Report - 106.14.215.21:8888/api/link/detail?id=1779442077065347073

Report Overview

Submitted URL
106.14.215.21:8888/api/link/detail?id=1779442077065347073
IP
106.14.215.21
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Submitted
2024-04-26 15:15:09
Access
public
Website Title
106.14.215.21:8888/api/link/detail?id=1779442077065347073
Final URL
106.14.215.21:8888/api/link/detail?id=1779442077065347073
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
106.14.215.21:8888	unknown	unknown	No data	No data	812 B	13 kB	106.14.215.21

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	106.14.215.21	Sinkholed
2024-04-26	medium	106.14.215.21	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

106.14.215.21:8888/api/link/detail?id=1779442077065347073

106.14.215.21

200

7.5 kB

URL User Request GET HTTP/1.1
106.14.215.21:8888/api/link/detail?id=1779442077065347073
IP
106.14.215.21:8888
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

File type
Unicode text, UTF-8 text, with very long lines (1363)
Size
7.5 kB (7534 bytes)
Hash
a01e5a6e35c4c3bffd9bfc77dc7afe1f
f0e9eada7e818690f8c5d9a58bfe37b78b2e6ef6
07de4032570a450618719e85ede545bdfc01f0b0ff16ccf9d0a8aef6f8f61923

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/link/detail?id=1779442077065347073 HTTP/1.1
Host: 106.14.215.21:8888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 
Server: nginx
Date: Fri, 26 Apr 2024 15:14:45 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Content-Encoding: gzip

106.14.215.21:8888/favicon.ico

106.14.215.21

200 OK

5.1 kB

URL GET HTTP/1.1
106.14.215.21:8888/favicon.ico
IP
106.14.215.21:8888
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
http://106.14.215.21:8888/api/link/detail?id=1779442077065347073

File type
PNG image data, 98 x 97, 8-bit/color RGBA, non-interlaced
Size
5.1 kB (5113 bytes)
Hash
10152680b1e37f59f42143fbf97f7134
8e614705a6a2228ff6e749796996ab8d9f5bea94
c7f2dae2cc6e9b33d5bf5f25c98a3413fa4a35cd6c1c5eef5815bddee11a6c84

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 106.14.215.21:8888
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.14.215.21:8888/api/link/detail?id=1779442077065347073
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 15:14:45 GMT
Content-Type: image/x-icon
Content-Length: 5113
Last-Modified: Tue, 23 Jan 2024 09:19:46 GMT
Connection: keep-alive
ETag: "65af84b2-13f9"
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers