Report - 38.44.66.15/

Report Overview

Submitted URL
38.44.66.15/
IP
38.44.66.15
ASN
#37517 CV-Multimedia
Submitted
2024-04-25 15:28:33
Access
public
Website Title
.::Welcome to the Web-Based Configurator::.
Final URL
38.44.66.15/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
36

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
38.44.66.15	unknown	unknown	No data	No data	6.0 kB	551 kB	38.44.66.15

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed
2024-04-25	medium	38.44.66.15	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (18)

URL IP Response Size

38.44.66.15/

38.44.66.15

200 OK

1.4 kB

URL User Request GET HTTP/1.1
38.44.66.15/
IP
38.44.66.15:80
ASN
#37517 CV-Multimedia

File type
HTML document, ASCII text, with very long lines (1422), with no line terminators
Size
1.4 kB (1422 bytes)
Hash
1431e73e3134d302b090f5dc9bcd786a
cc886d110eba4514561cccc5e909fa10761b73d3
1f2516b34140663439630949bb9509b08c42c99f07bca06f0c91252366d002ce

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 1422
Date: Thu, 25 Apr 2024 15:28:10 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/

38.44.66.15

200 OK

1.4 kB

URL User Request GET HTTP/1.1
38.44.66.15/
IP
38.44.66.15:80
ASN
#37517 CV-Multimedia

File type
HTML document, ASCII text, with very long lines (1422), with no line terminators
Size
1.4 kB (1422 bytes)
Hash
1431e73e3134d302b090f5dc9bcd786a
cc886d110eba4514561cccc5e909fa10761b73d3
1f2516b34140663439630949bb9509b08c42c99f07bca06f0c91252366d002ce

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 1422
Date: Thu, 25 Apr 2024 15:28:10 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/plugins/zyxel-icon/styles.css

38.44.66.15

200 OK

5.8 kB

URL GET HTTP/1.1
38.44.66.15/static/plugins/zyxel-icon/styles.css
IP
38.44.66.15:80
ASN
#37517 CV-Multimedia

Requested by
http://38.44.66.15/

File type
ASCII text
Size
5.8 kB (5753 bytes)
Hash
79ff74208f00c9c29f0707893a645ad2
3a451db5f9ae128235e74a4d1123b21b41d1bacc
9ebf8aab3e8c696daa06a2eae50ea4ea1af382a8e437d6f6b4a210a9f1019536

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugins/zyxel-icon/styles.css HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 5753
Date: Thu, 25 Apr 2024 15:28:11 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/plugins/glyphicons/glyphicons.css

38.44.66.15

200 OK

15 kB

URL GET HTTP/1.1
38.44.66.15/static/plugins/glyphicons/glyphicons.css
IP
38.44.66.15:80
ASN
#37517 CV-Multimedia

Requested by
http://38.44.66.15/

File type
ASCII text, with CRLF line terminators
Size
15 kB (15362 bytes)
Hash
6d700cc8137c14a46a7712defc999903
9302c3f7adaa3334233679046ad3b69926c928f2
200177cc6d23d375970a163ef1f2ce57cb19c1f150ccfd1ea18d81c84ed7da1e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugins/glyphicons/glyphicons.css HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 15362
Date: Thu, 25 Apr 2024 15:28:11 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/plugins/popper/popper.min.js

38.44.66.15

200 OK

97 kB

URL GET HTTP/1.1
38.44.66.15/static/plugins/popper/popper.min.js
IP
38.44.66.15:80
ASN
#37517 CV-Multimedia

Requested by
http://38.44.66.15/

File type
JavaScript source, ASCII text, with very long lines (345), with CRLF line terminators
Size
97 kB (96677 bytes)
Hash
ffdcd326a71630f8fdfa6dd3cc803690
34d7dfff8f4927b5d921ae887eb2979c88d9b0ac
1ee0d1a92302d61ad77afd4278b59ca145bfb22c63dc658a5901e5e5d678d89c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugins/popper/popper.min.js HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 96677
Date: Thu, 25 Apr 2024 15:28:13 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/plugins/jquery-3.5.1.slim.min.js

38.44.66.15

200 OK

72 kB

URL GET HTTP/1.1
38.44.66.15/static/plugins/jquery-3.5.1.slim.min.js
IP
38.44.66.15:80
ASN
#37517 CV-Multimedia

Requested by
http://38.44.66.15/

File type
JavaScript source, ASCII text, with very long lines (65245)
Size
72 kB (72380 bytes)
Hash
fb8409a092adc6e8be17e87d59e0595e
cf8d9821552d51bb50ce572e696aba1309065800
e3e5f35d586c0e6a9a9d7187687be087580c40a5f8d0e52f0c4053bbc25c98db

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugins/jquery-3.5.1.slim.min.js HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 72380
Date: Thu, 25 Apr 2024 15:28:11 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/js/site.js

38.44.66.15

200 OK

2.0 kB

URL GET HTTP/1.1
38.44.66.15/static/js/site.js
IP
38.44.66.15:80
ASN
#37517 CV-Multimedia

Requested by
http://38.44.66.15/

File type
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
2.0 kB (1968 bytes)
Hash
bd3d50f39306601c8f8fd96240ec23bd
e4853f52376d318fd71f94dbe811cc82563d53c6
786852f1c60e451888e9bd1199ba1e8a33cf897dafa45e2ff2419fcf5d0e607e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/site.js HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 1968
Date: Thu, 25 Apr 2024 15:28:15 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/js/zyxel.js

38.44.66.15

200 OK

17 kB

URL GET HTTP/1.1
38.44.66.15/static/js/zyxel.js
IP
38.44.66.15:80
ASN
#37517 CV-Multimedia

Requested by
http://38.44.66.15/

File type
JavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (3567), with CRLF line terminators
Size
17 kB (16572 bytes)
Hash
834da21c8a0d99fa64d6224a5992f90e
a21e962d9d80724fb2d0d37b7d7f03505757a7c3
11bbaccaa54ca1fcc4833cb0d6e0673e4ef347b9480e0c27b119b971bd91762b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/zyxel.js HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 16572
Date: Thu, 25 Apr 2024 15:28:17 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/plugins/bootstrap-4.0.0/bootstrap.min.js

38.44.66.15

200 OK

57 kB

URL GET HTTP/1.1
38.44.66.15/static/plugins/bootstrap-4.0.0/bootstrap.min.js
IP
38.44.66.15:80
ASN
#37517 CV-Multimedia

Requested by
http://38.44.66.15/

File type
JavaScript source, ASCII text, with very long lines (56754), with CRLF line terminators
Size
57 kB (57047 bytes)
Hash
3c56ac2b3408272d55c30bc7b33d84fb
6737a99963c738cabb71b187252dfebb0f503e67
e8003de70957773d175547ba4567cd24caed9b5d28eca5c7c0e99abdc98055e8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugins/bootstrap-4.0.0/bootstrap.min.js HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 57047
Date: Thu, 25 Apr 2024 15:28:14 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/css/app.8b25ac6143a16a04357207eae3621798.css

38.44.66.15

200 OK

81 kB

URL GET HTTP/1.1
38.44.66.15/static/css/app.8b25ac6143a16a04357207eae3621798.css
IP
38.44.66.15:80
ASN
#37517 CV-Multimedia

Requested by
http://38.44.66.15/

File type
ASCII text, with very long lines (65536), with no line terminators
Size
81 kB (81044 bytes)
Hash
e8fb09c13f2a3fc30d612ebfa4044d05
3a0f82bb9f18bd055131780ebde5b034cd6d0706
25a2819d955658963e7a2afcce6b579c78b6cb1a1c3c72a1f0595508032275e5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/app.8b25ac6143a16a04357207eae3621798.css HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 81044
Date: Thu, 25 Apr 2024 15:28:11 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/js/aes.js

38.44.66.15

200 OK

13 kB

URL GET HTTP/1.1
38.44.66.15/static/js/aes.js
IP
38.44.66.15:80
ASN
#37517 CV-Multimedia

Requested by
http://38.44.66.15/

File type
JavaScript source, ASCII text, with very long lines (548)
Size
13 kB (13360 bytes)
Hash
4ff108e4584780dce15d610c142c3e62
77e4519962e2f6a9fc93342137dbb31c33b76b04
fc7e184beeda61bf6427938a84560f52348976bb55e807b224eb53930e97ef6a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/aes.js HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 13360
Date: Thu, 25 Apr 2024 15:28:22 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/plugins/bootstrap-4.0.0/bootstrap.min.css

38.44.66.15

200 OK

127 kB

URL GET HTTP/1.1
38.44.66.15/static/plugins/bootstrap-4.0.0/bootstrap.min.css
IP
38.44.66.15:80
ASN
#37517 CV-Multimedia

Requested by
http://38.44.66.15/

File type
ASCII text, with very long lines (65313), with CRLF line terminators
Size
127 kB (127349 bytes)
Hash
6d418e5e96f0d9e04ea93d18d90500cd
10c7bbd77f08a7e4e9afbc8a4c0df1b9dac05f29
4b77a410d8c572230569c08a0accf6de169d27645bd7a2532865cc8f1bbdbd52

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugins/bootstrap-4.0.0/bootstrap.min.css HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 127349
Date: Thu, 25 Apr 2024 15:28:10 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/js/manifest.js

38.44.66.15

200 OK

1.5 kB

URL GET HTTP/1.1
38.44.66.15/static/js/manifest.js
IP
38.44.66.15:80
ASN
#37517 CV-Multimedia

Requested by
http://38.44.66.15/

File type
JavaScript source, ASCII text, with very long lines (1501), with no line terminators
Size
1.5 kB (1501 bytes)
Hash
6be864a77adeaf0406644bb1a9e9be02
d39211f793ff83834db63b10937520eec073a754
85b36442569d497592ce27012dc4a620767930b4560a8310974da03bf9ee8bdc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/manifest.js HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 1501
Date: Thu, 25 Apr 2024 15:28:23 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/js/jsencrypt.min.js

38.44.66.15

200 OK

54 kB

URL GET HTTP/1.1
38.44.66.15/static/js/jsencrypt.min.js
IP
38.44.66.15:80
ASN
#37517 CV-Multimedia

Requested by
http://38.44.66.15/

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (53679), with no line terminators
Size
54 kB (53683 bytes)
Hash
eaee33014b8cd8275f3081a818227e92
b72f5600ba0b9a81596b4a4313b18f406b31e7fb
e1711a24aa7cc44fa3f70bc6b4b8d4c7a10543e9ff71ad0a2d030a85df7976e9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/jsencrypt.min.js HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 53683
Date: Thu, 25 Apr 2024 15:28:19 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/css/colorTheme.css

0.0.0.0

0 B

URL GET
38.44.66.15/static/css/colorTheme.css
IP
0.0.0.0:0
ASN
#0

Requested by
http://38.44.66.15/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/colorTheme.css HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

38.44.66.15/static/js/vendor.js

0.0.0.0

0 B

URL GET
38.44.66.15/static/js/vendor.js
IP
0.0.0.0:0
ASN
#0

Requested by
http://38.44.66.15/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/vendor.js HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 429074
Date: Thu, 25 Apr 2024 15:28:23 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/css/layout.css

0.0.0.0

0 B

URL GET
38.44.66.15/static/css/layout.css
IP
0.0.0.0:0
ASN
#0

Requested by
http://38.44.66.15/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/layout.css HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 148899
Date: Thu, 25 Apr 2024 15:28:18 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

38.44.66.15/static/js/app.js

0.0.0.0

0 B

URL GET
38.44.66.15/static/js/app.js
IP
0.0.0.0:0
ASN
#0

Requested by
http://38.44.66.15/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/app.js HTTP/1.1
Host: 38.44.66.15
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://38.44.66.15/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/javascript
Cache-Control: no-cache
Last-Modified: Mon, 31 Oct 2022 12:45:27 GMT
Content-Length: 2043297
Date: Thu, 25 Apr 2024 15:28:23 GMT
X-Frame-Options: sameorigin
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (18)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1