Report - 104.175.55.84/

Report Overview

Submitted URL
104.175.55.84/
IP
104.175.55.84
ASN
#20001 TWC-20001-PACWEST
Submitted
2024-05-04 22:03:24
Access
public
Website Title
CMS Web Viewer
Final URL
104.175.55.84/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
14

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
104.175.55.84	unknown	unknown	No data	No data	2.3 kB	18 kB	104.175.55.84

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	104.175.55.84	Sinkholed
2024-05-04	medium	104.175.55.84	Sinkholed
2024-05-04	medium	104.175.55.84	Sinkholed
2024-05-04	medium	104.175.55.84	Sinkholed
2024-05-04	medium	104.175.55.84	Sinkholed
2024-05-04	medium	104.175.55.84	Sinkholed
2024-05-04	medium	104.175.55.84	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	104.175.55.84/CMS.js	13 kB	2023-03-07	2024-05-10
Pretty URL 104.175.55.84/CMS.js IP 104.175.55.84 ASN #20001 TWC-20001-PACWEST Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:33:13 Last Seen2024-05-10 01:04:37 Times Seen28 Hash 91c122ec22a4580eb793d668ce17afeb 216c13d702bbe58c4b1dcda1890c46bd72c8378d a06f19ef629f17bf9508fbf7cc847ea57c6b163a4719f877976545e54c01d1ff Loading...

	unknown	8 B	2023-04-11	2024-05-14
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-11 07:39:15 Last Seen2024-05-14 07:16:33 Times Seen327 Hash 28eecd039703103d20a5dba8709e564b f328793b597cd5eb24778cf51365c6865b2805cd 69e94a488997cc301074b6fe017d65c2c2cef7dd2df06b5c7dd43125a26449f2 Loading...

	unknown	10 B	2023-04-18	2024-05-10
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-18 19:46:56 Last Seen2024-05-10 01:04:37 Times Seen50 Hash c2bf62155bdd98e059824aa7de4906da db582f003227635d9bd6c2453f5ca4ae75d3dedf 1d50b9d5a074c6037dd5a115d94cf01c8f1cee2e6313dbe8531be81dfad4c763 Loading...

HTTP Transactions (7)

URL IP Response Size

104.175.55.84/

104.175.55.84

200 OK

1.4 kB

URL User Request GET HTTP/1.0
104.175.55.84/
IP
104.175.55.84:80
ASN
#20001 TWC-20001-PACWEST

File type
HTML document, ASCII text, with CRLF line terminators
Size
1.4 kB (1360 bytes)
Hash
a4a8d2fb45ff86cdad7cd9535ff762fd
6869fea04b16e1f2b1bc99c112e5d14980ac9163
cb10e93525443e608830228f00cd181b6f0669e5a8243694448dadde9ecdc570

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 104.175.55.84
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Content-type: text/html
Date: Sat, 04 May 2024 22:03:00 GMT
Connection: close
Accept-Ranges: bytes
Last-Modified: Mon, 15 Jan 2018 12:25:00 GMT
Content-length: 1360

104.175.55.84/CMS.css

104.175.55.84

200 OK

511 B

URL GET HTTP/1.0
104.175.55.84/CMS.css
IP
104.175.55.84:80
ASN
#20001 TWC-20001-PACWEST

Requested by
http://104.175.55.84/

File type
ASCII text, with CRLF line terminators
Size
511 B (511 bytes)
Hash
b7ef2f911656207f66d822a2d19b00ca
a4202ff3e00fb27fc2c1c7dca5ceb5222fe599c2
3f1ae0938d33fb0593960c102b6b9dabdc7066bf646f6a40f250deab163f55f6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /CMS.css HTTP/1.1
Host: 104.175.55.84
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.175.55.84/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Content-type: text/css
Date: Sat, 04 May 2024 22:03:00 GMT
Connection: close
Accept-Ranges: bytes
Last-Modified: Mon, 15 Jan 2018 12:24:59 GMT
Content-length: 511

104.175.55.84/CMS.js

104.175.55.84

200 OK

13 kB

URL GET HTTP/1.0
104.175.55.84/CMS.js
IP
104.175.55.84:80
ASN
#20001 TWC-20001-PACWEST

Requested by
http://104.175.55.84/

File type
Unicode text, UTF-8 (with BOM) text, with CRLF, CR, LF line terminators
Size
13 kB (13428 bytes)
Hash
3d53c38c0eea268736aabfa06a38dd18
43d279e702454702cecd26e6ba4e64dee1a76aee
4731b68044cd0c23493f7204a9af0eed0bb8333f487d09f1bbc36b4c4446c53f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /CMS.js HTTP/1.1
Host: 104.175.55.84
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.175.55.84/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Content-type: application/octet-stream
Date: Sat, 04 May 2024 22:03:00 GMT
Connection: close
Accept-Ranges: bytes
Last-Modified: Wed, 27 Mar 2024 18:26:33 GMT
Content-length: 13428

104.175.55.84/CMS.css

104.175.55.84

200 OK

511 B

URL GET HTTP/1.0
104.175.55.84/CMS.css
IP
104.175.55.84:80
ASN
#20001 TWC-20001-PACWEST

Requested by
http://104.175.55.84/

File type
ASCII text, with CRLF line terminators
Size
511 B (511 bytes)
Hash
b7ef2f911656207f66d822a2d19b00ca
a4202ff3e00fb27fc2c1c7dca5ceb5222fe599c2
3f1ae0938d33fb0593960c102b6b9dabdc7066bf646f6a40f250deab163f55f6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /CMS.css HTTP/1.1
Host: 104.175.55.84
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.175.55.84/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Content-type: text/css
Date: Sat, 04 May 2024 22:03:00 GMT
Connection: close
Accept-Ranges: bytes
Last-Modified: Mon, 15 Jan 2018 12:24:59 GMT
Content-length: 511

104.175.55.84/id.png

104.175.55.84

200 OK

368 B

URL GET HTTP/1.0
104.175.55.84/id.png
IP
104.175.55.84:80
ASN
#20001 TWC-20001-PACWEST

Requested by
http://104.175.55.84/

File type
PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Size
368 B (368 bytes)
Hash
a0f2a13547c31d0d44626e98f73dc566
4853bee059d7aac5d71c34071987bf4a8da1dcb2
366177629889975c65b1a7886a535238b7eb9818ff786a67c54b9fddec6262eb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /id.png HTTP/1.1
Host: 104.175.55.84
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.175.55.84/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Content-type: image/png
Date: Sat, 04 May 2024 22:03:01 GMT
Connection: close
Accept-Ranges: bytes
Last-Modified: Mon, 15 Jan 2018 12:25:01 GMT
Content-length: 368

104.175.55.84/pw.png

104.175.55.84

200 OK

368 B

URL GET HTTP/1.0
104.175.55.84/pw.png
IP
104.175.55.84:80
ASN
#20001 TWC-20001-PACWEST

Requested by
http://104.175.55.84/

File type
PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Size
368 B (368 bytes)
Hash
ac469e387a55f66ad9d979cf4671dfdb
814b163281d5215dd132530b55c9f6901a88dfd9
bb59807bcfa92dbf637828b802d28b14243cc9cd79e3312a04f5254819774add

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pw.png HTTP/1.1
Host: 104.175.55.84
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.175.55.84/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Content-type: image/png
Date: Sat, 04 May 2024 22:03:01 GMT
Connection: close
Accept-Ranges: bytes
Last-Modified: Mon, 15 Jan 2018 12:25:00 GMT
Content-length: 368

104.175.55.84/favicon.ico

104.175.55.84

404 Not Found

627 B

URL GET HTTP/1.0
104.175.55.84/favicon.ico
IP
104.175.55.84:80
ASN
#20001 TWC-20001-PACWEST

Requested by
http://104.175.55.84/

File type
data
Size
627 B (627 bytes)
Hash
d188b11739c06aa53a62e438f0ec2bba
1bf5b5dd2a8ee238bc73c35a6d80dae53e4bd880
7380ee259c563d4ab7ac4b8a3ab40dbfce01a347bc39775a3e90442889160a03

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 104.175.55.84
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.175.55.84/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 404 Not Found
Content-type: text/html
Date: Sat, 04 May 2024 22:03:01 GMT
Connection: close

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (7)

URL User Request GET HTTP/1.0

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.0

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.0

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.0

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.0

IP

ASN