Report - naturalpower.in/dtb/index.php?qbot.zip

Report Overview

Submitted URL
naturalpower.in/dtb/index.php?qbot.zip
IP
103.53.42.238
ASN
#394695 PUBLIC-DOMAIN-REGISTRY
Submitted
2024-05-10 19:21:08
Access
public
Website Title
naturalpower.in/dtb/index.php?qbot.zip
Final URL
naturalpower.in/dtb/index.php?qbot.zip
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
naturalpower.in	unknown	2013-04-26	2015-12-26	2023-08-17	771 B	2.1 kB	103.53.42.238
explorefreeresults.com	unknown	2022-02-23	2022-02-23	2023-12-12	650 B	1.3 kB	208.91.196.46
sedoparking.com	50712	2001-09-18	2012-06-01	2019-03-28	348 B	871 B	64.190.63.136

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	naturalpower.in/dtb/index.php?qbot.zip	0 B	2023-03-07	2024-05-23
Pretty URL naturalpower.in/dtb/index.php?qbot.zip IP 103.53.42.238 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-23 07:36:20 Times Seen37999969 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	sedoparking.com/frmpark/naturalpower.in/Skenzor1/park.js	1.3 kB	2024-05-10	2024-05-10
Pretty URL sedoparking.com/frmpark/naturalpower.in/Skenzor1/park.js IP 64.190.63.136 ASN #47846 SEDO GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-10 21:21:08 Last Seen2024-05-10 21:21:21 Times Seen4 Hash 9404b51fca8293f746a244dc4b1d7b19 6e4d2a18324e8ccb90646f44f76d4abeae5b8177 552d4a89b01c65d2857aed5416a140982a5bdb3d3ab232047f03021e666e7f0f Loading...

	explorefreeresults.com/px.js?ch=1	346 B	2023-03-07	2024-05-23
Pretty URL explorefreeresults.com/px.js?ch=1 IP 208.91.196.46 ASN #40034 CONFLUENCE-NETWORK-INC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-05-23 06:58:38 Times Seen44653 Hash f84f931c0dd37448e03f0dabf4e4ca9f 9c2c50edcf576453ccc07bf65668bd23c76e8663 5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584 Loading...

		Size	First Seen	Last Seen
	#1 Write - a4812d4eec6269715d07e80da7ff2337	126 B	2024-05-10	2024-05-10
Pretty Observations First Seen2024-05-10 21:21:08 Last Seen2024-05-10 21:21:21 Times Seen2 Hash a4812d4eec6269715d07e80da7ff2337 2e0f8ba608c7485dbc2ec0733ae00d5bcb7f957d ec7656a87518a345eacabeff1e4d653ca17a9590acb2d5c85e563472494d373d Loading...

HTTP Transactions (5)

	URL	IP	Response	Size
	naturalpower.in/dtb/index.php?qbot.zip	103.53.42.238		1.2 kB
URL naturalpower.in/dtb/index.php?qbot.zip IP 103.53.42.238:0 ASN #394695 PUBLIC-DOMAIN-REGISTRY File type HTML document, ASCII text, with very long lines (776), with CRLF, LF line terminators Size 1.2 kB (1232 bytes) Hash 269dfd46f4775534cd267471dfc25712 41dba08ed90c5b6273da2094e6bfe2270642a121 463faf7d4bf57adc32623f8b5de994c0d5831bc8948388def4890f26012f611a HTTP Headers `GET /dtb/index.php?qbot.zip HTTP/1.1 Host: naturalpower.in User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 10 May 2024 19:20:44 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Content-Length: 1232 Keep-Alive: timeout=5, max=75 Content-Type: text/html; charset=UTF-8`

	explorefreeresults.com/px.js?ch=1	208.91.196.46		346 B
URL explorefreeresults.com/px.js?ch=1 IP 208.91.196.46:0 ASN #40034 CONFLUENCE-NETWORK-INC File type ASCII text, with very long lines (346), with no line terminators Size 346 B (346 bytes) Hash f84f931c0dd37448e03f0dabf4e4ca9f 9c2c50edcf576453ccc07bf65668bd23c76e8663 5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584 HTTP Headers `GET /px.js?ch=1 HTTP/1.1 Host: explorefreeresults.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://naturalpower.in/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 10 May 2024 19:20:45 GMT Server: Apache Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Content-Type: application/javascript`

	explorefreeresults.com/px.js?ch=2	208.91.196.46		346 B
URL explorefreeresults.com/px.js?ch=2 IP 208.91.196.46:0 ASN #40034 CONFLUENCE-NETWORK-INC File type ASCII text, with very long lines (346), with no line terminators Size 346 B (346 bytes) Hash f84f931c0dd37448e03f0dabf4e4ca9f 9c2c50edcf576453ccc07bf65668bd23c76e8663 5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584 HTTP Headers `GET /px.js?ch=2 HTTP/1.1 Host: explorefreeresults.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://naturalpower.in/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 10 May 2024 19:20:45 GMT Server: Apache Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=118 Connection: Keep-Alive Content-Type: application/javascript`

	sedoparking.com/frmpark/naturalpower.in/Skenzor1/park.js	64.190.63.136	200 OK	603 B
URL GET HTTP/1.1 sedoparking.com/frmpark/naturalpower.in/Skenzor1/park.js IP 64.190.63.136:80 ASN #47846 SEDO GmbH Requested by http://naturalpower.in/dtb/index.php?qbot.zip File type ASCII text, with very long lines (987) Size 603 B (603 bytes) Hash 9404b51fca8293f746a244dc4b1d7b19 6e4d2a18324e8ccb90646f44f76d4abeae5b8177 552d4a89b01c65d2857aed5416a140982a5bdb3d3ab232047f03021e666e7f0f HTTP Headers `GET /frmpark/naturalpower.in/Skenzor1/park.js HTTP/1.1 Host: sedoparking.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://naturalpower.in/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK date: Fri, 10 May 2024 19:20:46 GMT content-type: application/javascript; charset=UTF-8 transfer-encoding: chunked vary: Accept-Encoding x-powered-by: PHP/8.1.17 x-cache-miss-from: parking-7cbf88ff6b-w8ldc server: NginX content-encoding: gzip`

	naturalpower.in/favicon.ico	103.53.42.238	200 OK	220 B
URL GET HTTP/1.1 naturalpower.in/favicon.ico IP 103.53.42.238:80 ASN #394695 PUBLIC-DOMAIN-REGISTRY Requested by http://naturalpower.in/dtb/index.php?qbot.zip File type HTML document, ASCII text, with CRLF line terminators Size 220 B (220 bytes) Hash e9302581c2d8d50720b325cde2329c78 8045e599a025fc8f429174cb251382773cfbf883 1447cb3bd969b5d95ae53901489eff02b503333865e57de1b876d848920d5882 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: naturalpower.in User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://naturalpower.in/dtb/index.php?qbot.zip Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Fri, 10 May 2024 19:20:46 GMT Server: Apache Vary: Accept-Encoding Content-Encoding: gzip Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Content-Length: 220 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8`