IP 8.141.85.57:0
ASN#37963 Hangzhou Alibaba Advertising Co.,Ltd.
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hash6994e4f1fff46ed7dacc8ae288605759 93735bfbe2d202558f1f1f8729b3a5de1c10eef9 db1e851b4453987fa5bff5bfaa2c5020da4d7fab0a7847260a52f01c2e2412a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 8.141.85.57
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 25 Apr 2024 15:19:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
|
| 8.141.85.57/H2jiA24YEU.bmp | 8.141.85.57 | 200 OK | 5.5 MB |
URL User Request GET HTTP/1.18.141.85.57/H2jiA24YEU.bmp IP8.141.85.57:80 ASN#37963 Hangzhou Alibaba Advertising Co.,Ltd.
File typePC bitmap, Windows 3.x format, 1169 x -1168 x 32, cbSize 5461622, bits offset 54 Size5.5 MB (5461622 bytes) Hashd2e1f7b6391cd0cf46c6ea79598473f7 d2506dd8db351f4fe7ec0e2da4254781886b6ac5 a3aff4ac27ac382132331bf441555873e740b4b5f34bb7e5947c0e5c6b1093c1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /H2jiA24YEU.bmp HTTP/1.1
Host: 8.141.85.57
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 25 Apr 2024 15:19:45 GMT
Content-Type: image/x-ms-bmp
Content-Length: 5461622
Connection: keep-alive
Last-Modified: Thu, 22 Feb 2024 03:44:30 GMT
ETag: "65d6c31e-535676"
Accept-Ranges: bytes
|
IP8.141.85.57:80 ASN#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested byhttp://8.141.85.57/H2jiA24YEU.bmp
File typeMS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hashfff2d10e43ff3c856bf6d295ead689ee 0a7df90b534405c3febaa916e87b772377f6ffc8 5d211f1de40d11478081098c28b90498ba0190d65b43a990fcd67638ddaef667
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 8.141.85.57
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://8.141.85.57/H2jiA24YEU.bmp
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Thu, 25 Apr 2024 15:19:49 GMT
Content-Type: image/x-icon
Content-Length: 17542
Connection: keep-alive
Last-Modified: Tue, 13 Sep 2022 19:47:39 GMT
ETag: "6320de5b-4486"
Accept-Ranges: bytes
|