Report - 14.226.233.61/

Report Overview

Submitted URL
14.226.233.61/
IP
14.226.233.61
ASN
#45899 VNPT Corp
Submitted
2024-05-04 22:05:25
Access
public
Website Title
iGate GW040-H
Final URL
14.226.233.61/cgi-bin/login.asp
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
20

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
14.226.233.61	unknown	unknown	2023-04-25	2023-04-25	4.6 kB	86 kB	14.226.233.61

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	14.226.233.61	Sinkholed
2024-05-04	medium	14.226.233.61	Sinkholed
2024-05-04	medium	14.226.233.61	Sinkholed
2024-05-04	medium	14.226.233.61	Sinkholed
2024-05-04	medium	14.226.233.61	Sinkholed
2024-05-04	medium	14.226.233.61	Sinkholed
2024-05-04	medium	14.226.233.61	Sinkholed
2024-05-04	medium	14.226.233.61	Sinkholed
2024-05-04	medium	14.226.233.61	Sinkholed
2024-05-04	medium	14.226.233.61	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	14.226.233.61/cgi-bin/login.asp	4.4 kB	2024-02-23	2024-05-05
Pretty URL 14.226.233.61/cgi-bin/login.asp IP 14.226.233.61 ASN #45899 VNPT Corp Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-23 12:59:42 Last Seen2024-05-05 00:05:31 Times Seen2 Hash 5786db95e46fef1795b2de5e42de4102 5ca972f6260f4c36b964567f6046b0b8088a1588 b8fdea21d002da154451403ace21a4555a82e73148148aa56868587baaf291cc Loading...

	14.226.233.61/cgi-bin/login.asp	247 B	2024-02-23	2024-05-05
Pretty URL 14.226.233.61/cgi-bin/login.asp IP 14.226.233.61 ASN #45899 VNPT Corp Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-23 12:59:42 Last Seen2024-05-05 00:05:31 Times Seen2 Hash 292724cd330cb87ca3e81c76f647047d 889996061f2358969c1ed3cbbe6397c8483f7bc4 2a0e88a88f90e8e1cf39e0898b4c63262dd49a0963e7383a8885903a526768a0 Loading...

	unknown	8 B	2023-04-17	2024-05-05
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-17 20:55:36 Last Seen2024-05-05 00:05:31 Times Seen10 Hash 975af5dc53e28f22f05846b34a515cd2 bc447e43a4f4c6d49bb1ec1870b172ef0c176769 094e5b6f0c19b7c5aa2236a24106b8486b89ff246bd961777a450a745ed59de6 Loading...

HTTP Transactions (10)

URL IP Response Size

14.226.233.61/style.css

14.226.233.61

200 OK

11 kB

URL GET HTTP/1.0
14.226.233.61/style.css
IP
14.226.233.61:443
ASN
#45899 VNPT Corp

Requested by
https://14.226.233.61/cgi-bin/login.asp
Certificate
IssuerVNPTT
Subjectwww.example.com
Fingerprint6C:7A:C3:50:35:91:55:F3:2F:B8:8B:D9:8D:C4:56:34:8E:D6:D8:FB
ValidityThu, 06 Aug 2020 02:49:56 GMT - Sat, 13 Jul 2120 02:49:56 GMT

File type
ASCII text
Size
11 kB (11305 bytes)
Hash
160e7c4682e86dec40ace0b0636e1d75
d73f7bb87287c283e402a44d156eb288f9df7524
6a12c157e06f94e50fe672606e004fab6bab8540b52612c2420ad0e959d2a67e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /style.css HTTP/1.1
Host: 14.226.233.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://14.226.233.61/cgi-bin/login.asp
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sun, 05 May 2024 05:05:15 GMT
Server: Boa/0.94.13
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Content-Length: 11305
Last-Modified: Wed, 02 Dec 2020 09:30:38 GMT
Content-Type: text/css

14.226.233.61/font/Roboto-Regular-webfont.woff

14.226.233.61

200 OK

21 kB

URL GET HTTP/1.0
14.226.233.61/font/Roboto-Regular-webfont.woff
IP
14.226.233.61:443
ASN
#45899 VNPT Corp

Requested by
https://14.226.233.61/cgi-bin/login.asp
Certificate
IssuerVNPTT
Subjectwww.example.com
Fingerprint6C:7A:C3:50:35:91:55:F3:2F:B8:8B:D9:8D:C4:56:34:8E:D6:D8:FB
ValidityThu, 06 Aug 2020 02:49:56 GMT - Sat, 13 Jul 2120 02:49:56 GMT

File type
Web Open Font Format, TrueType, length 20924, version 1.0
Size
21 kB (20924 bytes)
Hash
b3be96cbbfd0ff1f3ba3c7c2f58c1441
21d716deb3ae1705a697cfcb2993e70bc6886c7b
7838acd6a8bd0836972523ffbe20c9745d03b07d89968d9cc9bc57f46e567895

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /font/Roboto-Regular-webfont.woff HTTP/1.1
Host: 14.226.233.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://14.226.233.61/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sun, 05 May 2024 05:05:15 GMT
Server: Boa/0.94.13
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Content-Length: 20924
Last-Modified: Wed, 02 Dec 2020 09:30:38 GMT
Content-Type: text/plain

14.226.233.61/font/Roboto-Bold-webfont.woff

14.226.233.61

200 OK

21 kB

URL GET HTTP/1.0
14.226.233.61/font/Roboto-Bold-webfont.woff
IP
14.226.233.61:443
ASN
#45899 VNPT Corp

Requested by
https://14.226.233.61/cgi-bin/login.asp
Certificate
IssuerVNPTT
Subjectwww.example.com
Fingerprint6C:7A:C3:50:35:91:55:F3:2F:B8:8B:D9:8D:C4:56:34:8E:D6:D8:FB
ValidityThu, 06 Aug 2020 02:49:56 GMT - Sat, 13 Jul 2120 02:49:56 GMT

File type
Web Open Font Format, TrueType, length 21320, version 1.0
Size
21 kB (21320 bytes)
Hash
388938f6332e5e07466341f141effc6c
e892c7c0b1b78635f6623558115169c872448639
a629b5570d16e1450d7621907a85b07392f2959b2792145864ac84fc0dbe7307

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /font/Roboto-Bold-webfont.woff HTTP/1.1
Host: 14.226.233.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://14.226.233.61/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sun, 05 May 2024 05:05:17 GMT
Server: Boa/0.94.13
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Content-Length: 21320
Last-Modified: Wed, 02 Dec 2020 09:30:38 GMT
Content-Type: text/plain

14.226.233.61/font/Roboto-Medium-webfont.woff

14.226.233.61

200 OK

21 kB

URL GET HTTP/1.0
14.226.233.61/font/Roboto-Medium-webfont.woff
IP
14.226.233.61:443
ASN
#45899 VNPT Corp

Requested by
https://14.226.233.61/cgi-bin/login.asp
Certificate
IssuerVNPTT
Subjectwww.example.com
Fingerprint6C:7A:C3:50:35:91:55:F3:2F:B8:8B:D9:8D:C4:56:34:8E:D6:D8:FB
ValidityThu, 06 Aug 2020 02:49:56 GMT - Sat, 13 Jul 2120 02:49:56 GMT

File type
Web Open Font Format, TrueType, length 21184, version 1.0
Size
21 kB (21184 bytes)
Hash
d3e528d9ca58d216b29710f06b339f9d
ae38d096283f2e5bef815ce0d8dd267b0833ca4f
0c743a880dc0cfd9028f74d7b23db7131ff230f0927129418de147be4f556031

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /font/Roboto-Medium-webfont.woff HTTP/1.1
Host: 14.226.233.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://14.226.233.61/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Date: Sun, 05 May 2024 05:05:18 GMT
Server: Boa/0.94.13
Cache-Control: no-cache
Pragma: no-cache
Expires: 0
Content-Length: 21184
Last-Modified: Wed, 02 Dec 2020 09:30:38 GMT
Content-Type: text/plain

14.226.233.61/english.gif

0.0.0.0

0 B

URL GET
14.226.233.61/english.gif
IP
0.0.0.0:0
ASN
#0

Requested by
https://14.226.233.61/cgi-bin/login.asp
Certificate
IssuerVNPTT
Subjectwww.example.com
Fingerprint6C:7A:C3:50:35:91:55:F3:2F:B8:8B:D9:8D:C4:56:34:8E:D6:D8:FB
ValidityThu, 06 Aug 2020 02:49:56 GMT - Sat, 13 Jul 2120 02:49:56 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /english.gif HTTP/1.1
Host: 14.226.233.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://14.226.233.61/cgi-bin/login.asp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

14.226.233.61/favicon.ico

0.0.0.0

0 B

URL GET
14.226.233.61/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://14.226.233.61/cgi-bin/login.asp
Certificate
IssuerVNPTT
Subjectwww.example.com
Fingerprint6C:7A:C3:50:35:91:55:F3:2F:B8:8B:D9:8D:C4:56:34:8E:D6:D8:FB
ValidityThu, 06 Aug 2020 02:49:56 GMT - Sat, 13 Jul 2120 02:49:56 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 14.226.233.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://14.226.233.61/cgi-bin/login.asp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

14.226.233.61/banner_GW040-H.gif

0.0.0.0

0 B

URL GET
14.226.233.61/banner_GW040-H.gif
IP
0.0.0.0:0
ASN
#0

Requested by
https://14.226.233.61/cgi-bin/login.asp
Certificate
IssuerVNPTT
Subjectwww.example.com
Fingerprint6C:7A:C3:50:35:91:55:F3:2F:B8:8B:D9:8D:C4:56:34:8E:D6:D8:FB
ValidityThu, 06 Aug 2020 02:49:56 GMT - Sat, 13 Jul 2120 02:49:56 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /banner_GW040-H.gif HTTP/1.1
Host: 14.226.233.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://14.226.233.61/cgi-bin/login.asp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

14.226.233.61/cgi-bin/login.asp

14.226.233.61

200 OK

11 kB

URL User Request GET HTTP/1.0
14.226.233.61/cgi-bin/login.asp
IP
14.226.233.61:443
ASN
#45899 VNPT Corp

Certificate
IssuerVNPTT
Subjectwww.example.com
Fingerprint6C:7A:C3:50:35:91:55:F3:2F:B8:8B:D9:8D:C4:56:34:8E:D6:D8:FB
ValidityThu, 06 Aug 2020 02:49:56 GMT - Sat, 13 Jul 2120 02:49:56 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
11 kB (10594 bytes)
Hash
520292d4576a3ff17afbea791e6fc5d8
377de08816cdca503498f135bfe00d536f1cfc20
eab5908ac5b4b193f89355ec04a32cad305f5bf634742176b3006332a7b3fa46

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cgi-bin/login.asp HTTP/1.1
Host: 14.226.233.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://14.226.233.61/cgi-bin/index.asp
Cookie: SESSIONID=513eb6b3
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 200 OK
Content-type: text/html;charset=utf-8

14.226.233.61/lan3.gif

0.0.0.0

0 B

URL GET
14.226.233.61/lan3.gif
IP
0.0.0.0:0
ASN
#0

Requested by
https://14.226.233.61/cgi-bin/login.asp
Certificate
IssuerVNPTT
Subjectwww.example.com
Fingerprint6C:7A:C3:50:35:91:55:F3:2F:B8:8B:D9:8D:C4:56:34:8E:D6:D8:FB
ValidityThu, 06 Aug 2020 02:49:56 GMT - Sat, 13 Jul 2120 02:49:56 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /lan3.gif HTTP/1.1
Host: 14.226.233.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://14.226.233.61/cgi-bin/login.asp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

14.226.233.61/vietnamese.gif

0.0.0.0

0 B

URL GET
14.226.233.61/vietnamese.gif
IP
0.0.0.0:0
ASN
#0

Requested by
https://14.226.233.61/cgi-bin/login.asp
Certificate
IssuerVNPTT
Subjectwww.example.com
Fingerprint6C:7A:C3:50:35:91:55:F3:2F:B8:8B:D9:8D:C4:56:34:8E:D6:D8:FB
ValidityThu, 06 Aug 2020 02:49:56 GMT - Sat, 13 Jul 2120 02:49:56 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /vietnamese.gif HTTP/1.1
Host: 14.226.233.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://14.226.233.61/cgi-bin/login.asp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL GET HTTP/1.0

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.0

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.0

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.0

IP

ASN

Requested by

Certificate