Report - 190.124.35.141/

Report Overview

Submitted URL
190.124.35.141/
IP
190.124.35.141
ASN
#27742 Amnet Telecomunicaciones S.A.
Submitted
2024-04-23 22:02:53
Access
public
Website Title
Log in · Ubiquiti EdgeSwitch
Final URL
190.124.35.141/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
16

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
190.124.35.141	unknown	unknown	No data	No data	3.6 kB	1.9 MB	190.124.35.141

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-23	medium	190.124.35.141	Sinkholed
2024-04-23	medium	190.124.35.141	Sinkholed
2024-04-23	medium	190.124.35.141	Sinkholed
2024-04-23	medium	190.124.35.141	Sinkholed
2024-04-23	medium	190.124.35.141	Sinkholed
2024-04-23	medium	190.124.35.141	Sinkholed
2024-04-23	medium	190.124.35.141	Sinkholed
2024-04-23	medium	190.124.35.141	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	190.124.35.141/static/scripts/bundle-5ac412.js	1.7 MB	2024-04-24	2024-04-24
Pretty URL 190.124.35.141/static/scripts/bundle-5ac412.js IP 190.124.35.141 ASN #27742 Amnet Telecomunicaciones S.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 00:03:00 Last Seen2024-04-24 00:03:00 Times Seen2 Hash 1defecc0ae32c39cee32d75be5e9ebfc 3b57e73657d60c02bc90fcca8217c34e68ade0f9 a12e75623c125cfaa66594c5875c19149d06a16c5985e4f6e6dfe1810230ae33 Loading...

HTTP Transactions (8)

URL IP Response Size

190.124.35.141/

190.124.35.141

200 OK

0 B

URL User Request GET HTTP/1.1
190.124.35.141/
IP
190.124.35.141:443
ASN
#27742 Amnet Telecomunicaciones S.A.

Certificate
Issuer
Subject0.0.0.0
FingerprintBB:28:36:E4:4E:F0:F0:01:03:F0:52:AA:64:22:7C:A2:25:D1:14:31
ValidityThu, 01 Jan 1970 00:01:54 GMT - Fri, 01 Jan 1971 00:01:54 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 190.124.35.141
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Location: https://190.124.35.141:443/
Content-Length: 0
Server: lighttpd

190.124.35.141/

190.124.35.141

200 OK

688 B

URL User Request GET HTTP/1.1
190.124.35.141/
IP
190.124.35.141:443
ASN
#27742 Amnet Telecomunicaciones S.A.

Certificate
Issuer
Subject0.0.0.0
FingerprintBB:28:36:E4:4E:F0:F0:01:03:F0:52:AA:64:22:7C:A2:25:D1:14:31
ValidityThu, 01 Jan 1970 00:01:54 GMT - Fri, 01 Jan 1971 00:01:54 GMT

File type
HTML document, ASCII text
Size
688 B (688 bytes)
Hash
c5c4454033bb7a8f86c8b397b0663a9d
c205cda0940c0e02518528fa4b6d8212c8366137
0aa886284123fea1b2908a91e840730ab93b9b43f7f458d5598d0adce555a65b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 190.124.35.141
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
ETag: "-234975613"
Content-Length: 688
Server: lighttpd

190.124.35.141/static/styles/core-5ac412.css

190.124.35.141

200 OK

68 kB

URL GET HTTP/1.1
190.124.35.141/static/styles/core-5ac412.css
IP
190.124.35.141:443
ASN
#27742 Amnet Telecomunicaciones S.A.

Requested by
https://190.124.35.141/
Certificate
Issuer
Subject0.0.0.0
FingerprintBB:28:36:E4:4E:F0:F0:01:03:F0:52:AA:64:22:7C:A2:25:D1:14:31
ValidityThu, 01 Jan 1970 00:01:54 GMT - Fri, 01 Jan 1971 00:01:54 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
68 kB (68419 bytes)
Hash
1bcc7f584b14917a44d69c5e8c6cbbaf
6602bab6b0d0cd8c960ef9a0f5f7d64b597fe95e
867cce12bfc3de875353a272f5806fe057eaaab9eb9201ebce4eaf816668e7c0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/styles/core-5ac412.css HTTP/1.1
Host: 190.124.35.141
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://190.124.35.141/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Accept-Ranges: bytes
ETag: "824638428"
Content-Length: 68419
Server: lighttpd

190.124.35.141/static/favicons/favicon-16px-a64986.png

190.124.35.141

200 OK

640 B

URL GET HTTP/1.1
190.124.35.141/static/favicons/favicon-16px-a64986.png
IP
190.124.35.141:443
ASN
#27742 Amnet Telecomunicaciones S.A.

Requested by
https://190.124.35.141/
Certificate
Issuer
Subject0.0.0.0
FingerprintBB:28:36:E4:4E:F0:F0:01:03:F0:52:AA:64:22:7C:A2:25:D1:14:31
ValidityThu, 01 Jan 1970 00:01:54 GMT - Fri, 01 Jan 1971 00:01:54 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
640 B (640 bytes)
Hash
a64986177b51d32d8b828c1d5f3bce93
1a812c96da147a3dc80a395c7310e7266e571641
aff94682ad3d6b3ba9e8e23523e0130d7214d8cc1612852832e8be750c3ccbdb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/favicons/favicon-16px-a64986.png HTTP/1.1
Host: 190.124.35.141
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://190.124.35.141/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Accept-Ranges: bytes
ETag: "905893507"
Content-Length: 640
Server: lighttpd

190.124.35.141/static/favicons/favicon-192px-e00de0.png

190.124.35.141

200 OK

10 kB

URL GET HTTP/1.1
190.124.35.141/static/favicons/favicon-192px-e00de0.png
IP
190.124.35.141:443
ASN
#27742 Amnet Telecomunicaciones S.A.

Requested by
https://190.124.35.141/
Certificate
Issuer
Subject0.0.0.0
FingerprintBB:28:36:E4:4E:F0:F0:01:03:F0:52:AA:64:22:7C:A2:25:D1:14:31
ValidityThu, 01 Jan 1970 00:01:54 GMT - Fri, 01 Jan 1971 00:01:54 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
10 kB (10292 bytes)
Hash
e00de0bdb1b243b31eb412f1c281508b
e5920415f00bc9891da338003acc56e258da052d
9a3fa884ef28a681bd8fed0ead134f5a70798350888ef79b9cf95df5dbf4f1a3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/favicons/favicon-192px-e00de0.png HTTP/1.1
Host: 190.124.35.141
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://190.124.35.141/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Accept-Ranges: bytes
ETag: "-1337540144"
Content-Length: 10292
Server: lighttpd

190.124.35.141/static/scripts/bundle-5ac412.js

190.124.35.141

200 OK

1.7 MB

URL GET HTTP/1.1
190.124.35.141/static/scripts/bundle-5ac412.js
IP
190.124.35.141:443
ASN
#27742 Amnet Telecomunicaciones S.A.

Requested by
https://190.124.35.141/
Certificate
Issuer
Subject0.0.0.0
FingerprintBB:28:36:E4:4E:F0:F0:01:03:F0:52:AA:64:22:7C:A2:25:D1:14:31
ValidityThu, 01 Jan 1970 00:01:54 GMT - Fri, 01 Jan 1971 00:01:54 GMT

File type
JavaScript source, ASCII text, with very long lines (56781)
Size
1.7 MB (1701937 bytes)
Hash
1defecc0ae32c39cee32d75be5e9ebfc
3b57e73657d60c02bc90fcca8217c34e68ade0f9
a12e75623c125cfaa66594c5875c19149d06a16c5985e4f6e6dfe1810230ae33

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/scripts/bundle-5ac412.js HTTP/1.1
Host: 190.124.35.141
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://190.124.35.141/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Accept-Ranges: bytes
ETag: "1924965574"
Content-Length: 1701937
Server: lighttpd

190.124.35.141/static/fonts/Lato-Regular-d2f625.woff

190.124.35.141

200 OK

38 kB

URL GET HTTP/1.1
190.124.35.141/static/fonts/Lato-Regular-d2f625.woff
IP
190.124.35.141:443
ASN
#27742 Amnet Telecomunicaciones S.A.

Requested by
https://190.124.35.141/
Certificate
Issuer
Subject0.0.0.0
FingerprintBB:28:36:E4:4E:F0:F0:01:03:F0:52:AA:64:22:7C:A2:25:D1:14:31
ValidityThu, 01 Jan 1970 00:01:54 GMT - Fri, 01 Jan 1971 00:01:54 GMT

File type
Web Open Font Format, TrueType, length 37736, version 1.104
Size
38 kB (37736 bytes)
Hash
d2f6258a060710d74acc296e3f35c8ed
90a652ec6db1ece6e27febd8133e33034972433e
34a85643617aca507bef2c232955d2b27a131b39dd8cff33d567148024e7b460

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/Lato-Regular-d2f625.woff HTTP/1.1
Host: 190.124.35.141
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://190.124.35.141/static/styles/core-5ac412.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/octet-stream
Accept-Ranges: bytes
ETag: "315019290"
Content-Length: 37736
Server: lighttpd

190.124.35.141/static/fonts/Lato-Bold-1530e0.woff

190.124.35.141

200 OK

37 kB

URL GET HTTP/1.1
190.124.35.141/static/fonts/Lato-Bold-1530e0.woff
IP
190.124.35.141:443
ASN
#27742 Amnet Telecomunicaciones S.A.

Requested by
https://190.124.35.141/
Certificate
Issuer
Subject0.0.0.0
FingerprintBB:28:36:E4:4E:F0:F0:01:03:F0:52:AA:64:22:7C:A2:25:D1:14:31
ValidityThu, 01 Jan 1970 00:01:54 GMT - Fri, 01 Jan 1971 00:01:54 GMT

File type
Web Open Font Format, TrueType, length 36920, version 1.104
Size
37 kB (36920 bytes)
Hash
1530e091a2105ca3eb3717a9a1b847fc
75593b0ed1339b112ff00406634ba088c12ef9f6
8194873b3cd30305dda0b8b5e8db89e48a977f086b7f22781f2e53e34fe362e5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/Lato-Bold-1530e0.woff HTTP/1.1
Host: 190.124.35.141
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://190.124.35.141/static/styles/core-5ac412.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/octet-stream
Accept-Ranges: bytes
ETag: "31903814"
Content-Length: 36920
Server: lighttpd

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash