Report - 104.160.2.96:5052/login

Report Overview

Submitted URL
104.160.2.96:5052/login
IP
104.160.2.96
ASN
#41564 Orion Network Limited
Submitted
2024-04-24 16:45:49
Access
public
Website Title
安全入口校验失败
Final URL
104.160.2.96:5052/login
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
104.160.2.96:5052	unknown	unknown	No data	No data	850 B	5.5 kB	104.160.2.96

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	104.160.2.96	Sinkholed
2024-04-24	medium	104.160.2.96	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

104.160.2.96:5052/login

104.160.2.96

595 B

URL
104.160.2.96:5052/login
IP
104.160.2.96:0
ASN
#41564 Orion Network Limited

File type
HTML document, Unicode text, UTF-8 text
Size
595 B (595 bytes)
Hash
c0f6fa157dd10f673c626b4021a99e7c
337a93f1ce5fa80510ac746aa93c502955558b13
d7e237020c0d43c48debf299c7b31b981149591824c8260b0b3b11bb45571fe6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login HTTP/1.1
Host: 104.160.2.96:5052
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Content-Length: 595
Server: nginx
Content-Encoding: gzip
Vary: Accept-Encoding
Set-Cookie: fd4f6f088e74d2b98ed249c8ed2247a2=8d7522bd-3a95-489a-9158-351f70fb6562.4kHzVky2OAtpcQKN5oG8_AMbHVg; Expires=Fri, 24-May-2024 16:45:24 GMT; HttpOnly; Path=/
Date: Wed, 24 Apr 2024 16:45:24 GMT

104.160.2.96:5052/favicon.ico

104.160.2.96

4.3 kB

URL
104.160.2.96:5052/favicon.ico
IP
104.160.2.96:0
ASN
#41564 Orion Network Limited

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
9637ebd168435de51fea8193d2d89e39
0f009f633949102f0e2c5b99202eba3788c92811
96af531fe305f2dc19d9c87a39957b3ebc87a1804d6adf8a2887738f877016cc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 104.160.2.96:5052
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://104.160.2.96:5052/login
Cookie: fd4f6f088e74d2b98ed249c8ed2247a2=8d7522bd-3a95-489a-9158-351f70fb6562.4kHzVky2OAtpcQKN5oG8_AMbHVg
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Length: 4286
Content-Type: image/vnd.microsoft.icon
Last-Modified: Tue, 04 Dec 2018 02:25:00 GMT
Cache-Control: public, max-age=43200
Expires: Thu, 25 Apr 2024 04:45:24 GMT
ETag: "1543890300.0-4286-1917325444"
Date: Wed, 24 Apr 2024 16:45:24 GMT
Server: nginx

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers