Report - 160.174.129.232/

Report Overview

Submitted URL
160.174.129.232/
IP
160.174.129.232
ASN
#6713 Itissalat Al-MAGHRIB
Submitted
2024-05-04 21:15:16
Access
public
Website Title
KaliSil - Identification
Final URL
160.174.129.232/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
54

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
160.174.129.232	unknown	unknown	No data	No data	14 kB	316 kB	160.174.129.232

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed
2024-05-04	medium	160.174.129.232	Sinkholed

ThreatFox

No alerts detected

JavaScript (14)

	URL	Size	First Seen	Last Seen
	160.174.129.232/	669 B	2024-05-04	2024-05-04
Pretty URL 160.174.129.232/ IP 160.174.129.232 ASN #6713 Itissalat Al-MAGHRIB Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-04 23:15:23 Last Seen2024-05-04 23:15:23 Times Seen1 Hash fcf16c1dc4d07178cc55528ee525a6c3 5059de0d0387011e411ac8e4f33351a09be95cd8 5fdd3ab7c094b2d5edbfa55674ccc0001545cbbb21e0b601a46e6803caac7c94 Loading...

	160.174.129.232/	294 B	2024-05-04	2024-05-04
Pretty URL 160.174.129.232/ IP 160.174.129.232 ASN #6713 Itissalat Al-MAGHRIB Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-04 23:15:23 Last Seen2024-05-04 23:15:23 Times Seen1 Hash 0e2e622ce8abade2fcf0931fcef69fa3 4ae1b15dc24e6422269e8ca212f898f9b2012997 3e9550fd8273c1b820eda50cf84416a708c0bab490aab00bfe2e752d0ea60858 Loading...

	160.174.129.232/blanc.php	0 B	2023-03-07	2024-05-18
Pretty URL 160.174.129.232/blanc.php IP 160.174.129.232 ASN #6713 Itissalat Al-MAGHRIB Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-18 15:09:23 Times Seen37788080 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	160.174.129.232/include/js/block.prototype.20180115175328.min.js	36 kB	2023-03-12	2024-05-04
Pretty URL 160.174.129.232/include/js/block.prototype.20180115175328.min.js IP 160.174.129.232 ASN #6713 Itissalat Al-MAGHRIB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 18:50:18 Last Seen2024-05-04 23:15:23 Times Seen3 Hash 3b4768049da4c9cc152b2129c7e21d5d b9ff14880477c6e94f938cb6725b20ba42610705 9ba1bd122c067e71342835265d80f7dbfc37bae147df9ae29caf5b3d7511fc35 Loading...

	unknown	14 B	2024-05-04	2024-05-04
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2024-05-04 23:15:23 Last Seen2024-05-04 23:15:23 Times Seen1 Hash 517b3b554da1e69a66fe5270aa8e6ee7 2d4907756cdcf4629c3ad6a12efaa68621d5b87d 55b4d93eed18578ef0244dbc049f142771793621679293f65c6213e0846ecc37 Loading...

	unknown	5 B	2023-03-07	2024-05-18
Pretty Introduced by javascriptURL Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-05-18 14:35:37 Times Seen15157 Hash 68934a3e9455fa72420237eb05902327 7cb6efb98ba5972a9b5090dc2e517fe14d12cb04 fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa Loading...

	160.174.129.232/	2.0 kB	2024-05-04	2024-05-04
Pretty URL 160.174.129.232/ IP 160.174.129.232 ASN #6713 Itissalat Al-MAGHRIB Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-04 23:15:23 Last Seen2024-05-04 23:15:23 Times Seen1 Hash 5199fc6120768339afa0e5a2d9762562 49b0119ed2d1081ce1e2a18416a27fb0d4b7e673 14e96879538b7e59a6cf0068fd461ffee2c41ab4aead8afaa8f15d3ae97dda1c Loading...

	160.174.129.232/	525 B	2024-05-04	2024-05-04
Pretty URL 160.174.129.232/ IP 160.174.129.232 ASN #6713 Itissalat Al-MAGHRIB Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-04 23:15:23 Last Seen2024-05-04 23:15:23 Times Seen1 Hash e7288eacf294dcf8db5e4dd7c101e804 7a904e68cb299e2babc77872d8f435530a8236e0 5b0237b1645ed9896d77ef7e0600b2c7286d32f6195038b363444d6eb0646131 Loading...

	160.174.129.232/include/js/block.afficheHead.20180115175328.min.js	320 kB	2024-05-04	2024-05-04
Pretty URL 160.174.129.232/include/js/block.afficheHead.20180115175328.min.js IP 160.174.129.232 ASN #6713 Itissalat Al-MAGHRIB Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 23:15:23 Last Seen2024-05-04 23:15:23 Times Seen1 Hash 7a2b80d167fbe95fc32d3ed0a2bd5b69 1a36e45cfa8b00dfe18eae1bc6590ddff61e16e9 b649e8ea771d9f5c1ce0ca1e71442fd3558f3d4bf7ce0ebe8f18b62b5c39c3c2 Loading...

	160.174.129.232/	1.4 kB	2024-05-04	2024-05-04
Pretty URL 160.174.129.232/ IP 160.174.129.232 ASN #6713 Itissalat Al-MAGHRIB Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-04 23:15:23 Last Seen2024-05-04 23:15:23 Times Seen1 Hash 6fb465bf704ffee11ec0e95a82f1d3ed e5fea43e547dcd8d518d8f899871a642d5de5187 fc2daed4bed4e08d7c12f43f0c86549264345129107fcda5f435954a150edc12 Loading...

	160.174.129.232/	36 B	2024-05-04	2024-05-04
Pretty URL 160.174.129.232/ IP 160.174.129.232 ASN #6713 Itissalat Al-MAGHRIB Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-04 23:15:23 Last Seen2024-05-04 23:15:23 Times Seen1 Hash 0b46928d76835011724b84ce5c9dbc40 cf97b0f7d1a6f3b98c53544e846fff1d5ad40ec8 e1630ce0cb789bc80650869110d25eafb7d8412d8bd4b7ced2d1d06e31aaf2fe Loading...

	unknown	25 B	2024-05-04	2024-05-04
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2024-05-04 23:15:23 Last Seen2024-05-04 23:15:23 Times Seen1 Hash f9ed568d5580286a502d3f5d3c45be28 a38f9e3fa3d708c3d3faa4d8f1415f325e4d7503 028efbbce02f208be999c7f5ba68c8c1eba733c6ef5bc41c4a31f3fbcf9574b3 Loading...

	unknown	297 B	2024-05-04	2024-05-04
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2024-05-04 23:15:23 Last Seen2024-05-04 23:15:23 Times Seen1 Hash 9068f24b92177ea83e082c2c3ba7f3c9 9e15c2f6f4d6c55447a8fe5855a6728bfbcdbae1 89830a14aa4fb39850d959488cb85bea29881a22b7ed94ed1e791506e5865d60 Loading...

	160.174.129.232/include/kselect.20180115175328.min.js	23 kB	2024-05-04	2024-05-04
Pretty URL 160.174.129.232/include/kselect.20180115175328.min.js IP 160.174.129.232 ASN #6713 Itissalat Al-MAGHRIB Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 23:15:23 Last Seen2024-05-04 23:15:23 Times Seen1 Hash d9679f3794b8666effe460e0620a1168 fcdd549f4990c470c48ba48e5c5200477c9e8ab7 afeb3f622e96379a80dd5b9d6fb18cbecd9fd30c425f1fecdb8ecc88a71738a5 Loading...

HTTP Transactions (27)

URL IP Response Size

160.174.129.232/

160.174.129.232

7.2 kB

URL User Request GET
160.174.129.232/
IP
160.174.129.232:0
ASN
#6713 Itissalat Al-MAGHRIB

File type
HTML document, ISO-8859 text, with very long lines (3897)
Size
7.2 kB (7181 bytes)
Hash
ed66d8356a4b26d8d61d3b6ac543df58
0ae6386c2d269f6f0432038e91f17ca01a994dd2
2f71eb49b4c78b6a5b0a5b436c91328c11ee8aaf2878ca028816b6acbe5da726

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:50 GMT
Server: Apache/2.2.16 (Debian)
X-Powered-By: PHP/5.3.3-7+squeeze19
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Last-Modified: Sat, 04 May 2024 21:14:50 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; path=/
sessSessionId=sessLog6636a54ada5c4; expires=Sat, 03-May-2025 21:14:50 GMT; path=/
cook_kalilab_index_idSite=1; expires=Tue, 29-Apr-2025 21:14:50 GMT; path=/
cook_kalilab_index_idSite_isset=1; expires=Tue, 29-Apr-2025 21:14:50 GMT; path=/
cook_kalilab_typeLogin=login; expires=Tue, 29-Apr-2025 21:14:50 GMT; path=/
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 7181
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html

160.174.129.232/moduleNaviguation/skin/kali/block.afficheHead.20180115175328.min.css

160.174.129.232

200 OK

10 kB

URL GET HTTP/1.1
160.174.129.232/moduleNaviguation/skin/kali/block.afficheHead.20180115175328.min.css
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
ASCII text, with very long lines (5274)
Size
10 kB (10443 bytes)
Hash
9990a8501579a4b840373472f34fd6f3
d5db0581882778f40f7a94f8b7f797b29244db63
414bbb35bdfbe3267368aad114925c4bcc9590c7edf38cae8dcd79908f623e88

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moduleNaviguation/skin/kali/block.afficheHead.20180115175328.min.css HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Mon, 15 Jan 2018 16:56:44 GMT
ETag: "17bc0c0-dc67-562d37fb8eb00"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10443
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: text/css

160.174.129.232/include/js/block.prototype.20180115175328.min.js

160.174.129.232

200 OK

9.2 kB

URL GET HTTP/1.1
160.174.129.232/include/js/block.prototype.20180115175328.min.js
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
JavaScript source, ASCII text, with very long lines (5182)
Size
9.2 kB (9245 bytes)
Hash
3b4768049da4c9cc152b2129c7e21d5d
b9ff14880477c6e94f938cb6725b20ba42610705
9ba1bd122c067e71342835265d80f7dbfc37bae147df9ae29caf5b3d7511fc35

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /include/js/block.prototype.20180115175328.min.js HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Mon, 15 Jan 2018 16:56:44 GMT
ETag: "17b686d-8b8f-562d37fb8eb00"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9245
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: application/javascript

160.174.129.232/include/kselect.20180115175328.min.js

160.174.129.232

200 OK

5.9 kB

URL GET HTTP/1.1
160.174.129.232/include/kselect.20180115175328.min.js
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
ISO-8859 text, with very long lines (5050)
Size
5.9 kB (5901 bytes)
Hash
93ea89346097fcb03139b632b0285c82
40f2e71055f99dc1b2a2a70a44aa5110942b630a
60d62560058d6881e54ea66f693d70fd3c7d179d1240a51a118c6e52a9d2835a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /include/kselect.20180115175328.min.js HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Mon, 15 Jan 2018 16:56:43 GMT
ETag: "17b651a-5a3a-562d37fa9a8c0"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5901
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: application/javascript

160.174.129.232/moduleNaviguation/skin/kali/block.afficheHead.20180115175328.min.css

160.174.129.232

200 OK

10 kB

URL GET HTTP/1.1
160.174.129.232/moduleNaviguation/skin/kali/block.afficheHead.20180115175328.min.css
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
ASCII text, with very long lines (5274)
Size
10 kB (10443 bytes)
Hash
9990a8501579a4b840373472f34fd6f3
d5db0581882778f40f7a94f8b7f797b29244db63
414bbb35bdfbe3267368aad114925c4bcc9590c7edf38cae8dcd79908f623e88

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moduleNaviguation/skin/kali/block.afficheHead.20180115175328.min.css HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Mon, 15 Jan 2018 16:56:44 GMT
ETag: "17bc0c0-dc67-562d37fb8eb00"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10443
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: text/css

160.174.129.232/include/js/block.afficheHead.20180115175328.min.js

160.174.129.232

200 OK

102 kB

URL GET HTTP/1.1
160.174.129.232/include/js/block.afficheHead.20180115175328.min.js
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/blanc.php

File type
JavaScript source, ISO-8859 text, with very long lines (5104)
Size
102 kB (101628 bytes)
Hash
ee913ebe077f9cbd018db9487ce0a848
7b2821278acba99151a57530a26ee3dee762e28a
0a0a4095f6797dfe051b6f1929c868881fb2e7824afd814e9612c47b6fac2cee

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /include/js/block.afficheHead.20180115175328.min.js HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Mon, 15 Jan 2018 16:56:44 GMT
ETag: "17b6865-4e300-562d37fb8eb00"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript

160.174.129.232/images/attention.gif

160.174.129.232

200 OK

186 B

URL GET HTTP/1.1
160.174.129.232/images/attention.gif
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
GIF image data, version 89a, 18 x 19
Size
186 B (186 bytes)
Hash
f8b09a10174e53d212c38ebdffbc7f27
5edb0500ff5bbaeaded5a6192bafaae3de1d85a8
0d230e72aef20d8e129c0e98082347abe8c4880d71c86874369fb11543661d1b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/attention.gif HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Fri, 03 Sep 2010 13:22:36 GMT
ETag: "17b60fc-ba-48f5ad2f5df00"
Accept-Ranges: bytes
Content-Length: 186
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Content-Type: image/gif

160.174.129.232/images/login.gif

160.174.129.232

200 OK

969 B

URL GET HTTP/1.1
160.174.129.232/images/login.gif
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
GIF image data, version 89a, 20 x 20
Size
969 B (969 bytes)
Hash
3062aafaadc617905b69c402a569a3cb
59e046be63b2e61bc74df2a31d18e7ed2071547c
27afe4e4878781a494ddcc8d0c1d67801f64883a0f10246cb06d6f7f336d3a22

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/login.gif HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Thu, 21 Feb 2019 12:09:25 GMT
ETag: "17b63bd-3c9-5826658676740"
Accept-Ranges: bytes
Content-Length: 969
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Content-Type: image/gif

160.174.129.232/images/netikaComplet.gif

160.174.129.232

200 OK

1.9 kB

URL GET HTTP/1.1
160.174.129.232/images/netikaComplet.gif
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
GIF image data, version 89a, 137 x 50
Size
1.9 kB (1914 bytes)
Hash
d6bedda95f97a2f4ad545e4b546de0d2
b84aad7c8b2f3508af4f0052e26e6a18210b0e08
86e9a0f23d6f6c0d13bc7d140d10f7f2f3d32069766a99af79b8311cc653ddad

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/netikaComplet.gif HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Thu, 21 Feb 2019 12:09:25 GMT
ETag: "17b63c6-77a-5826658676740"
Accept-Ranges: bytes
Content-Length: 1914
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: image/gif

160.174.129.232/images/setup20.gif

160.174.129.232

200 OK

1.1 kB

URL GET HTTP/1.1
160.174.129.232/images/setup20.gif
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
GIF image data, version 89a, 20 x 20
Size
1.1 kB (1127 bytes)
Hash
b31a4f88126f220514b50faabb8088ed
fa4f840e0fc6685f72af3348ae05ee627671116b
173698a8cae2a3f0b810ee33383df5126238be311a615061981b7f3be3326f82

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/setup20.gif HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Fri, 03 Sep 2010 13:22:43 GMT
ETag: "17b646c-467-48f5ad360aec0"
Accept-Ranges: bytes
Content-Length: 1127
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: image/gif

160.174.129.232/images/icopdf.gif

160.174.129.232

200 OK

216 B

URL GET HTTP/1.1
160.174.129.232/images/icopdf.gif
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
GIF image data, version 89a, 20 x 20
Size
216 B (216 bytes)
Hash
30ec24841858c2ea553841bce8bebe9a
f9c1d4cf7d300badf9c51099448c5feba1ac1d1a
da837b25361c03cd6ba424b8a4b6dfd27e4b268624608bc5b0eef265d2f6b064

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/icopdf.gif HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Fri, 03 Sep 2010 13:22:40 GMT
ETag: "17b630f-d8-48f5ad332e800"
Accept-Ranges: bytes
Content-Length: 216
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
Content-Type: image/gif

160.174.129.232/images/behind_the_siteDLG.jpg

160.174.129.232

200 OK

4.9 kB

URL GET HTTP/1.1
160.174.129.232/images/behind_the_siteDLG.jpg
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=Paint.NET v3.5.5], baseline, precision 8, 400x390, components 3
Size
4.9 kB (4927 bytes)
Hash
ad0685ba6d31386c2f04377e0ca28959
cc299f92873e20c31fc942b792ceb0bbc76bb677
cda44fb197d6ab9e2853c134cdcf689d180dab014cff3289e0adecbdb1f140be

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/behind_the_siteDLG.jpg HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Fri, 03 Sep 2010 13:22:44 GMT
ETag: "17b610a-133f-48f5ad36ff100"
Accept-Ranges: bytes
Content-Length: 4927
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/jpeg

160.174.129.232/images/kalisil.gif

160.174.129.232

200 OK

941 B

URL GET HTTP/1.1
160.174.129.232/images/kalisil.gif
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
GIF image data, version 89a, 20 x 20
Size
941 B (941 bytes)
Hash
1a83dff7c165078796d5c18defb73c19
a79dcf3deff811db46f415f510658d5d4ddd50a0
4749e0e01273d07d33118f2c63109a5977a08cc881b0f4120357c390863e99c9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/kalisil.gif HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Thu, 21 Feb 2019 12:09:25 GMT
ETag: "17b6398-3ad-5826658676740"
Accept-Ranges: bytes
Content-Length: 941
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
Content-Type: image/gif

160.174.129.232/images/icobadge.gif

160.174.129.232

200 OK

383 B

URL GET HTTP/1.1
160.174.129.232/images/icobadge.gif
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
GIF image data, version 89a, 20 x 20
Size
383 B (383 bytes)
Hash
db7de32b2b1fdbb6bef4873e8fed24dd
d354dd099f1ec043700d0f3fb1de372782cf31d0
41e68ff2d6ca651a96c8150fe04fd05895099cf0eb18cfbebc106e24c5fff795

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/icobadge.gif HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Fri, 03 Sep 2010 13:22:38 GMT
ETag: "17b61fb-17f-48f5ad3146380"
Accept-Ranges: bytes
Content-Length: 383
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/gif

160.174.129.232/images/icoprelevementattente.gif

160.174.129.232

200 OK

1.1 kB

URL GET HTTP/1.1
160.174.129.232/images/icoprelevementattente.gif
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
GIF image data, version 89a, 20 x 20
Size
1.1 kB (1149 bytes)
Hash
c4301fe7cd4a1f831d9ebf44246c22a9
0c48502463dec5c11da05be3bc300a5394949ea6
f4bc7c931b78a11e6b41010c7e9f216330fe43e8f36380ac5f3fa21ebd5d74b7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/icoprelevementattente.gif HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Fri, 03 Sep 2010 13:22:41 GMT
ETag: "17b6328-47d-48f5ad3422a40"
Accept-Ranges: bytes
Content-Length: 1149
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Content-Type: image/gif

160.174.129.232/images/kalisilLogo.gif

160.174.129.232

200 OK

3.0 kB

URL GET HTTP/1.1
160.174.129.232/images/kalisilLogo.gif
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
GIF image data, version 89a, 120 x 171
Size
3.0 kB (3043 bytes)
Hash
aae5ead4823c3e5db1104bb5feefe81b
763e30926503133558ced72f10b944bfde4e3815
1b5ac2e0c37e2b982f752de1db2ee4e05c6f129bb2e996d28929b30d99d55e20

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/kalisilLogo.gif HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Thu, 21 Feb 2019 12:09:25 GMT
ETag: "17b6399-be3-5826658676740"
Accept-Ranges: bytes
Content-Length: 3043
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Content-Type: image/gif

160.174.129.232/images/netika20.gif

160.174.129.232

200 OK

949 B

URL GET HTTP/1.1
160.174.129.232/images/netika20.gif
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
GIF image data, version 89a, 20 x 20
Size
949 B (949 bytes)
Hash
ab069323bbed82bc63cd481a4645eb36
c28231bf2bae66ede91a705067727ecb05f6ae74
3e1275cda6ec6e1b5f7cd561fbcc33f18c316810aab2a7a40b1b1954c25284da

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/netika20.gif HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Thu, 21 Feb 2019 12:09:25 GMT
ETag: "17b6d9d-3b5-5826658676740"
Accept-Ranges: bytes
Content-Length: 949
Keep-Alive: timeout=15, max=96
Connection: Keep-Alive
Content-Type: image/gif

160.174.129.232/images/logiciel-kalisil.gif

160.174.129.232

200 OK

2.5 kB

URL GET HTTP/1.1
160.174.129.232/images/logiciel-kalisil.gif
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
GIF image data, version 89a, 174 x 70
Size
2.5 kB (2458 bytes)
Hash
e2b530a26fd6d523d0f56b9031e943dc
5102da7a4b25bbbb407d2a86cc13cf3b661305e4
197fbef7ebd36bd18094908c1211c62220435132490d3e59b67cdce14f542d12

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/logiciel-kalisil.gif HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Thu, 21 Feb 2019 12:09:25 GMT
ETag: "17b63bc-99a-5826658676740"
Accept-Ranges: bytes
Content-Length: 2458
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
Content-Type: image/gif

160.174.129.232/images/behind_the_siteDL.jpg

160.174.129.232

200 OK

1.4 kB

URL GET HTTP/1.1
160.174.129.232/images/behind_the_siteDL.jpg
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=Paint.NET v3.5.5], baseline, precision 8, 61x60, components 3
Size
1.4 kB (1442 bytes)
Hash
a07b2bb4d00f4a69a2766158a427836a
80ae7b106edfff4850c51d693f72b86e142beeec
d963d459dc62ec6ebef2374d61a4ba97e75af22963a63dbf611b6c194191f9bf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/behind_the_siteDL.jpg HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Fri, 03 Sep 2010 13:22:44 GMT
ETag: "17b6108-5a2-48f5ad36ff100"
Accept-Ranges: bytes
Content-Length: 1442
Keep-Alive: timeout=15, max=97
Connection: Keep-Alive
Content-Type: image/jpeg

160.174.129.232/images/teamviewer.gif

160.174.129.232

200 OK

1.6 kB

URL GET HTTP/1.1
160.174.129.232/images/teamviewer.gif
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
GIF image data, version 89a, 32 x 32
Size
1.6 kB (1604 bytes)
Hash
934264652c2c30e4d39be17859ddd641
bd1c5db406ad3065c672329be70a3a4f5d3efd7f
0f3fffaf6f1b809ee0c856ed9e474da9b8e3bf592e88867abc6091fd25518eae

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/teamviewer.gif HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Fri, 03 Sep 2010 13:22:43 GMT
ETag: "17b6485-644-48f5ad360aec0"
Accept-Ranges: bytes
Content-Length: 1604
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: image/gif

160.174.129.232/blanc.php

160.174.129.232

200 OK

1.3 kB

URL GET HTTP/1.1
160.174.129.232/blanc.php
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
HTML document, ISO-8859 text, with very long lines (710)
Size
1.3 kB (1281 bytes)
Hash
2d60a1e18c7e799ded7d38dba7c82f0a
4fc20b79d8d386bc33a9204e57852dbc3bc89b92
8ec60a2cd88b4cee70e44f57d40d6cdff9a2e339a5a8304cf6119e926434d9e4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /blanc.php HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
X-Powered-By: PHP/5.3.3-7+squeeze19
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 1281
Keep-Alive: timeout=15, max=96
Connection: Keep-Alive
Content-Type: text/html

160.174.129.232/images/netika_grand.gif

160.174.129.232

200 OK

25 kB

URL GET HTTP/1.1
160.174.129.232/images/netika_grand.gif
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
GIF image data, version 89a, 1000 x 1000
Size
25 kB (24874 bytes)
Hash
3ee7e333ea5be7a055083a9b0d8b8601
07bcf1666108bd87779202f7de266ebd5e1bf439
75446397c0a89d4bcdde9110db635585fcb8e3d15c942e8404d978fa75016022

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/netika_grand.gif HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:51 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Thu, 21 Feb 2019 12:09:25 GMT
ETag: "17b63c8-612a-5826658676740"
Accept-Ranges: bytes
Content-Length: 24874
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: image/gif

160.174.129.232/favico.kalisil.ico

160.174.129.232

200 OK

1.2 kB

URL GET HTTP/1.1
160.174.129.232/favico.kalisil.ico
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Size
1.2 kB (1150 bytes)
Hash
ef538c5f2920f9b29ba24f201b862e40
3bbbb47b0f1f261cfdc2e777ccaffc9a191cbf2a
981b994a7f52952c14692f2141c56378cf7ecd58ec8df68e8e87f5e861a66b53

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favico.kalisil.ico HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:52 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Thu, 21 Feb 2019 12:09:23 GMT
ETag: "17b602e-47e-582665848e2c0"
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=15, max=96
Connection: Keep-Alive
Content-Type: image/x-icon

160.174.129.232/moduleNaviguation/skin/kali/block.afficheHead.20180115175328.min.css

160.174.129.232

200 OK

10 kB

URL GET HTTP/1.1
160.174.129.232/moduleNaviguation/skin/kali/block.afficheHead.20180115175328.min.css
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
ASCII text, with very long lines (5274)
Size
10 kB (10443 bytes)
Hash
9990a8501579a4b840373472f34fd6f3
d5db0581882778f40f7a94f8b7f797b29244db63
414bbb35bdfbe3267368aad114925c4bcc9590c7edf38cae8dcd79908f623e88

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /moduleNaviguation/skin/kali/block.afficheHead.20180115175328.min.css HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/blanc.php
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:52 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Mon, 15 Jan 2018 16:56:44 GMT
ETag: "17bc0c0-dc67-562d37fb8eb00"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10443
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Content-Type: text/css

160.174.129.232/include/js/block.afficheHead.20180115175328.min.js

160.174.129.232

200 OK

102 kB

URL GET HTTP/1.1
160.174.129.232/include/js/block.afficheHead.20180115175328.min.js
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/blanc.php

File type
JavaScript source, ISO-8859 text, with very long lines (5104)
Size
102 kB (101628 bytes)
Hash
ee913ebe077f9cbd018db9487ce0a848
7b2821278acba99151a57530a26ee3dee762e28a
0a0a4095f6797dfe051b6f1929c868881fb2e7824afd814e9612c47b6fac2cee

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /include/js/block.afficheHead.20180115175328.min.js HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/blanc.php
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:52 GMT
Server: Apache/2.2.16 (Debian)
Last-Modified: Mon, 15 Jan 2018 16:56:44 GMT
ETag: "17b6865-4e300-562d37fb8eb00"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript

160.174.129.232/index.ajax.php

160.174.129.232

200 OK

264 B

URL GET HTTP/1.1
160.174.129.232/index.ajax.php
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
XML 1.0 document, ASCII text
Size
264 B (264 bytes)
Hash
c1245f727369c847afe1cec04abdcf34
346c51abaffd91f6e602f0fb5524e52f4973166f
8d0c5f4427b3fcff94a1d70e1d188db8ad96abe0c378fe2f57e3d45ae9c9d931

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index.ajax.php HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/xml, text/xml, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://160.174.129.232/
Cookie: PHPSESSID=km21v7eh8l4pevs72gqf7ssg10; sessSessionId=sessLog6636a54ada5c4; cook_kalilab_index_idSite=1; cook_kalilab_index_idSite_isset=1; cook_kalilab_typeLogin=login
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:14:53 GMT
Server: Apache/2.2.16 (Debian)
X-Powered-By: PHP/5.3.3-7+squeeze19
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Last-Modified: Sat, 04 May 2024 21:14:54 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 264
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
Content-Type: text/xml

160.174.129.232/blanc.php

160.174.129.232

200 OK

1.3 kB

URL GET HTTP/1.1
160.174.129.232/blanc.php
IP
160.174.129.232:80
ASN
#6713 Itissalat Al-MAGHRIB

Requested by
http://160.174.129.232/

File type
HTML document, ISO-8859 text, with very long lines (710)
Size
1.3 kB (1281 bytes)
Hash
ca2e4136975acb1e0aac2d8f80fec7d4
9cde6a86364f4313c2544ac71b9ce946034592e5
abcefa36eeea5e104c580f11b549fb36661dea30d4b16d16578b9193fc1b63aa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /blanc.php HTTP/1.1
Host: 160.174.129.232
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 04 May 2024 21:15:13 GMT
Server: Apache/2.2.16 (Debian)
X-Powered-By: PHP/5.3.3-7+squeeze19
Set-Cookie: PHPSESSID=1pdm7l2ah47pc979retil0ihe6; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 1281
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (14)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by