| GET 194.233.72.114/ixsyrinx.com.zip |  194.233.72.114 | 301 Moved Permanently | 169 B |
URL User Request GET HTTP/1.1194.233.72.114/ixsyrinx.com.zip IP194.233.72.114:443 ASN#141995 Contabo Asia Private Limited
CertificateIssuerLet's Encrypt Subjectapp.mcs.info.vn FingerprintD8:E8:A6:C4:5A:D9:72:30:41:0E:A7:B6:D0:A1:C0:C8:68:70:F4:8E ValidityThu, 12 Dec 2024 02:23:59 GMT - Wed, 12 Mar 2025 02:23:58 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash7aa8c3c90b85559164f65b1695c719a1 70d11b4b06a6888eb5cf5c1bd97c309de4e245dc ba65bd604e3c2e12b9f798a2926918e6b52cdcfc07ab95701c66351e32f63065
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO Dotted Quad Host ZIP Request |
GET /ixsyrinx.com.zip HTTP/1.1
Host: 194.233.72.114
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.27.3
Date: Wed, 05 Feb 2025 10:03:51 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://194.233.72.114/ixsyrinx.com.zip
|
| GET 194.233.72.114/ixsyrinx.com.zip | 194.233.72.114 | 404 Not Found | 43 B |
URL User Request GET HTTP/1.1194.233.72.114/ixsyrinx.com.zip IP194.233.72.114:443 ASN#141995 Contabo Asia Private Limited
CertificateIssuerLet's Encrypt Subjectapp.mcs.info.vn FingerprintD8:E8:A6:C4:5A:D9:72:30:41:0E:A7:B6:D0:A1:C0:C8:68:70:F4:8E ValidityThu, 12 Dec 2024 02:23:59 GMT - Wed, 12 Mar 2025 02:23:58 GMT
Hash595e88012a6521aae3e12cbebe76eb9e da3968197e7bf67aa45a77515b52ba2710c5fc34 b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET INFO Dotted Quad Host ZIP Request |
GET /ixsyrinx.com.zip HTTP/1.1
Host: 194.233.72.114
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.27.3
Date: Wed, 05 Feb 2025 10:03:54 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 43
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Content-Encoding: gzip
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
|
| GET 194.233.72.114/favicon.ico | 194.233.72.114 | 404 Not Found | 43 B |
URL GET HTTP/1.1194.233.72.114/favicon.ico IP194.233.72.114:443 ASN#141995 Contabo Asia Private Limited
Requested byhttps://194.233.72.114/ixsyrinx.com.zip CertificateIssuerLet's Encrypt Subjectapp.mcs.info.vn FingerprintD8:E8:A6:C4:5A:D9:72:30:41:0E:A7:B6:D0:A1:C0:C8:68:70:F4:8E ValidityThu, 12 Dec 2024 02:23:59 GMT - Wed, 12 Mar 2025 02:23:58 GMT
Hash595e88012a6521aae3e12cbebe76eb9e da3968197e7bf67aa45a77515b52ba2710c5fc34 b16e15764b8bc06c5c3f9f19bc8b99fa48e7894aa5a6ccdad65da49bbf564793
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 194.233.72.114
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://194.233.72.114/ixsyrinx.com.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.27.3
Date: Wed, 05 Feb 2025 10:03:54 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 43
Connection: keep-alive
Cache-Control: max-age=31536000
Content-Encoding: gzip
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
|