Report - 45.65.196.142/

Report Overview

Submitted URL
45.65.196.142/
IP
45.65.196.142
ASN
#266537 BRICK TELECOMUNICACOES LTDA
Submitted
2024-05-04 22:05:19
Access
public
Website Title
welcome
Final URL
45.65.196.142/login.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
28

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
45.65.196.142	unknown	unknown	No data	No data	5.2 kB	314 kB	45.65.196.142

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	45.65.196.142	Sinkholed
2024-05-04	medium	45.65.196.142	Sinkholed
2024-05-04	medium	45.65.196.142	Sinkholed
2024-05-04	medium	45.65.196.142	Sinkholed
2024-05-04	medium	45.65.196.142	Sinkholed
2024-05-04	medium	45.65.196.142	Sinkholed
2024-05-04	medium	45.65.196.142	Sinkholed
2024-05-04	medium	45.65.196.142	Sinkholed
2024-05-04	medium	45.65.196.142	Sinkholed
2024-05-04	medium	45.65.196.142	Sinkholed
2024-05-04	medium	45.65.196.142	Sinkholed
2024-05-04	medium	45.65.196.142	Sinkholed
2024-05-04	medium	45.65.196.142	Sinkholed
2024-05-04	medium	45.65.196.142	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	45.65.196.142/login_inter.asp	3.5 kB	2024-05-05	2024-05-05
Pretty URL 45.65.196.142/login_inter.asp IP 45.65.196.142 ASN #266537 BRICK TELECOMUNICACOES LTDA Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 00:05:25 Last Seen2024-05-05 00:05:25 Times Seen1 Hash 215d6ee42bf082325decf6d58129deab 2ad084d69f94459e3d1b31c90255bfdd2e678721 4ae1730fd549274bb9a96e87b692b806e1726f38647a9879c033d9e587523b6a Loading...

	unknown	10 B	2023-04-17	2024-05-05
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-17 12:05:31 Last Seen2024-05-05 12:23:37 Times Seen34 Hash 222612b0be5b400daf27bd0d73b506b2 2945256880339a2a9f02316965b2e2ddfceba5ea 7a0771d3d41c67a6e2918c96cea96b19f769adcaf4385a5a369adc1984bc2fab Loading...

	45.65.196.142/js/utils.js	18 kB	2023-03-07	2024-05-05
Pretty URL 45.65.196.142/js/utils.js IP 45.65.196.142 ASN #266537 BRICK TELECOMUNICACOES LTDA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:14:25 Last Seen2024-05-05 00:05:25 Times Seen4 Hash b85846a010701ddd0eb8d37008b89e7c 3a5d89d9998314322a3039dc294fbd37adeac6cd b4ef085a6287782f24b810e3101c7ad4f75072a5535779f22ea9d6701f85f1a3 Loading...

	45.65.196.142/left.asp	0 B	2023-03-07	2024-05-18
Pretty URL 45.65.196.142/left.asp IP 45.65.196.142 ASN #266537 BRICK TELECOMUNICACOES LTDA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-18 12:31:34 Times Seen37785043 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	unknown	6 B	2023-04-17	2024-05-05
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-17 12:05:31 Last Seen2024-05-05 12:23:37 Times Seen29 Hash ee93eec1944c0126f20eb3e2306d8624 e478bed5d52093c00ac370affcc03ebd77203ca6 6d9717aba039e77f3a58e8679be0a499739dbc3fe0923b104f97e4cfa8317e0f Loading...

	45.65.196.142/lang/b28n.js	7.0 kB	2023-03-07	2024-05-05
Pretty URL 45.65.196.142/lang/b28n.js IP 45.65.196.142 ASN #266537 BRICK TELECOMUNICACOES LTDA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:14:25 Last Seen2024-05-05 12:23:37 Times Seen55 Hash 9000aa8c216316aa86e86d9cf0e1c460 310b52233f485f20e2c569bd94f64d363ef4d7db a66d9b4b1cde722a1aa05888f55330fbce4235d97b1919d99a9d711d29e6ce28 Loading...

	45.65.196.142/js/checkValue.js	10 kB	2023-03-07	2024-05-05
Pretty URL 45.65.196.142/js/checkValue.js IP 45.65.196.142 ASN #266537 BRICK TELECOMUNICACOES LTDA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 23:08:21 Last Seen2024-05-05 00:05:25 Times Seen2 Hash 2edd2a8bc16e205d8c0c37a0590b019c 751dc89bf1d62825858e6332900e920fb192dd04 93b7552afb9cce6fc00241713579f522c62c237b8f94937605639ca674e3459e Loading...

HTTP Transactions (14)

URL IP Response Size

45.65.196.142/

45.65.196.142

302 Redirect

732 B

URL User Request GET HTTP/1.0
45.65.196.142/
IP
45.65.196.142:80
ASN
#266537 BRICK TELECOMUNICACOES LTDA

File type
HTML document, ISO-8859 text, with CRLF line terminators
Size
732 B (732 bytes)
Hash
760a4e2dc8f36ac74c477170b1c6b682
890f7815925c7d4daf2ea06d534fb17cb8fff2d1
04ea5e05a7664d73a2a95c1441efb6f638ca8305bd2043532ff2f79c6dd130fe

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 45.65.196.142
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 302 Redirect
Server: GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN
Date: Sat May  4 19:04:53 2024
Pragma: no-cache
Cache-Control: no-cache
Content-Type: text/html
Location: http://45.65.196.142/login.html

45.65.196.142/js/utils.js

45.65.196.142

200 OK

18 kB

URL GET HTTP/1.0
45.65.196.142/js/utils.js
IP
45.65.196.142:80
ASN
#266537 BRICK TELECOMUNICACOES LTDA

Requested by
http://45.65.196.142/login_inter.asp

File type
ISO-8859 text, with CRLF, LF line terminators
Size
18 kB (18263 bytes)
Hash
92137727558ff75e746a0be80c421442
accda954dd67322a0c6b78c5c697376799499d47
8ef966fdcf6fbd3e5432e47ce626d27cfa78fe46ac28fe80cfb63e498e7b73d9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/utils.js HTTP/1.1
Host: 45.65.196.142
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.65.196.142/left.asp
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sat May  4 19:04:55 2024
Server: GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN
Last-modified: Fri Jan  6 03:26:37 2017
Content-length: 18263
Content-type: application/x-javascript

45.65.196.142/left.asp

45.65.196.142

200 OK

6.4 kB

URL GET HTTP/1.0
45.65.196.142/left.asp
IP
45.65.196.142:80
ASN
#266537 BRICK TELECOMUNICACOES LTDA

Requested by
http://45.65.196.142/login.html

File type
HTML document, ISO-8859 text, with CRLF, LF line terminators
Size
6.4 kB (6406 bytes)
Hash
ea85958d6ce804b25b826c80b5c9089c
70cc87bb99a247138140398d0b0f0d59f5b6f77b
c208b68ebf8d03aea4d519a7b2ddf10666c15704dd89485997a852e5f17453ba

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /left.asp HTTP/1.1
Host: 45.65.196.142
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.65.196.142/login.html
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sat May  4 19:04:55 2024
Server: GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN
Pragma: no-cache
Cache-Control: no-cache
Content-type: text/html

45.65.196.142/js/checkValue.js

45.65.196.142

200 OK

10 kB

URL GET HTTP/1.0
45.65.196.142/js/checkValue.js
IP
45.65.196.142:80
ASN
#266537 BRICK TELECOMUNICACOES LTDA

Requested by
http://45.65.196.142/login_inter.asp

File type
ISO-8859 text, with CRLF, LF line terminators
Size
10 kB (10238 bytes)
Hash
93275bd806ecb97ceb9deb7bcf189dbc
545b5bd6904aaf2621fb3c524b9972b4848b7a35
8843bc66cc1c3910d2ee2f1a6d80d9733a3d2d87fb77aefe178c35e1cfb8573e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/checkValue.js HTTP/1.1
Host: 45.65.196.142
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.65.196.142/login_inter.asp
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sat May  4 19:04:56 2024
Server: GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN
Last-modified: Fri Jan  6 03:26:37 2017
Content-length: 10238
Content-type: application/x-javascript

45.65.196.142/lang/b28n.js

45.65.196.142

200 OK

7.0 kB

URL GET HTTP/1.0
45.65.196.142/lang/b28n.js
IP
45.65.196.142:80
ASN
#266537 BRICK TELECOMUNICACOES LTDA

Requested by
http://45.65.196.142/login_inter.asp

File type
HTML document, ASCII text
Size
7.0 kB (6953 bytes)
Hash
9000aa8c216316aa86e86d9cf0e1c460
310b52233f485f20e2c569bd94f64d363ef4d7db
a66d9b4b1cde722a1aa05888f55330fbce4235d97b1919d99a9d711d29e6ce28

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /lang/b28n.js HTTP/1.1
Host: 45.65.196.142
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.65.196.142/login_inter.asp
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sat May  4 19:04:56 2024
Server: GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN
Last-modified: Fri Jan  6 03:26:54 2017
Content-length: 6953
Content-type: application/x-javascript

45.65.196.142/js/utils.js

45.65.196.142

200 OK

18 kB

URL GET HTTP/1.0
45.65.196.142/js/utils.js
IP
45.65.196.142:80
ASN
#266537 BRICK TELECOMUNICACOES LTDA

Requested by
http://45.65.196.142/login_inter.asp

File type
ISO-8859 text, with CRLF, LF line terminators
Size
18 kB (18263 bytes)
Hash
92137727558ff75e746a0be80c421442
accda954dd67322a0c6b78c5c697376799499d47
8ef966fdcf6fbd3e5432e47ce626d27cfa78fe46ac28fe80cfb63e498e7b73d9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/utils.js HTTP/1.1
Host: 45.65.196.142
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.65.196.142/login_inter.asp
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sat May  4 19:04:56 2024
Server: GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN
Last-modified: Fri Jan  6 03:26:37 2017
Content-length: 18263
Content-type: application/x-javascript

45.65.196.142/lang/en/menu.xml

45.65.196.142

200 OK

7.4 kB

URL GET HTTP/1.0
45.65.196.142/lang/en/menu.xml
IP
45.65.196.142:80
ASN
#266537 BRICK TELECOMUNICACOES LTDA

Requested by
http://45.65.196.142/login_inter.asp

File type
XML 1.0 document, ASCII text
Size
7.4 kB (7360 bytes)
Hash
69e010dd42160d03a96ca2ffc4ebcbf0
7d32148a8472db4e046f1d8630ce689fd6e6c3f4
c02e51abb24c07e2fb34a5991b96843f7d95417e854b9e43537bb35c2dcf03dd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /lang/en/menu.xml HTTP/1.1
Host: 45.65.196.142
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.65.196.142/login_inter.asp
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sat May  4 19:04:57 2024
Server: GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN
Last-modified: Fri Jan  6 03:26:54 2017
Content-length: 7360
Content-type: text/xml

45.65.196.142/images/background.png

45.65.196.142

200 OK

1.2 kB

URL GET HTTP/1.0
45.65.196.142/images/background.png
IP
45.65.196.142:80
ASN
#266537 BRICK TELECOMUNICACOES LTDA

Requested by
http://45.65.196.142/login_inter.asp

File type
PNG image data, 1 x 900, 8-bit gray+alpha, non-interlaced
Size
1.2 kB (1196 bytes)
Hash
e052743a212ecd45b3eba8d6046b0081
f1bd7bb5b36e7dd8c8ea0c699171dc0d960ca5d8
45a80ff945377d46f34100b22be6ea87e66e4ebf5a36b7c3aa1f541e1c037650

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/background.png HTTP/1.1
Host: 45.65.196.142
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.65.196.142/login_inter.asp
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sat May  4 19:04:58 2024
Server: GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN
Last-modified: Fri Jan  6 03:26:31 2017
Content-length: 1196
Content-type: image/png

45.65.196.142/images/login.png

45.65.196.142

200 OK

226 kB

URL GET HTTP/1.0
45.65.196.142/images/login.png
IP
45.65.196.142:80
ASN
#266537 BRICK TELECOMUNICACOES LTDA

Requested by
http://45.65.196.142/login_inter.asp

File type
PNG image data, 936 x 417, 8-bit/color RGBA, non-interlaced
Size
226 kB (225928 bytes)
Hash
bf71684e94ad77d1aeae88256af7e800
3bc9255f8adc057cfc555ff66744171dc6bb89ad
633230e092cdefe6bc747c88445bbf4620664fcafca037963f657ec7d208200b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/login.png HTTP/1.1
Host: 45.65.196.142
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.65.196.142/login_inter.asp
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sat May  4 19:04:58 2024
Server: GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN
Last-modified: Fri Jan  6 03:26:31 2017
Content-length: 225928
Content-type: image/png

45.65.196.142/login_inter.asp

45.65.196.142

200 OK

10 kB

URL GET HTTP/1.0
45.65.196.142/login_inter.asp
IP
45.65.196.142:80
ASN
#266537 BRICK TELECOMUNICACOES LTDA

Requested by
http://45.65.196.142/login.html

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
10 kB (10153 bytes)
Hash
948f46377696c122a0fb76bc03d085eb
7abab4f1e1f7e64939537c9a1c405ba1044a4eb9
ddc1c070a4775a9a48063f924e9f70183b0a194c8e73cc38cd4a35795aee8e4c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login_inter.asp HTTP/1.1
Host: 45.65.196.142
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.65.196.142/login.html
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sat May  4 19:04:56 2024
Server: GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN
Pragma: no-cache
Cache-Control: no-cache
Content-type: text/html

45.65.196.142/login.html

0.0.0.0

0 B

URL User Request GET
45.65.196.142/login.html
IP
0.0.0.0:0
ASN
#0

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login.html HTTP/1.1
Host: 45.65.196.142
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

45.65.196.142/login.html

45.65.196.142

200 OK

532 B

URL User Request GET HTTP/1.0
45.65.196.142/login.html
IP
45.65.196.142:80
ASN
#266537 BRICK TELECOMUNICACOES LTDA

File type
HTML document, Unicode text, UTF-8 text, with very long lines (586), with no line terminators
Size
532 B (532 bytes)
Hash
c382fa376349462d26456d28fde9e012
17273e5527e11f3ba3cd27baa98216f3a19b1a7f
9f76c4d735b34167a5ed70d123b833287cb6bdfc546e31a9a7e3733a5bd19d0d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login.html HTTP/1.1
Host: 45.65.196.142
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sat May  4 19:04:54 2024
Server: GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN
Last-modified: Fri Jan  6 03:26:54 2017
Content-length: 532
Content-type: text/html

45.65.196.142/favicon.ico

45.65.196.142

404 Site or Page Not Found

171 B

URL GET HTTP/1.1
45.65.196.142/favicon.ico
IP
45.65.196.142:80
ASN
#266537 BRICK TELECOMUNICACOES LTDA

Requested by
http://45.65.196.142/login.html

File type
HTML document, ASCII text, with no line terminators
Size
171 B (171 bytes)
Hash
db004c7fd0ca23a710a9e8e129cc60c7
16e78ae0f646379c6ac567596a0499e1ca9ef112
4d8586241c38e601032d773412e4960f6d4d172a6425a480d27379500897b570

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 45.65.196.142
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.65.196.142/login.html
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Site or Page Not Found
Server: GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN
Date: Sat May  4 19:04:55 2024
Pragma: no-cache
Cache-Control: no-cache
Content-Type: text/html

45.65.196.142/style/style.css

45.65.196.142

200 OK

5.8 kB

URL GET HTTP/1.0
45.65.196.142/style/style.css
IP
45.65.196.142:80
ASN
#266537 BRICK TELECOMUNICACOES LTDA

Requested by
http://45.65.196.142/login_inter.asp

File type
Unicode text, UTF-8 text, with very long lines (6667), with no line terminators
Size
5.8 kB (5759 bytes)
Hash
ed00767dc771a62a4f75d7c59c57db6e
4e8d16dd4a49364d1f5dc376bd8f997f3541e26f
cd0deccbdc21adf7418c63bc1f457fb5a1a158a9b5459b66811cf30bbf9be603

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /style/style.css HTTP/1.1
Host: 45.65.196.142
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://45.65.196.142/login_inter.asp
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sat May  4 19:04:56 2024
Server: GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN
Last-modified: Fri Jan  6 03:26:35 2017
Content-length: 5759
Content-type: text/css

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL User Request GET HTTP/1.0

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.0

IP