Report - 12.184.6.221/ecg/empresa/index.php

Report Overview

Submitted URL
12.184.6.221/ecg/empresa/index.php
IP
12.184.6.221
ASN
#7018 ATT-INTERNET4
Submitted
2024-04-26 09:10:39
Access
public
Website Title
Consorcio Aduanal Castañeda Rivero, S.C. Agencias Aduanales - Nuestra Empresa
Final URL
12.184.6.221/ecg/empresa/index.php
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
56

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-26	461 B	16 kB	142.250.74.131
12.184.6.221	unknown	unknown	No data	No data	11 kB	1.4 MB	12.184.6.221
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	1.4 kB	4.3 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed
2024-04-26	medium	12.184.6.221	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	12.184.6.221/ecg/empresa/index.php	1.5 kB	2024-04-26	2024-04-26
Pretty URL 12.184.6.221/ecg/empresa/index.php IP 12.184.6.221 ASN #7018 ATT-INTERNET4 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 11:10:46 Last Seen2024-04-26 11:10:46 Times Seen1 Hash a80e67fe4a7cfea9ab539b6e9925a4e8 85f78d715bf53745bb6c5d960b2212dfa21d8034 a45ed19e7b7046ee80f4336739a41d5a617d186aa05b7761bba7bfa5520c694a Loading...

	12.184.6.221/ecg/empresa/index.php	144 B	2024-04-26	2024-04-26
Pretty URL 12.184.6.221/ecg/empresa/index.php IP 12.184.6.221 ASN #7018 ATT-INTERNET4 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 11:10:46 Last Seen2024-04-26 11:10:46 Times Seen1 Hash 4c1f30cb23869b8690ee20797ec9db27 1c6035639e88a1a3d78c1a26109c6ef87578eeda e76567d15cd273094938d79230c2f7624c7de897391e5f079716f1a7e43948e0 Loading...

	12.184.6.221/ecg/js/jquery-1.7.1.min.js	94 kB	2023-03-07	2024-05-01
Pretty URL 12.184.6.221/ecg/js/jquery-1.7.1.min.js IP 12.184.6.221 ASN #7018 ATT-INTERNET4 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10:36 Last Seen2024-05-01 23:45:55 Times Seen230 Hash f46e63a124a6ed8f0c20cca1fe0cd559 0b6da89c21e1dd2093fb26366dd90ffeea635c6a f4270cd8aaa654b7ff6c695b82ce3f8b19464e05ac2f889612c8dd5c54c54936 Loading...

	12.184.6.221/ecg/js/script_bk.js	5.6 kB	2024-04-26	2024-04-26
Pretty URL 12.184.6.221/ecg/js/script_bk.js IP 12.184.6.221 ASN #7018 ATT-INTERNET4 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 11:10:46 Last Seen2024-04-26 11:10:46 Times Seen2 Hash eff95049a9bb0758e1d060e6fff74e96 7dedda95067790ae0febf37b04872fa711a2260e 46154344c43a7a1736bb7e24e0ce01c49cd296052467f4704f507088c315794a Loading...

	12.184.6.221/ecg/js/jquery.cycle.all.js	52 kB	2023-03-07	2024-04-26
Pretty URL 12.184.6.221/ecg/js/jquery.cycle.all.js IP 12.184.6.221 ASN #7018 ATT-INTERNET4 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:08:30 Last Seen2024-04-26 11:10:46 Times Seen43 Hash 1afbc5e61bf421dd381c7e76496db89c c60049d746ea5dca2faca08744b801f7aa06ef26 b5499e57e7789b2604dbc25133ecaad4a7ac34526a74edb4cfae209ffff74892 Loading...

	12.184.6.221/ecg/js/ddsmoothmenu.js	8.6 kB	2024-04-26	2024-04-26
Pretty URL 12.184.6.221/ecg/js/ddsmoothmenu.js IP 12.184.6.221 ASN #7018 ATT-INTERNET4 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 11:10:46 Last Seen2024-04-26 11:10:46 Times Seen2 Hash ca1341df4c3f455241928c1f1ee4b711 dde6c3de9cc5a647614e1fecca7b3d294e5f9478 8c35ee8302bcd84486505e960207b9b50e0ea5c66396119d456aa82bc26c4a9b Loading...

	12.184.6.221/ecg/js/script_solucionesh.js	568 B	2024-04-26	2024-04-26
Pretty URL 12.184.6.221/ecg/js/script_solucionesh.js IP 12.184.6.221 ASN #7018 ATT-INTERNET4 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 11:10:46 Last Seen2024-04-26 11:10:46 Times Seen2 Hash 624249ec1d4a864ca106b15c5c9d4d35 10a2fc9454ab3660b61593d7b54935fc6bf88d69 7ba29a6dcbb4604a7004e7320b9ddb682f4d8f56ee81dc64bc78274f175bd642 Loading...

HTTP Transactions (33)

URL IP Response Size

12.184.6.221/

12.184.6.221

581 B

URL
12.184.6.221/
IP
12.184.6.221:0
ASN
#7018 ATT-INTERNET4

File type
HTML document, ASCII text, with CRLF line terminators
Size
581 B (581 bytes)
Hash
75326325c7a2f6a3a95b1e1a4062e277
885cef7c19e04410d2a35e0245bc54318b516155
e55b52a7b724fbc12cadfe743445435ebb9f0134c2013c130c5ede8607368609

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 05 May 2014 18:00:23 GMT
Accept-Ranges: bytes
ETag: "ec911e38b68cf1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:14 GMT
Content-Length: 581

12.184.6.221/ecg/empresa/index.php

12.184.6.221

13 kB

URL User Request GET
12.184.6.221/ecg/empresa/index.php
IP
12.184.6.221:0
ASN
#7018 ATT-INTERNET4

File type
HTML document, ASCII text, with very long lines (3966), with CRLF line terminators
Size
13 kB (12591 bytes)
Hash
8e988baadbc885e2ae6047195bfa8acb
9b737a938c856ac2654a270e96091894cd8a6532
e9a4b3ecb5e0c445ccf6765aa19d1cb73e57a715345b97b45d747533ed00a834

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/empresa/index.php HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Type: text/html; charset=iso-8859-1
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Server: Microsoft-IIS/7.5
Set-Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44; path=/
X-Powered-By: PHP/5.2.9-1, ASP.NET
Date: Fri, 26 Apr 2024 09:10:14 GMT
Connection: close
Content-Length: 12591

12.184.6.221/ecg/js/script_bk.js

12.184.6.221

200 OK

5.6 kB

URL GET HTTP/1.1
12.184.6.221/ecg/js/script_bk.js
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
5.6 kB (5596 bytes)
Hash
eff95049a9bb0758e1d060e6fff74e96
7dedda95067790ae0febf37b04872fa711a2260e
46154344c43a7a1736bb7e24e0ce01c49cd296052467f4704f507088c315794a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/js/script_bk.js HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Wed, 08 Aug 2018 16:33:43 GMT
Accept-Ranges: bytes
ETag: "d272b92352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:14 GMT
Content-Length: 5596

12.184.6.221/ecg/js/ddsmoothmenu.js

12.184.6.221

200 OK

8.6 kB

URL GET HTTP/1.1
12.184.6.221/ecg/js/ddsmoothmenu.js
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
JavaScript source, ASCII text
Size
8.6 kB (8639 bytes)
Hash
ca1341df4c3f455241928c1f1ee4b711
dde6c3de9cc5a647614e1fecca7b3d294e5f9478
8c35ee8302bcd84486505e960207b9b50e0ea5c66396119d456aa82bc26c4a9b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/js/ddsmoothmenu.js HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Wed, 08 Aug 2018 16:33:43 GMT
Accept-Ranges: bytes
ETag: "18665f92352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:14 GMT
Content-Length: 8639

12.184.6.221/ecg/js/script_solucionesh.js

12.184.6.221

200 OK

568 B

URL GET HTTP/1.1
12.184.6.221/ecg/js/script_solucionesh.js
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
568 B (568 bytes)
Hash
624249ec1d4a864ca106b15c5c9d4d35
10a2fc9454ab3660b61593d7b54935fc6bf88d69
7ba29a6dcbb4604a7004e7320b9ddb682f4d8f56ee81dc64bc78274f175bd642

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/js/script_solucionesh.js HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Wed, 08 Aug 2018 16:33:43 GMT
Accept-Ranges: bytes
ETag: "7ad27492352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:16 GMT
Content-Length: 568

12.184.6.221/ecg/css/ecg_bk.css

12.184.6.221

200 OK

13 kB

URL GET HTTP/1.1
12.184.6.221/ecg/css/ecg_bk.css
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
ASCII text, with CRLF line terminators
Size
13 kB (12655 bytes)
Hash
e94bcee397f4c18975a5d0bd159496e0
ef02e4cf5dc7714928810f03fab25d8cb4cb76aa
1f95658e9b8d280694f7f1ea89531a0c19b328717a3e5898d3ac5063fb4b6c8a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/css/ecg_bk.css HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Wed, 08 Aug 2018 16:33:42 GMT
Accept-Ranges: bytes
ETag: "3f2a8991352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:14 GMT
Content-Length: 12655

fonts.googleapis.com/css?family=Source+Sans+Pro:400,200,300,600,700,900

142.250.74.106

200 OK

862 B

URL GET HTTP/1.1
fonts.googleapis.com/css?family=Source+Sans+Pro:400,200,300,600,700,900
IP
142.250.74.106:80
ASN
#15169 GOOGLE

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
ASCII text
Size
862 B (862 bytes)
Hash
488c6017100960f9fc590020ac0397d1
35725e09cb92e1ab2f6961ffe0eae164e2e661ed
a1c057298de448b6a69abba733959f9a6c0f02f63ba5ead7ff5ee0894410d6d3

HTTP Headers

GET /css?family=Source+Sans+Pro:400,200,300,600,700,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 26 Apr 2024 09:10:18 GMT
Date: Fri, 26 Apr 2024 09:10:18 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

12.184.6.221/ecg/css/ecg.css

12.184.6.221

200 OK

62 kB

URL GET HTTP/1.1
12.184.6.221/ecg/css/ecg.css
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
62 kB (62316 bytes)
Hash
590ccbe7d719bf0fc16a1af7e2922117
45cb5491e346bafb34e6af98ef1b53a64769c881
fd59e00adfa253d682bd7bd32d662d6300ca1f651443d15e990f6ac2998465d8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/css/ecg.css HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Wed, 08 Aug 2018 16:33:27 GMT
Accept-Ranges: bytes
ETag: "3819c88352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:14 GMT
Content-Length: 62316

12.184.6.221/ecg/js/jquery.cycle.all.js

12.184.6.221

200 OK

52 kB

URL GET HTTP/1.1
12.184.6.221/ecg/js/jquery.cycle.all.js
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
JavaScript source, ASCII text
Size
52 kB (52195 bytes)
Hash
1afbc5e61bf421dd381c7e76496db89c
c60049d746ea5dca2faca08744b801f7aa06ef26
b5499e57e7789b2604dbc25133ecaad4a7ac34526a74edb4cfae209ffff74892

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/js/jquery.cycle.all.js HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Wed, 08 Aug 2018 16:33:43 GMT
Accept-Ranges: bytes
ETag: "55984792352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:14 GMT
Content-Length: 52195

fonts.googleapis.com/css?family=Rosario

142.250.74.106

200 OK

434 B

URL GET HTTP/1.1
fonts.googleapis.com/css?family=Rosario
IP
142.250.74.106:80
ASN
#15169 GOOGLE

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
ASCII text
Size
434 B (434 bytes)
Hash
17776a6e0924737991ce36c5d97e8857
5a5db49d0dfcd81fb26fcc09253d50d7ba0be501
e5eec57f31245b5356730ee3283055f5a184f21cb0508e89604183e9b2d173ea

HTTP Headers

GET /css?family=Rosario HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 26 Apr 2024 09:10:18 GMT
Date: Fri, 26 Apr 2024 09:10:18 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

fonts.googleapis.com/css?family=Oswald:400,300

142.250.74.106

200 OK

578 B

URL GET HTTP/1.1
fonts.googleapis.com/css?family=Oswald:400,300
IP
142.250.74.106:80
ASN
#15169 GOOGLE

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
ASCII text
Size
578 B (578 bytes)
Hash
c85589e081061960820357ab0d025529
cd28ecea628c7067c60b927c2685beedb7857b4d
365ae01810fc25716b831379c2491e7433d78a798bfb657b164713ecf88ef4b8

HTTP Headers

GET /css?family=Oswald:400,300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 26 Apr 2024 09:10:18 GMT
Date: Fri, 26 Apr 2024 09:10:18 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

fonts.googleapis.com/css?family=Cinzel+Decorative:900

142.250.74.106

200 OK

302 B

URL GET HTTP/1.1
fonts.googleapis.com/css?family=Cinzel+Decorative:900
IP
142.250.74.106:80
ASN
#15169 GOOGLE

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
ASCII text
Size
302 B (302 bytes)
Hash
9bf460c7fe1726c735a3e73fbc30a3db
46bd6c7f81de79a9d341e1058a4c274ab64df9d3
9c3b1025e5d66b5d074d2270449df15636b072dbc87c54aff1864783e44442a9

HTTP Headers

GET /css?family=Cinzel+Decorative:900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 26 Apr 2024 09:10:18 GMT
Date: Fri, 26 Apr 2024 09:10:18 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

12.184.6.221/ecg/js/jquery-1.7.1.min.js

12.184.6.221

200 OK

94 kB

URL GET HTTP/1.1
12.184.6.221/ecg/js/jquery-1.7.1.min.js
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)
Size
94 kB (93868 bytes)
Hash
ddb84c1587287b2df08966081ef063bf
9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f
88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/js/jquery-1.7.1.min.js HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Last-Modified: Wed, 08 Aug 2018 16:33:43 GMT
Accept-Ranges: bytes
ETag: "afd81092352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:14 GMT
Content-Length: 93868

fonts.gstatic.com/s/rosario/v31/xfuu0WDhWW_fOEoY8l_VPNZfB7jPM68YCVc0fec.woff2

142.250.74.131

200 OK

15 kB

URL GET HTTP/1.1
fonts.gstatic.com/s/rosario/v31/xfuu0WDhWW_fOEoY8l_VPNZfB7jPM68YCVc0fec.woff2
IP
142.250.74.131:80
ASN
#15169 GOOGLE

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
Web Open Font Format (Version 2), TrueType, length 15096, version 1.0
Size
15 kB (15096 bytes)
Hash
98e131991b9f8c6bbf468603235e0888
465bdcda0e778887f2df6ae2d9f39c41774089d2
6471c98b5a2db84e1f7dfe38c87099fdb1cccfe3eb782810ff6994a0afa189bb

HTTP Headers

GET /s/rosario/v31/xfuu0WDhWW_fOEoY8l_VPNZfB7jPM68YCVc0fec.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://12.184.6.221
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15096
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 25 Apr 2024 23:04:06 GMT
Expires: Fri, 25 Apr 2025 23:04:06 GMT
Cache-Control: public, max-age=31536000
Age: 36372
Last-Modified: Mon, 20 Mar 2023 21:14:19 GMT
Content-Type: font/woff2

12.184.6.221/ecg/imagenes/log_icon_1.png

12.184.6.221

200 OK

2.8 kB

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/log_icon_1.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced
Size
2.8 kB (2776 bytes)
Hash
d2dafcf3c761579c0405426a38cc58d1
5ab6e434704276a15d87e017622342e21ab20770
99086f9e1088af7e2a38f6e8bd6eb5690e0004a71e0ca098e700100deda82067

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/log_icon_1.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Tue, 05 Aug 2014 16:38:47 GMT
Accept-Ranges: bytes
ETag: "7acd9bbacbb0cf1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:16 GMT
Content-Length: 2776

12.184.6.221/ecg/imagenes/lang_eng.png

12.184.6.221

200 OK

6.0 kB

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/lang_eng.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Size
6.0 kB (6049 bytes)
Hash
e39889162e55a4b50c5a58475a87164f
1444de3888099e40ab25b0ee357823a04a4d5d3a
0faa71a51198cbedaa010e96546cda21c4a3f483940ecffab1b3f088971f390b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/lang_eng.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Mon, 19 May 2014 21:51:58 GMT
Accept-Ranges: bytes
ETag: "beb0cf8eac73cf1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:16 GMT
Content-Length: 6049

12.184.6.221/ecg/imagenes/lang_esp.png

12.184.6.221

200 OK

5.9 kB

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/lang_esp.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Size
5.9 kB (5937 bytes)
Hash
8bbdbf2df68e82f2db7491496fd63b7b
1995c801547fa59b2652cdfb6f06751cde5d126b
fc6df6e87e8c4c034abffd4122889cbac316c222e23fd787ab756576aafaa384

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/lang_esp.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Mon, 19 May 2014 21:53:10 GMT
Accept-Ranges: bytes
ETag: "12efe4b9ac73cf1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:16 GMT
Content-Length: 5937

12.184.6.221/ecg/imagenes/img_twitter.png

12.184.6.221

200 OK

1.5 kB

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/img_twitter.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 100 x 31, 8-bit/color RGBA, non-interlaced
Size
1.5 kB (1539 bytes)
Hash
95675a1d988cedd5e1fbde1e40340264
ff4de31e1baec79dd2edddfb18e05b02b8c98008
9bf6322f93c25123e9793d30576f89ef07cc185a0f8542dab873d2123e130fe6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/img_twitter.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 22 May 2014 19:36:26 GMT
Accept-Ranges: bytes
ETag: "acf8f51ef575cf1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:16 GMT
Content-Length: 1539

12.184.6.221/ecg/imagenes/img_correo_telefono.png

12.184.6.221

200 OK

2.6 kB

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/img_correo_telefono.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 100 x 31, 8-bit/color RGBA, non-interlaced
Size
2.6 kB (2647 bytes)
Hash
b17082fae0a392b308b9231e8b5f11c9
df1270ac877d6312a3fea214ac74198142337f65
9a9280a1357e120cabfe728b3c26ecd47187ded23d1830f1745030dbe3c6eaff

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/img_correo_telefono.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 22 May 2014 19:36:28 GMT
Accept-Ranges: bytes
ETag: "284ef20f575cf1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:16 GMT
Content-Length: 2647

12.184.6.221/ecg/imgs/bullet_footer.jpg

12.184.6.221

404 Not Found

5.4 kB

URL GET HTTP/1.1
12.184.6.221/ecg/imgs/bullet_footer.jpg
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
HTML document, Unicode text, UTF-8 text, with very long lines (438)
Size
5.4 kB (5416 bytes)
Hash
cbb60274b9caadeb8b247fe09bafd63f
b8d25a1cd2b6e4b9faeeb4ffb0e06898903eca7b
61b7622190c243792e025fd7a205cce1778baf5c87b796e0599c95a182d288ce

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imgs/bullet_footer.jpg HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/css/ecg.css
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:18 GMT
Content-Length: 5416

12.184.6.221/ecg/imagenes/bk_menu.png

12.184.6.221

200 OK

1.7 kB

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/bk_menu.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 27 x 45, 8-bit/color RGB, non-interlaced
Size
1.7 kB (1665 bytes)
Hash
3b6faeb6ad90a2e3013910697d26942e
7bfedfacae09ac6ede88ff2dfda1a2c9afdd159f
703bf9506b4207f4d57fa99aab83e133bb292651eab4f15320a901c004f2f8a7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/bk_menu.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/css/ecg.css
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 08 Aug 2018 16:33:27 GMT
Accept-Ranges: bytes
ETag: "2214f488352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:18 GMT
Content-Length: 1665

12.184.6.221/ecg/imagenes/bk_header.png

12.184.6.221

200 OK

7.5 kB

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/bk_header.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 1500 x 150, 8-bit/color RGB, non-interlaced
Size
7.5 kB (7471 bytes)
Hash
a2621203b9bb77b653916c2fd1c6c064
ac289d838b9a423829f278ea346c233967a79506
0671f22b06af34e1349ff999384b5c00449a732d3b56cc66d5effc4a7cdf917c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/bk_header.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/css/ecg.css
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 08 Aug 2018 16:33:27 GMT
Accept-Ranges: bytes
ETag: "e1cbe588352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:18 GMT
Content-Length: 7471

12.184.6.221/ecg/imagenes/bk_menu_separador.png

12.184.6.221

200 OK

914 B

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/bk_menu_separador.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 2 x 43, 8-bit/color RGB, non-interlaced
Size
914 B (914 bytes)
Hash
c2c7ffc3421f5292ec63ec296d3257ae
d10a2e50a98b6f36383ee07ef6a9aadae455d811
ec9da94996bc796fb851b95b980d67327bc5f38e4e0ff819c13e3c0c8208113a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/bk_menu_separador.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/css/ecg.css
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 08 Aug 2018 16:33:27 GMT
Accept-Ranges: bytes
ETag: "4fbff88352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:18 GMT
Content-Length: 914

12.184.6.221/ecg/imagenes/bk_barra.png

12.184.6.221

200 OK

973 B

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/bk_barra.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 26 x 32, 8-bit/color RGB, non-interlaced
Size
973 B (973 bytes)
Hash
a80a367fff325759a426d56394bd488b
389b13bb4cd3c22d7f2057193625555cb8d5731d
6f3ff6fb80bd88866378e61115a0675607136d4b142b09f2e4b3c7129049842d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/bk_barra.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/css/ecg.css
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 08 Aug 2018 16:33:39 GMT
Accept-Ranges: bytes
ETag: "b823090352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:18 GMT
Content-Length: 973

12.184.6.221/ecg/imagenes/img_separador_footer.png

12.184.6.221

200 OK

917 B

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/img_separador_footer.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 2 x 112, 8-bit/color RGB, non-interlaced
Size
917 B (917 bytes)
Hash
d5ab63ec5472b3424457a8587c1c68e6
dcf8a8d65688074b59a2111c45e81f458ca3c416
c5b144f059994036a9d619f8102a6d3d670e78c489d623ed76ff018e7232b3fa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/img_separador_footer.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/css/ecg.css
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 08 Aug 2018 16:33:40 GMT
Accept-Ranges: bytes
ETag: "7ddb5a90352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:18 GMT
Content-Length: 917

12.184.6.221/ecg/imagenes/bk_footer.png

12.184.6.221

200 OK

9.9 kB

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/bk_footer.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 1500 x 280, 8-bit/color RGB, non-interlaced
Size
9.9 kB (9919 bytes)
Hash
322bc37c4d5950cb76e0b48d11c8411c
aae9b576bcd1cf117277a1e399b1278e2acfe690
c1470733a443f256621967cf1e9564cab39c9c8f51c86e5c333f2969d3078ec1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/bk_footer.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/css/ecg.css
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 08 Aug 2018 16:33:40 GMT
Accept-Ranges: bytes
ETag: "db314a90352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:18 GMT
Content-Length: 9919

12.184.6.221/ecg/imagenes/bk_info.png

12.184.6.221

200 OK

998 B

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/bk_info.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 5 x 5, 8-bit/color RGBA, non-interlaced
Size
998 B (998 bytes)
Hash
67ff5a55ffba1e788f8473c159ee903a
25f8ea169aa633e213a79c7724684cedd578e90b
2f598ff47f04e091622b771361de9c42ef9529d919967c707e7b4da0c75963d8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/bk_info.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/css/ecg.css
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 08 Aug 2018 16:33:39 GMT
Accept-Ranges: bytes
ETag: "f5341890352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:18 GMT
Content-Length: 998

12.184.6.221/ecg/imagenes/img_facebook.png

12.184.6.221

200 OK

1.7 kB

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/img_facebook.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 100 x 31, 8-bit/color RGBA, non-interlaced
Size
1.7 kB (1691 bytes)
Hash
7454f4c2fecbce0cf8fecc9455626825
ad30858c6f549b5af39d2926464bdf47bddbbe2e
3c39179dbb6ab9c1f13e6c9de2a2515a72a751ab0c902e71a801f8af0471de04

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/img_facebook.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 22 May 2014 19:36:27 GMT
Accept-Ranges: bytes
ETag: "b6de7d1ff575cf1:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:18 GMT
Content-Length: 1691

12.184.6.221/ecg/empresa/down.gif

12.184.6.221

404 Not Found

5.4 kB

URL GET HTTP/1.1
12.184.6.221/ecg/empresa/down.gif
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
HTML document, Unicode text, UTF-8 text, with very long lines (438)
Size
5.4 kB (5404 bytes)
Hash
bcf57f4d95768c1fe166c132394a2b12
c27f09a7861330fcd90c6ef2cad92cae43e5093a
2e0053b89ec585c0e890ebe156f00630ce0b28040e2e20e97d113ec98d1ed15b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/empresa/down.gif HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:18 GMT
Content-Length: 5404

12.184.6.221/ecg/imagenes/logoecg.png

12.184.6.221

200 OK

22 kB

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/logoecg.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 700 x 150, 8-bit/color RGBA, non-interlaced
Size
22 kB (21697 bytes)
Hash
819abb96ee9f3d66ab88ef44740996fc
d8941dbf9171181f59a55c6aa32c3061be489374
0461fc27356fe19fca3dbca6f31545aa4f669ac6b18b0492cc3d86d6264c67d3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/logoecg.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 13 Jun 2019 22:38:09 GMT
Accept-Ranges: bytes
ETag: "c32938ad3822d51:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:18 GMT
Content-Length: 21697

12.184.6.221/ecg/imagenes/bk_footerlogo.png

12.184.6.221

200 OK

535 kB

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/bk_footerlogo.png
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
PNG image data, 468 x 479, 8-bit/color RGBA, non-interlaced
Size
535 kB (535156 bytes)
Hash
3b680416c0831e1f19625d3acd7788c7
57d0b24d9efd706ac5c92481963c3ea6aef6b4e8
e79709156474b1ec9c915e9f60030ae3b4d06cfc00cec21a376aa0f896299814

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/bk_footerlogo.png HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 30 Sep 2021 23:46:21 GMT
Accept-Ranges: bytes
ETag: "d111e45e55b6d71:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:16 GMT
Content-Length: 535156

12.184.6.221/favicon.ico

12.184.6.221

404 Not Found

5.4 kB

URL GET HTTP/1.1
12.184.6.221/favicon.ico
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
HTML document, Unicode text, UTF-8 text, with very long lines (438)
Size
5.4 kB (5386 bytes)
Hash
55f857eb8e0b7565552dc7503f2d2c73
dcd6b2b975ba81ae3750cab7add139053571c4bf
3e4b8881b7379aba4d32a58c863379561ffbda7a683c73b0693c635bd2b8f05e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/empresa/index.php
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:18 GMT
Content-Length: 5386

12.184.6.221/ecg/imagenes/nuestra_empresa.jpg

12.184.6.221

200 OK

510 kB

URL GET HTTP/1.1
12.184.6.221/ecg/imagenes/nuestra_empresa.jpg
IP
12.184.6.221:80
ASN
#7018 ATT-INTERNET4

Requested by
http://12.184.6.221/ecg/empresa/index.php

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x600, components 3
Size
510 kB (509708 bytes)
Hash
2cd34cc9b6030943b5622a2c79b719e1
82da1d571dda597292ba73cf05e364a6b4fbb1e2
89172dbefb7b127bb5bedccda91db5e2b4bbc3bc05c300fcf39bff2cd8f3185a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ecg/imagenes/nuestra_empresa.jpg HTTP/1.1
Host: 12.184.6.221
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://12.184.6.221/ecg/css/ecg.css
Cookie: PHPSESSID=2d9j5c7p810509ah2kebtm3h44
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 08 Aug 2018 16:33:28 GMT
Accept-Ranges: bytes
ETag: "aed05c89352fd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 26 Apr 2024 09:10:18 GMT
Content-Length: 509708

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (33)

URL

IP

ASN

File type