| 61.88.113.126/images/favicon.png | 61.88.113.126 | 200 OK | 4.2 kB |
URL GET 61.88.113.126/images/favicon.png IP 61.88.113.126:80
ASN#7474 SingTel Optus Pty Ltd
Requested byhttp://61.88.113.126/login.html
File typePNG image data, 128 x 128, 8-bit colormap, non-interlaced Hashd03dab9c1c60d9f534e8da3eeaba4ed5 a5f0a4435f84f28213ef77ccaffb4757c8770123 876523b9d277b69cb3a08443c0b9952d4defeb79e652689deb6f7194b6e8efcc
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /images/favicon.png HTTP/1.1
Host: 61.88.113.126
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://61.88.113.126/login.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
X-Frame-Options: SAMEORIGIN
Keep-Alive: timeout=20
ETag: "e7b-1046-6683b9e5"
Last-Modified: Tue, 02 Jul 2024 08:27:17 GMT
Date: Sun, 08 Jun 2025 18:58:50 GMT
Content-Type: image/png
Content-Length: 4166
|
|
| | 0.0.0.0 | | 0 B |
IP 0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /login.html HTTP/1.1
Host: 61.88.113.126
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://61.88.113.126/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| | 61.88.113.126 | 200 OK | 290 kB |
IP 61.88.113.126:80
ASN#7474 SingTel Optus Pty Ltd
File typeHTML document, ASCII text, with very long lines (32153) Size290 kB (290215 bytes) Hash7f91fed2ae15a0d06ce1a5c4b8adbb14 d7e62bbc3c1901241b7d1d4d613e0c5d9b4df77f 6afe6d3c031412b33531aa952c3ea78d2b54089a197b01130528896c6f69fe56
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /login.html HTTP/1.1
Host: 61.88.113.126
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://61.88.113.126/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
X-Frame-Options: SAMEORIGIN
Keep-Alive: timeout=20
ETag: "eb4-46da7-6683b9e5"
Last-Modified: Tue, 02 Jul 2024 08:27:17 GMT
Date: Sun, 08 Jun 2025 18:58:46 GMT
Content-Type: text/html
Content-Length: 290215
|
|
| 61.88.113.126/favicon.ico | 61.88.113.126 | 404 Not Found | 78 B |
URL GET 61.88.113.126/favicon.ico IP 61.88.113.126:80
ASN#7474 SingTel Optus Pty Ltd
Requested byhttp://61.88.113.126/login.html
File typeASCII text, with no line terminators Hasha8334cee940df15557af7f0325addd11 d9dd278d3092d14c2f0f0b34dfcadc2202ad22f6 8a868d383d54ff070b48e1c73087d0c8b0acb512c2acee37deaf329300dbd8ab
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 61.88.113.126
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://61.88.113.126/login.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Transfer-Encoding: chunked
X-Frame-Options: SAMEORIGIN
Keep-Alive: timeout=20
Content-Type: text/html
|
|
| 61.88.113.126/lang/login_en.js?_=1749409127855 | 61.88.113.126 | 200 OK | 533 B |
URL GET 61.88.113.126/lang/login_en.js?_=1749409127855 IP 61.88.113.126:80
ASN#7474 SingTel Optus Pty Ltd
Requested byhttp://61.88.113.126/login.html
File typeUnicode text, UTF-8 text, with very long lines (525), with no line terminators Hashca129ffa9ac79300cbedd17095b8d194 43af5131998254c14acb161c7f19642a0210b81e 546283ba90ca4f8633690d539e3ae675281b46ceba92f3e804c890b1a3d69f4e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /lang/login_en.js?_=1749409127855 HTTP/1.1
Host: 61.88.113.126
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://61.88.113.126/login.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
X-Frame-Options: SAMEORIGIN
Keep-Alive: timeout=20
ETag: "ead-215-6683b9e5"
Last-Modified: Tue, 02 Jul 2024 08:27:17 GMT
Date: Sun, 08 Jun 2025 18:58:49 GMT
Content-Type: text/javascript
Content-Length: 533
|
|
| 61.88.113.126/lang/oem0000.js?t=undefined&_=1749409127856 | 61.88.113.126 | 200 OK | 3.0 kB |
URL GET 61.88.113.126/lang/oem0000.js?t=undefined&_=1749409127856 IP 61.88.113.126:80
ASN#7474 SingTel Optus Pty Ltd
Requested byhttp://61.88.113.126/login.html
File typeUnicode text, UTF-8 text, with very long lines (2506), with no line terminators Hashb9e942ea21e84d7b42653705f778992f e6deb02c368b40dbb2af56de5c465245dc661150 4c1e6d275d7a334d40262f83a5bfce8494a899811fc886b96eab15b7623e88be
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /lang/oem0000.js?t=undefined&_=1749409127856 HTTP/1.1
Host: 61.88.113.126
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://61.88.113.126/login.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
X-Frame-Options: SAMEORIGIN
Keep-Alive: timeout=20
ETag: "eaf-b8a-6683b9e5"
Last-Modified: Tue, 02 Jul 2024 08:27:17 GMT
Date: Sun, 08 Jun 2025 18:58:49 GMT
Content-Type: text/javascript
Content-Length: 2954
|
|
| 61.88.113.126/images/login_logo.png | 61.88.113.126 | 200 OK | 3.6 kB |
URL GET 61.88.113.126/images/login_logo.png IP 61.88.113.126:80
ASN#7474 SingTel Optus Pty Ltd
Requested byhttp://61.88.113.126/login.html
File typePNG image data, 232 x 70, 8-bit colormap, non-interlaced Hash28b472dd61b1a1cc066e0950515e966d fcb494766ffd72c3b807c08caa6a776400809322 9be49089fb5c05ab96d1c1a8e4870064f2c4950d1a9a21fb9299aca4656ed8cf
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /images/login_logo.png HTTP/1.1
Host: 61.88.113.126
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://61.88.113.126/login.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
X-Frame-Options: SAMEORIGIN
Keep-Alive: timeout=20
ETag: "e8b-e2a-6683b9e5"
Last-Modified: Tue, 02 Jul 2024 08:27:17 GMT
Date: Sun, 08 Jun 2025 18:58:49 GMT
Content-Type: image/png
Content-Length: 3626
|
|
| 61.88.113.126/lang/login_en.js?t=undefined&_=1749409127857 | 61.88.113.126 | 200 OK | 533 B |
URL GET 61.88.113.126/lang/login_en.js?t=undefined&_=1749409127857 IP 61.88.113.126:80
ASN#7474 SingTel Optus Pty Ltd
Requested byhttp://61.88.113.126/login.html
File typeUnicode text, UTF-8 text, with very long lines (525), with no line terminators Hashca129ffa9ac79300cbedd17095b8d194 43af5131998254c14acb161c7f19642a0210b81e 546283ba90ca4f8633690d539e3ae675281b46ceba92f3e804c890b1a3d69f4e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /lang/login_en.js?t=undefined&_=1749409127857 HTTP/1.1
Host: 61.88.113.126
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://61.88.113.126/login.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
X-Frame-Options: SAMEORIGIN
Keep-Alive: timeout=20
ETag: "ead-215-6683b9e5"
Last-Modified: Tue, 02 Jul 2024 08:27:17 GMT
Date: Sun, 08 Jun 2025 18:58:50 GMT
Content-Type: text/javascript
Content-Length: 533
|
|
| | 0.0.0.0 | | 0 B |
IP 0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 61.88.113.126
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| | 61.88.113.126 | 200 OK | 429 kB |
IP 61.88.113.126:80
ASN#7474 SingTel Optus Pty Ltd
File typeHTML document, ASCII text, with very long lines (32059) Size429 kB (428677 bytes) Hashe8de677325d5cbcc4f9e793eeba7a389 8c0b77df771f7c4ad0183407bb2b759b96dd265a 27462a04aed82caef2e08300a293178ea8bdd16803483c56d9813c8e818d0327
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 61.88.113.126
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
X-Frame-Options: SAMEORIGIN
Keep-Alive: timeout=20
ETag: "e95-9a1b0-6683b9e5"
Last-Modified: Tue, 02 Jul 2024 08:27:17 GMT
Date: Sun, 08 Jun 2025 18:58:43 GMT
Content-Type: text/html
Content-Length: 631216
|
|
| 61.88.113.126/islogin | 61.88.113.126 | 200 ok | 174 B |
IP 61.88.113.126:80
ASN#7474 SingTel Optus Pty Ltd
Hash11bad5036b6ff088a0ab4482bd52641c 5c4cb64344e7d9ab80680602ef920e8e030849cf caee4cc46535218fde94c0c871686dd9716d6147e2644e2058c6e5afd9b0578d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /islogin HTTP/1.1
Host: 61.88.113.126
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Origin: http://61.88.113.126
DNT: 1
Connection: keep-alive
Referer: http://61.88.113.126/
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/1.1 200 ok
Connection: close
Transfer-Encoding: chunked
X-Frame-Options: SAMEORIGIN
Content-Type: application/json
|
|
| 61.88.113.126/islogin | 61.88.113.126 | 200 ok | 174 B |
IP 61.88.113.126:80
ASN#7474 SingTel Optus Pty Ltd
Requested byhttp://61.88.113.126/login.html
Hash11bad5036b6ff088a0ab4482bd52641c 5c4cb64344e7d9ab80680602ef920e8e030849cf caee4cc46535218fde94c0c871686dd9716d6147e2644e2058c6e5afd9b0578d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /islogin HTTP/1.1
Host: 61.88.113.126
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Origin: http://61.88.113.126
DNT: 1
Connection: keep-alive
Referer: http://61.88.113.126/login.html
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/1.1 200 ok
Connection: close
Transfer-Encoding: chunked
X-Frame-Options: SAMEORIGIN
Content-Type: application/json
|
|