Report - 37.38.9.246/

Report Overview

Submitted URL
37.38.9.246/
IP
37.38.9.246
ASN
#42961 Mobile Telecommunications Company
Submitted
2024-05-08 20:46:04
Access
public
Website Title
greenpacket
Final URL
37.38.9.246/#/login
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
38

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
37.38.9.246	unknown	unknown	No data	No data	6.8 kB	2.5 MB	37.38.9.246

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed
2024-05-08	medium	37.38.9.246	Sinkholed

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	37.38.9.246/static/js/chunk-7d97f1af.941604e1.js	7.9 kB	2023-11-24	2024-05-19
Pretty URL 37.38.9.246/static/js/chunk-7d97f1af.941604e1.js IP 37.38.9.246 ASN #42961 Mobile Telecommunications Company Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-24 03:12:17 Last Seen2024-05-19 00:10:11 Times Seen56 Hash 7f84de1ad0aa19c8b1c00d1d3bcd7d8c 6dd449ed79bc2c4acfd9eca77708b9f51ffc9526 3b1a4057508f74a51f1bc3e39330740a2384a3c2e2567e15f85e672465f07fee Loading...

	37.38.9.246/static/tinymce4.7.5/tinymce.min.js	834 kB	2023-03-07	2024-05-19
Pretty URL 37.38.9.246/static/tinymce4.7.5/tinymce.min.js IP 37.38.9.246 ASN #42961 Mobile Telecommunications Company Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:07:05 Last Seen2024-05-19 00:10:11 Times Seen59 Hash 281d2c12c5ecdff544491eb7873c21e0 7717ee6b05cdca1d8cc8c0501373b20b75c5d6da 19ef86215de5de924f7c1a76f4ad7c3b0c1dfbac40af3e28ccdc6d5ceb3c55f8 Loading...

	37.38.9.246/static/jtopo/jtopo.js	79 kB	2023-04-05	2024-05-19
Pretty URL 37.38.9.246/static/jtopo/jtopo.js IP 37.38.9.246 ASN #42961 Mobile Telecommunications Company Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-05 01:54:18 Last Seen2024-05-19 00:10:11 Times Seen60 Hash ca98d4be36a4c1984d4433c060ff2ea0 9b33342d5bf3d867b6bc7368cb95c8623af8254c 2ada27ef7214da598d85c5bfce3990325f8ddef16b8c396b1cfa564b84daac00 Loading...

	37.38.9.246/	116 B	2023-11-24	2024-05-19
Pretty URL 37.38.9.246/ IP 37.38.9.246 ASN #42961 Mobile Telecommunications Company Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-24 03:12:17 Last Seen2024-05-19 00:10:11 Times Seen28 Hash 54d5234d0821bf2de38dc4dee8789663 80bb1acb987acabae43f9b064cd959e750b94637 714a654f3ab130576caeb8ce1dbeb6e24408fbe4bc5e164009b4c8d9b37eec5b Loading...

	37.38.9.246/static/js/chunk-elementUI.7ee4a27d.js	662 kB	2023-04-05	2024-05-19
Pretty URL 37.38.9.246/static/js/chunk-elementUI.7ee4a27d.js IP 37.38.9.246 ASN #42961 Mobile Telecommunications Company Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-05 01:54:18 Last Seen2024-05-19 00:10:11 Times Seen59 Hash 5b27e34c7ccbd44c908b250fe30e53b1 c44b21b8efbef4fa9ddacb1506db90e9114e9910 aa37c3bd5e7732b1f0fb6863e7db96539f7c9ef4a7d067b545ac71da75f27087 Loading...

	37.38.9.246/static/js/chunk-libs.6f5dbf1d.js	219 kB	2023-11-24	2024-05-19
Pretty URL 37.38.9.246/static/js/chunk-libs.6f5dbf1d.js IP 37.38.9.246 ASN #42961 Mobile Telecommunications Company Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-24 03:12:17 Last Seen2024-05-19 00:10:11 Times Seen57 Hash 19c11942ddb670b2154fccd37c034b69 a1ce9d3c68f55d7fe9e9ee01db28f771b1028222 5dd0e221ed03363cfb852b9551530adc77657ccc26220c033c2f6938b38eb6a1 Loading...

	37.38.9.246/	4.7 kB	2023-11-24	2024-05-19
Pretty URL 37.38.9.246/ IP 37.38.9.246 ASN #42961 Mobile Telecommunications Company Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-24 03:12:17 Last Seen2024-05-19 00:10:11 Times Seen28 Hash 7ebd4e8cb3ea6029358c3af4d4589381 ce14424ea9e492bcc964467bda962235aac9b091 2b0b578f677f5ab041d9021cd9b4793c792249c07d992bce39cfe0c084e3bc05 Loading...

	37.38.9.246/static/js/app.36afd877.js	155 kB	2023-11-24	2024-05-19
Pretty URL 37.38.9.246/static/js/app.36afd877.js IP 37.38.9.246 ASN #42961 Mobile Telecommunications Company Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-24 03:12:17 Last Seen2024-05-19 00:10:11 Times Seen57 Hash fe1181c4bc41e38006fad7e4c08bac1a 6817b89a1ebfc9441eec85bfd5d0765d961ed0ad e70c76671a87e6f3524789b448706a13d0c6155cec9f87f2557fd8ff8185fb0a Loading...

HTTP Transactions (19)

URL IP Response Size

37.38.9.246/

37.38.9.246

5.5 kB

URL User Request GET
37.38.9.246/
IP
37.38.9.246:0
ASN
#42961 Mobile Telecommunications Company

File type
HTML document, ASCII text, with very long lines (4657), with CRLF line terminators
Size
5.5 kB (5487 bytes)
Hash
f866fee9761ab95e36b2d325c93f24f4
3f441eb506af3b89a0b6c9a7c6bb96ece4aa5b88
3e30fc341ec46c1e20443b972aedb38cc87bf714c6dd051505583470696d0b56

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin,Authorization,Access-Control-Allow-Origin,Access-Control-Allow-Headers,Content-Type
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: 
Access-Control-Expose-Headers: Content-Length
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 5487
Content-Type: text/html; charset=utf-8
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:37 GMT

37.38.9.246/static/css/chunk-libs.3dfb7769.css

37.38.9.246

200 OK

3.6 kB

URL GET HTTP/1.1
37.38.9.246/static/css/chunk-libs.3dfb7769.css
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
ASCII text, with very long lines (3568), with no line terminators
Size
3.6 kB (3568 bytes)
Hash
f28315910c5b5fc6a646d9ba94579dc9
0d04a4c4a05669b0ac876c67347a07c37c8bad7d
b33eb5b49a8bac1cb198391a0950b30127bceb2e50f3aaf6ecf0394c84143221

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/chunk-libs.3dfb7769.css HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 3568
Content-Type: text/css; charset=utf-8
Last-Modified: Mon, 15 May 2023 13:50:42 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:37 GMT

37.38.9.246/static/jtopo/jtopo.js

37.38.9.246

200 OK

79 kB

URL GET HTTP/1.1
37.38.9.246/static/jtopo/jtopo.js
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (32056), with CRLF line terminators
Size
79 kB (78805 bytes)
Hash
ca98d4be36a4c1984d4433c060ff2ea0
9b33342d5bf3d867b6bc7368cb95c8623af8254c
2ada27ef7214da598d85c5bfce3990325f8ddef16b8c396b1cfa564b84daac00

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/jtopo/jtopo.js HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 78805
Content-Type: application/javascript
Last-Modified: Mon, 15 May 2023 13:50:42 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:38 GMT

37.38.9.246/static/js/app.36afd877.js

37.38.9.246

200 OK

155 kB

URL GET HTTP/1.1
37.38.9.246/static/js/app.36afd877.js
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (53341), with no line terminators
Size
155 kB (155345 bytes)
Hash
fe1181c4bc41e38006fad7e4c08bac1a
6817b89a1ebfc9441eec85bfd5d0765d961ed0ad
e70c76671a87e6f3524789b448706a13d0c6155cec9f87f2557fd8ff8185fb0a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/app.36afd877.js HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 155345
Content-Type: application/javascript
Last-Modified: Mon, 15 May 2023 13:50:42 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:38 GMT

37.38.9.246/static/css/app.0cb70655.css

37.38.9.246

200 OK

255 kB

URL GET HTTP/1.1
37.38.9.246/static/css/app.0cb70655.css
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
ASCII text, with very long lines (65536), with no line terminators
Size
255 kB (255424 bytes)
Hash
4b1dcb95adfefb91b6a08f8d0a58718a
7a5d1355b621d5d3539b700f462b823e9efdd902
8e2f107fd62b6c004cd11f0122a479f120e27fc01012bd601cabc17dde01a95f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/app.0cb70655.css HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 255424
Content-Type: text/css; charset=utf-8
Last-Modified: Mon, 15 May 2023 13:50:42 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:38 GMT

37.38.9.246/static/js/chunk-libs.6f5dbf1d.js

37.38.9.246

200 OK

219 kB

URL GET HTTP/1.1
37.38.9.246/static/js/chunk-libs.6f5dbf1d.js
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
JavaScript source, ASCII text, with very long lines (55832)
Size
219 kB (218567 bytes)
Hash
19c11942ddb670b2154fccd37c034b69
a1ce9d3c68f55d7fe9e9ee01db28f771b1028222
5dd0e221ed03363cfb852b9551530adc77657ccc26220c033c2f6938b38eb6a1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/chunk-libs.6f5dbf1d.js HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 218567
Content-Type: application/javascript
Last-Modified: Mon, 15 May 2023 13:50:42 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:38 GMT

37.38.9.246/static/js/chunk-elementUI.7ee4a27d.js

37.38.9.246

200 OK

662 kB

URL GET HTTP/1.1
37.38.9.246/static/js/chunk-elementUI.7ee4a27d.js
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (64954), with no line terminators
Size
662 kB (661741 bytes)
Hash
5b27e34c7ccbd44c908b250fe30e53b1
c44b21b8efbef4fa9ddacb1506db90e9114e9910
aa37c3bd5e7732b1f0fb6863e7db96539f7c9ef4a7d067b545ac71da75f27087

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/chunk-elementUI.7ee4a27d.js HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 661741
Content-Type: application/javascript
Last-Modified: Mon, 15 May 2023 13:50:42 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:38 GMT

37.38.9.246/static/tinymce4.7.5/tinymce.min.js

37.38.9.246

200 OK

834 kB

URL GET HTTP/1.1
37.38.9.246/static/tinymce4.7.5/tinymce.min.js
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
JavaScript source, ASCII text, with very long lines (65513), with CRLF line terminators
Size
834 kB (834084 bytes)
Hash
281d2c12c5ecdff544491eb7873c21e0
7717ee6b05cdca1d8cc8c0501373b20b75c5d6da
19ef86215de5de924f7c1a76f4ad7c3b0c1dfbac40af3e28ccdc6d5ceb3c55f8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/tinymce4.7.5/tinymce.min.js HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 834084
Content-Type: application/javascript
Last-Modified: Mon, 15 May 2023 13:50:42 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:38 GMT

37.38.9.246/static/css/chunk-7d97f1af.50d54ddb.css

37.38.9.246

200 OK

1.9 kB

URL GET HTTP/1.1
37.38.9.246/static/css/chunk-7d97f1af.50d54ddb.css
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
ASCII text, with very long lines (1923), with no line terminators
Size
1.9 kB (1923 bytes)
Hash
2e1c3bfc1b3c3281ff09c6e2b6d2ebfb
31311550dfadfb6f9557b7a5c4fba8c115bead5e
5a522f033a3984343b8241a7b1bb04b5c6c2e548bc5f93b73a158f57b81c8413

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/chunk-7d97f1af.50d54ddb.css HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 1923
Content-Type: text/css; charset=utf-8
Last-Modified: Mon, 15 May 2023 13:50:42 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:40 GMT

37.38.9.246/static/js/chunk-7d97f1af.941604e1.js

37.38.9.246

200 OK

7.9 kB

URL GET HTTP/1.1
37.38.9.246/static/js/chunk-7d97f1af.941604e1.js
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (7905), with no line terminators
Size
7.9 kB (7914 bytes)
Hash
7f84de1ad0aa19c8b1c00d1d3bcd7d8c
6dd449ed79bc2c4acfd9eca77708b9f51ffc9526
3b1a4057508f74a51f1bc3e39330740a2384a3c2e2567e15f85e672465f07fee

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/chunk-7d97f1af.941604e1.js HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 7914
Content-Type: application/javascript
Last-Modified: Mon, 15 May 2023 13:50:42 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:40 GMT

37.38.9.246/static/ico/favicon.ico

37.38.9.246

200 OK

1.2 kB

URL GET HTTP/1.1
37.38.9.246/static/ico/favicon.ico
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Size
1.2 kB (1150 bytes)
Hash
0e87aeb9b308d70bed305affdf7552f8
9578b1858ecae52522c202111f928323bacee9c3
6fcccc0ddc863e98e5ad585ffb8bc753e9a8862d4a76e8120a758a583c334991

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/ico/favicon.ico HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 1150
Content-Type: image/x-icon
Last-Modified: Mon, 15 May 2023 13:50:42 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:40 GMT

37.38.9.246/web/v1/startup/usersstate

37.38.9.246

200 OK

76 B

URL GET HTTP/1.1
37.38.9.246/web/v1/startup/usersstate
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
JSON text data
Size
76 B (76 bytes)
Hash
9003820c31a8907404f7a8224ec77976
0f11928d0c646bb58d5b5ae0cd412ef8111afc9b
12d98b15e6c6b5bf21cc1f8b035e313c57f4dc5061007bbb131b4bd2e0881a9f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /web/v1/startup/usersstate HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin,Authorization,Access-Control-Allow-Origin,Access-Control-Allow-Headers,Content-Type
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: 
Access-Control-Expose-Headers: Content-Length
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 76
Content-Type: application/json; charset=utf-8
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:40 GMT

37.38.9.246/static/img/Group89@1x.9d9e7958.png

37.38.9.246

200 OK

16 kB

URL GET HTTP/1.1
37.38.9.246/static/img/Group89@1x.9d9e7958.png
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced
Size
16 kB (16126 bytes)
Hash
9d9e7958a8fcb38a12c314e4a1967da1
7e074ef6e274effec64821b9c86a566676238de0
2e30809abdc09a7c2e327de330bca2a453d639d7e29ed6ae71e1558f337ed98b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/img/Group89@1x.9d9e7958.png HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 16126
Content-Type: image/png
Last-Modified: Mon, 15 May 2023 13:50:42 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:40 GMT

37.38.9.246/web/v1/startup/productinfo

37.38.9.246

200 OK

48 B

URL GET HTTP/1.1
37.38.9.246/web/v1/startup/productinfo
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
JSON text data
Size
48 B (48 bytes)
Hash
77b4e37e6beaa49bbb35cca6fcda425c
d1bcac7125c4830a42c8b5bb22c5642641b04191
8b1f843943edca62334111199829fcdd6715353c3456457e083712a277ad56a9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /web/v1/startup/productinfo HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin,Authorization,Access-Control-Allow-Origin,Access-Control-Allow-Headers,Content-Type
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: 
Access-Control-Expose-Headers: Content-Length
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 48
Content-Type: application/json; charset=utf-8
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:40 GMT

37.38.9.246/web/v1/startup/webui/localeinfo

37.38.9.246

200 OK

55 B

URL GET HTTP/1.1
37.38.9.246/web/v1/startup/webui/localeinfo
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
JSON text data
Size
55 B (55 bytes)
Hash
9314117fe9e67126b7f2d697ea5bdadc
12ce2be2b57e9bb795872b2639573d75a6df6992
ede255137493904324df04f87173aa79ec33888084ec3c57ffb0671c494888e4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /web/v1/startup/webui/localeinfo HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin,Authorization,Access-Control-Allow-Origin,Access-Control-Allow-Headers,Content-Type
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: 
Access-Control-Expose-Headers: Content-Length
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 55
Content-Type: application/json; charset=utf-8
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:40 GMT

37.38.9.246/web/v1/startup/webui/logoinfo

37.38.9.246

200 OK

73 B

URL GET HTTP/1.1
37.38.9.246/web/v1/startup/webui/logoinfo
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
JSON text data
Size
73 B (73 bytes)
Hash
2fb1513b96ffdecd71dd2f2d0a558918
758677a9275eabd9823028f63a322e1c5e2a9a47
2d8dbd487a1fd632c0e558af0323e6456cdb779f7c711448b71c12878276a544

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /web/v1/startup/webui/logoinfo HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin,Authorization,Access-Control-Allow-Origin,Access-Control-Allow-Headers,Content-Type
Access-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS
Access-Control-Allow-Origin: 
Access-Control-Expose-Headers: Content-Length
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 73
Content-Type: application/json; charset=utf-8
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:41 GMT

37.38.9.246/static/img/loginBg.c0422d8d.png

37.38.9.246

200 OK

174 kB

URL GET HTTP/1.1
37.38.9.246/static/img/loginBg.c0422d8d.png
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
PNG image data, 1440 x 900, 8-bit/color RGBA, non-interlaced
Size
174 kB (173943 bytes)
Hash
c0422d8d113cd6a7490720606b2ca7e6
dd9245c1bd135003f69fa2d1d48d74a824ee7c9e
f6fccf6c968f40738f2ef01a5459189a3eb2efaaa6803fb0992ede1633d0fe7b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/img/loginBg.c0422d8d.png HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/static/css/chunk-7d97f1af.50d54ddb.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 173943
Content-Type: image/png
Last-Modified: Mon, 15 May 2023 13:50:42 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:40 GMT

37.38.9.246/static/fonts/element-icons.535877f5.woff

37.38.9.246

200 OK

28 kB

URL GET HTTP/1.1
37.38.9.246/static/fonts/element-icons.535877f5.woff
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
Web Open Font Format, TrueType, length 28200, version 1.0
Size
28 kB (28200 bytes)
Hash
535877f50039c0cb49a6196a5b7517cd
0000c4e27d38f9f8bbe4e58b5ce2477e589507a7
ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/element-icons.535877f5.woff HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/static/css/app.0cb70655.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 28200
Content-Type: font/woff
Last-Modified: Mon, 15 May 2023 13:50:42 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:41 GMT

37.38.9.246/static/img/icon_greenpacket_logo_dark.0d1e58cd.png

37.38.9.246

200 OK

9.5 kB

URL GET HTTP/1.1
37.38.9.246/static/img/icon_greenpacket_logo_dark.0d1e58cd.png
IP
37.38.9.246:80
ASN
#42961 Mobile Telecommunications Company

Requested by
http://37.38.9.246/

File type
PNG image data, 290 x 68, 8-bit/color RGBA, non-interlaced
Size
9.5 kB (9467 bytes)
Hash
0d1e58cd8d187a21d250d9c8f1063cb7
da57dbef01d9e2c425a19eef2ac211be8b705e12
224947290f70aadf762885e569ed7d9fb388cafbf1be4a32d04e01b248f0e79f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/img/icon_greenpacket_logo_dark.0d1e58cd.png HTTP/1.1
Host: 37.38.9.246
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://37.38.9.246/
Cookie: language=en
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-store, no-cache, must-revalidate
Content-Length: 9467
Content-Type: image/png
Last-Modified: Mon, 15 May 2023 13:50:42 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Date: Wed, 08 May 2024 20:45:41 GMT

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML