URL User Request GET HTTP/1.1IP 200.2.249.178:80
File typeHTML document, ASCII text Hashe9ba1a3438b9b1b69a68c91f4adac128 2343c043e90c2920d7e488f524a21b91bbe175ff d0a17404be8b9b1321e2ac4c83079a0d313bee88f781920c28bb0331882d85b6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login.php HTTP/1.1
Host: 200.2.249.178
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:51:17 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
X-Powered-By: PHP/5.6.40
Content-Length: 1832
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=ISO-8859-1
|
| 200.2.249.178/javascript/msg.js | 200.2.249.178 | 200 OK | 9.6 kB |
URL GET HTTP/1.1200.2.249.178/javascript/msg.js IP200.2.249.178:80
Requested byhttp://200.2.249.178/login.php
File typeASCII text, with CRLF line terminators Hash9a7508ba78bbb167d8a5a570c27ad34e cdf31e782f2ef26ed4ccf92a59d7ad5fe63724bf b27ab723ea251fcaccb84c55fce22f1e636f5204dac090ee0c3f81079507dfd6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /javascript/msg.js HTTP/1.1
Host: 200.2.249.178
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://200.2.249.178/login.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:51:17 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 12 Aug 2015 23:29:55 GMT
ETag: "257e-51d25989d62c0"
Accept-Ranges: bytes
Content-Length: 9598
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
| 200.2.249.178/favicon.ico | 200.2.249.178 | 404 Not Found | 209 B |
URL GET HTTP/1.1200.2.249.178/favicon.ico IP200.2.249.178:80
Requested byhttp://200.2.249.178/login.php
File typeHTML document, ASCII text Hash18ffb59b61525f781cf9251045be575d bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 200.2.249.178
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://200.2.249.178/login.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 28 Mar 2024 08:51:18 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
Content-Length: 209
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
| 200.2.249.178/imag/background.png | 200.2.249.178 | 200 OK | 139 kB |
URL GET HTTP/1.1200.2.249.178/imag/background.png IP200.2.249.178:80
Requested byhttp://200.2.249.178/login.php
File typePNG image data, 909 x 563, 8-bit/color RGBA, non-interlaced Size139 kB (138556 bytes) Hasha06aedb8796883afae5dd807f59de898 707574c9feef818656f1630f5dffe0faacbe5846 70e1b34f73c47a049feb45a4f7502d4153243f4c8839f915cf3500204e43b4bb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /imag/background.png HTTP/1.1
Host: 200.2.249.178
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://200.2.249.178/login.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 08:51:17 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 26 May 2021 16:13:00 GMT
ETag: "21d3c-5c33dea9afb00"
Accept-Ranges: bytes
Content-Length: 138556
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
|