Report - 220.132.5.90/

Report Overview

Submitted URL
220.132.5.90/
IP
220.132.5.90
ASN
#3462 Data Communication Business Group
Submitted
2024-04-24 08:00:21
Access
public
Website Title
220.132.5.90/
Final URL
220.132.5.90/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
220.132.5.90	unknown	unknown	No data	No data	1.8 kB	84 kB	220.132.5.90
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-04-22	512 B	6.5 kB	35.244.181.201

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	220.132.5.90	Sinkholed
2024-04-24	medium	220.132.5.90	Sinkholed
2024-04-24	medium	220.132.5.90	Sinkholed
2024-04-24	medium	220.132.5.90	Sinkholed
2024-04-24	medium	220.132.5.90	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	220.132.5.90/	360 B	2023-03-07	2024-05-05
Pretty URL 220.132.5.90/ IP 220.132.5.90 ASN #3462 Data Communication Business Group Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:31 Last Seen2024-05-05 14:09:32 Times Seen16153 Hash 1c06c9656843330abb30f457061ddfb6 4d08c4ae6f005e72b174e653a5cfd898433d7ebf 5084e2a9b5f26964bb369c2216b3086dd5c0672e445cb4541e4a72945e39d389 Loading...

	220.132.5.90/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZBk1pZRy_8P9pcd7fIXT0Tc4y1fS_bOnqAt8QHGnWwvGR80U-iMi8ZTWrwc2xE77cg2&t=637038792469531723	23 kB	2023-03-07	2024-05-05
Pretty URL 220.132.5.90/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZBk1pZRy_8P9pcd7fIXT0Tc4y1fS_bOnqAt8QHGnWwvGR80U-iMi8ZTWrwc2xE77cg2&t=637038792469531723 IP 220.132.5.90 ASN #3462 Data Communication Business Group Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:31 Last Seen2024-05-05 18:15:55 Times Seen42414 Hash 90ea7274f19755002360945d54c2a0d7 647b5d8bf7d119a2c97895363a07a0c6eb8cd284 40732e9dcfa704cf615e4691bb07aecfd1cc5e063220a46e4a7ff6560c77f5db Loading...

	220.132.5.90/WebResource.axd?d=JoBkLzP19aTuxbWOhHobYlfnyjcBABlXD_gfWOrYUb0NEPSNR9gNgVHcRdTEGxoItuPXaGaD-RsSpa6VSx6K1w2&t=637038792469531723	3.0 kB	2023-03-07	2024-05-02
Pretty URL 220.132.5.90/WebResource.axd?d=JoBkLzP19aTuxbWOhHobYlfnyjcBABlXD_gfWOrYUb0NEPSNR9gNgVHcRdTEGxoItuPXaGaD-RsSpa6VSx6K1w2&t=637038792469531723 IP 220.132.5.90 ASN #3462 Data Communication Business Group Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:41:26 Last Seen2024-05-02 20:12:33 Times Seen812 Hash a870b45ac5d6b0d4e18c4829c7b660b4 2d3ca0e1f19efdeb9b2dd3dcffb17f8aba118aa0 144524233f795d6a425b76f7ae5c0bb622b5f67e2e6ae73532ad526528ca07cf Loading...

	220.132.5.90/	253 B	2024-04-24	2024-04-24
Pretty URL 220.132.5.90/ IP 220.132.5.90 ASN #3462 Data Communication Business Group Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 10:00:27 Last Seen2024-04-24 10:00:27 Times Seen1 Hash d01d6f5ed272a958dd0ec09ea115da1e 3097f5208f6f37810e0c577c5f6e7ced6a0e236e f84ca0138444df8c1f6a0be4b7f0f7c64c65d5e1cd4a7d487c3333e870c71e8a Loading...

HTTP Transactions (6)

URL IP Response Size

220.132.5.90/

220.132.5.90

200 OK

12 kB

URL User Request GET HTTP/1.1
220.132.5.90/
IP
220.132.5.90:80
ASN
#3462 Data Communication Business Group

File type
HTML document, Unicode text, UTF-8 text, with very long lines (545), with CRLF line terminators
Size
12 kB (12045 bytes)
Hash
6c95115d560aad3b04c55f0091a7ca99
1a260dd7e5cd6be4bdfbf31f37aa716f7a67c369
5550e75f3d23ab54ebc3daac990659be8c2e68f356b1b67f832913a20695ec24

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 220.132.5.90
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Wed, 24 Apr 2024 09:01:23 GMT
Content-Length: 12045

220.132.5.90/

220.132.5.90

200 OK

12 kB

URL User Request GET HTTP/1.1
220.132.5.90/
IP
220.132.5.90:80
ASN
#3462 Data Communication Business Group

File type
HTML document, Unicode text, UTF-8 text, with very long lines (545), with CRLF line terminators
Size
12 kB (12045 bytes)
Hash
2c86d4fe92448e79fdf1a82350ff6443
367d2c1f7d8873dcfa78937089e985e9b7dd788e
bad3b971f1a53a5ecd75342ff0534e1c40f59ce0e7bfb8ad5a28549d733e005f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 220.132.5.90
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Wed, 24 Apr 2024 09:01:24 GMT
Content-Length: 12045

220.132.5.90/WebResource.axd?d=JoBkLzP19aTuxbWOhHobYlfnyjcBABlXD_gfWOrYUb0NEPSNR9gNgVHcRdTEGxoItuPXaGaD-RsSpa6VSx6K1w2&t=637038792469531723

220.132.5.90

200 OK

3.0 kB

URL GET HTTP/1.1
220.132.5.90/WebResource.axd?d=JoBkLzP19aTuxbWOhHobYlfnyjcBABlXD_gfWOrYUb0NEPSNR9gNgVHcRdTEGxoItuPXaGaD-RsSpa6VSx6K1w2&t=637038792469531723
IP
220.132.5.90:80
ASN
#3462 Data Communication Business Group

Requested by
http://220.132.5.90/

File type
ASCII text, with CRLF line terminators
Size
3.0 kB (3005 bytes)
Hash
a870b45ac5d6b0d4e18c4829c7b660b4
2d3ca0e1f19efdeb9b2dd3dcffb17f8aba118aa0
144524233f795d6a425b76f7ae5c0bb622b5f67e2e6ae73532ad526528ca07cf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /WebResource.axd?d=JoBkLzP19aTuxbWOhHobYlfnyjcBABlXD_gfWOrYUb0NEPSNR9gNgVHcRdTEGxoItuPXaGaD-RsSpa6VSx6K1w2&t=637038792469531723 HTTP/1.1
Host: 220.132.5.90
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://220.132.5.90/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: public
Content-Type: application/x-javascript
Expires: Thu, 24 Apr 2025 09:01:13 GMT
Last-Modified: Thu, 12 Sep 2019 02:00:46 GMT
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Wed, 24 Apr 2024 09:01:24 GMT
Content-Length: 3005

220.132.5.90/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZBk1pZRy_8P9pcd7fIXT0Tc4y1fS_bOnqAt8QHGnWwvGR80U-iMi8ZTWrwc2xE77cg2&t=637038792469531723

220.132.5.90

200 OK

23 kB

URL GET HTTP/1.1
220.132.5.90/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZBk1pZRy_8P9pcd7fIXT0Tc4y1fS_bOnqAt8QHGnWwvGR80U-iMi8ZTWrwc2xE77cg2&t=637038792469531723
IP
220.132.5.90:80
ASN
#3462 Data Communication Business Group

Requested by
http://220.132.5.90/

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
23 kB (23063 bytes)
Hash
90ea7274f19755002360945d54c2a0d7
647b5d8bf7d119a2c97895363a07a0c6eb8cd284
40732e9dcfa704cf615e4691bb07aecfd1cc5e063220a46e4a7ff6560c77f5db

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /WebResource.axd?d=pynGkmcFUV13He1Qd6_TZBk1pZRy_8P9pcd7fIXT0Tc4y1fS_bOnqAt8QHGnWwvGR80U-iMi8ZTWrwc2xE77cg2&t=637038792469531723 HTTP/1.1
Host: 220.132.5.90
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://220.132.5.90/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: public
Content-Type: application/x-javascript
Expires: Thu, 24 Apr 2025 09:01:13 GMT
Last-Modified: Thu, 12 Sep 2019 02:00:46 GMT
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Wed, 24 Apr 2024 09:01:24 GMT
Content-Length: 23063

220.132.5.90/favicon.ico

220.132.5.90

200 OK

32 kB

URL GET HTTP/1.1
220.132.5.90/favicon.ico
IP
220.132.5.90:80
ASN
#3462 Data Communication Business Group

Requested by
http://220.132.5.90/

File type
MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
32 kB (32038 bytes)
Hash
4859e39ae6c0f1f428f2126a6bb32bd9
1c0c85678ae963bc96d0b7fbe1eb89074cf1fbe0
a94f8a8553caea8430dd4ca3cc01d4e318d19828f74cb65453ffb7f5d9e2f44d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 220.132.5.90
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://220.132.5.90/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/x-icon
Last-Modified: Wed, 27 Feb 2019 05:10:00 GMT
Accept-Ranges: bytes
ETag: "0c440b05aced41:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Wed, 24 Apr 2024 09:01:25 GMT
Content-Length: 32038

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

5.8 kB

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
gzip compressed data, max speed, from Unix
Size
5.8 kB (5759 bytes)
Hash
aa33725c2d0a3d1c2f9c878d64914807
6e83d13ec860384a977738b04ff0891a01ab519a
fe412eadb3dc9820ec6cab7cb62349be057c509e34f7e2de6d23b28eacc98bfd

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 08:00:15 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=0lgKIGWQ-PFUyfi65t0JaGHBCUGYW1umch5eH69D__Kup_lGTR1S4Ckqny9tBFLkras8J8D5TH2VMaQrV28JkjaQRZjXIXx3LmxLxBuzKqycFW54YJNd-eYpRuUhMKeD
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
content-encoding: gzip
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (6)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers