Report - 45.120.184.125/2096/100034/index.htm

Report Overview

Submitted URL
45.120.184.125/2096/100034/index.htm
IP
45.120.184.125
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone
Submitted
2023-01-30 10:56:55
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
3
Threat Detection Systems
50

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	35.81.158.34
45.120.184.125	unknown	2015-09-03T15:10:13Z	2022-07-05T08:45:35Z	8.7 kB	627 kB	45.120.184.125
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	50 kB	34.120.237.76
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2.4 kB	6.2 kB	23.36.76.226
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-01-30 10:56:58	high	45.120.184.125	Client IP	ET WEB_CLIENT DRIVEBY EXE Embeded in Page Likely Evil M1
2023-01-30 10:56:58	high	45.120.184.125	Client IP	ET MALWARE PE EXE or DLL Windows file download Text
2023-01-30 10:56:58	high	45.120.184.125	Client IP	ET WEB_CLIENT Generic Attempted Executable Drop via VBScript

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed
2023-01-30	medium	45.120.184.125	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	45.120.184.125/2096/public/default/default/js/jquery.dialog.js	38 kB	2023-03-13	2023-03-29
Pretty URL 45.120.184.125/2096/public/default/default/js/jquery.dialog.js IP 45.120.184.125 ASN #136800 Sun Network Hong Kong Limited - HongKong Backbone Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:20:04 Last Seen2023-03-29 21:57:07 Times Seen2 Hash e47aa95c0fb70377f0b71d75d5d4a856 b0167a6e2dbc35d19c83febd5e5bdd075784c666 afd601210a977eafacf0c4e2f908ab93937e945169ff9081b6977f58442173e7 Loading...

	45.120.184.125/2096/public/default/default/js/jquery.js	96 kB	2023-03-13	2023-03-29
Pretty URL 45.120.184.125/2096/public/default/default/js/jquery.js IP 45.120.184.125 ASN #136800 Sun Network Hong Kong Limited - HongKong Backbone Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:20:04 Last Seen2023-03-29 21:57:07 Times Seen2 Hash eca17a260eee29914423ccb8e5aae166 35c90bee65978140d7b4ac23a19c110bb663d2b6 8a35f0efecb0590ad9e0571e5909da6b20f2181695a42fafcb98c476d81a37ee Loading...

	45.120.184.125/2096/100034/index.htm	1.1 kB	2023-03-13	2023-03-29
Pretty URL 45.120.184.125/2096/100034/index.htm IP 45.120.184.125 ASN #136800 Sun Network Hong Kong Limited - HongKong Backbone Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:20:04 Last Seen2023-03-29 21:57:07 Times Seen2 Hash 699b921c5e2aacb0123802671749f8d5 f444d290c8296b891b0c3adba2ddb9e04f350b06 2177a2c5a6a9a37aff550bbed076e3ffb0e1aced048420c5cc5c38dc5bd254dc Loading...

	45.120.184.125/2096/public/default/default/Scripts/jquery.dialog.js	1.3 kB	2023-03-13	2023-03-29
Pretty URL 45.120.184.125/2096/public/default/default/Scripts/jquery.dialog.js IP 45.120.184.125 ASN #136800 Sun Network Hong Kong Limited - HongKong Backbone Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:20:04 Last Seen2023-03-29 21:57:07 Times Seen2 Hash cae8e347e3d4513d1b8fbf9fa09bccf2 4d31ef02547f0f43e310fb2d17919602f50358a5 2d4efe85cbd945ee94d3fda42add9e2143d896abecd24ffd096b8649cdeff62e Loading...

	45.120.184.125/2096/public/default/default/js/kxbdmarquee.js	1.4 kB	2023-03-13	2023-03-29
Pretty URL 45.120.184.125/2096/public/default/default/js/kxbdmarquee.js IP 45.120.184.125 ASN #136800 Sun Network Hong Kong Limited - HongKong Backbone Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 12:20:04 Last Seen2023-03-29 21:57:07 Times Seen2 Hash c82cdc2ea8e3c1acfdc14508f203f7aa df9e2f6d5d79a6f5ca90be8671c021d5b8ce5a09 77cc3dc3e64e60e866f8baeb51325e13d8d6deca85873c6836b452feca32145c Loading...

HTTP Transactions (43)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6452
Expires: Mon, 30 Jan 2023 12:44:17 GMT
Date: Mon, 30 Jan 2023 10:56:45 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5eb7c9bc996a0ff420e58af45526f053
8c2614832b8efe1c9da0bbd465d6f3f172d95a9e
c085cf277dd0429fe15e4a4bce5595636e9f2204d5a8e77220f8bf88adf4068f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4189
Expires: Mon, 30 Jan 2023 12:06:34 GMT
Date: Mon, 30 Jan 2023 10:56:45 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
09ee4b0fe6cf4ca5ed31b24452338d00
7e62b6e20f0d4737f4a8d94f9818a0883027839e
56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10371
Expires: Mon, 30 Jan 2023 13:49:36 GMT
Date: Mon, 30 Jan 2023 10:56:45 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 10:35:42 GMT
content-type: application/json
age: 1263
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: L2b5+hryeiPvtqf6TZWuSdFQBeqX9yQsIYnrh9m5Dtg5/az7wVoIyiJxVOY44Jo0OGNP+H+NAWw=
x-amz-request-id: T93RVX95DE93EZVD
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 10:21:45 GMT
age: 2100
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 10:56:45 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 10:49:04 GMT
age: 461
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5085
Expires: Mon, 30 Jan 2023 12:21:30 GMT
Date: Mon, 30 Jan 2023 10:56:45 GMT
Connection: keep-alive

push.services.mozilla.com/

35.81.158.34

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.81.158.34:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qt2GDvkom946FhesB68qgw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HBQs+1V6w/u8iVkePPdYreKREZU=

45.120.184.125/2096/public/default/default/css/index.css

45.120.184.125

200 OK

5.7 kB

URL HTTP/1.1
45.120.184.125/2096/public/default/default/css/index.css
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
Unicode text, UTF-8 text, with very long lines (332), with CRLF line terminators
Size
5.7 kB (5747 bytes)
Hash
d8e289ff6538c5be236a73ec939b25a0
47eb356db4a8026d4f1365080b4fbed11a809b1e
f8aadbe93bc1686f4879b2fe65859a0aefd698e86f988227cd1d6b78e265c632

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/css/index.css HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Mon, 27 Sep 2021 15:21:29 GMT
Accept-Ranges: bytes
ETag: "ffb93458b3b3d71:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:36 GMT
Content-Length: 5747

45.120.184.125/2096/public/default/default/css/dialog.css

45.120.184.125

200 OK

2.4 kB

URL HTTP/1.1
45.120.184.125/2096/public/default/default/css/dialog.css
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
2.4 kB (2448 bytes)
Hash
e6b3265ec0262069dedc814e6032e5f0
7b19c162eac9391add82aa75c8849e81382684ad
24fbb995ef30a2c3dcb66ae7e60c3f54146dfd8ea1ab1e40ad33b1a75b361696

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/css/dialog.css HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Mon, 27 Sep 2021 15:21:29 GMT
Accept-Ranges: bytes
ETag: "80222458b3b3d71:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:36 GMT
Content-Length: 2448

45.120.184.125/2096/public/default/default/css/common.css

45.120.184.125

200 OK

4.2 kB

URL HTTP/1.1
45.120.184.125/2096/public/default/default/css/common.css
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
4.2 kB (4160 bytes)
Hash
ae9e8ec2b2ec6941c03d5a1ca0f28a8d
a9acaa685de9e88fa1e3e7fb6450475e22535301
0f27043b08d423b7b2fdb4c7e9e8a68000c955bf1282b91b2bd9e0b554f5dab5

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/css/common.css HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Mon, 27 Sep 2021 15:21:29 GMT
Accept-Ranges: bytes
ETag: "62a43558b3b3d71:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:36 GMT
Content-Length: 4160

45.120.184.125/static.bshare.cn/b/buttonLite.js

45.120.184.125

404 Not Found

63 B

URL HTTP/1.1
45.120.184.125/static.bshare.cn/b/buttonLite.js
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
Unicode text, UTF-8 text, with no line terminators
Size
63 B (63 bytes)
Hash
a2b3ceb2591c94dbac7b35519de0e8cf
b5079b99c8e8d5d0f3d232345cfa30e2ea6a3730
cc8a65d84ecebb6325c954c778fd0add5e61cfb288c89226b31125b35e30528d

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /static.bshare.cn/b/buttonLite.js HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:37 GMT
Content-Length: 63

45.120.184.125/static.bshare.cn/b/bshareC0.js

45.120.184.125

404 Not Found

63 B

URL HTTP/1.1
45.120.184.125/static.bshare.cn/b/bshareC0.js
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
Unicode text, UTF-8 text, with no line terminators
Size
63 B (63 bytes)
Hash
a2b3ceb2591c94dbac7b35519de0e8cf
b5079b99c8e8d5d0f3d232345cfa30e2ea6a3730
cc8a65d84ecebb6325c954c778fd0add5e61cfb288c89226b31125b35e30528d

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /static.bshare.cn/b/bshareC0.js HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:37 GMT
Content-Length: 63

45.120.184.125/2096/public/default/default/Css/main.css

45.120.184.125

200 OK

4.6 kB

URL HTTP/1.1
45.120.184.125/2096/public/default/default/Css/main.css
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
4.6 kB (4602 bytes)
Hash
fb459bc90a9a4d59806612d5c09a1d9d
849764fb2ddaf2d1848566bebe3dfdb6c6fa8b6e
a1154e646f2b387910f71978698d0a152c440d311143eda4bdb38da73be50d23

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/Css/main.css HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Mon, 27 Sep 2021 15:21:29 GMT
Accept-Ranges: bytes
ETag: "32ea3958b3b3d71:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:36 GMT
Content-Length: 4602

45.120.184.125/2096/public/default/default/Scripts/jquery.dialog.js

45.120.184.125

200 OK

938 B

URL HTTP/1.1
45.120.184.125/2096/public/default/default/Scripts/jquery.dialog.js
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (331), with CRLF line terminators
Size
938 B (938 bytes)
Hash
25fbc237fe433162ce92c5ec6fbc06e0
f1af82819f43aa6a800ad35f2ef08ce80af5c09b
be11bcef9e2b96b20154256b0db49697177caed9121f24f71024d4dd47273420

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/Scripts/jquery.dialog.js HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Mon, 27 Sep 2021 14:58:14 GMT
Accept-Ranges: bytes
ETag: "508ba918b0b3d71:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:37 GMT
Content-Length: 938

45.120.184.125/2096/public/default/default/Scripts/layer.js

45.120.184.125

200 OK

938 B

URL HTTP/1.1
45.120.184.125/2096/public/default/default/Scripts/layer.js
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (331), with CRLF line terminators
Size
938 B (938 bytes)
Hash
25fbc237fe433162ce92c5ec6fbc06e0
f1af82819f43aa6a800ad35f2ef08ce80af5c09b
be11bcef9e2b96b20154256b0db49697177caed9121f24f71024d4dd47273420

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/Scripts/layer.js HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Mon, 27 Sep 2021 14:58:14 GMT
Accept-Ranges: bytes
ETag: "1e16a918b0b3d71:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:37 GMT
Content-Length: 938

45.120.184.125/2096/public/default/default/js/kxbdmarquee.js

45.120.184.125

200 OK

733 B

URL HTTP/1.1
45.120.184.125/2096/public/default/default/js/kxbdmarquee.js
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
ASCII text, with CRLF line terminators
Size
733 B (733 bytes)
Hash
7c37187af3c44d03b20f994eb7473d8a
c370efddbf8f5ddcbb325269d6a8e32a49e5eabb
653b09367550a61605cb67e7eb0a7737659ebf1a9a78edc3f103fb57d7724e87

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/js/kxbdmarquee.js HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Mon, 27 Sep 2021 15:21:29 GMT
Accept-Ranges: bytes
ETag: "6c153858b3b3d71:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:37 GMT
Content-Length: 733

45.120.184.125/2096/public/default/default/js/jquery.dialog.js

45.120.184.125

200 OK

10 kB

URL HTTP/1.1
45.120.184.125/2096/public/default/default/js/jquery.dialog.js
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
Unicode text, UTF-8 text
Size
10 kB (10514 bytes)
Hash
9071a34cb943c291443179daf806c649
f5e22a7e27cc95a42c7fe760f83e93d18a0f6f7e
d14ed8745b7345d234fdf9e696215cb46a28fb3d5714908ff0da7d2bc5cd27fc

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/js/jquery.dialog.js HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Mon, 27 Sep 2021 15:21:29 GMT
Accept-Ranges: bytes
ETag: "80222458b3b3d71:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:37 GMT
Content-Length: 10514

45.120.184.125/2096/public/default/default/js/jquery.js

45.120.184.125

200 OK

43 kB

URL HTTP/1.1
45.120.184.125/2096/public/default/default/js/jquery.js
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
ASCII text, with very long lines (32603)
Size
43 kB (43046 bytes)
Hash
e4d01672d227f78db7e8756587695a91
95a2ff61dafd391a2ebb0d4e6fe234f5e4286ac0
006c20bba8ac270e2b601f0a02359796b3c4df0e9dd74962d6c8e22e464b1f5c

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/js/jquery.js HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Mon, 27 Sep 2021 14:58:16 GMT
Accept-Ranges: bytes
ETag: "1e893e1ab0b3d71:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:36 GMT
Content-Length: 43046

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14540
Expires: Mon, 30 Jan 2023 14:59:07 GMT
Date: Mon, 30 Jan 2023 10:56:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14540
Expires: Mon, 30 Jan 2023 14:59:07 GMT
Date: Mon, 30 Jan 2023 10:56:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14540
Expires: Mon, 30 Jan 2023 14:59:07 GMT
Date: Mon, 30 Jan 2023 10:56:47 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11568 bytes)
Hash
b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 2e85f75e-ab9d-4d45-adad-7313950a9647
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSWbxGwnoAMFejw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d117-68f1a9e71a07a0453311fd32;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 06:49:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dbz3wXGNaetf6xvRE98rshyHy-FVfDo8co-4VDL0a4Qe3E4U8A82Og==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 23:25:02 GMT
age: 41505
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.5 kB (8464 bytes)
Hash
fe31ee140c2fd62e616c8a1edc9e78bb
7aa5fbdc8156514770ae620e81f1afef1c77890f
799af4bf9fa07ed27ebdc9d1a3344ee8a2b6529f076c263495b93290c47a1cc4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8464
x-amzn-requestid: bf2cf356-ebb1-469b-ba35-a79bb009cad6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj3qGeboAMFzNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e697-7c96841f52b6a96d1b0eaf34;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UNub7Gd4S0ogn5EJhtJVu8q1qML5_4eL2lIPQXiAuXy_q-XiR4s-5w==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:55:21 GMT
etag: "7aa5fbdc8156514770ae620e81f1afef1c77890f"
content-type: image/jpeg
age: 46886
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.7 kB (7679 bytes)
Hash
3e04b9eaf7449828136ad59e4c9d69f1
b820be4ed885dcf288eb6460c57e1fa7b1c7c476
df75cf7183d401a19655aab025d08ad2c498573c88b32e9b258d951d2993b936

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3bb7921c-8aaf-40cd-bf87-43903c3f1a74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7679
x-amzn-requestid: 0c7983d5-6040-44e9-b394-21c3784702a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEtEfHoAMFaNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-54c55dbd09ca642048af8916;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Wx-qjsrMLYpLmE-8QmpR46BeRySbUGL2Rrr6LqhEQ8jaEEj_6Aj0qg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:52:09 GMT
age: 47078
etag: "b820be4ed885dcf288eb6460c57e1fa7b1c7c476"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e1c93b4-807b-47ea-82fe-50d8216b163c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.6 kB (6646 bytes)
Hash
f49153c1aade8aa30bc6c84db4fa09d7
5cce4e085c87e7fbe82907694a36a91cc1bc9bfc
3285916959352e77cdbea34515dad3b3a0315b74bca7f45a8e5a2de4661203e2

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e1c93b4-807b-47ea-82fe-50d8216b163c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6646
x-amzn-requestid: c8a7d4b9-1a13-41c1-8391-853f03f3150c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fbvRsHiaIAMF4Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d49271-634529cc6844e70829b5750f;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 03:11:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lp-314neKbpq8Kr5i_4i0fsRDVAIruvwGr8gHq-x45yXJtbesqRAsA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 04:09:50 GMT
age: 24417
etag: "5cce4e085c87e7fbe82907694a36a91cc1bc9bfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

3.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bfbdca6-432c-4f19-887a-3165827e4bc6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
3.7 kB (3678 bytes)
Hash
e8d680cbaee5ef3e7b8e09b174ed6ecf
6651a0d3041920798240ea67e827c3d458769fa9
4c74e8ebff95e67da678248d3dc1d3f42d98c8a0d33d54d9d2bde36314c9f952

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bfbdca6-432c-4f19-887a-3165827e4bc6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 3678
x-amzn-requestid: 21cd1ae3-b769-418a-b7f8-5efa486db859
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEvE-RIAMFpmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-6998009c289996563d78616a;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Or8AGZIZTzP_EuRHaCfCNrdPQIw2OQW37MKvOTFQIQgO0h18ct0-Xg==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:34:10 GMT
age: 44557
etag: "6651a0d3041920798240ea67e827c3d458769fa9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb138c2a-a013-4652-92e0-920b0ab6d6fa.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.9 kB (5934 bytes)
Hash
8fce79ef35b4c943c2b60d5092d17b6f
d29ce982633d0cc50b2a968ea22893d92b9663e3
297e951e4ab09c3465deb222cbe8f66579f9154d4e8806eec3a52350e577fded

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb138c2a-a013-4652-92e0-920b0ab6d6fa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5934
x-amzn-requestid: 75aeb64a-1ba1-4349-84f3-b94aabeccc9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhklyFUMIAMF3nA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7be-56d6fb7b337769986c5c567b;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RKiUEsflAz1PfeT8AvkmfNGxTkGO_0Ajo5hgnRIvo0qdiVUA0wD46Q==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:34:18 GMT
age: 44549
etag: "d29ce982633d0cc50b2a968ea22893d92b9663e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

45.120.184.125/2096/public/default/default/Picture/footer_02.png

45.120.184.125

200 OK

4.4 kB

URL HTTP/1.1
45.120.184.125/2096/public/default/default/Picture/footer_02.png
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
PNG image data, 33 x 55, 8-bit/color RGBA, non-interlaced\012- data
Size
4.4 kB (4412 bytes)
Hash
2087981eeae72e2578cd7e1b0d93d18e
467d1d31d3920c1fca7bd2fd8e3df012cb9f6f25
c76a61e2b081e7daa7459c2a848aaf6d7303972f3d36960b44ca1d09a183fb7b

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/Picture/footer_02.png HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Mon, 27 Sep 2021 14:55:27 GMT
Accept-Ranges: bytes
ETag: "648739b5afb3d71:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:38 GMT
Content-Length: 4412

45.120.184.125/static.bshare.cn/b/buttonLite.js

45.120.184.125

404 Not Found

63 B

URL HTTP/1.1
45.120.184.125/static.bshare.cn/b/buttonLite.js
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
Unicode text, UTF-8 text, with no line terminators
Size
63 B (63 bytes)
Hash
a2b3ceb2591c94dbac7b35519de0e8cf
b5079b99c8e8d5d0f3d232345cfa30e2ea6a3730
cc8a65d84ecebb6325c954c778fd0add5e61cfb288c89226b31125b35e30528d

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /static.bshare.cn/b/buttonLite.js HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:38 GMT
Content-Length: 63

45.120.184.125/2096/public/default/default/Picture/footer_03.png

45.120.184.125

200 OK

7.2 kB

URL HTTP/1.1
45.120.184.125/2096/public/default/default/Picture/footer_03.png
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
PNG image data, 50 x 55, 8-bit/color RGBA, non-interlaced\012- data
Size
7.2 kB (7156 bytes)
Hash
def9782ba895b07daee79abddde4924c
bbca41da77e298e98a7c4ffeb79e3ff1f35544ed
908664fa2464db66ed15443dfa8494b15c76c826ad5b3e63013fc20dfee2500e

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/Picture/footer_03.png HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Mon, 27 Sep 2021 14:55:26 GMT
Accept-Ranges: bytes
ETag: "bdd98b5afb3d71:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:38 GMT
Content-Length: 7156

45.120.184.125/2096/public/default/default/Images/pass-bg.jpg

45.120.184.125

200 OK

8.7 kB

URL HTTP/1.1
45.120.184.125/2096/public/default/default/Images/pass-bg.jpg
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 356x232, components 3\012- data
Size
8.7 kB (8706 bytes)
Hash
346efdb47702f779da1c6a69b7982276
0629b6b7eb6dba25b582edcb2fc44fa15421da97
a1848a42468e570f883fe16be126e92be98030572e3183cddd69c110d77f5c6d

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/Images/pass-bg.jpg HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/public/default/default/Css/main.css

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Mon, 27 Sep 2021 14:55:54 GMT
Accept-Ranges: bytes
ETag: "10c682c5afb3d71:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:38 GMT
Content-Length: 8706

45.120.184.125/static.bshare.cn/b/bshareC0.js

45.120.184.125

404 Not Found

63 B

URL HTTP/1.1
45.120.184.125/static.bshare.cn/b/bshareC0.js
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
Unicode text, UTF-8 text, with no line terminators
Size
63 B (63 bytes)
Hash
a2b3ceb2591c94dbac7b35519de0e8cf
b5079b99c8e8d5d0f3d232345cfa30e2ea6a3730
cc8a65d84ecebb6325c954c778fd0add5e61cfb288c89226b31125b35e30528d

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /static.bshare.cn/b/bshareC0.js HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:38 GMT
Content-Length: 63

45.120.184.125/2096/public/default/default/Images/down-bgr.jpg

45.120.184.125

200 OK

13 kB

URL HTTP/1.1
45.120.184.125/2096/public/default/default/Images/down-bgr.jpg
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 285x323, components 3\012- data
Size
13 kB (12804 bytes)
Hash
5afacab9773178b62cbc76f9e307021e
06634a86e2295aed3b8c5578fc0596db6a4d0d8f
8c0b97979b12f94fdf61d70cc46dd533f53bdc55e2d61722727b34408fd202c7

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/Images/down-bgr.jpg HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/public/default/default/Css/main.css

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Mon, 27 Sep 2021 14:55:54 GMT
Accept-Ranges: bytes
ETag: "f599aac5afb3d71:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:38 GMT
Content-Length: 12804

45.120.184.125/2096/public/default/default/Images/logo.png

45.120.184.125

200 OK

44 kB

URL HTTP/1.1
45.120.184.125/2096/public/default/default/Images/logo.png
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
PNG image data, 175 x 135, 8-bit/color RGBA, non-interlaced\012- data
Size
44 kB (43729 bytes)
Hash
0124cfecccc1a4e976d86a5935968d43
a2f1f8886e4f38c0759eca38e9816a4eb01abf81
6b29b5a67ffba62a254467328bfa0a7279aaf64a6f65f6e088c44a0fe9a96aed

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/Images/logo.png HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/public/default/default/css/common.css

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Mon, 27 Sep 2021 14:55:47 GMT
Accept-Ranges: bytes
ETag: "e07b35c1afb3d71:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:38 GMT
Content-Length: 43729

45.120.184.125/2096/public/default/default/Images/zan.png

45.120.184.125

200 OK

10 kB

URL HTTP/1.1
45.120.184.125/2096/public/default/default/Images/zan.png
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
PNG image data, 158 x 148, 8-bit/color RGBA, non-interlaced\012- data
Size
10 kB (10051 bytes)
Hash
99a90d1b26d5dd7e2eccf77bb0c5b07c
83540b79341f09ff208b346deb566c17d33e6a80
76cd64e4f5e15f3622193fcee5bd5234b36195b73c7a1392090d9411fc654ab8

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/Images/zan.png HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/public/default/default/Css/main.css

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Mon, 27 Sep 2021 14:55:53 GMT
Accept-Ranges: bytes
ETag: "8b409fc4afb3d71:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:38 GMT
Content-Length: 10051

45.120.184.125/2096/public/default/default/Images/idx-btm-bg.jpg

45.120.184.125

200 OK

523 B

URL HTTP/1.1
45.120.184.125/2096/public/default/default/Images/idx-btm-bg.jpg
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 3x3, components 3\012- data
Size
523 B (523 bytes)
Hash
2ef91802f6b0fc87ec2beaf1caaed6f3
846de634beece0483e0d29c4447ffb8af853e5fa
71fda191051dcf02a6c16b624519e8c575c23be62e00e7276286f77737f9a143

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/Images/idx-btm-bg.jpg HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/public/default/default/css/common.css

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Mon, 27 Sep 2021 14:55:47 GMT
Accept-Ranges: bytes
ETag: "3d44ec1afb3d71:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:38 GMT
Content-Length: 523

45.120.184.125/2096/public/default/default/Images/icon-float-right.png

45.120.184.125

200 OK

768 B

URL HTTP/1.1
45.120.184.125/2096/public/default/default/Images/icon-float-right.png
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
PNG image data, 17 x 114, 8-bit/color RGBA, non-interlaced\012- data
Size
768 B (768 bytes)
Hash
179e0ea7d9925cb603f8d50e6a3387de
3ce582d3618b7cbd2c452cee938a8c0b63fc5f5b
fb916475e79e3745fdc69518d8f52a222839735a1f9a711d49a81b93b1f1bbfa

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/Images/icon-float-right.png HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/public/default/default/css/common.css

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Mon, 27 Sep 2021 14:55:46 GMT
Accept-Ranges: bytes
ETag: "bf3d97c0afb3d71:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:38 GMT
Content-Length: 768

45.120.184.125/2096/public/default/default/Images/btn-idx-left.jpg

45.120.184.125

200 OK

40 kB

URL HTTP/1.1
45.120.184.125/2096/public/default/default/Images/btn-idx-left.jpg
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2018:07:31 12:34:42], baseline, precision 8, 285x309, components 3\012- data
Size
40 kB (40055 bytes)
Hash
a9d4721c883562bf87a9d84b5587975d
8e307f087991f5de6bcf18131901efb1d1b972e3
64ac9c10a44661413a91f890e97bbd176a248addfff9e49907b3b65e63f96b97

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/Images/btn-idx-left.jpg HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/public/default/default/css/common.css

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Mon, 27 Sep 2021 14:55:45 GMT
Accept-Ranges: bytes
ETag: "1020e0bfafb3d71:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:38 GMT
Content-Length: 40055

45.120.184.125/2096/public/default/default/Images/user-bg.jpg

45.120.184.125

200 OK

162 kB

URL HTTP/1.1
45.120.184.125/2096/public/default/default/Images/user-bg.jpg
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1344, components 3\012- data
Size
162 kB (161806 bytes)
Hash
affed2fee4d3fb0fd9890355551392a6
a2dff1d97a0a938494ff1750772bef6843982911
1c716696f20bca7f00a2ee7dcb2082a53037941c71369e5c8207bb54da50b5a0

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /2096/public/default/default/Images/user-bg.jpg HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/public/default/default/Css/main.css

HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Mon, 27 Sep 2021 14:55:57 GMT
Accept-Ranges: bytes
ETag: "dea3dc7afb3d71:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:38 GMT
Content-Length: 161806

45.120.184.125/favicon.ico

45.120.184.125

404 Not Found

63 B

URL HTTP/1.1
45.120.184.125/favicon.ico
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
Unicode text, UTF-8 text, with no line terminators
Size
63 B (63 bytes)
Hash
a2b3ceb2591c94dbac7b35519de0e8cf
b5079b99c8e8d5d0f3d232345cfa30e2ea6a3730
cc8a65d84ecebb6325c954c778fd0add5e61cfb288c89226b31125b35e30528d

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.120.184.125/2096/100034/index.htm

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:42 GMT
Content-Length: 63

45.120.184.125/2096/100034/index.htm

45.120.184.125

200 OK

257 kB

URL HTTP/1.1
45.120.184.125/2096/100034/index.htm
IP
45.120.184.125:0
ASN
#136800 Sun Network Hong Kong Limited - HongKong Backbone

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (48206), with CRLF line terminators
Size
257 kB (257332 bytes)
Hash
d7d94ea508f0b7972b50411cc3d23d07
331ed74291543b21b98b567e9fc38c80c293cd0f
5fa93a948d5d8c8bad085aa5fdedd38c35ace047c0c8d215b79c5483f8eb0918

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

NIDS	Severity	Alert
suricata	high	ET WEB_CLIENT DRIVEBY EXE Embeded in Page Likely Evil M1
suricata	high	ET MALWARE PE EXE or DLL Windows file download Text
suricata	high	ET WEB_CLIENT Generic Attempted Executable Drop via VBScript

HTTP Headers

GET /2096/100034/index.htm HTTP/1.1
Host: 45.120.184.125
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Mon, 01 Nov 2021 03:02:46 GMT
Accept-Ranges: bytes
ETag: "04f8f2ccced71:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Mon, 30 Jan 2023 10:57:36 GMT
Content-Length: 257332

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (43)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type