whatsaap-grupshotsjapan18.jkub.com/
200 OK 2.0 kB URL User Request GET HTTP/1.1 whatsaap-grupshotsjapan18.jkub.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6089b6cb65c59a5ae01e3f50620c2eaa
df40259d3a60af08fb048db40ac395d1ee435c64
7e4a050b3ebd08d9c1cfc227b53b2122beec5f2dcb531f8ac46da51d7145bda4
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.jkub .com Domain
GET / HTTP/1.1
Host: whatsaap-grupshotsjapan18.jkub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 01 Jun 2023 23:50:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Mon, 03 Jan 2022 17:28:39 GMT
ETag: W/"13b8-5d4b0d9edd568"
X-Cache: HIT from Backend
Content-Encoding: gzip
whatsaap-grupshotsjapan18.jkub.com/favicon.ico
404 Not Found 196 B URL GET HTTP/1.1 whatsaap-grupshotsjapan18.jkub.com/favicon.ico
IP
Requested by http://whatsaap-grupshotsjapan18.jkub.com/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
NIDS Severity Alert suricata medium ET INFO DYNAMIC_DNS HTTP Request to a *.jkub .com Domain
GET /favicon.ico HTTP/1.1
Host: whatsaap-grupshotsjapan18.jkub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://whatsaap-grupshotsjapan18.jkub.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.22.0
Date: Thu, 01 Jun 2023 23:50:39 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 196
Connection: keep-alive
Keep-Alive: timeout=60
static.cdn-cwp.com/files/images/cwp_logo.png
20 kB URL GET static.cdn-cwp.com/files/images/cwp_logo.png
IP
Requested by http://whatsaap-grupshotsjapan18.jkub.com/
File type PNG image data, 330 x 95, 8-bit/color RGBA, non-interlaced\012- data
Hash ed6dc3667a491af7b390856386b6f553
13afe86fdb8683b6b6f701fb5143c3692e63d430
0e7653738cd77a5a907e4e8033e64c13c3a132556a8c616e66f2ae15cb5e31bd
GET /files/images/cwp_logo.png HTTP/1.1
Host: static.cdn-cwp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://whatsaap-grupshotsjapan18.jkub.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.8.0
Date: Thu, 01 Jun 2023 23:50:39 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 14 Sep 2016 20:56:05 GMT
Content-Encoding: gzip
173.212.225.120
198.27.104.40