200 OK 1.0 kB URL User Request GET HTTP/1.1 IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 27f4a4772af709c4d1cf958df728902e
e290388b916f7fdf5ec4cacc81edc5debca81fb6
153be6a3f26ce5ec03744816201d58eefbb69fbdeffb868bc9b267e0d8ea9ab3
Analyzer Verdict Alert urlquery none Audit - Open directory
Quad9 DNS malicious Sinkholed
GET /wlc/ HTTP/1.1
Host: 66.228.43.8
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 07 Dec 2023 18:52:35 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Content-Length: 1049
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html;charset=UTF-8
66.228.43.8/icons/blank.gif
200 OK 148 B URL GET HTTP/1.1 66.228.43.8/icons/blank.gif
IP
File type GIF image data, version 89a, 20 x 22\012- data
Hash 19517fb39a31be6b8d7ccf53ad84908f
ebbcfdc6acc99f7aac3bf7fe72bc55f07f03f7e9
3cb0e54babf019703fe671a32fcc3947aab9079ec2871cf0f9639245cc12d878
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /icons/blank.gif HTTP/1.1
Host: 66.228.43.8
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://66.228.43.8/wlc/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 07 Dec 2023 18:52:36 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Last-Modified: Sat, 20 Nov 2004 21:16:24 GMT
ETag: "94-3e95722b75a00"
Accept-Ranges: bytes
Content-Length: 148
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif
66.228.43.8/icons/back.gif
200 OK 216 B URL GET HTTP/1.1 66.228.43.8/icons/back.gif
IP
File type GIF image data, version 89a, 20 x 22\012- data
Hash 4bce9846e05d3bffdfb293d47c840a8e
92cdbbab1c2c8f435301ece3d44a197315e2d988
0e9ced1019385b1101fdaa7c07d01d63aae771176a44d3df81d47b115b5128aa
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /icons/back.gif HTTP/1.1
Host: 66.228.43.8
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://66.228.43.8/wlc/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 07 Dec 2023 18:52:36 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Last-Modified: Sat, 20 Nov 2004 21:16:24 GMT
ETag: "d8-3e95722b75a00"
Accept-Ranges: bytes
Content-Length: 216
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/gif
66.228.43.8/icons/unknown.gif
200 OK 245 B URL GET HTTP/1.1 66.228.43.8/icons/unknown.gif
IP
File type GIF image data, version 89a, 20 x 22\012- data
Hash 088e8e238b79e9ea2b4371abb91b1fea
dc1cdfa814046ea64609c438e1777f55ff3aa86c
15f5fd53009f61c653aa23d91334f9d7fa2fbd325eab859b68d77a45bb6a78b8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /icons/unknown.gif HTTP/1.1
Host: 66.228.43.8
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://66.228.43.8/wlc/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 07 Dec 2023 18:52:36 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Last-Modified: Sat, 20 Nov 2004 21:16:24 GMT
ETag: "f5-3e95722b75a00"
Accept-Ranges: bytes
Content-Length: 245
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/gif
66.228.43.8/favicon.ico
200 OK 31 kB IP
File type MS Windows icon resource - 3 icons, 64x64, 32 bits/pixel, 48x48, 32 bits/pixel\012- data
Hash 6eb4a43cb64c97f76562af703893c8fd
c50c4273b9d2433c6069454f971ed6653e07c126
1d7c95c5eea00a8083a95810f902682f9e26e7fbb7876b022a403642d776d0c9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: 66.228.43.8
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://66.228.43.8/wlc/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 07 Dec 2023 18:52:36 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Last-Modified: Thu, 16 Jul 2015 15:32:32 GMT
ETag: "78ae-51affc7a4c400"
Accept-Ranges: bytes
Content-Length: 30894
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/x-icon
66.228.43.8