Report - 104.248.227.239/bins/Hilix.x86

Report Overview

Submitted URL
104.248.227.239/bins/Hilix.x86
IP
104.248.227.239
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2024-05-05 04:11:37
Access
public
Website Title
Page not found – Natural Living
Final URL
104.248.227.239/bins/Hilix.x86
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
104.248.227.239	unknown	unknown	2021-05-03	2023-11-14	755 B	17 kB	104.248.227.239
naturallivingwithmona.com	unknown	2020-05-28	2021-06-26	2023-11-14	5.4 kB	9.0 kB	104.248.227.239
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-04	788 B	47 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-05	medium	104.248.227.239	Sinkholed
2024-05-05	medium	104.248.227.239	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	104.248.227.239/bins/Hilix.x86	2.1 kB	2023-08-01	2024-05-05
Pretty URL 104.248.227.239/bins/Hilix.x86 IP 104.248.227.239 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2023-08-01 20:44:50 Last Seen2024-05-05 06:11:37 Times Seen4 Hash fc99a7496fe7a9c36774f75d9122264e c97533c114d2bb5e0e68a5c95aeaf4fe0250da70 0668e0cc7fd133d3d583203fb9aed2e780087649d166572a60e24b45297f7832 Loading...

	104.248.227.239/bins/Hilix.x86	97 B	2023-03-07	2024-05-18
Pretty URL 104.248.227.239/bins/Hilix.x86 IP 104.248.227.239 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:02 Last Seen2024-05-18 14:29:22 Times Seen1736 Hash 382baaa0b6a4b709817aa3d9a76cf798 790e0412f8e01e83192ce7117731d4e07be8890b d8dd9e4bee02cb49c521217c4f44067b3dfa7d425f698fa8e90056c535188877 Loading...

	104.248.227.239/bins/Hilix.x86	329 B	2023-03-07	2024-05-17
Pretty URL 104.248.227.239/bins/Hilix.x86 IP 104.248.227.239 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:02 Last Seen2024-05-17 23:20:15 Times Seen3780 Hash 03d6d38af8c34d50a7d4f77919f3f6c7 90e18129a2b50addce02c98c923534d242233216 9f7a87d73cf34cd5d76d600a5ce326ac1ce32a021067b1bb50587fa488b13444 Loading...

HTTP Transactions (17)

URL IP Response Size

104.248.227.239/bins/Hilix.x86

104.248.227.239

16 kB

URL User Request GET
104.248.227.239/bins/Hilix.x86
IP
104.248.227.239:0
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document, ASCII text, with very long lines (3622)
Size
16 kB (16155 bytes)
Hash
69668eb92c36d83dbe40b56b4aefedfa
b8ed9ee70a5f3e5b23eebaa155df5f1e5d364180
eb77dff34f05383bf1b16b5d4a0056a07aefb3223461298489237a3dc8c6e262

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bins/Hilix.x86 HTTP/1.1
Host: 104.248.227.239
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Sun, 05 May 2024 04:11:12 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
X-Powered-By: PHP/7.4.20
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://naturallivingwithmona.com/wp-json/>; rel="https://api.w.org/"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

naturallivingwithmona.com/wp-includes/css/dist/block-library/style.min.css?ver=5.7.2

104.248.227.239

301 Moved Permanently

300 B

URL GET HTTP/1.1
naturallivingwithmona.com/wp-includes/css/dist/block-library/style.min.css?ver=5.7.2
IP
104.248.227.239:80
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type
HTML document, ASCII text
Size
300 B (300 bytes)
Hash
e7074f1816dcfccb634c0e8d3013cd4c
368141b0d2299e4c270bcdf5a6dc4adc16dbde87
069c89391b2a63681d6ea808700b4fb097a2140b3d20369069ae88b619a5044e

HTTP Headers

GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.2 HTTP/1.1
Host: naturallivingwithmona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 May 2024 04:11:12 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
Location: https://naturallivingwithmona.com/wp-includes/css/dist/block-library/style.min.css?ver=5.7.2
Content-Length: 300
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

naturallivingwithmona.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.1

104.248.227.239

301 Moved Permanently

333 B

URL GET HTTP/1.1
naturallivingwithmona.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.1
IP
104.248.227.239:80
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type
HTML document, ASCII text
Size
333 B (333 bytes)
Hash
91227e9a18fa0c7c575332ce4260f72d
fd5d0eb2d9140a0f8a0e614f6e625957bd1bb17e
22e5556498bd70c7b6ca762b3a4e4bfae811542090ed99f4da4f8c4f47bb5bf1

HTTP Headers

GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.1 HTTP/1.1
Host: naturallivingwithmona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 May 2024 04:11:12 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
Location: https://naturallivingwithmona.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.1
Content-Length: 333
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

naturallivingwithmona.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.11.0

104.248.227.239

301 Moved Permanently

327 B

URL GET HTTP/1.1
naturallivingwithmona.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.11.0
IP
104.248.227.239:80
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type
HTML document, ASCII text
Size
327 B (327 bytes)
Hash
0c81800908f37fa6fddaaf7a90d11de1
52123edcada65cd16f743c2d346f5fa2734c362e
e2cbfc0e4b179316245721e94d93f3edacd15512ebbfae6e42ca7f620f6847a7

HTTP Headers

GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.11.0 HTTP/1.1
Host: naturallivingwithmona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 May 2024 04:11:12 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
Location: https://naturallivingwithmona.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.11.0
Content-Length: 327
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

naturallivingwithmona.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.2.5

104.248.227.239

321 B

URL GET
naturallivingwithmona.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.2.5
IP
104.248.227.239:0
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type
HTML document, ASCII text
Size
321 B (321 bytes)
Hash
54afed2cc90711af7b61aad0c524a3c4
b6b545595c06eb639c45da3ee465837da3d638a8
3bbb52c1c13e3af2c75aedc89f664f0e877cbf449f3917ab38cf0c54fc144885

HTTP Headers

GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.2.5 HTTP/1.1
Host: naturallivingwithmona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 May 2024 04:11:12 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
Location: https://naturallivingwithmona.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.2.5
Content-Length: 321
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

naturallivingwithmona.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.2.5

104.248.227.239

301 Moved Permanently

308 B

URL GET HTTP/1.1
naturallivingwithmona.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.2.5
IP
104.248.227.239:80
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type
HTML document, ASCII text
Size
308 B (308 bytes)
Hash
6766910dea052891437b0234c30d80be
c25fa9be152dd8550f379d84a558452f9eb3aef9
57576a403608523dbc551ec7c586fc831f77defa6ddca54eb9c877d24301a791

HTTP Headers

GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.2.5 HTTP/1.1
Host: naturallivingwithmona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 May 2024 04:11:12 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
Location: https://naturallivingwithmona.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.2.5
Content-Length: 308
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

naturallivingwithmona.com/wp-content/uploads/elementor/css/post-29.css?ver=1624719995

104.248.227.239

301 Moved Permanently

301 B

URL GET HTTP/1.1
naturallivingwithmona.com/wp-content/uploads/elementor/css/post-29.css?ver=1624719995
IP
104.248.227.239:80
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type
HTML document, ASCII text
Size
301 B (301 bytes)
Hash
cf1bdbd55b3cebabedd06b3d84b30b07
1e4921d635a650a3f340e1370779593a2f4726a2
798972bb502a869fabe838932e93cd5b2bdc876a9b83b25cb11bd4a54297d22b

HTTP Headers

GET /wp-content/uploads/elementor/css/post-29.css?ver=1624719995 HTTP/1.1
Host: naturallivingwithmona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 May 2024 04:11:12 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
Location: https://naturallivingwithmona.com/wp-content/uploads/elementor/css/post-29.css?ver=1624719995
Content-Length: 301
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

naturallivingwithmona.com/wp-content/uploads/elementor/css/global.css?ver=1624720018

104.248.227.239

300 B

URL GET
naturallivingwithmona.com/wp-content/uploads/elementor/css/global.css?ver=1624720018
IP
104.248.227.239:0
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type
HTML document, ASCII text
Size
300 B (300 bytes)
Hash
4a7e999646c9ffcf2d42e09eb205a961
cd70ac9a41a5714a3020e2fe2233537a2cdae632
1101fa1637683bb293a8d744e3d9434e47c56da84478b1e94890e668a34b350e

HTTP Headers

GET /wp-content/uploads/elementor/css/global.css?ver=1624720018 HTTP/1.1
Host: naturallivingwithmona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 May 2024 04:11:12 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
Location: https://naturallivingwithmona.com/wp-content/uploads/elementor/css/global.css?ver=1624720018
Content-Length: 300
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

naturallivingwithmona.com/wp-content/themes/twentytwenty/style.css?ver=1.7

104.248.227.239

301 Moved Permanently

290 B

URL GET HTTP/1.1
naturallivingwithmona.com/wp-content/themes/twentytwenty/style.css?ver=1.7
IP
104.248.227.239:80
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type
HTML document, ASCII text
Size
290 B (290 bytes)
Hash
4faa7cef35848d3fe5425f9daad9249d
bf97ca778b75ad96a3f491fae5f2722fec4c99d2
081a8b7df98e48a55d08a7295dc074c5813e4f6d8458d0e281ce6a0e392e39ca

HTTP Headers

GET /wp-content/themes/twentytwenty/style.css?ver=1.7 HTTP/1.1
Host: naturallivingwithmona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 May 2024 04:11:12 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
Location: https://naturallivingwithmona.com/wp-content/themes/twentytwenty/style.css?ver=1.7
Content-Length: 290
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

naturallivingwithmona.com/wp-content/themes/twentytwenty/assets/js/index.js?ver=1.7

104.248.227.239

301 Moved Permanently

299 B

URL GET HTTP/1.1
naturallivingwithmona.com/wp-content/themes/twentytwenty/assets/js/index.js?ver=1.7
IP
104.248.227.239:80
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type
HTML document, ASCII text
Size
299 B (299 bytes)
Hash
78100aebd9826ccedb75a9c8d033d9b4
222fd287c33d50596801163aae7251ba84502c45
4b50a9067132077e240fa67d161abb1be476df7449986cd6f98b23526188b3c0

HTTP Headers

GET /wp-content/themes/twentytwenty/assets/js/index.js?ver=1.7 HTTP/1.1
Host: naturallivingwithmona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 May 2024 04:11:12 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
Location: https://naturallivingwithmona.com/wp-content/themes/twentytwenty/assets/js/index.js?ver=1.7
Content-Length: 299
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

naturallivingwithmona.com/wp-includes/js/wp-emoji-release.min.js?ver=5.7.2

104.248.227.239

301 Moved Permanently

290 B

URL GET HTTP/1.1
naturallivingwithmona.com/wp-includes/js/wp-emoji-release.min.js?ver=5.7.2
IP
104.248.227.239:80
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type
HTML document, ASCII text
Size
290 B (290 bytes)
Hash
a54cb25c0dc3c09d012fe958ce83181f
165dced56a46be82362eb9896994b45b590bb029
cf7c78e4689e998474549b7614e3135cb2ba1dab94871a53a6df14dbe3f8ec0b

HTTP Headers

GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7.2 HTTP/1.1
Host: naturallivingwithmona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 May 2024 04:11:12 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
Location: https://naturallivingwithmona.com/wp-includes/js/wp-emoji-release.min.js?ver=5.7.2
Content-Length: 290
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

naturallivingwithmona.com/wp-includes/js/wp-embed.min.js?ver=5.7.2

104.248.227.239

282 B

URL GET
naturallivingwithmona.com/wp-includes/js/wp-embed.min.js?ver=5.7.2
IP
104.248.227.239:0
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type
HTML document, ASCII text
Size
282 B (282 bytes)
Hash
1c33d59f2340c762079a4a57b362d041
a1beb00b1c87bceecdc773f37542f0a6b2c69ffb
2915921e12b45de197e829e584d3632bc804eca744f4bb3d9a1e835a346bc6a0

HTTP Headers

GET /wp-includes/js/wp-embed.min.js?ver=5.7.2 HTTP/1.1
Host: naturallivingwithmona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 May 2024 04:11:12 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
Location: https://naturallivingwithmona.com/wp-includes/js/wp-embed.min.js?ver=5.7.2
Content-Length: 282
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

naturallivingwithmona.com/wp-content/themes/twentytwenty/print.css?ver=1.7

104.248.227.239

290 B

URL GET
naturallivingwithmona.com/wp-content/themes/twentytwenty/print.css?ver=1.7
IP
104.248.227.239:0
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type
HTML document, ASCII text
Size
290 B (290 bytes)
Hash
279d2a447ee9c648b0c6856a2e97a276
294695f765b6e75bca40269f8137482996cca75b
de8da5dc8e4c0a7cbb1e04905f889bc1ccd1a89a50caebdf9295ab00311d2ee3

HTTP Headers

GET /wp-content/themes/twentytwenty/print.css?ver=1.7 HTTP/1.1
Host: naturallivingwithmona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 May 2024 04:11:13 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
Location: https://naturallivingwithmona.com/wp-content/themes/twentytwenty/print.css?ver=1.7
Content-Length: 290
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

naturallivingwithmona.com/wp-includes/js/wp-embed.min.js?ver=5.7.2

104.248.227.239

282 B

URL GET
naturallivingwithmona.com/wp-includes/js/wp-embed.min.js?ver=5.7.2
IP
104.248.227.239:0
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type
HTML document, ASCII text
Size
282 B (282 bytes)
Hash
1c33d59f2340c762079a4a57b362d041
a1beb00b1c87bceecdc773f37542f0a6b2c69ffb
2915921e12b45de197e829e584d3632bc804eca744f4bb3d9a1e835a346bc6a0

HTTP Headers

GET /wp-includes/js/wp-embed.min.js?ver=5.7.2 HTTP/1.1
Host: naturallivingwithmona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 May 2024 04:11:13 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
Location: https://naturallivingwithmona.com/wp-includes/js/wp-embed.min.js?ver=5.7.2
Content-Length: 282
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

104.248.227.239/favicon.ico

104.248.227.239

302 Found

0 B

URL GET HTTP/1.1
104.248.227.239/favicon.ico
IP
104.248.227.239:80
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 104.248.227.239
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/bins/Hilix.x86
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Sun, 05 May 2024 04:11:13 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
X-Powered-By: PHP/7.4.20
Link: <http://naturallivingwithmona.com/wp-json/>; rel="https://api.w.org/"
X-Redirect-By: WordPress
Location: http://naturallivingwithmona.com/wp-includes/images/w-logo-blue-white-bg.png
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

naturallivingwithmona.com/wp-includes/images/w-logo-blue-white-bg.png

104.248.227.239

301 Moved Permanently

285 B

URL GET HTTP/1.1
naturallivingwithmona.com/wp-includes/images/w-logo-blue-white-bg.png
IP
104.248.227.239:80
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://104.248.227.239/bins/Hilix.x86

File type
HTML document, ASCII text
Size
285 B (285 bytes)
Hash
d74210c8a5a0ecbae5861023c2aba1e0
51079c2de116463312669db0f4124931cae5a0ac
9fd313b28f6d4e921788c9be6513f100a06cc91159be524e23cfc0554be810d2

HTTP Headers

GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: naturallivingwithmona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://104.248.227.239/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 05 May 2024 04:11:13 GMT
Server: Apache/2.4.48 (Fedora) OpenSSL/1.1.1k
Location: https://naturallivingwithmona.com/wp-includes/images/w-logo-blue-white-bg.png
Content-Length: 285
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=5.7.2

142.250.74.106

200 OK

47 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=5.7.2
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
http://104.248.227.239/bins/Hilix.x86
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
ASCII text
Size
47 kB (46796 bytes)
Hash
9abeee4ec31e36147f43fdb381c6fd4c
01cef8eadcf8e0fa6bb0b78ef064794fb5dbff15
e8cc80be6c43744ad0fa84933313cc74406e594583a351ed53963e6dbc72fcf1

HTTP Headers

GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=5.7.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://104.248.227.239/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 May 2024 04:11:12 GMT
date: Sun, 05 May 2024 04:11:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (17)

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers