Report - 85.214.249.51/

Report Overview

Submitted URL
85.214.249.51/
IP
85.214.249.51
ASN
#6724 Strato AG
Submitted
2024-04-24 21:11:05
Access
public
Website Title
Homepage
Final URL
85.214.249.51/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
22

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
85.214.249.51	unknown	unknown	2016-05-25	2021-02-02	3.8 kB	442 kB	85.214.249.51

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	85.214.249.51	Sinkholed
2024-04-24	medium	85.214.249.51	Sinkholed
2024-04-24	medium	85.214.249.51	Sinkholed
2024-04-24	medium	85.214.249.51	Sinkholed
2024-04-24	medium	85.214.249.51	Sinkholed
2024-04-24	medium	85.214.249.51	Sinkholed
2024-04-24	medium	85.214.249.51	Sinkholed
2024-04-24	medium	85.214.249.51	Sinkholed
2024-04-24	medium	85.214.249.51	Sinkholed
2024-04-24	medium	85.214.249.51	Sinkholed
2024-04-24	medium	85.214.249.51	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	85.214.249.51/assets/jq.js	72 kB	2023-03-07	2024-05-03
Pretty URL 85.214.249.51/assets/jq.js IP 85.214.249.51 ASN #6724 Strato AG Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:10 Last Seen2024-05-03 23:05:24 Times Seen7243 Hash 10092eee563dec2dca82b77d2cf5a1ae 65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b e23a2a4e2d7c2b41ebcdd8ffc0679df7140eb7f52e1eebabf827a88182643c59 Loading...

	unknown	29 B	2024-04-24	2024-04-24
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 23:11:11 Last Seen2024-04-24 23:11:11 Times Seen1 Hash 6858edfd9ce05f8f4f3d0aa79c0674ac c29f28c8854486740571ecf6739f992016571143 58189e1c029f1d20caf69fde618dda181a9d07e384e90ce29fc8315a4c236771 Loading...

	85.214.249.51/	0 B	2023-03-07	2024-05-04
Pretty URL 85.214.249.51/ IP 85.214.249.51 ASN #6724 Strato AG Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-04 08:01:27 Times Seen37329193 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (11)

URL IP Response Size

85.214.249.51/

85.214.249.51

200 OK

4.1 kB

URL User Request GET HTTP/1.1
85.214.249.51/
IP
85.214.249.51:80
ASN
#6724 Strato AG

File type
HTML document, ASCII text, with CRLF line terminators
Size
4.1 kB (4132 bytes)
Hash
8546dc99bde0cf783be462b0e7aee87b
4950d496abe7b5b0c816b963501bfd8710f0a2bd
677942795fbf9c9f3a2943bc43bedaa1896bf46ad859441d22f9d06e1e04d2de

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 85.214.249.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:10:39 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 05 Apr 2015 19:11:41 GMT
ETag: "a0275-1024-512fef3925540"
Accept-Ranges: bytes
Content-Length: 4132
Connection: close
Content-Type: text/html; charset=UTF-8

85.214.249.51/assets/sf.css

85.214.249.51

200 OK

121 B

URL GET HTTP/1.1
85.214.249.51/assets/sf.css
IP
85.214.249.51:80
ASN
#6724 Strato AG

Requested by
http://85.214.249.51/

File type
ASCII text, with CRLF line terminators
Size
121 B (121 bytes)
Hash
6d76d63fc268d050d83bcd0741e314d2
bef6e81971dd54ae2566c4ff24efc9b4916519a7
4ca3a46c8067ab3461b4ed6858798391f35e178440c10d24c0de8e0b277ae2c7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/sf.css HTTP/1.1
Host: 85.214.249.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://85.214.249.51/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:10:39 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 05 Apr 2015 18:53:51 GMT
ETag: "a027f-79-512feb3cb6dc0"
Accept-Ranges: bytes
Content-Length: 121
Connection: close
Content-Type: text/css

85.214.249.51/assets/sd.css

85.214.249.51

200 OK

3.5 kB

URL GET HTTP/1.1
85.214.249.51/assets/sd.css
IP
85.214.249.51:80
ASN
#6724 Strato AG

Requested by
http://85.214.249.51/

File type
ASCII text, with CRLF line terminators
Size
3.5 kB (3527 bytes)
Hash
3e0f13645f32469717baf0e98b9a04a8
74e5ef469db87457378d672b7038abb0eeda2ad2
95be221552e81c227fc8ad8fa64b11bcd564f64587fde13d43d7e9f3a45419ee

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/sd.css HTTP/1.1
Host: 85.214.249.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://85.214.249.51/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:10:39 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 05 Apr 2015 18:53:51 GMT
ETag: "a027e-dc7-512feb3cb6dc0"
Accept-Ranges: bytes
Content-Length: 3527
Connection: close
Content-Type: text/css

85.214.249.51/assets/sc.css

85.214.249.51

200 OK

5.8 kB

URL GET HTTP/1.1
85.214.249.51/assets/sc.css
IP
85.214.249.51:80
ASN
#6724 Strato AG

Requested by
http://85.214.249.51/

File type
ISO-8859 text, with CRLF line terminators
Size
5.8 kB (5781 bytes)
Hash
2552c557972d9b76128df939b119a1d6
6317ce9e4713e1621069c4cf5dc01d03bddbed45
ef443acdf6dc54d179dfe177466b174d4e5467f8118036be62bf0a866cd09935

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/sc.css HTTP/1.1
Host: 85.214.249.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://85.214.249.51/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:10:39 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 05 Apr 2015 18:53:51 GMT
ETag: "a027c-1695-512feb3cb6dc0"
Accept-Ranges: bytes
Content-Length: 5781
Connection: close
Content-Type: text/css

85.214.249.51/assets/ssb.css

85.214.249.51

200 OK

804 B

URL GET HTTP/1.1
85.214.249.51/assets/ssb.css
IP
85.214.249.51:80
ASN
#6724 Strato AG

Requested by
http://85.214.249.51/

File type
ASCII text, with CRLF line terminators
Size
804 B (804 bytes)
Hash
d9e9f44e7538ae5072d555aeb2d560c8
48cfc0c6747af2b2b96d75d0da5f84cc954535ed
d04a449836f054be3c354f34ab761b080d9fe435580ab6e7eccbce347a084e84

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/ssb.css HTTP/1.1
Host: 85.214.249.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://85.214.249.51/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:10:39 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 05 Apr 2015 18:53:51 GMT
ETag: "a0280-324-512feb3cb6dc0"
Accept-Ranges: bytes
Content-Length: 804
Connection: close
Content-Type: text/css

85.214.249.51/assets/scal.css

85.214.249.51

200 OK

3.5 kB

URL GET HTTP/1.1
85.214.249.51/assets/scal.css
IP
85.214.249.51:80
ASN
#6724 Strato AG

Requested by
http://85.214.249.51/

File type
ASCII text, with CRLF line terminators
Size
3.5 kB (3549 bytes)
Hash
5a32ead22c4983f6a7accb296b37160e
858d6e0cb0d50d5bc85670a97ce106d795d01fb0
bbcdaf32d6a643e7ead0cb83dbaa46b0b0acb63aa531c74f6ac857d4e46a5be8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/scal.css HTTP/1.1
Host: 85.214.249.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://85.214.249.51/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:10:39 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 05 Apr 2015 18:53:51 GMT
ETag: "a027d-ddd-512feb3cb6dc0"
Accept-Ranges: bytes
Content-Length: 3549
Connection: close
Content-Type: text/css

85.214.249.51/assets/jq.js

85.214.249.51

200 OK

72 kB

URL GET HTTP/1.1
85.214.249.51/assets/jq.js
IP
85.214.249.51:80
ASN
#6724 Strato AG

Requested by
http://85.214.249.51/

File type
JavaScript source, ASCII text, with very long lines (820)
Size
72 kB (72174 bytes)
Hash
10092eee563dec2dca82b77d2cf5a1ae
65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b
e23a2a4e2d7c2b41ebcdd8ffc0679df7140eb7f52e1eebabf827a88182643c59

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/jq.js HTTP/1.1
Host: 85.214.249.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://85.214.249.51/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:10:39 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Mon, 15 Mar 2010 00:25:44 GMT
ETag: "a027b-119ee-481cbebf6b200"
Accept-Ranges: bytes
Content-Length: 72174
Connection: close
Content-Type: text/javascript

85.214.249.51/images/psdwtop.gif

85.214.249.51

200 OK

1.6 kB

URL GET HTTP/1.1
85.214.249.51/images/psdwtop.gif
IP
85.214.249.51:80
ASN
#6724 Strato AG

Requested by
http://85.214.249.51/

File type
GIF image data, version 89a, 1 x 4
Size
1.6 kB (1578 bytes)
Hash
ab2e86f4d8c2985aee1d45ff512953da
0fc65d668839775d3ba473a2f51a14daaf8e398b
e7fed9a02b8d5044cd173c625c8dbaf4eaaa59b135fdcb2705121897e4da2b8e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/psdwtop.gif HTTP/1.1
Host: 85.214.249.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://85.214.249.51/assets/sd.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:10:39 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 05 Apr 2015 18:53:51 GMT
ETag: "a028e-62a-512feb3cb6dc0"
Accept-Ranges: bytes
Content-Length: 1578
Connection: close
Content-Type: image/gif

85.214.249.51/images/psdwbot.gif

85.214.249.51

200 OK

1.6 kB

URL GET HTTP/1.1
85.214.249.51/images/psdwbot.gif
IP
85.214.249.51:80
ASN
#6724 Strato AG

Requested by
http://85.214.249.51/

File type
GIF image data, version 89a, 1 x 4
Size
1.6 kB (1578 bytes)
Hash
d0762001d2c37f154a609ce7f928701a
85a6fe3e41118f7541103b2283ab975c9dfba9dd
e8bc9c6d9d88c25021ec429af00324b9c35713c11566c55719aa14ea3e37fc97

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/psdwbot.gif HTTP/1.1
Host: 85.214.249.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://85.214.249.51/assets/sd.css
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:10:39 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 05 Apr 2015 18:53:51 GMT
ETag: "a028d-62a-512feb3cb6dc0"
Accept-Ranges: bytes
Content-Length: 1578
Connection: close
Content-Type: image/gif

85.214.249.51/images/s2dlogo.jpg

85.214.249.51

200 OK

346 kB

URL GET HTTP/1.1
85.214.249.51/images/s2dlogo.jpg
IP
85.214.249.51:80
ASN
#6724 Strato AG

Requested by
http://85.214.249.51/

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1280x350, components 3
Size
346 kB (346096 bytes)
Hash
f4a065690fd2a547acc3bc3cf70acd44
e4d9a76c81c3fbc996c5667adb4a92c421b95db9
5ad0bcee0aa6aa3acdb4bb5c0ecd19a78aae42d0716f1cbf48b562a63ce6645c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/s2dlogo.jpg HTTP/1.1
Host: 85.214.249.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://85.214.249.51/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 24 Apr 2024 21:10:39 GMT
Server: Apache/2.2.15 (CentOS)
Last-Modified: Sun, 05 Apr 2015 19:10:50 GMT
ETag: "a0292-547f0-512fef0882280"
Accept-Ranges: bytes
Content-Length: 346096
Connection: close
Content-Type: image/jpeg

85.214.249.51/favicon.ico

85.214.249.51

404 Not Found

288 B

URL GET HTTP/1.1
85.214.249.51/favicon.ico
IP
85.214.249.51:80
ASN
#6724 Strato AG

Requested by
http://85.214.249.51/

File type
HTML document, ASCII text
Size
288 B (288 bytes)
Hash
f2fa361d4fef547d96cb574158ccb285
4cfbecd2f1d0c2d66bbcc53cb00d0419bab3f166
5a4ba5d63829afa8e2b5cd8e36d4bc91223c2109a141d3fa4b85d23d7378f9db

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 85.214.249.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://85.214.249.51/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Wed, 24 Apr 2024 21:10:40 GMT
Server: Apache/2.2.15 (CentOS)
Content-Length: 288
Connection: close
Content-Type: text/html; charset=iso-8859-1

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers