Report - 174.92.95.225/login

Report Overview

Submitted URL
174.92.95.225/login
IP
174.92.95.225
ASN
#577 BACOM
Submitted
2024-04-25 11:51:57
Access
public
Website Title
Login
Final URL
174.92.95.225/login
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
32

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
174.92.95.225	unknown	unknown	No data	No data	5.8 kB	2.2 MB	174.92.95.225

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed
2024-04-25	medium	174.92.95.225	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	174.92.95.225/static/js/jquery-3.3.1.min.js	87 kB	2023-03-07	2024-05-04
Pretty URL 174.92.95.225/static/js/jquery-3.3.1.min.js IP 174.92.95.225 ASN #577 BACOM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:02 Last Seen2024-05-04 22:47:36 Times Seen108581 Hash a09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef Loading...

	174.92.95.225/static/jquery_ui/jquery-ui.js	521 kB	2023-03-07	2024-05-04
Pretty URL 174.92.95.225/static/jquery_ui/jquery-ui.js IP 174.92.95.225 ASN #577 BACOM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:28 Last Seen2024-05-04 13:50:12 Times Seen6024 Hash ab5284de5e3d221e53647fd348e5644b 75c20acdc6cbc6334fe2b918ab7afeec007f969e 4f455eb2ddf2094ee969f470f6bfac7adb4c057e8990a374e9da819e943c777d Loading...

	174.92.95.225/static/js/font-awesome-all.js	1.3 MB	2023-03-08	2024-05-04
Pretty URL 174.92.95.225/static/js/font-awesome-all.js IP 174.92.95.225 ASN #577 BACOM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:46:04 Last Seen2024-05-04 13:50:12 Times Seen27 Hash 2351a1da48928196179b2576e2b60fbe 7579f37968207a56af114ab8f4b4619b58cf5342 19a7ab5f66bf0ee3a73ebc67ff8bc7d777686e21547bfdbb2ceea00990cd6ae0 Loading...

	174.92.95.225/static/js/mynode.js	3.1 kB	2023-09-20	2024-05-04
Pretty URL 174.92.95.225/static/js/mynode.js IP 174.92.95.225 ASN #577 BACOM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-20 19:49:35 Last Seen2024-05-04 13:50:12 Times Seen20 Hash 79f122ae5040334fd7fa6c4fa062f2ce 7ae7a41fa3ea469f07ad6175e7cf9192a5df01ec b9add4f4bf5ad2bafbfe06eee5e8a817f1facd305d15aedc0deba734cc3512e1 Loading...

	174.92.95.225/login	0 B	2023-03-07	2024-05-04
Pretty URL 174.92.95.225/login IP 174.92.95.225 ASN #577 BACOM Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-04 23:24:21 Times Seen37349041 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (16)

URL IP Response Size

174.92.95.225/login

174.92.95.225

200 OK

2.3 kB

URL User Request GET HTTP/1.1
174.92.95.225/login
IP
174.92.95.225:80
ASN
#577 BACOM

File type
HTML document, ASCII text
Size
2.3 kB (2259 bytes)
Hash
ac054972736a674d16f238fa3868571e
2a8fa206597c398013f35c1af6026e578c0de451
801ed29f8bcc344a6f29df17f7ba5d7e592679ad88dfe7a569f9a4dee308acac

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Werkzeug/2.3.6 Python/3.8.9
Date: Thu, 25 Apr 2024 11:51:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 2259
Cache-Control: max-age=86400, private
Connection: close

174.92.95.225/static/jquery_ui/jquery-ui.css

174.92.95.225

200 OK

37 kB

URL GET HTTP/1.1
174.92.95.225/static/jquery_ui/jquery-ui.css
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
ASCII text, with very long lines (2515)
Size
37 kB (37326 bytes)
Hash
6fd5a6e8197041971d02cf62d06f4b14
9997bec65f4fffd3ca7178e14f67b8cd6ad1a9c7
a7ac54f58ba507b13621ceb6fcf5fe879f5ac9bdcf049d16153110c6ad048c7c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/jquery_ui/jquery-ui.css HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://174.92.95.225/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Werkzeug/2.3.6 Python/3.8.9
Content-Disposition: inline; filename=jquery-ui.css
Content-Type: text/css; charset=utf-8
Content-Length: 37326
Last-Modified: Sat, 23 Mar 2024 22:51:25 GMT
Cache-Control: no-cache
ETag: "1711234285.1372185-37326-2691043804"
Date: Thu, 25 Apr 2024 11:51:31 GMT, Thu, 25 Apr 2024 11:51:31 GMT
Connection: close

174.92.95.225/static/css/mynode.css

174.92.95.225

200 OK

24 kB

URL GET HTTP/1.1
174.92.95.225/static/css/mynode.css
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
assembler source, ASCII text
Size
24 kB (23587 bytes)
Hash
14cfd71c101f3a26ad938d693f5e0bc1
2cf9964b2f31acc30e5784168bec8ca5b4336e39
3536cad08860695f3b344f303a3ce48ffb592d96e42a25dc9a0835d163880593

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/mynode.css HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://174.92.95.225/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Werkzeug/2.3.6 Python/3.8.9
Content-Disposition: inline; filename=mynode.css
Content-Type: text/css; charset=utf-8
Content-Length: 23587
Last-Modified: Sat, 23 Mar 2024 22:51:24 GMT
Cache-Control: no-cache
ETag: "1711234284.2732396-23587-180293161"
Date: Thu, 25 Apr 2024 11:51:31 GMT, Thu, 25 Apr 2024 11:51:31 GMT
Connection: close

174.92.95.225/static/js/jquery-3.3.1.min.js

174.92.95.225

200 OK

87 kB

URL GET HTTP/1.1
174.92.95.225/static/js/jquery-3.3.1.min.js
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
87 kB (86927 bytes)
Hash
a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/jquery-3.3.1.min.js HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://174.92.95.225/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Werkzeug/2.3.6 Python/3.8.9
Content-Disposition: inline; filename=jquery-3.3.1.min.js
Content-Type: application/javascript; charset=utf-8
Content-Length: 86927
Last-Modified: Sat, 23 Mar 2024 22:51:25 GMT
Cache-Control: no-cache
ETag: "1711234285.1652176-86927-2107052023"
Date: Thu, 25 Apr 2024 11:51:31 GMT, Thu, 25 Apr 2024 11:51:31 GMT
Connection: close

174.92.95.225/static/css/font-awesome-all.css

174.92.95.225

200 OK

74 kB

URL GET HTTP/1.1
174.92.95.225/static/css/font-awesome-all.css
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
ASCII text
Size
74 kB (73577 bytes)
Hash
30bcab9c086559aad11d39876ecebcec
8a4a55db46c5dbfef9c6703fa2d04e89cbfcf633
0cb8cc3fee4275e182236ab19c3aae55274f43aa0ffde9c0510d8d59fcf8e5dc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/font-awesome-all.css HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://174.92.95.225/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Werkzeug/2.3.6 Python/3.8.9
Content-Disposition: inline; filename=font-awesome-all.css
Content-Type: text/css; charset=utf-8
Content-Length: 73577
Last-Modified: Sat, 23 Mar 2024 22:51:24 GMT
Cache-Control: no-cache
ETag: "1711234284.2732396-73577-2875199960"
Date: Thu, 25 Apr 2024 11:51:31 GMT, Thu, 25 Apr 2024 11:51:31 GMT
Connection: close

174.92.95.225/static/js/mynode.js

174.92.95.225

200 OK

3.1 kB

URL GET HTTP/1.1
174.92.95.225/static/js/mynode.js
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
JavaScript source, ASCII text
Size
3.1 kB (3148 bytes)
Hash
79f122ae5040334fd7fa6c4fa062f2ce
7ae7a41fa3ea469f07ad6175e7cf9192a5df01ec
b9add4f4bf5ad2bafbfe06eee5e8a817f1facd305d15aedc0deba734cc3512e1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/mynode.js HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://174.92.95.225/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Werkzeug/2.3.6 Python/3.8.9
Content-Disposition: inline; filename=mynode.js
Content-Type: application/javascript; charset=utf-8
Content-Length: 3148
Last-Modified: Sat, 23 Mar 2024 22:51:25 GMT
Cache-Control: no-cache
ETag: "1711234285.1692176-3148-4000582993"
Date: Thu, 25 Apr 2024 11:51:31 GMT, Thu, 25 Apr 2024 11:51:31 GMT
Connection: close

174.92.95.225/static/fonts/inter.css

174.92.95.225

200 OK

5.3 kB

URL GET HTTP/1.1
174.92.95.225/static/fonts/inter.css
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
ASCII text
Size
5.3 kB (5303 bytes)
Hash
463784be6a723e0ce386643f4c204e5a
3a270d72e4d4c2c152f6ac3cda617014a9ceff3b
a4b238a114d6b3927bbce04f21463ad293517b32674e90e81f0f9f7fcaf12b16

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/inter.css HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://174.92.95.225/static/css/mynode.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Werkzeug/2.3.6 Python/3.8.9
Content-Disposition: inline; filename=inter.css
Content-Type: text/css; charset=utf-8
Content-Length: 5303
Last-Modified: Sat, 23 Mar 2024 22:51:24 GMT
Cache-Control: no-cache
ETag: "1711234284.3972366-5303-439619232"
Date: Thu, 25 Apr 2024 11:51:31 GMT, Thu, 25 Apr 2024 11:51:31 GMT
Connection: close

174.92.95.225/static/jquery_ui/jquery-ui.js

174.92.95.225

200 OK

521 kB

URL GET HTTP/1.1
174.92.95.225/static/jquery_ui/jquery-ui.js
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
JavaScript source, ASCII text, with very long lines (1002)
Size
521 kB (520714 bytes)
Hash
ab5284de5e3d221e53647fd348e5644b
75c20acdc6cbc6334fe2b918ab7afeec007f969e
4f455eb2ddf2094ee969f470f6bfac7adb4c057e8990a374e9da819e943c777d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/jquery_ui/jquery-ui.js HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://174.92.95.225/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Werkzeug/2.3.6 Python/3.8.9
Content-Disposition: inline; filename=jquery-ui.js
Content-Type: application/javascript; charset=utf-8
Content-Length: 520714
Last-Modified: Sat, 23 Mar 2024 22:51:25 GMT
Cache-Control: no-cache
ETag: "1711234285.1412182-520714-2392330608"
Date: Thu, 25 Apr 2024 11:51:31 GMT, Thu, 25 Apr 2024 11:51:31 GMT
Connection: close

174.92.95.225/static/js/font-awesome-all.js

174.92.95.225

200 OK

1.3 MB

URL GET HTTP/1.1
174.92.95.225/static/js/font-awesome-all.js
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
JavaScript source, ASCII text, with very long lines (3431)
Size
1.3 MB (1262826 bytes)
Hash
2351a1da48928196179b2576e2b60fbe
7579f37968207a56af114ab8f4b4619b58cf5342
19a7ab5f66bf0ee3a73ebc67ff8bc7d777686e21547bfdbb2ceea00990cd6ae0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/font-awesome-all.js HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://174.92.95.225/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Werkzeug/2.3.6 Python/3.8.9
Content-Disposition: inline; filename=font-awesome-all.js
Content-Type: application/javascript; charset=utf-8
Content-Length: 1262826
Last-Modified: Sat, 23 Mar 2024 22:51:25 GMT
Cache-Control: no-cache
ETag: "1711234285.1652176-1262826-2268926208"
Date: Thu, 25 Apr 2024 11:51:31 GMT, Thu, 25 Apr 2024 11:51:31 GMT
Connection: close

174.92.95.225/static/images/logo.png

174.92.95.225

200 OK

13 kB

URL GET HTTP/1.1
174.92.95.225/static/images/logo.png
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
PNG image data, 1005 x 179, 8-bit/color RGBA, non-interlaced
Size
13 kB (12712 bytes)
Hash
2d858bec33b548ea9fdb717437880d33
02b3c87da5efdd47d49780e7793edd135f10af97
f31365f32aabcebd8cec6b4da73a5603af05a168c38473646499e3503bd05c72

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/images/logo.png HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://174.92.95.225/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Werkzeug/2.3.6 Python/3.8.9
Content-Disposition: inline; filename=logo.png
Content-Type: image/png
Content-Length: 12712
Last-Modified: Sat, 23 Mar 2024 22:51:24 GMT
Cache-Control: no-cache
ETag: "1711234284.429236-12712-417271415"
Date: Thu, 25 Apr 2024 11:51:32 GMT, Thu, 25 Apr 2024 11:51:32 GMT
Connection: close

174.92.95.225/static/images/backgrounds/digital.png

174.92.95.225

200 OK

35 kB

URL GET HTTP/1.1
174.92.95.225/static/images/backgrounds/digital.png
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
PNG image data, 400 x 422, 8-bit/color RGBA, non-interlaced
Size
35 kB (34693 bytes)
Hash
a91c6416d5ffd967ae38f1df2b53354f
00191acfcd64f207eecb370f0670d08fef61ef8d
a01393b434753cf8c53db9672286d7eb5cf49e5a22bc13b4dc45df3c33657d68

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/images/backgrounds/digital.png HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://174.92.95.225/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Werkzeug/2.3.6 Python/3.8.9
Content-Disposition: inline; filename=digital.png
Content-Type: image/png
Content-Length: 34693
Last-Modified: Sat, 23 Mar 2024 22:51:24 GMT
Cache-Control: no-cache
ETag: "1711234284.509234-34693-580129894"
Date: Thu, 25 Apr 2024 11:51:33 GMT, Thu, 25 Apr 2024 11:51:33 GMT
Connection: close

174.92.95.225/static/fonts/Inter-Regular.woff2?v=3.15

174.92.95.225

200 OK

99 kB

URL GET HTTP/1.1
174.92.95.225/static/fonts/Inter-Regular.woff2?v=3.15
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
Web Open Font Format (Version 2), TrueType, length 98804, version 1.0
Size
99 kB (98804 bytes)
Hash
8070997696b1c91905fecba458f96640
7b52ac6f38f16ef83edf01d3bd1c90ee2b29e357
3787e2f283651744e0b93d1fefb5936c7af26db8014c0def6651d050c56dd47e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/fonts/Inter-Regular.woff2?v=3.15 HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://174.92.95.225/static/fonts/inter.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Werkzeug/2.3.6 Python/3.8.9
Content-Disposition: inline; filename=Inter-Regular.woff2
Content-Type: font/woff2
Content-Length: 98804
Last-Modified: Sat, 23 Mar 2024 22:51:24 GMT
Cache-Control: no-cache
ETag: "1711234284.3532376-98804-3184792090"
Date: Thu, 25 Apr 2024 11:51:33 GMT, Thu, 25 Apr 2024 11:51:33 GMT
Connection: close

174.92.95.225/static//favicons/favicon-16x16.png

174.92.95.225

308 PERMANENT REDIRECT

295 B

URL GET HTTP/1.1
174.92.95.225/static//favicons/favicon-16x16.png
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
HTML document, ASCII text
Size
295 B (295 bytes)
Hash
912387c8eb56c27941a3b932ade833b6
bbefead0fea112d6fff742261f0aa3ecf9bc86e6
e41d0323cc69863b4a4fcf150d79a7c3af7b2da6c3b09202d140b8a6fa408527

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static//favicons/favicon-16x16.png HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://174.92.95.225/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 308 PERMANENT REDIRECT
Server: Werkzeug/2.3.6 Python/3.8.9
Date: Thu, 25 Apr 2024 11:51:33 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 295
Location: http://174.92.95.225/static/favicons/favicon-16x16.png
Cache-Control: no-store
Connection: close

174.92.95.225/static//favicons/apple-touch-icon.png

174.92.95.225

308 PERMANENT REDIRECT

301 B

URL GET HTTP/1.1
174.92.95.225/static//favicons/apple-touch-icon.png
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
HTML document, ASCII text
Size
301 B (301 bytes)
Hash
53a48b81f33956a82d08706ab686892f
1f0a738a39a25b3fd7c0f5f3472af6973616b3b4
3e36efa2b6b78e448ea23255ebb7af626556485288f6c9af3d6af53b1a6e11ce

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static//favicons/apple-touch-icon.png HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://174.92.95.225/login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 308 PERMANENT REDIRECT
Server: Werkzeug/2.3.6 Python/3.8.9
Date: Thu, 25 Apr 2024 11:51:33 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 301
Location: http://174.92.95.225/static/favicons/apple-touch-icon.png
Cache-Control: no-store
Connection: close

174.92.95.225/static/favicons/favicon-16x16.png

174.92.95.225

200 OK

7.6 kB

URL GET HTTP/1.1
174.92.95.225/static/favicons/favicon-16x16.png
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
7.6 kB (7637 bytes)
Hash
445ee06fb16280eaa3b8353bd404d8ac
7ded472b64f527eb308b4e2aa0ae4e527dafa60c
ce28323f70dc0b917481c42df427b8c94b960f58bf0a4976b9a56608c837e0c0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/favicons/favicon-16x16.png HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://174.92.95.225/login
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Werkzeug/2.3.6 Python/3.8.9
Content-Disposition: inline; filename=favicon-16x16.png
Content-Type: image/png
Content-Length: 7637
Last-Modified: Sat, 23 Mar 2024 22:51:24 GMT
Cache-Control: no-cache
ETag: "1711234284.2812395-7637-3464172034"
Date: Thu, 25 Apr 2024 11:51:33 GMT, Thu, 25 Apr 2024 11:51:33 GMT
Connection: close

174.92.95.225/static/favicons/apple-touch-icon.png

174.92.95.225

200 OK

12 kB

URL GET HTTP/1.1
174.92.95.225/static/favicons/apple-touch-icon.png
IP
174.92.95.225:80
ASN
#577 BACOM

Requested by
http://174.92.95.225/login

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
12 kB (11451 bytes)
Hash
6844f2306bdd34def08e35618352a0a0
1b6d4dbd84a4f66246f09aba96afc45f6ee40861
08821b8eefa34d31131e63d806cb91f02c7603c5da192a83afc6ff11d5c3a4bd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/favicons/apple-touch-icon.png HTTP/1.1
Host: 174.92.95.225
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://174.92.95.225/login
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Werkzeug/2.3.6 Python/3.8.9
Content-Disposition: inline; filename=apple-touch-icon.png
Content-Type: image/png
Content-Length: 11451
Last-Modified: Sat, 23 Mar 2024 22:51:24 GMT
Cache-Control: no-cache
ETag: "1711234284.2772396-11451-235869153"
Date: Thu, 25 Apr 2024 11:51:33 GMT, Thu, 25 Apr 2024 11:51:33 GMT
Connection: close

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (16)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1