| 106.104.172.240/ |  106.104.172.240 | | 340 B |
IP106.104.172.240:0 ASN#4780 Digital United Inc.
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashc695fff32fef2c4cb7fbefb5621adf60 544dbb11115f14c205323d07f9a779392d47a0d3 3a22595a8ff61cd5ba58d77c8284125fe095b605bbd279fa30eb7cd54f3348aa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type: text/html
Content-Length: 340
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Pages/login.htm | 106.104.172.240 | 200 OK | 2.8 kB |
URL User Request GET HTTP/1.1106.104.172.240/Pages/login.htm IP106.104.172.240:80 ASN#4780 Digital United Inc.
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash831a7caf231492d74b6226b47b241bed 42c31a15190880b682c660b747998f1cb8890c0d 4eaf12b59cafdb2f91c16397ced1aa7f88dc8e3db8072b7b85a20857b59f72ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Pages/login.htm HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://106.104.172.240/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type: text/html
Content-Length: 2790
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Css/login.css?v={JS_CSS_V} | 106.104.172.240 | 200 OK | 4.5 kB |
URL GET HTTP/1.1106.104.172.240/Css/login.css?v={JS_CSS_V} IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash9eddf519df405083b25cd6495f72f78b f3e3299668111dcea2a91b26cecb1744ff177f24 89765914d9c8f83bb35aa598da6ce92e9165ce57a57e2bd336ca7ddd15e7f51f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Css/login.css?v={JS_CSS_V} HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type: text/css
Content-Length: 4508
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Scripts/Third/jquery.cookie.js?v={JS_CSS_V} | 106.104.172.240 | 200 OK | 3.8 kB |
URL GET HTTP/1.1106.104.172.240/Scripts/Third/jquery.cookie.js?v={JS_CSS_V} IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeJavaScript source, ASCII text, with CRLF line terminators Hasha479f46b2a66d5772f839cdf20c24898 dfc20a0ffcf24df1fdb6d2b15dabde27a3956eb1 087712cabcc08391246c1c3ab4ddecd706ac939a7b1f10e13fe207d9f9240148
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Scripts/Third/jquery.cookie.js?v={JS_CSS_V} HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type:
Content-Length: 3752
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Scripts/Third/jquery.watermark.min.js?v={JS_CSS_V} | 106.104.172.240 | 200 OK | 4.6 kB |
URL GET HTTP/1.1106.104.172.240/Scripts/Third/jquery.watermark.min.js?v={JS_CSS_V} IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (4398), with CRLF line terminators Hashae76f94b986814b5d7ac554ea1bc11f0 7b363c43c31ed815f643dcc49b40f81afa2005af 825804fddfdb6a6d29eb86760eed1deab895f8c9b2a9292d229310ad5247cb03
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Scripts/Third/jquery.watermark.min.js?v={JS_CSS_V} HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type:
Content-Length: 4629
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Scripts/spark-md5.js?v={JS_CSS_V} | 106.104.172.240 | 200 OK | 23 kB |
URL GET HTTP/1.1106.104.172.240/Scripts/spark-md5.js?v={JS_CSS_V} IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeJavaScript source, ASCII text Hashab0ae3efc58abe83b103ab86544d61db 5a747653b67435b39d0e6c6897b132f0fe0f5bd6 28892effc66ddeabad836af8f46650c0c01c88272c9cbd761c8cacce3a69f664
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Scripts/spark-md5.js?v={JS_CSS_V} HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type:
Content-Length: 22954
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Scripts/Common/CommonFunctions.js?v={JS_CSS_V} | 106.104.172.240 | 200 OK | 52 kB |
URL GET HTTP/1.1106.104.172.240/Scripts/Common/CommonFunctions.js?v={JS_CSS_V} IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash79d422c19464396779a7fdec0abca9cb 2f1317caf39e5c1a5637214539468abd9539752f edbace3fac7eb16e84b333480951187d5a416d2eb4902d0cbd9de0c31ece72c6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Scripts/Common/CommonFunctions.js?v={JS_CSS_V} HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type:
Content-Length: 51826
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Scripts/jquery-1.7.2.min.js?v={JS_CSS_V} | 106.104.172.240 | 200 OK | 95 kB |
URL GET HTTP/1.1106.104.172.240/Scripts/jquery-1.7.2.min.js?v={JS_CSS_V} IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (32769), with CRLF line terminators Hasha13f7f208ba534681deadb1ec7a2e54a 3f51e2eecfa88c61e1200a48ed14f2cdda98ed87 d72fcb8924d1e14dbd4b04aff994c1183ee86c620f0aaac034f75fc508548220
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Scripts/jquery-1.7.2.min.js?v={JS_CSS_V} HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type:
Content-Length: 94843
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Scripts/base.js?v={JS_CSS_V} | 106.104.172.240 | 200 OK | 24 kB |
URL GET HTTP/1.1106.104.172.240/Scripts/base.js?v={JS_CSS_V} IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeUnicode text, UTF-8 text, with very long lines (636), with CRLF line terminators Hash7cdd1ab7a6e81a1fa5d95b9771a7ef0b 70b77b2e5c78e2d97abbf7dcfe870ec5de776d95 2b8fe22f75a8ea1a801abb80d1cee420551bc0315ce29baafe07d59ab709dae9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Scripts/base.js?v={JS_CSS_V} HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type:
Content-Length: 24169
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Scripts/Common/Base64.js?v={JS_CSS_V} | 106.104.172.240 | 200 OK | 2.1 kB |
URL GET HTTP/1.1106.104.172.240/Scripts/Common/Base64.js?v={JS_CSS_V} IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeUnicode text, UTF-8 text, with CRLF line terminators Hasha10083070c8c2175ecee841d9a601ea0 7a35add28e820a86348bf44690d82ccc2af45872 dbfdcbd1d0aeb6b1337305b4d8e50d278d7b0b808437e1623c31e9289b813ece
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Scripts/Common/Base64.js?v={JS_CSS_V} HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type:
Content-Length: 2068
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Scripts/Common/Encryption.js?v={JS_CSS_V} | 106.104.172.240 | 200 OK | 558 B |
URL GET HTTP/1.1106.104.172.240/Scripts/Common/Encryption.js?v={JS_CSS_V} IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeUnicode text, UTF-8 text, with CRLF line terminators Hashcb17ec657cb2f80d4cc6f2cc75f1eb1a e3a295c257718848b1806cb5bc3ba5de6abb22cf dba5375e1fcc68907aed66e607c8c9583e7b10248d50d0f81d56f447140097a1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Scripts/Common/Encryption.js?v={JS_CSS_V} HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type:
Content-Length: 558
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Scripts/login.htm.js?v={JS_CSS_V} | 106.104.172.240 | 200 OK | 14 kB |
URL GET HTTP/1.1106.104.172.240/Scripts/login.htm.js?v={JS_CSS_V} IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashf426ae71935452a07e02df8af7c48204 c14d641831327573ce7a59ff8a332452e5c84970 3cdeb3830319248cda200843842b90838fb8f0852c4367a4305d5f2ed6c05899
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Scripts/login.htm.js?v={JS_CSS_V} HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type:
Content-Length: 14409
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Scripts/Common/UnicodeAnsi.js | 106.104.172.240 | 200 OK | 78 kB |
URL GET HTTP/1.1106.104.172.240/Scripts/Common/UnicodeAnsi.js IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeUnicode text, UTF-8 text, with very long lines (37244), with CRLF line terminators Hash1c4eb94cd81106de98df996e149ab00a 3a1343149ad44d40743e0817e07e56b00a6cf6a4 6b9367ec7be58d8060f0606486753ccf8f0de8b5a6e1c41b7ebb0266b732e127
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Scripts/Common/UnicodeAnsi.js HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type:
Content-Length: 78012
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Css/Pictures/arrow.png | 106.104.172.240 | 200 OK | 291 B |
URL GET HTTP/1.1106.104.172.240/Css/Pictures/arrow.png IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typePNG image data, 60 x 8, 4-bit colormap, non-interlaced Hash8e308730d4521679556f645aa836ae5b f2781f90f699afaf6af9eb518c32683da548d935 a234f63b6760d75b33d2bf40cd5ce21aa60b50829e7eeb9706b0a1f6a82a9399
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Css/Pictures/arrow.png HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Css/login.css?v={JS_CSS_V}
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type: image/png
Content-Length: 291
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Css/Pictures/Login/loginBtn.png | 106.104.172.240 | 200 OK | 449 B |
URL GET HTTP/1.1106.104.172.240/Css/Pictures/Login/loginBtn.png IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typePNG image data, 1 x 200, 8-bit colormap, non-interlaced Hash64c29d8224ed8a2fba73dedeec6c81a0 a3211812e27a600ff45e299c5e930ecb3ba04ef9 383ae15b64fe13a6a29241843ed983ad795d665d7e40ed3a380e2b15f1b0a0cb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Css/Pictures/Login/loginBtn.png HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Css/login.css?v={JS_CSS_V}
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type: image/png
Content-Length: 449
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Css/Pictures/Login/plugin.png | 106.104.172.240 | 200 OK | 601 B |
URL GET HTTP/1.1106.104.172.240/Css/Pictures/Login/plugin.png IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typePNG image data, 54 x 27, 8-bit colormap, non-interlaced Hashcee03a8b76520f54e5a9cfccffc93266 a6354d713847e6bbb2356ac2d80fd54b3aed0612 633ae15fe2c19010895c041beeda4e2606c02fc7155adab6be86f47e2f80d3ba
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Css/Pictures/Login/plugin.png HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Css/login.css?v={JS_CSS_V}
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type: image/png
Content-Length: 601
Connection: close
AuthInfo:
|
|
| 106.104.172.240/getLangContent | 106.104.172.240 | 200 OK | 4.7 kB |
URL POST HTTP/1.1106.104.172.240/getLangContent IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeXML 1.0 document, ASCII text, with very long lines (595) Hash14160b66dc3607f3baf982b0cd491dd5 423fdeeda6e5feb487b1327003ed1d61d11effff 65fdf49447bbbaab5d77986467afa7721db9edfdb7c5462b83c678f46e90bbe9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /getLangContent HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
If-Modified-Since: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 1851
Origin: http://106.104.172.240
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type: text/xml
Content-Length: 4728
Connection: close
AuthInfo:
|
|
| 106.104.172.240/favicon.ico | 106.104.172.240 | 200 OK | 1.2 kB |
URL GET HTTP/1.1106.104.172.240/favicon.ico IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash3aef8b29c4866f96a539730fab53a88f 8004cd8651b41e3670747457edd4b95cf7e3de01 a59958567121ec18b9c610efd33d9938db77c76bb83171a9f6f4d0040c28b303
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type:
Content-Length: 1150
Connection: close
AuthInfo:
|
|
| 106.104.172.240/Css/Pictures/Login/LoginContent.png | 106.104.172.240 | 200 OK | 74 kB |
URL GET HTTP/1.1106.104.172.240/Css/Pictures/Login/LoginContent.png IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typePNG image data, 693 x 236, 8-bit/color RGBA, non-interlaced Hashfca12815937c023a68e1c3d0ebd42665 fdcf07265b2e2844e8b066548f3dfc0b64c7401b 5b746a4f469fecb8121cf334a9fa4b48647d8f108aee9708551bf652bcd89a63
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Css/Pictures/Login/LoginContent.png HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Css/login.css?v={JS_CSS_V}
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type: image/png
Content-Length: 73896
Connection: close
AuthInfo:
|
|
| 106.104.172.240/getSupportLangList | 106.104.172.240 | 200 OK | 2.5 kB |
URL POST HTTP/1.1106.104.172.240/getSupportLangList IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeXML 1.0 document, Unicode text, UTF-8 text Hashe0989ddd11b118a1728d27ef5f622c3d 7ff52438df454529264148d40d7f1d5ec94d2108 6e4714ba2b7fe182be0b1ddccee9c0c217cbb35ede1029a09d8a3b530fe55320
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /getSupportLangList HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
If-Modified-Since: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 103
Origin: http://106.104.172.240
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Cookie: lang_type=en-us
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type: text/xml
Content-Length: 2464
Connection: close
AuthInfo:
|
|
| 106.104.172.240/getLangContent | 106.104.172.240 | 200 OK | 4.6 kB |
URL POST HTTP/1.1106.104.172.240/getLangContent IP106.104.172.240:80 ASN#4780 Digital United Inc.
Requested byhttp://106.104.172.240/Pages/login.htm
File typeXML 1.0 document, Unicode text, UTF-8 text, with very long lines (340) Hash8ef835799d2e4961bc837ee2db5191c4 a3fcfa333f6f63a5a02854deeb03e584e2b1af32 d4b618fe85a64ec1dbdf7491ac5acdbac6620cbd963c3868fac5afdd232e4d50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /getLangContent HTTP/1.1
Host: 106.104.172.240
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
If-Modified-Since: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 1851
Origin: http://106.104.172.240
DNT: 1
Connection: keep-alive
Referer: http://106.104.172.240/Pages/login.htm
Cookie: lang_type=zh-tw; lang_id=0x0404; calendarType=Gregorian
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-type: text/xml
Content-Length: 4578
Connection: close
AuthInfo:
|
|