| |  72.106.19.56 | 200 OK | 8.3 kB |
URL User Request GET HTTP/1.0IP72.106.19.56:80
File typeHTML document, ASCII text, with CRLF line terminators Hash1d243df50d617d53a29c748006cc8c67 ed8d3ca909e9971e0938c3d220b0e1cd183160f1 a0c9542444787f628b000238de283707c6d751e593419b091d14a9d41abe750f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /index.html HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:43:54 2024
Server: Sanechips-Webs
Last-modified: Mon May 19 13:15:22 2014
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 8253
Content-type: text/html
|
|
| 72.106.19.56/theme/chosen.css | 72.106.19.56 | 200 OK | 13 kB |
URL GET HTTP/1.072.106.19.56/theme/chosen.css IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
Hash3cdad26eacc5d6a1a900834ee0296ae9 db5412dc6e0a7fa4dd8747d021ce0a335a577e7e 756af3be97b5e769c2e2edc85ce1ec540b1de86cd0cf574201d407a711d90939
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/chosen.css HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:43:55 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 13328
Content-type: text/css
|
|
| 72.106.19.56/theme/bootstrap.css | 72.106.19.56 | 200 OK | 132 kB |
URL GET HTTP/1.072.106.19.56/theme/bootstrap.css IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeASCII text, with very long lines (540) Size132 kB (131647 bytes) Hash279222b1acda36a8023efe6b1d0c9c73 763e31ced9340eada07aaa53e9392acd45fa951e d53192761761f5413f9c869abd5513dfcb773847740c7596ef0e62c0c8e2e7ff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/bootstrap.css HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:43:55 2024
Server: Sanechips-Webs
Last-modified: Wed Mar 19 19:56:40 2014
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 131647
Content-type: text/css
|
|
| 72.106.19.56/theme/app.css | 72.106.19.56 | 200 OK | 56 kB |
URL GET HTTP/1.072.106.19.56/theme/app.css IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
Hashbe73be9283ff9a86b29fc11e2ab59885 d98557be8039d5d8919e404963570cd587274567 f05bc0ba3cce2be87d370448871ec421e3ca44bf44e453b3356dfe2c2a40430c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/app.css HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:43:55 2024
Server: Sanechips-Webs
Last-modified: Wed Mar 19 19:51:54 2014
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 55896
Content-type: text/css
|
|
| 72.106.19.56/js/lib/require/require-jquery.js | 72.106.19.56 | 200 OK | 333 kB |
URL GET HTTP/1.072.106.19.56/js/lib/require/require-jquery.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, ASCII text Size333 kB (332952 bytes) Hash85abe81818fc947d11d990c7618e49d1 645bedaa34118c5cff10674c37614bdc7e06e5fd ac81d2feffbebe242c0009675b439e85fba1c980b524c2b63b6272af61cf06c9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/require/require-jquery.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:43:56 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 332952
Content-type: application/x-javascript
|
|
| 72.106.19.56/img/sms_unread.png | 72.106.19.56 | 200 OK | 3.2 kB |
URL GET HTTP/1.072.106.19.56/img/sms_unread.png IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typePNG image data, 36 x 30, 8-bit/color RGBA, non-interlaced Hashaf750a468a48554782bce906c43e14dc f62ed27502d4ab1b9e84e88a9373c4983c81f659 28f12fe42a6bbdbece883b55ac14f6ba21787c02f5b6bcc2f9184a14a3221421
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/sms_unread.png HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:43:57 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 3238
Content-type: text/plain
|
|
| 72.106.19.56/img/logo_zte_4gas.png | 72.106.19.56 | 200 OK | 17 kB |
URL GET HTTP/1.072.106.19.56/img/logo_zte_4gas.png IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typePNG image data, 132 x 64, 8-bit/color RGBA, non-interlaced Hash9ff8197bbdb6a5565b9aa74dacd9baf4 cbceeebf7e8bbd82e0abf9a4f52a715ab95bd001 bcec642a6871c6b7b0fbd4fb2e987cbd5a28f64b36f9a11446d5563941f89037
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/logo_zte_4gas.png HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:43:57 2024
Server: Sanechips-Webs
Last-modified: Tue Jan 28 01:15:39 2014
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 17341
Content-type: text/plain
|
|
| 72.106.19.56/img/update.gif | 72.106.19.56 | 200 OK | 1.4 kB |
URL GET HTTP/1.072.106.19.56/img/update.gif IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeGIF image data, version 89a, 23 x 30 Hash24c04b1d48fe82b820dcaefe0e78a9a3 5b1e4dac2063374f024fb640bcf908b0866d6677 9ebe4720538a723de12d33f4cc354ab6a7ca3c657d9fab70cb0ab80bd4a6db23
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/update.gif HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:43:58 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 1355
Content-type: image/gif
|
|
| 72.106.19.56/img/sms_full.gif | 72.106.19.56 | 200 OK | 1.1 kB |
URL GET HTTP/1.072.106.19.56/img/sms_full.gif IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeGIF image data, version 89a, 36 x 30 Hash7d91a191ab1c2dc585d15e4973d8c7e6 acd0509dca610df1a3c43214dcfa13a04c9dd6d9 72bae340de55d91e090e3260ae733603d93beae9f42f489d0da41462811d345d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/sms_full.gif HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:43:58 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 1103
Content-type: image/gif
|
|
| 72.106.19.56/img/loading.gif | 72.106.19.56 | 200 OK | 15 kB |
URL GET HTTP/1.072.106.19.56/img/loading.gif IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeGIF image data, version 89a, 72 x 75 Hashd345fa4feb08e68a0ee0d827a763dc64 92e10f5de107cdf95a2ef491af75251a6ea5d222 f132365254ba79ff47633bc9859986e1ea6b6924c65e0101394f121ee1085694
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/loading.gif HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:43:58 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 15408
Content-type: image/gif
|
|
| 72.106.19.56/js/main.js | 72.106.19.56 | 200 OK | 2.7 kB |
IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeUnicode text, UTF-8 text, with CRLF line terminators Hashbf18fda6c447bc01a50b820c87913472 bf9c9b02b7f2609ea35aa876934e41e242dc0931 94b44704c1bdbc449ca8461046c6761810a5807c92aea423337c437fadaf4174
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/main.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:43:58 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 2722
Content-type: application/x-javascript
|
|
| 72.106.19.56/favicon.ico | 72.106.19.56 | 200 OK | 4.3 kB |
IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hashc86219e7948efabfc4cf39224e9527f3 4dd8ae75318518590f643b9c3e490d12c8a4d60f 8957488068b77c12a086467630a74c277a5c6be37d831d2281680ed183aa2065
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:43:58 2024
Server: Sanechips-Webs
Last-modified: Wed Oct 30 11:29:17 2013
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 4286
Content-type: text/plain
|
|
| 72.106.19.56/js/service.js | 72.106.19.56 | 200 OK | 248 kB |
URL GET HTTP/1.072.106.19.56/js/service.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (335), with CRLF line terminators Size248 kB (248191 bytes) Hash5994d3e8f5d023c079af7e0c5da79541 45661801d94e6234a55e1e99b2d2af01260b9e05 54174045cf6a68dcacc67034c783f15a61fbdde931d49e1e24385cf7d8b3266f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/service.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:43:58 2024
Server: Sanechips-Webs
Last-modified: Tue Nov 5 13:16:36 2013
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 248191
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/config/config.js | 72.106.19.56 | 200 OK | 32 kB |
URL GET HTTP/1.072.106.19.56/js/config/config.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash4e065b6eb61b0c8b9e459d78464cebfb b410b72cf8cce5ec989840e1aa0accd2c082df10 dbe4c2737dbf5de7575f16d3ad73fa705e11ea09ce3acfcbba34a066ba15f79a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/config/config.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:43:59 2024
Server: Sanechips-Webs
Last-modified: Mon Feb 3 20:16:45 2014
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 32369
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/util.js | 72.106.19.56 | 200 OK | 43 kB |
IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hash8591d8ebaadd212f7b3ddea96b964e0a 1c36486190de2ebf8ebadc03e073c2d767b6a744 30bc08e4973018c7743d650db230461d82e87aac6d95ec74e6c43a89fc4774c1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/util.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:00 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 43018
Content-type: application/x-javascript
|
|
| | 72.106.19.56 | | 9.9 kB |
IP72.106.19.56:0
Hashc9848a06488da0745e03ef9334d60e2c 97782e720d7e02b52fa228571d1d719890421cab 8dd4f1b927477d9572f9b57ed77b6e362a69d17bb498b455d6f3b35cbbaf46c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 302 Redirect
Server: Sanechips-Webs
Date: Fri Apr 26 00:43:52 2024
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-Type: text/html
Location: http://72.106.19.56/index.html
|
|
| 72.106.19.56/js/lib/underscore/underscore.js | 72.106.19.56 | 200 OK | 105 B |
URL GET HTTP/1.072.106.19.56/js/lib/underscore/underscore.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeASCII text, with CRLF line terminators Hasha42b37e455080773851ec1f68c4fdcd6 a0707c8edb9c425d7b3138389dd0bc30b25563be 38e7ee6a2bcdc13af03a41256a9cfc9060304b7de40e34bea865fe2a2506cba5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/underscore/underscore.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:00 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 105
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/config/ufi/config.js | 72.106.19.56 | 200 OK | 2.0 kB |
URL GET HTTP/1.072.106.19.56/js/config/ufi/config.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, ISO-8859 text, with CRLF line terminators Hash4a220635247a2a34d435443a9b0c9513 cfe2c2ae616175550ca89434632afdd755fbbf41 d2d560bfba169430e51e72f4ec8622ca558ace634662bd3b7ea18b95ee1413a4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/config/ufi/config.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:00 2024
Server: Sanechips-Webs
Last-modified: Tue Nov 5 12:07:31 2013
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 2010
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/lib/underscore/underscore-min.js | 72.106.19.56 | 200 OK | 16 kB |
URL GET HTTP/1.072.106.19.56/js/lib/underscore/underscore-min.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, ASCII text, with very long lines (16194), with CRLF line terminators Hasha80d6d78cd069d89df3ab704727d3fea afff4c1369f6ca34ec60823d853942eac9729eba edcfd7dceda1409bd09945eda3a34e8faa4a94568d141ff4208de4c4be4f8d45
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/underscore/underscore-min.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:01 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 16454
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/config/ufi/menu.js | 72.106.19.56 | 200 OK | 11 kB |
URL GET HTTP/1.072.106.19.56/js/config/ufi/menu.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashed9f8d6ab4a57373586464ac221b28c2 02ba51feb4c4603d1ce6c2b71cbcde748919e477 30c9771c8d992515055515a8860e32390a305da588ebf61d04b3592c48aee544
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/config/ufi/menu.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:02 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 10853
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/lib/jquery/jquery.i18n.properties-1.0.9.js | 72.106.19.56 | 200 OK | 18 kB |
URL GET HTTP/1.072.106.19.56/js/lib/jquery/jquery.i18n.properties-1.0.9.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, ASCII text Hash417498dcbf52e79939d446073272e715 c47c0dbfbf7101b49e8e1ab5da6e123ef5b4c252 57f388a1588b5bcaf9c15f1d5e6eadd4ef62ada8e87a69ffe152d21047b331af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/jquery/jquery.i18n.properties-1.0.9.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:02 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 17797
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/lib/bootstrap.js | 72.106.19.56 | 200 OK | 61 kB |
URL GET HTTP/1.072.106.19.56/js/lib/bootstrap.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, ASCII text Hash3d2ed11c58d1a9a839e9703b229c2e4a f62c81ea3b0eac96f75a66458e8fbc0da19d82af 0ae91d6df6770b43f52b5dfd1fb8f7031b8f9b41fd980e3671119753a6d3ed5c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/bootstrap.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:02 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 61118
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/lib/base64.js | 72.106.19.56 | 200 OK | 3.1 kB |
URL GET HTTP/1.072.106.19.56/js/lib/base64.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeAlgol 68 source, ASCII text Hash6d53c0ca3e453a72b5d89c26b374ca5d b24ad60a33c5aa16e5cfdd9864743b89d29a158d 8c4ce217ddb8e87bf3da9bb034418d511ef636530fc082366b4716e43a1bcc82
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/base64.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:02 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 3102
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/app.js | 72.106.19.56 | 200 OK | 473 B |
IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeUnicode text, UTF-8 text, with CRLF line terminators Hashb6523ac30ea6130fdd6827e231764f91 efad185417e33d1fc646be09a0586643be225ced 451777cee5758aa0e22f094de2d0aa58288b713542209f8e54749560a1959069
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/app.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:03 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 473
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/lib/jquery/translate.js | 72.106.19.56 | 200 OK | 3.3 kB |
URL GET HTTP/1.072.106.19.56/js/lib/jquery/translate.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hashdaa8b652bf62b575a52967d1011eedd9 63f9feba5a5b759e03ccd02f2c0816e6aa996585 97ffb1c7cae6bea00b4653cee4e0eb04bd89cb6e186f5aed2c31478ef180c310
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/jquery/translate.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:03 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 3255
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/lib/jquery/jquery.validate.js | 72.106.19.56 | 200 OK | 38 kB |
URL GET HTTP/1.072.106.19.56/js/lib/jquery/jquery.validate.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1238) Hashef9fd092b21404114ddcbc7d438a58ca b7f5f6b8ba60f06024be1d0f7454eafcfba3d48f 27446e198380575b02eb882767e18f4539e4d64beef34127286a852ee783d4ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/jquery/jquery.validate.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:03 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 38440
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/lib/jquery/jquery.simplemodal-1.4.2.js | 72.106.19.56 | 200 OK | 23 kB |
URL GET HTTP/1.072.106.19.56/js/lib/jquery/jquery.simplemodal-1.4.2.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, ASCII text, with CRLF line terminators Hash1a98e98a283a9c938d13a38252c89f18 876f30c548c7dcff49b55a7523773e2870c3131b 3720190b00b03174c681f649803a30b34c6e3046fd9b1d5b7a2b1099a014ed7e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/jquery/jquery.simplemodal-1.4.2.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:03 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 23447
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/config/menu.js | 72.106.19.56 | 200 OK | 8.4 kB |
URL GET HTTP/1.072.106.19.56/js/config/menu.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hash3d1e07c6794a47151f7086e16d67ed45 4c898c4d6855baf7085b7829d4bfd565a3c74e66 2d3d1f55542b2e319bf9a7fbca6e1e12dc4ac7b3622b7fb6bed39ba75a173f07
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/config/menu.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:04 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 8444
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/language.js | 72.106.19.56 | 200 OK | 2.3 kB |
URL GET HTTP/1.072.106.19.56/js/language.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash75789902a3a1bd7c8067f8ecf1727b4f ed69add9fd8108eacf7e298afd70ba769eb3e7a2 006763edaab7782a9431efe95a7e89aaf52cea8186da3f8fda894b3f7e084d36
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/language.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:04 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 2314
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/logout.js | 72.106.19.56 | 200 OK | 2.0 kB |
URL GET HTTP/1.072.106.19.56/js/logout.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeUnicode text, UTF-8 text, with CRLF line terminators Hashebfcc9b0bb0cb8b1f9605e759bc17622 b502f666a1748f14f6ce7b1e633775c99c8908b8 4ca264192dfe312928ef0b99a0180c07c03f0c0d99fc27b8ecc6ed9c6ef8abf5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/logout.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:04 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 1984
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/router.js | 72.106.19.56 | 200 OK | 10 kB |
URL GET HTTP/1.072.106.19.56/js/router.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hashec534c0ea4ae73bea02722d92acea974 7afe5da5ae1b9e68d2cd4468be1c4c82f552451e e967af44790f9bbb0686b5beea0d32b483e9db0162010631780f25b08cb9146e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/router.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:04 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 10125
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/status/statusBar.js | 72.106.19.56 | 200 OK | 53 kB |
URL GET HTTP/1.072.106.19.56/js/status/statusBar.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hash816dbbc6588685aa46613d834aedbb30 4bf7dddb16544044dd85317288d8f7d6c1829776 8e0253f867ec72b449f6e0c21cc2a97407d1a9c375ae64d7ec46a7fb684c05e7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/status/statusBar.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:04 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 53342
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/login.js | 72.106.19.56 | 200 OK | 16 kB |
IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hashf66e9a1fa1c377fd51fc43b74b6dab86 c8c4614a23def9b15c8146e06972003dcb14c874 1a07735b9288343282662dc251823b7426efe37cadee6a3a01d5a26479473f35
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/login.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:04 2024
Server: Sanechips-Webs
Last-modified: Wed Mar 19 15:52:26 2014
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 15764
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/lib/jquery/additional-methods.js | 72.106.19.56 | 200 OK | 29 kB |
URL GET HTTP/1.072.106.19.56/js/lib/jquery/additional-methods.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1239) Hashf6d896aee3ec7669b72171a5c849ed15 0f23727a191123292717d049e17356a1441dd20a eac1d44e2c6aedf0fc83e2c4f803a43e2b005ce0d5528b1faa51f2497bcc47db
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/jquery/additional-methods.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:04 2024
Server: Sanechips-Webs
Last-modified: Sat Feb 1 09:24:55 2014
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 29068
Content-type: application/x-javascript
|
|
| 72.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059837285 | 72.106.19.56 | 200 OK | 849 B |
URL GET HTTP/1.172.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059837285 IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeASCII text, with very long lines (323), with CRLF line terminators Hashb5b1a8726d95e85d08617155946dc34e 5c613411d88d04584d2a2a9efe867917a9bd3ca9 5cadbadcd595f4693dbe875d727a9c72e1732b89a037cfb6109b4de6964599d4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059837285 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|
| 72.106.19.56/js/tooltip.js | 72.106.19.56 | 200 OK | 2.1 kB |
URL GET HTTP/1.072.106.19.56/js/tooltip.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hashf7dbb6ee0df46f4dfe65859305c2ddb4 d447d75aa1773ed7fe37473f29538c481c0e378a df3a671ab125a863dc1ef3efddc42828121f7fe14ec9b6a0b923c9c399649edb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/tooltip.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:05 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 2112
Content-type: application/x-javascript
|
|
| 72.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059838828 | 72.106.19.56 | 200 OK | 6.4 kB |
URL GET HTTP/1.172.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059838828 IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, ASCII text, with very long lines (5869) Hash1d5aae5c51b305bd0c1786fad25bb7fb b2ce3598f18b397a9756ae51df820ce0e061e9ff 25a916dbb61668acb8089ea1871e3204c71e2e50a480bfefd21815e0ad572383
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059838828 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|
| 72.106.19.56/js/lib/knockout/knockout-3.4.2.js | 72.106.19.56 | 200 OK | 60 kB |
URL GET HTTP/1.072.106.19.56/js/lib/knockout/knockout-3.4.2.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, ASCII text, with very long lines (644) Hashe956a74c005b7a243f0884d67e60f8f3 c4fda6eee21550785a1c89ce291a2d3072e0ed9b a305fbb2ba223bf3b56bb8776b85f6f40d60dd082a74dbe28d143b5794c7e393
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/knockout/knockout-3.4.2.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:05 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 60354
Content-type: application/x-javascript
|
|
| 72.106.19.56/js/lib/knockout/knockout.simpleGrid.js | 72.106.19.56 | 200 OK | 27 kB |
URL GET HTTP/1.072.106.19.56/js/lib/knockout/knockout.simpleGrid.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (449) Hash0b0d9531269927d97532440f584a980c d925b763bb6baf69b5d8f9e5e37699960cf83917 84d1872cf8c1c9fc0955a3bb0b9c13774726b0115507a5cdba79e5822c076be7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/knockout/knockout.simpleGrid.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:06 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 26573
Content-type: application/x-javascript
|
|
| 72.106.19.56/goform/goform_get_cmd_process?isTest=false&cmd=Language&multi_data=1&_=1714059840802 | 72.106.19.56 | 200 OK | 79 kB |
URL GET HTTP/1.172.106.19.56/goform/goform_get_cmd_process?isTest=false&cmd=Language&multi_data=1&_=1714059840802 IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeUnicode text, UTF-8 text, with CRLF, CR line terminators Hash9cc68ddd77c20ba29a40ea8a8b441e53 792936a30e4b0dd463a3eb9ace62473e5f0e741d de79d076853b1ccd550104b91527b7d8b46dce296821c7cbfdf1107d35e551f4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?isTest=false&cmd=Language&multi_data=1&_=1714059840802 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|
| 72.106.19.56/js/lib/require/text.js | 72.106.19.56 | 200 OK | 3.1 kB |
URL GET HTTP/1.072.106.19.56/js/lib/require/text.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, ASCII text, with very long lines (524) Hash9c480990d09ac458e8589fbc5ca71fca bd1790f313edd6b2c0ffae10d9f5a19dfefb0f0c cdfa4ab2935f048afc465d600064c6ceb7a965f454be01156dacb6609e3aa835
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/require/text.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:08 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 3122
Content-type: application/x-javascript
|
|
| 72.106.19.56/img/login-bg.png | 72.106.19.56 | 200 OK | 14 kB |
URL GET HTTP/1.072.106.19.56/img/login-bg.png IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typePNG image data, 1 x 518, 8-bit/color RGB, non-interlaced Hashe6aeb8998494917b2af716fd11abb760 75a17217299c0f43749fd3856c55ab014b305f01 47b10a678f87de10fd3cdff3de5446e90ff7c41b970513b49bb36722e7d6883e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/login-bg.png HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/theme/app.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:08 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 14524
Content-type: text/plain
|
|
| 72.106.19.56/img/confirm.png | 72.106.19.56 | 200 OK | 5.3 kB |
URL GET HTTP/1.072.106.19.56/img/confirm.png IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hash64f36a8ee8159e8d5de8d1ba84e34244 c06ec34ab7e5bc319efd9592322bac091392aeaa 60754836faba121a9126a26bda04c107b3be3bfd11c02b5b0fd438bec945f30f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/confirm.png HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:08 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 5251
Content-type: text/plain
|
|
| 72.106.19.56/img/info.png | 72.106.19.56 | 200 OK | 1.9 kB |
URL GET HTTP/1.072.106.19.56/img/info.png IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashdd22d7607bb398c6c73d7043b046d484 be0c133ee938055afd581349c0042e65e491e30e d6df03de2e820acef61cc9e020e9b6c5cb8c16c0b1186aa6a9fae37a92b9ca2b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/info.png HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:08 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 1937
Content-type: text/plain
|
|
| 72.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059835396 | 72.106.19.56 | 200 OK | 4.7 kB |
URL GET HTTP/1.172.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059835396 IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
Hashfec96d7da545ef517e81dfa3aeffb198 188d58ac2e5adebbe3944d1b5e45098053c7206d 3228830cd7aec18d262ffbfa5bd2d4c3c00f16474130ad84404672afc7298aed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059835396 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|
| 72.106.19.56/tmpl/login.html | 72.106.19.56 | 200 OK | 5.7 kB |
URL GET HTTP/1.072.106.19.56/tmpl/login.html IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeHTML document, ASCII text, with CRLF line terminators Hash463a951baff5a5da2cabbe1b1cf98ee0 c00d2f2d83db89a231979251ed0669b4b0812895 83e9a078448133ef2b361a4ca86da3de4c7b2db69565df2ab43f2fe8d1075fdc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /tmpl/login.html HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:08 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 5656
Content-type: text/html
|
|
| 72.106.19.56/img/icon_red.png | 72.106.19.56 | 200 OK | 339 B |
URL GET HTTP/1.072.106.19.56/img/icon_red.png IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typePNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced Hash01dd61774c0b87b200373da8668695af ba4b38517da5a0c82f120cfef59ae412ea35da14 eff5e832428b9fa79bd0581578870bf7705d10ce292cc88c1d8cc345e47efc43
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/icon_red.png HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:09 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 339
Content-type: text/plain
|
|
| 72.106.19.56/goform/goform_get_cmd_process?isTest=false&cmd=update_type&_=1714059843388 | 72.106.19.56 | 200 OK | 3.1 kB |
URL GET HTTP/1.172.106.19.56/goform/goform_get_cmd_process?isTest=false&cmd=update_type&_=1714059843388 IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
Hash4ac44f1815a1fcf082ff067146ffb369 4aa7134d4f507789a4138ecd17ee72b696399eed 8697f0740803e965d45996d2b4525042306b52c9057f941b4dd54cced17f528d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?isTest=false&cmd=update_type&_=1714059843388 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|
| 72.106.19.56/goform/goform_get_cmd_process?isTest=false&cmd=modem_main_state%2Cpuknumber%2Cpinnumber%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cpsw_fail_num_str%2Clogin_lock_time&multi_data=1&_=1714059843360 | 72.106.19.56 | 200 OK | 3.2 kB |
URL GET HTTP/1.172.106.19.56/goform/goform_get_cmd_process?isTest=false&cmd=modem_main_state%2Cpuknumber%2Cpinnumber%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cpsw_fail_num_str%2Clogin_lock_time&multi_data=1&_=1714059843360 IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
Hashd7b80d8c528d46408fa011a56951c8ef 2a0f8c6ea649de56498f75937db394c181760730 f4b8e375a28c363be8e6cf02d04892e90f9c0350a3d8a80a356a545f7633b0b7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?isTest=false&cmd=modem_main_state%2Cpuknumber%2Cpinnumber%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cpsw_fail_num_str%2Clogin_lock_time&multi_data=1&_=1714059843360 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|
| 72.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059843960 | 72.106.19.56 | 200 OK | 285 B |
URL GET HTTP/1.172.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059843960 IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typetroff or preprocessor input, ASCII text, with very long lines (333), with no line terminators Hash00da3e672689faa7ac3d14bffddeaba5 d85145a696a14d251f031cd3bade17eb8d9a8f27 03a3df00005f22a6e15c299db76c0e805d3b1011ea835b4dd2643db369079fa6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059843960 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|
| 72.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059842006 | 72.106.19.56 | 200 OK | 285 B |
URL GET HTTP/1.172.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059842006 IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typetroff or preprocessor input, ASCII text, with very long lines (333), with no line terminators Hash00da3e672689faa7ac3d14bffddeaba5 d85145a696a14d251f031cd3bade17eb8d9a8f27 03a3df00005f22a6e15c299db76c0e805d3b1011ea835b4dd2643db369079fa6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059842006 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|
| 72.106.19.56/img/sim_detected.png | 72.106.19.56 | 200 OK | 3.1 kB |
URL GET HTTP/1.072.106.19.56/img/sim_detected.png IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
Hashf7f0455f96237d33df829877c704b808 626010fcb67aeb0fead92ba8deea7a166b57ff50 9b45989ad0c4b5b1c7bba9bd02c52b0cb73e6c83ea2e22c40ecdbf1e1b8820a8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/sim_detected.png HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:10 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 3076
Content-type: text/plain
|
|
| 72.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059845263 | 72.106.19.56 | 200 OK | 285 B |
URL GET HTTP/1.172.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059845263 IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typetroff or preprocessor input, ASCII text, with very long lines (333), with no line terminators Hash00da3e672689faa7ac3d14bffddeaba5 d85145a696a14d251f031cd3bade17eb8d9a8f27 03a3df00005f22a6e15c299db76c0e805d3b1011ea835b4dd2643db369079fa6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059845263 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|
| 72.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059846424 | 72.106.19.56 | 200 OK | 285 B |
URL GET HTTP/1.172.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059846424 IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typetroff or preprocessor input, ASCII text, with very long lines (333), with no line terminators Hash00da3e672689faa7ac3d14bffddeaba5 d85145a696a14d251f031cd3bade17eb8d9a8f27 03a3df00005f22a6e15c299db76c0e805d3b1011ea835b4dd2643db369079fa6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059846424 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|
| 72.106.19.56/js/lib/jquery/jquery.tmpl.min.js | 72.106.19.56 | 200 OK | 6.1 kB |
URL GET HTTP/1.072.106.19.56/js/lib/jquery/jquery.tmpl.min.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeJavaScript source, ASCII text, with very long lines (6366), with no line terminators Hashce5d321d786016733663957d82891cfc 7cc424626cdb7548fcc182c9436a0d74b5ea3b78 f6fc19b035768845463865c440f4d07c2cb0d8d51ed36f155390be95b5f108e9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/jquery/jquery.tmpl.min.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:05 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 6121
Content-type: application/x-javascript
|
|
| 72.106.19.56/i18n/Messages_zh-cn.properties | 72.106.19.56 | 200 OK | 79 kB |
URL GET HTTP/1.072.106.19.56/i18n/Messages_zh-cn.properties IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /i18n/Messages_zh-cn.properties HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:07 2024
Server: Sanechips-Webs
Last-modified: Mon May 19 12:45:15 2014
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 79067
Content-type: text/plain
|
|
| 72.106.19.56/goform/goform_get_cmd_process?isTest=false&cmd=modem_main_state%2Cpuknumber%2Cpinnumber%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cpsw_fail_num_str%2Clogin_lock_time&multi_data=1&_=1714059843078 | 72.106.19.56 | 200 OK | 173 B |
URL GET HTTP/1.172.106.19.56/goform/goform_get_cmd_process?isTest=false&cmd=modem_main_state%2Cpuknumber%2Cpinnumber%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cpsw_fail_num_str%2Clogin_lock_time&multi_data=1&_=1714059843078 IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typetroff or preprocessor input, ASCII text, with no line terminators Hash4e40b866e97eb66770749b92a955df0e e42ec98afeadd26bdeff1aa2b15300a348cda1c5 e9987db8926a19c0202c3d0a500e09273ba89cdcaa5b7b78e3c141ed4de3e054
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?isTest=false&cmd=modem_main_state%2Cpuknumber%2Cpinnumber%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cpsw_fail_num_str%2Clogin_lock_time&multi_data=1&_=1714059843078 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|
| 72.106.19.56/js/lib/knockout/knockout.js | 72.106.19.56 | 200 OK | 564 B |
URL GET HTTP/1.072.106.19.56/js/lib/knockout/knockout.js IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typeASCII text, with very long lines (599), with no line terminators Hash4093d7b007357700a02d282db2c657e6 f039e9235b5f7ca5640a0cb42fa6ec66cb450625 ec13261a1189e1dbde20dc73770c0da1be0b2656ad129c19a561b85dc9702551
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/lib/knockout/knockout.js HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:05 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 564
Content-type: application/x-javascript
|
|
| 72.106.19.56/goform/goform_get_cmd_process?isTest=false&multi_data=1&cmd=blc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cppp_status%2Crj45_state%2Cethwan_mode&_=1714059840508 | 72.106.19.56 | 200 OK | 128 B |
URL GET HTTP/1.172.106.19.56/goform/goform_get_cmd_process?isTest=false&multi_data=1&cmd=blc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cppp_status%2Crj45_state%2Cethwan_mode&_=1714059840508 IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typetroff or preprocessor input, ASCII text, with no line terminators Hash1ecc0363b705bd8032136083a23b7562 3da1b0cdacb92da9d5b0756e813fc170e5614414 830829071a36196095b669c15700013238d08088a6fea500b1e309dd2dfa4824
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?isTest=false&multi_data=1&cmd=blc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cppp_status%2Crj45_state%2Cethwan_mode&_=1714059840508 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|
| 72.106.19.56/img/alert.png | 72.106.19.56 | 200 OK | 4.5 kB |
URL GET HTTP/1.072.106.19.56/img/alert.png IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
Hashc078e31fee375c5e1a7f8bc8491b9089 b93d234a37b649a34cef6d46972738a930b50658 4deebf70e66ad585900eaee63f03a827f6e27c593b2d8348b5992c032c7bab07
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/alert.png HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:08 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 4454
Content-type: text/plain
|
|
| 72.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059848882 |  0.0.0.0 | | 285 B |
URL GET 72.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059848882 IP0.0.0.0:0
Requested byhttp://72.106.19.56/index.html
File typetroff or preprocessor input, ASCII text, with very long lines (333), with no line terminators Hash00da3e672689faa7ac3d14bffddeaba5 d85145a696a14d251f031cd3bade17eb8d9a8f27 03a3df00005f22a6e15c299db76c0e805d3b1011ea835b4dd2643db369079fa6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059848882 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|
| 72.106.19.56/img/battery_out.png | 72.106.19.56 | 200 OK | 3.0 kB |
URL GET HTTP/1.072.106.19.56/img/battery_out.png IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
Hashfa7ee32aa99abf05e1a27050b2f8e6be 3095a0915f642559780b6756fb188c08ee4147ce 81e84a9c9c648781168737d4b15efd1b0021fb083e799a6404175f30962548a6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/battery_out.png HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 200 OK
Date: Fri Apr 26 00:44:10 2024
Server: Sanechips-Webs
Last-modified: Sat Dec 15 18:55:29 2012
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-cache
Content-length: 3036
Content-type: text/plain
|
|
| 72.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059847576 | 72.106.19.56 | 200 OK | 285 B |
URL GET HTTP/1.172.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059847576 IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typetroff or preprocessor input, ASCII text, with very long lines (333), with no line terminators Hash00da3e672689faa7ac3d14bffddeaba5 d85145a696a14d251f031cd3bade17eb8d9a8f27 03a3df00005f22a6e15c299db76c0e805d3b1011ea835b4dd2643db369079fa6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059847576 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|
| 72.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059840388 | 72.106.19.56 | 200 OK | 285 B |
URL GET HTTP/1.172.106.19.56/goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059840388 IP72.106.19.56:80
Requested byhttp://72.106.19.56/index.html
File typetroff or preprocessor input, ASCII text, with very long lines (333), with no line terminators Hash00da3e672689faa7ac3d14bffddeaba5 d85145a696a14d251f031cd3bade17eb8d9a8f27 03a3df00005f22a6e15c299db76c0e805d3b1011ea835b4dd2643db369079fa6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /goform/goform_get_cmd_process?multi_data=1&isTest=false&cmd=modem_main_state%2Cpin_status%2Cblc_wan_mode%2Cblc_wan_auto_mode%2Cloginfo%2Cfota_new_version_state%2Cfota_current_upgrade_state%2Cfota_upgrade_selector%2Cnetwork_provider%2Cis_mandatory%2Csta_count%2Cm_sta_count&_=1714059840388 HTTP/1.1
Host: 72.106.19.56
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://72.106.19.56/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sanechips-Webs
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-control: no-cache
Content-Type: text/html
|
|