4.8 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1671), with CRLF, CR line terminators
Hash bb03db05dc0c2fe07b999b666d5f9ebc
132a3b033d1529435c3c3090848c624be2e8870f
c6c5e4f6d7b4dc01dcc2aa994d81d58e6d8df99ea9583376330483cec3396366
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Fri, 05 May 2023 00:46:27 GMT
Accept-Ranges: bytes
ETag: "80732a6eb7ed91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:24 GMT
Content-Length: 4814
4.8 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1671), with CRLF, CR line terminators
Hash bb03db05dc0c2fe07b999b666d5f9ebc
132a3b033d1529435c3c3090848c624be2e8870f
c6c5e4f6d7b4dc01dcc2aa994d81d58e6d8df99ea9583376330483cec3396366
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Fri, 05 May 2023 00:46:27 GMT
Accept-Ranges: bytes
ETag: "80732a6eb7ed91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:24 GMT
Content-Length: 4814
141.11.212.141/css/HituxCMSTurbo/style.css
200 OK 26 kB URL GET HTTP/1.1 141.11.212.141/css/HituxCMSTurbo/style.css
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 884d91454939c489b59837cbaefc695d
2859d87f20040c442e082a27adb16a1af32fce2c
170393ad4a2036062717939601b34679da93cfa918c8af52d6f9cf380f14f643
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /css/HituxCMSTurbo/style.css HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Thu, 15 Jun 2017 02:58:57 GMT
Accept-Ranges: bytes
ETag: "c481eb5483e5d21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:24 GMT
Content-Length: 26334
141.11.212.141/js/focusslide.js
200 OK 11 kB URL GET HTTP/1.1 141.11.212.141/js/focusslide.js
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 9a2e0aa4d11ccc939a1f8a30a3af6c6d
a31f1ca3c549f4770d40636412d5f5cd4594d4b6
be94ad952b23a3116eff00ab7c33fb26de863608e08528c46289a53c409cb3e5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/focusslide.js HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Mon, 01 Aug 2016 06:19:19 GMT
Accept-Ranges: bytes
ETag: "14360a3bcebd11:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:24 GMT
Content-Length: 10570
141.11.212.141/js/index.js
200 OK 16 kB URL GET HTTP/1.1 141.11.212.141/js/index.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (11043), with CRLF line terminators
Hash d84af853b321729aaf28611bec3c74b2
29af010091aaae3c6520290a97249824a9f18946
fc0dd81e3adb12bab1d5cf678499a02eefef524d3fb8c92e1e76ec000549918a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/index.js HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Mon, 25 Jul 2016 03:44:30 GMT
Accept-Ranges: bytes
ETag: "b4675cd926e6d11:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:24 GMT
Content-Length: 16045
141.11.212.141/JS/jquery.lazyload.js
200 OK 7.0 kB URL GET HTTP/1.1 141.11.212.141/JS/jquery.lazyload.js
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 46e3b26339f598b06dd97618671f6d17
b5496623d789a250749358e6b5a9fee11e218c2f
fe0f4c8f95a345feccbc7e8ed17c3a6e3700a5aa0d8fd5e0d747e68aae18c5f4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /JS/jquery.lazyload.js HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Wed, 22 Jun 2016 07:42:50 GMT
Accept-Ranges: bytes
ETag: "2c659aad59ccd11:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:24 GMT
Content-Length: 6977
141.11.212.141/js/functions.js
200 OK 16 kB URL GET HTTP/1.1 141.11.212.141/js/functions.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (11042), with CRLF line terminators
Hash fb08fb60df0bf9ae78c1eeca3aa01798
fc5c0b055e147430563f35af51a2b6d71b2858e8
8d437ed9c0c1f7e0b5a19fa583bd1772e9885a87da4ffd437d3e9d3d1d99f61f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/functions.js HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Fri, 26 Jan 2018 20:54:28 GMT
Accept-Ranges: bytes
ETag: "8c657fdbe796d31:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:24 GMT
Content-Length: 15974
141.11.212.141/css/HituxCMSTurbo/common.css
200 OK 18 kB URL GET HTTP/1.1 141.11.212.141/css/HituxCMSTurbo/common.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (366), with CRLF line terminators
Hash 182cc56a16a17511db731500dca3dcb9
409a4ad5d9d2ca473769de7f0247221d884962a7
dafafb9d1f0b2eee2605dc47ff1d904d392b05401b0882e9cc2080b2949bf5f5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /css/HituxCMSTurbo/common.css HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Sat, 10 Jun 2017 05:04:50 GMT
Accept-Ranges: bytes
ETag: "08cff16a7e1d21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:24 GMT
Content-Length: 17681
141.11.212.141/images/iepng/iepngfix_tilebg.js
200 OK 4.3 kB URL GET HTTP/1.1 141.11.212.141/images/iepng/iepngfix_tilebg.js
IP
File type ASCII text, with CRLF line terminators
Hash 2700a811fcca690548a5c67e982ca336
fc1634ea45a05b9e68e8c949a1cdca89a9a593ca
63945981e420fbf85b33dc09fbb878963ff5e66be0d824285bd2524335c345cc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/iepng/iepngfix_tilebg.js HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sat, 03 Oct 2009 02:05:46 GMT
Accept-Ranges: bytes
ETag: "0b945ce43ca1:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:24 GMT
Content-Length: 4345
141.11.212.141/js/h.js
200 OK 327 B IP
File type ISO-8859 text, with CRLF line terminators
Hash 33694fd10fc0334e10eb6fcc1d49e584
6576e4b3c4a16a63d0f6b384f844fea6c92cf479
30a577c48a3887d4fb576cc4c6a8e2daa8ba580430dc8a269c2c6b903dee76fc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/h.js HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Fri, 18 Jan 2013 05:46:48 GMT
Accept-Ranges: bytes
ETag: "94c931353ff5cd1:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:24 GMT
Content-Length: 327
141.11.212.141/js/HituxScrollTop.js
200 OK 1.0 kB URL GET HTTP/1.1 141.11.212.141/js/HituxScrollTop.js
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 275fcca8af4f90479a1a0688376c6fe3
5e8ab40780336975f6cba2a4e703307639b49e44
2036bac2dee1509ce7b8a36a6cea4dae3a2fd34543fc329be61132765fdbe9e5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/HituxScrollTop.js HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Sat, 10 Jun 2017 20:43:31 GMT
Accept-Ranges: bytes
ETag: "70c48e382ae2d21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:24 GMT
Content-Length: 1004
141.11.212.141/js/ServiceCenter.js
200 OK 21 B URL GET HTTP/1.1 141.11.212.141/js/ServiceCenter.js
IP
File type Unicode text, UTF-8 (with BOM) text, with no line terminators
Hash d0241d0ddc200e148f0ac83f837d65b5
a12076ee6503658f2f175bfa942b6d7830ccb783
f6b1f50e644fa20435a3539ff1e5c7ae6f863c123852869cb882cd2380186d15
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/ServiceCenter.js HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Thu, 10 Jan 2019 18:14:00 GMT
Accept-Ranges: bytes
ETag: "a69afe4210a9d41:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:24 GMT
Content-Length: 21
141.11.212.141/js/jquery.min.js
200 OK 94 kB URL GET HTTP/1.1 141.11.212.141/js/jquery.min.js
IP
File type ASCII text, with very long lines (65482), with CRLF line terminators
Hash e1288116312e4728f98923c79b034b67
8b6babff47b8a9793f37036fd1b1a3ad41d38423
ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/jquery.min.js HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Wed, 22 Jun 2016 07:42:40 GMT
Accept-Ranges: bytes
ETag: "5c7191a759ccd11:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:24 GMT
Content-Length: 93637
141.11.212.141/images/up_images/202271820515.png
200 OK 18 kB URL GET HTTP/1.1 141.11.212.141/images/up_images/202271820515.png
IP
File type PNG image data, 617 x 377, 8-bit/color RGBA, non-interlaced\012- data
Hash 99707c3581ce04d67aa379ac75cbedc0
fe6442acf3fd3ad6ba39c23513161f4079c235a5
7b1aaf9a33dd9539605473749b50875bee814e4382afbae758a8902367ca62c9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/up_images/202271820515.png HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Mon, 18 Jul 2022 12:51:05 GMT
Accept-Ranges: bytes
ETag: "cfd2f4aa59ad81:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 18447
141.11.212.141/images/left.jpg
200 OK 909 B URL GET HTTP/1.1 141.11.212.141/images/left.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 25x38, components 3\012- data
Hash 9e3528e9dc5e9f8c199fb01ba5370cb0
8ff1ac3fc281c4323267731ad96cd9d971a88b01
b119ce0653c2d9f3bcdc58caaf38e58a1bb0d1685c2bfeab713555aaa4378623
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/left.jpg HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Thu, 21 Jul 2016 21:36:47 GMT
Accept-Ranges: bytes
ETag: "9e46eefb97e3d11:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 909
141.11.212.141/images/up_images/201769142828.jpg
200 OK 12 kB URL GET HTTP/1.1 141.11.212.141/images/up_images/201769142828.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x186, components 3\012- data
Hash 9889e63d56a23f0f47126149e60d7741
0a3a813186d74c81168a21190e079e46686d9a4c
19df5517baf9daafa000592ac59cbe5b061de486784344575af8c052fd00555c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/up_images/201769142828.jpg HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 09 Jun 2017 21:28:28 GMT
Accept-Ranges: bytes
ETag: "2ea3a25567e1d21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 12098
141.11.212.141/images/up_images/201769104340.png
200 OK 9.2 kB URL GET HTTP/1.1 141.11.212.141/images/up_images/201769104340.png
IP
File type PNG image data, 399 x 62, 8-bit/color RGBA, non-interlaced\012- data
Hash 6b64f1fc516f2725ada5ed239e80e44e
01f931aac9ca28261af02391d4573f4b6adeab71
77c5858752bb5f8772405cb3f3137482280d631f414ca0956867f64a91d3e120
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/up_images/201769104340.png HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 09 Jun 2017 17:43:40 GMT
Accept-Ranges: bytes
ETag: "f24d8dee47e1d21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 9226
141.11.212.141/images/HituxCMSTurbo/search_bg.gif
200 OK 801 B URL GET HTTP/1.1 141.11.212.141/images/HituxCMSTurbo/search_bg.gif
IP
File type GIF image data, version 89a, 298 x 36\012- data
Hash 3b439a5905a6aff3c6839a68ab4d9b0f
9060110357338a3d112ebafb2c6b65a2d32d453e
d6d78f0ee2835c9c78cbd2ed4d51ed86204415ff7ef12ad71e5ad5974e6e230a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/HituxCMSTurbo/search_bg.gif HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/css/HituxCMSTurbo/common.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Wed, 18 Nov 2015 06:15:00 GMT
Accept-Ranges: bytes
ETag: "6a8ac074c821d11:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 801
141.11.212.141/images/HituxCMSTurbo/curent.jpg
200 OK 9.3 kB URL GET HTTP/1.1 141.11.212.141/images/HituxCMSTurbo/curent.jpg
IP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:08:17 11:54:07], progressive, precision 8, 30x50, components 3\012- data
Hash 397094c5226ef234d8ea8129b6e76eae
3a96dc96dfc0ece7c74a3934775520fddbde935b
e401e7647d206a0fad2ce1bda1aeeb8a2da72b2f82b94e0e3f0241c20e49df39
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/HituxCMSTurbo/curent.jpg HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/css/HituxCMSTurbo/common.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 17 Aug 2016 18:54:07 GMT
Accept-Ranges: bytes
ETag: "9677cbbb8f8d11:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 9273
141.11.212.141/images//HituxCMSTurbo/grey.png
200 OK 443 B URL GET HTTP/1.1 141.11.212.141/images//HituxCMSTurbo/grey.png
IP
File type PNG image data, 12 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash abdb286a62e7714ac537163384660850
c81a63b161ed75a743a6979160fff59dd02bc4a1
bc815806f00289b25644f3718e13eded12d1953366adf84d2518b7efe0fb9db9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images//HituxCMSTurbo/grey.png HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/css/HituxCMSTurbo/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Sat, 11 Aug 2012 20:11:39 GMT
Accept-Ranges: bytes
ETag: "d6f09784fd77cd1:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 443
141.11.212.141/images/up_images/20170613204958055805.jpg
200 OK 102 kB URL GET HTTP/1.1 141.11.212.141/images/up_images/20170613204958055805.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 614x535, components 3\012- data
Size 102 kB (101592 bytes)
Hash 0d703ab702ccf9f87a15772bb090a283
6b6a5cf0a296ae0e015d46da496927665f8a452b
e3cdf1fc239ed2f0b9ab6c976a16d2d2f19bd193b2a94bb8a6b8fe78163836a8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/up_images/20170613204958055805.jpg HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 14 Jun 2017 03:49:44 GMT
Accept-Ranges: bytes
ETag: "28c19a42c1e4d21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 101592
141.11.212.141/images/HituxCMSTurbo/darkblue.png
200 OK 583 B URL GET HTTP/1.1 141.11.212.141/images/HituxCMSTurbo/darkblue.png
IP
File type PNG image data, 12 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash 00fefaa9c70fe3b2e6f4b5a98620bee8
8ee6ff5b04b2bd7d821e8f4c50101a11d322f21e
6e2f3eecdba64f5cd069cc92dc160e9b4e4aec1491619a646afad7bc4cf5ae00
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/HituxCMSTurbo/darkblue.png HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/css/HituxCMSTurbo/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Sat, 11 Aug 2012 20:11:39 GMT
Accept-Ranges: bytes
ETag: "f23ea684fd77cd1:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 583
141.11.212.141/images/HituxCMSTurbo/item_bg1.png
200 OK 404 B URL GET HTTP/1.1 141.11.212.141/images/HituxCMSTurbo/item_bg1.png
IP
File type PNG image data, 8 x 282, 8-bit/color RGB, interlaced\012- data
Hash 7d7605480e874b110a189d605f322306
4369ca0a05c5750196559b2b9b999e1b0d16e2f5
64f12fc423c02640526036e02fc2e8fa4d7252869de8e5d0ea9acb698738b2aa
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/HituxCMSTurbo/item_bg1.png HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/css/HituxCMSTurbo/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 05 Sep 2013 22:58:10 GMT
Accept-Ranges: bytes
ETag: "a0126f648baace1:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 404
141.11.212.141/images/up_images/222333444.jpg
200 OK 50 kB URL GET HTTP/1.1 141.11.212.141/images/up_images/222333444.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1120x500, components 3\012- data
Hash 1849e7d5968a02af1a01851b2ef83acd
4cab66d6de2778ca7acba3fffb4d9b18c62120a8
34fd15c3380b43faa48f5cf0856e5abcf608bb2a5a30d67dfc58d0a6f327aee3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/up_images/222333444.jpg HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Mon, 17 Jul 2017 05:53:44 GMT
Accept-Ranges: bytes
ETag: "1a42cbcc1fed21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 49954
141.11.212.141/images/up_images/20176814146.png
200 OK 10 kB URL GET HTTP/1.1 141.11.212.141/images/up_images/20176814146.png
IP
File type PNG image data, 256 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash a164cdad2269e53868d095ee19f5ead4
60e4ff8771054f9cd51822a5ee2321a59e24c3de
fc763b98135d921211dda353fb66551162a9c548cb3291d83bdc805bf4a49a42
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/up_images/20176814146.png HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 08 Jun 2017 08:41:46 GMT
Accept-Ranges: bytes
ETag: "448d581033e0d21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 10163
141.11.212.141/images/up_images/201769233153.jpg
200 OK 107 kB URL GET HTTP/1.1 141.11.212.141/images/up_images/201769233153.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 978x687, components 3\012- data
Size 107 kB (107337 bytes)
Hash cadfa502921f4d135e70a5b9ad2a6b5b
b349bb70147b9e0acfd0e573c0a62f233b7e611c
fab72e0484b58552491de2a84dce255cb9904f1d7a8c874b16d72ed1aa2cecb2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/up_images/201769233153.jpg HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Sat, 10 Jun 2017 06:31:53 GMT
Accept-Ranges: bytes
ETag: "bcf6c13fb3e1d21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 107337
141.11.212.141/images/HituxCMSTurbo/item_button.png
200 OK 4.5 kB URL GET HTTP/1.1 141.11.212.141/images/HituxCMSTurbo/item_button.png
IP
File type PNG image data, 144 x 30, 8-bit/color RGBA, interlaced\012- data
Hash 7d11c1dd76fdb8c761d101fc5d7e40a5
74ada169745739627a362270c834d0167de1203b
7220f8fca601d22666058f6aea452f0c3b043b9b3fac751633ba99eed648865f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/HituxCMSTurbo/item_button.png HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/css/HituxCMSTurbo/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 17 Aug 2016 07:59:51 GMT
Accept-Ranges: bytes
ETag: "9c43ed545df8d11:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 4490
141.11.212.141/images/up_images/201768211215.png
200 OK 6.9 kB URL GET HTTP/1.1 141.11.212.141/images/up_images/201768211215.png
IP
File type PNG image data, 256 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash e5108fda6232a220e93cda81041f6b22
c114597379ba13e5a312b3fe4771c3dd12d560ef
5fc78e4656596bf6b5f37a124275496f634549b1a9331075ff62c4f387998cc5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/up_images/201768211215.png HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 09 Jun 2017 04:12:15 GMT
Accept-Ranges: bytes
ETag: "8e271694d6e0d21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 6876
141.11.212.141/images/up_images/201768212143.png
200 OK 5.9 kB URL GET HTTP/1.1 141.11.212.141/images/up_images/201768212143.png
IP
File type PNG image data, 256 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 47fb0b2e4350a21a4e1d3b002d2ce222
d34bf5c5bc6ae34189e9ef09ecbeec26347145c8
11b511f3d31b92d678268a0a894f73b7393819c862e1b18ba36f6c38f4b1a857
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/up_images/201768212143.png HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 09 Jun 2017 04:21:43 GMT
Accept-Ranges: bytes
ETag: "de8f1ee6d7e0d21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 5891
141.11.212.141/images/up_images/20176821940.png
200 OK 7.8 kB URL GET HTTP/1.1 141.11.212.141/images/up_images/20176821940.png
IP
File type PNG image data, 256 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 91aee02de4825bf42c0a715adbc80c5b
6dd7a936fe8bdec99231cbf9e298f365bf9275ee
0afe7241c2b5006f60ad49865ca4063ef4065d2c64d6fc4830cd17e44017c6b2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/up_images/20176821940.png HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 09 Jun 2017 04:09:40 GMT
Accept-Ranges: bytes
ETag: "3ef59f37d6e0d21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 7766
141.11.212.141/images/right.jpg
200 OK 891 B URL GET HTTP/1.1 141.11.212.141/images/right.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 24x37, components 3\012- data
Hash 407ad1ff955ed1382f8e9aab064f56de
4badb7600c19f08b8d95a8405185a990b9ad3612
a7a4b2b624194dde8a9d4f702030d16c9414aacd6b9662e9a0c9749a70ffc599
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/right.jpg HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Thu, 21 Jul 2016 21:36:47 GMT
Accept-Ranges: bytes
ETag: "f23019fc97e3d11:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 891
141.11.212.141/images/up_images/20176703117.jpg
200 OK 30 kB URL GET HTTP/1.1 141.11.212.141/images/up_images/20176703117.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 415x200, components 3\012- data
Hash d1e4801be7362db567793a9ac1fe7f2b
9fd2ef5396432e30e3d7f16cfb11501367c1e655
64b9962695dcc12f325afc482cfa43e779a00db427401e18d593303f76d0dbc6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/up_images/20176703117.jpg HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 07 Jun 2017 07:31:17 GMT
Accept-Ranges: bytes
ETag: "d87ed8c60dfd21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 30421
141.11.212.141/images/HituxCMSTurbo/btn.gif
200 OK 229 B URL GET HTTP/1.1 141.11.212.141/images/HituxCMSTurbo/btn.gif
IP
File type GIF image data, version 89a, 30 x 10\012- data
Hash 6fcf42060c6c45f89650d575fed4dd61
5911e58ecf16eb8bedf4c8843e7cc7fd30a21c5c
f2ce804777a745697f903c771be6e632741715b8757f1a71a876a49dad1c3476
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/HituxCMSTurbo/btn.gif HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/css/HituxCMSTurbo/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Wed, 17 Aug 2016 07:22:24 GMT
Accept-Ranges: bytes
ETag: "78dff61958f8d11:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 229
141.11.212.141/images/up_images/2012521212111.jpg
200 OK 38 kB URL GET HTTP/1.1 141.11.212.141/images/up_images/2012521212111.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 484x290, components 3\012- data
Hash 3333ee806c2ec9976c555965f552443d
156e5f6ae2666f53382f85ec27a9aad1fc181975
c1992bb7d189ba4a576a210f40be64d2c28fbd34256a0c87b54446582650ae4f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/up_images/2012521212111.jpg HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Wed, 04 Dec 2013 18:39:50 GMT
Accept-Ranges: bytes
ETag: "eeb6373720f1ce1:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 37805
141.11.212.141/images/QRCode.png
200 OK 27 kB URL GET HTTP/1.1 141.11.212.141/images/QRCode.png
IP
File type PNG image data, 210 x 210, 8-bit/color RGB, non-interlaced\012- data
Hash 064454e26344d2aebdb905eab0197144
8497afa20951e3060755e132433e9db19516f2b4
859d45581973e79f6d1fadc0431b7db03ec2ded9e7e94baf1f8321ecfc186ae5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/QRCode.png HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/css/HituxCMSTurbo/common.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Sat, 10 Jun 2017 03:29:50 GMT
Accept-Ranges: bytes
ETag: "4a962bd199e1d21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 27051
141.11.212.141/images/side-icon02.png
200 OK 490 kB URL GET HTTP/1.1 141.11.212.141/images/side-icon02.png
IP
File type PNG image data, 23 x 12, 8-bit/color RGBA, non-interlaced\012- data
Size 490 kB (490098 bytes)
Hash 8126d5fc9d8203e4f6aac068366800bc
96736c12f545ec34dcc4060e1c08bf15636b6ac1
fcc42ae12ce1566489ed73dbfb17e2da2f228c1a243f56a074c74f41d5de8cb4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/side-icon02.png HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/css/HituxCMSTurbo/common.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 14 Jan 2015 19:52:52 GMT
Accept-Ranges: bytes
ETag: "0c254ae3330d01:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 490098
141.11.212.141/images/side-icon01.png
200 OK 490 kB URL GET HTTP/1.1 141.11.212.141/images/side-icon01.png
IP
File type PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data
Size 490 kB (490110 bytes)
Hash 0176d23bc0adcc8d62eb93a57ce7b842
91e664e01afdb2fb13ae2258885afcf23e642228
d20b99862ae3908c5291e6e34794ce3a5ea82f0c50e10e77db4091ab5beb0d42
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/side-icon01.png HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/css/HituxCMSTurbo/common.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 14 Jan 2015 19:52:52 GMT
Accept-Ranges: bytes
ETag: "0c254ae3330d01:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 490110
141.11.212.141/favicon.ico
200 OK 318 B URL GET HTTP/1.1 141.11.212.141/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel\012- data
Hash e2cb6315f0fcb0064b0d3f328797f30e
5044f4162c5c5c583a65a6c756652b42412b9462
5cf34eb1356b355bad0c92e8e574228faf7aec0f59ea720e86407e9bf3e78887
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: 141.11.212.141
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/x-icon
Last-Modified: Wed, 14 Jun 2017 21:07:55 GMT
Accept-Ranges: bytes
ETag: "8087ab4a52e5d21:0"
Server: Microsoft-IIS/8.5
Date: Fri, 01 Dec 2023 21:09:25 GMT
Content-Length: 318
hm.baidu.com/hm.js?b3f5146e5b1edacdc9e40410135942f4
200 OK 11 kB URL GET HTTP/1.1 hm.baidu.com/hm.js?b3f5146e5b1edacdc9e40410135942f4
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type ASCII text, with very long lines (619)
Hash 7f4074367cba4bee0800322a8b0be4b8
ae8c1b88b0de9da58276455b8c62b13f763d8c45
228f9898c226eaa7ec5c722e1ace4e6535223dbc3a5142a901d8fe6d4de39a5f
GET /hm.js?b3f5146e5b1edacdc9e40410135942f4 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Content-Type: application/javascript
Date: Fri, 01 Dec 2023 21:09:26 GMT
Etag: ab77b70e0066678989d1f64c29125d4d
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=C9C2D2565A97B87E; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1114105902&si=b3f5146e5b1edacdc9e40410135942f4&v=1.3.0&lv=1&sn=45302&r=0&ww=1280&u=http%3A%2F%2F141.11.212.141%2F&tt=BMWAi%20-%20%E9%A6%96%E9%A1%B5
200 OK 43 B URL GET HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1114105902&si=b3f5146e5b1edacdc9e40410135942f4&v=1.3.0&lv=1&sn=45302&r=0&ww=1280&u=http%3A%2F%2F141.11.212.141%2F&tt=BMWAi%20-%20%E9%A6%96%E9%A1%B5
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=1024&et=0&ja=0&ln=en-us&lo=0&rnd=1114105902&si=b3f5146e5b1edacdc9e40410135942f4&v=1.3.0&lv=1&sn=45302&r=0&ww=1280&u=http%3A%2F%2F141.11.212.141%2F&tt=BMWAi%20-%20%E9%A6%96%E9%A1%B5 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://141.11.212.141/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Fri, 01 Dec 2023 21:09:27 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=25F71EB2A58CA60C; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
141.11.212.141
103.235.46.191