Report - 42.193.241.116:10886/.txt

Report Overview

Submitted URL
42.193.241.116:10886/.txt
IP
42.193.241.116
ASN
#45090 Shenzhen Tencent Computer Systems Company Limited
Submitted
2024-05-04 19:20:47
Access
public
Website Title
42.193.241.116:10886/.txt
Final URL
42.193.241.116:10886/.txt
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
42.193.241.116:10886	unknown	unknown	No data	No data	790 B	999 B	42.193.241.116

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	42.193.241.116	Sinkholed
2024-05-04	medium	42.193.241.116	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

42.193.241.116:10886/.txt

42.193.241.116

200 OK

1 B

URL User Request GET HTTP/1.1
42.193.241.116:10886/.txt
IP
42.193.241.116:10886
ASN
#45090 Shenzhen Tencent Computer Systems Company Limited

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /.txt HTTP/1.1
Host: 42.193.241.116:10886
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/plain
Content-Length: 1
Accept-Ranges: bytes
Server: HFS 2.4.0 RC7
Set-Cookie: HFS_SID_=LG5cyQt5kAAAADT9lzuPw; path=/; HttpOnly
ETag: ef297c9606f461849b43e7414604ef5c
Last-Modified: Sat, 02 Dec 2023 13:38:37 GMT
Content-Disposition: filename*=UTF-8''.txt; filename=.txt

42.193.241.116:10886/favicon.ico

42.193.241.116

200 OK

576 B

URL GET HTTP/1.1
42.193.241.116:10886/favicon.ico
IP
42.193.241.116:10886
ASN
#45090 Shenzhen Tencent Computer Systems Company Limited

Requested by
http://42.193.241.116:10886/.txt

File type
GIF image data, version 89a, 16 x 16
Size
576 B (576 bytes)
Hash
9c3180a65d1ac3066055353e8b8b693e
15031554825c0aabbfdb1ce2c2756c479a7295d6
a37b97bab4af022ffea89ae28cba0d7a098bb2dadca53b770b16a2973f112845

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 42.193.241.116:10886
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://42.193.241.116:10886/.txt
Cookie: HFS_SID_=LG5cyQt5kAAAADT9lzuPw
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 576
Accept-Ranges: bytes
Server: HFS 2.4.0 RC7

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers