IP 198.59.144.28:0
File typeHTML document, ASCII text Hashdcbc21899281962ebfb4be0f6c24bc44 6387c2ababc551840fb18a4593438465cb8939a5 1e5d628d3c8ec46db9f62dc82fa52c60d988b84f64a8ef242d7ef4e70a35b249
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: alubag.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 17 Apr 2024 21:53:08 GMT
Server: Apache
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: no-referrer-when-downgrade
Location: https://alubag.com.mx/
Content-Length: 230
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
| alubag.com.mx/10/data64_1.exe | 198.59.144.28 | 301 Moved Permanently | 0 B |
URL User Request GET HTTP/2alubag.com.mx/10/data64_1.exe IP198.59.144.28:443
CertificateIssuerLet's Encrypt Subject*.alubag.com.mx Fingerprint75:A3:2A:9A:A9:83:34:BA:AB:4F:E1:6F:57:EB:4B:DA:0F:33:D8:77 ValiditySun, 31 Mar 2024 18:48:52 GMT - Sat, 29 Jun 2024 18:48:51 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /10/data64_1.exe HTTP/1.1
Host: alubag.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
x-powered-by: PHP/8.1.27
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
strict-transport-security: max-age=31536000
x-xss-protection: 1
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
referrer-policy: no-referrer-when-downgrade
location: https://www.alubag.com.mx/10/data64_1.exe
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 21:53:05 GMT
server: Apache
X-Firefox-Spdy: h2
|
IP198.59.144.28:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: alubag.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
x-powered-by: PHP/8.1.27
x-redirect-by: WordPress
strict-transport-security: max-age=31536000
x-xss-protection: 1
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
referrer-policy: no-referrer-when-downgrade
location: https://www.alubag.com.mx/
content-length: 0
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 21:53:09 GMT
server: Apache
X-Firefox-Spdy: h2
|
| www.alubag.com.mx/10/data64_1.exe | 198.59.144.28 | 404 Not Found | 136 kB |
URL User Request GET HTTP/2www.alubag.com.mx/10/data64_1.exe IP198.59.144.28:443
CertificateIssuerLet's Encrypt Subject*.alubag.com.mx Fingerprint75:A3:2A:9A:A9:83:34:BA:AB:4F:E1:6F:57:EB:4B:DA:0F:33:D8:77 ValiditySun, 31 Mar 2024 18:48:52 GMT - Sat, 29 Jun 2024 18:48:51 GMT
Size136 kB (135787 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /10/data64_1.exe HTTP/1.1
Host: www.alubag.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
x-powered-by: PHP/8.1.27
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.alubag.com.mx/wp-json/>; rel="https://api.w.org/"
strict-transport-security: max-age=31536000
x-xss-protection: 1
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
referrer-policy: no-referrer-when-downgrade
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 21:53:18 GMT
server: Apache
X-Firefox-Spdy: h2
|
| www.alubag.com.mx/10/data64_1.exe |  0.0.0.0 | | 0 B |
URL User Request GET www.alubag.com.mx/10/data64_1.exe IP0.0.0.0:0
CertificateIssuerLet's Encrypt Subject*.alubag.com.mx Fingerprint75:A3:2A:9A:A9:83:34:BA:AB:4F:E1:6F:57:EB:4B:DA:0F:33:D8:77 ValiditySun, 31 Mar 2024 18:48:52 GMT - Sat, 29 Jun 2024 18:48:51 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /10/data64_1.exe HTTP/1.1
Host: www.alubag.com.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|