| 217.12.31.3/sslvpn/SNX/INSTALL/snx_install.sh |  217.12.31.3 | 301 Moved Permanently | 5.2 kB |
URL User Request GET HTTP/1.1217.12.31.3/sslvpn/SNX/INSTALL/snx_install.sh IP217.12.31.3:443 ASN#34285 Sociedad Andaluza para el Desarrollo de las Telecomunicaciones S.A.
CertificateIssuerFNMT-RCM Subject*.juntadeandalucia.es Fingerprint6F:1E:50:6A:00:9F:75:8A:3E:E5:AA:08:5B:FB:40:60:7B:D2:F2:15 ValidityFri, 20 Sep 2024 09:10:38 GMT - Sat, 20 Sep 2025 09:10:38 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 Hash573246b4b6bbba1a025dad992da1d649 ed216cbf45eba987e8e6ae2c28a55e568a07c35b 7ea30ffbbad58385839e5365d508cfda6063d383bfd93341f2a96e7f4f223328
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sslvpn/SNX/INSTALL/snx_install.sh HTTP/1.1
Host: 217.12.31.3
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 301 Moved Permanently
Location: https://217.12.31.3/sslvpn/SNX/INSTALL/snx_install.sh
|
| 217.12.31.3/sslvpn/SNX/INSTALL/snx_install.sh | 217.12.31.3 | 200 OK | 3.3 MB |
URL User Request GET HTTP/1.1217.12.31.3/sslvpn/SNX/INSTALL/snx_install.sh IP217.12.31.3:443 ASN#34285 Sociedad Andaluza para el Desarrollo de las Telecomunicaciones S.A.
CertificateIssuerFNMT-RCM Subject*.juntadeandalucia.es Fingerprint6F:1E:50:6A:00:9F:75:8A:3E:E5:AA:08:5B:FB:40:60:7B:D2:F2:15 ValidityFri, 20 Sep 2024 09:10:38 GMT - Sat, 20 Sep 2025 09:10:38 GMT
File typePOSIX shell script executable (binary data) Size3.3 MB (3349357 bytes) Hash5189fb6cb68f94be3eda49af05a60c4a b7669a2e48e3c014ece58aee04571aadf921d926 1e34ec888fba9f27c7576c4beacb47a6221c6da56ffc9741f2e5181855fb5a25
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sslvpn/SNX/INSTALL/snx_install.sh HTTP/1.1
Host: 217.12.31.3
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 20 Jan 2025 09:54:28 GMT
Server: CPWS
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' wss: localhost:14186 www.google.com www.gstatic.com 'unsafe-inline' 'unsafe-eval'; img-src https: 'self' data:; font-src 'self' data: fonts.gstatic.com
Last-Modified: Mon, 30 Sep 2024 23:35:26 GMT
ETag: "331b6d-6235ea8ca6b80"
Accept-Ranges: bytes
Content-Length: 3349357
Vary: User-Agent
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: application/x-sh
|
0.0.0.0