woff2

188.120.242.78

200 OK

18 kB

URL GET HTTP/1.1
188.120.242.78:8081/fonts/droid-sans-mono-400-normal-latin.woff2
IP
188.120.242.78:8081
ASN
#29182 JSC IOT

Requested by
http://188.120.242.78:8081/FKcC67A9zp/tree.txt

File type
Web Open Font Format (Version 2), TrueType, length 18400, version 1.0
Size
18 kB (18400 bytes)
Hash
bca50bf4a4e3b8abac8f1665032dfe34
edcb128ece330477d413d42a7fdb081cfb95f39e
1a8e7108949ee83e8eeadd9cd0ed0f98bd8870f2afa75c26ccdc9e795fb58e30

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/droid-sans-mono-400-normal-latin.woff2 HTTP/1.1
Host: 188.120.242.78:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://188.120.242.78:8081/fonts/fonts.css?family=Droid+Sans+Mono
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 18400
Content-Type: font/woff2
Last-Modified: Tue, 16 Apr 2024 08:43:44 GMT
Server: Transfer.sh HTTP Server
X-Made-With: <3 by DutchCoders
X-Served-By: Proudly served by DutchCoders
Date: Wed, 17 Apr 2024 11:57:30 GMT

188.120.242.78:8081/favicon.ico

188.120.242.78

200 OK

7.7 kB

URL GET HTTP/1.1
188.120.242.78:8081/favicon.ico
IP
188.120.242.78:8081
ASN
#29182 JSC IOT

Requested by
http://188.120.242.78:8081/FKcC67A9zp/tree.txt

File type
MS Windows icon resource - 1 icon, 75x75, 8 bits/pixel
Size
7.7 kB (7686 bytes)
Hash
3e6539d4bd26ce0b58dd275bcc5db0ea
fe53e0eda7946bdc33f703fea4b52724f1a9283a
e27519877e9a69cae23b28baeecf1be5df7802d4b02e498bf7862448abcdce7a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 188.120.242.78:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://188.120.242.78:8081/FKcC67A9zp/tree.txt
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 7686
Content-Type: image/vnd.microsoft.icon
Last-Modified: Tue, 16 Apr 2024 08:43:44 GMT
Server: Transfer.sh HTTP Server
X-Made-With: <3 by DutchCoders
X-Served-By: Proudly served by DutchCoders
Date: Wed, 17 Apr 2024 11:57:30 GMT

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash