Report - vip.gutou.cc/kss_api/api.php?a=uplog&apiver=903&c=0&gdata=1&softcode=1000025&&x=136126

Report Overview

Submitted URL
vip.gutou.cc/kss_api/api.php?a=uplog&apiver=903&c=0&gdata=1&softcode=1000025&&x=136126
IP
203.195.236.181
ASN
#45090 Shenzhen Tencent Computer Systems Company Limited
Submitted
2023-06-09 05:32:30
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
6
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
vip.gutou.cc	unknown	2009-11-06	2012-11-05	2023-05-28	914 B	5.3 kB	203.195.236.181

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-09 05:32:12	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-09 05:32:12	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-09 05:32:12	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-09 05:32:14	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-06-09 05:32:14	high	Client IP	203.195.236.181	ETPRO MALWARE Win.Trojan.Magania-4120 Checkin
2023-06-09 05:32:15	medium	Client IP	Internal IP	ET DNS Query for .cc TLD

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

vip.gutou.cc/kss_api/api.php?a=uplog&apiver=903&c=0&gdata=1&softcode=1000025&&x=136126

203.195.236.181

200 OK

305 B

URL User Request GET HTTP/1.1
vip.gutou.cc/kss_api/api.php?a=uplog&apiver=903&c=0&gdata=1&softcode=1000025&&x=136126
IP
203.195.236.181:80
ASN
#45090 Shenzhen Tencent Computer Systems Company Limited

File type
Unicode text, UTF-8 text, with no line terminators
Size
305 B (305 bytes)
Hash
65ece4f21195a7ebfc2038cb6af6baec
b243ca6a7c9643855d9b2e0d906cae54522ca3f4
9a807d7adb4b1f7f35f0b8845d675d4f68a4dca63fa6fe5b778937e309ca2552

Detections

NIDS	Severity	Alert
suricata	high	ETPRO MALWARE Win.Trojan.Magania-4120 Checkin

HTTP Headers

GET /kss_api/api.php?a=uplog&apiver=903&c=0&gdata=1&softcode=1000025&&x=136126 HTTP/1.1
Host: vip.gutou.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Type: text/html;charset=utf-8
Content-Encoding: gzip
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Vary: Accept-Encoding
Server: Microsoft-IIS/7.5
Set-Cookie: PHPSESSID=lvjh18n7rbct95ipckvhbbnp52; path=/
X-Powered-By: PHP/5.2.17, ASP.NET
Date: Fri, 09 Jun 2023 05:32:14 GMT
Connection: close
Content-Length: 305

vip.gutou.cc/favicon.ico

203.195.236.181

200 OK

4.3 kB

URL GET HTTP/1.1
vip.gutou.cc/favicon.ico
IP
203.195.236.181:80
ASN
#45090 Shenzhen Tencent Computer Systems Company Limited

Requested by
http://vip.gutou.cc/kss_api/api.php?a=uplog&apiver=903&c=0&gdata=1&softcode=1000025&&x=136126

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Size
4.3 kB (4286 bytes)
Hash
e9a53c0b568b18da9a2ef41b8a8d6f95
6fa777e942ad625e161b9843025ad5fdfb7e637b
e5577e2443de3c4624822d50b5a233a27fb819c44d5c2e360c5d87f0fe799af3

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: vip.gutou.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://vip.gutou.cc/kss_api/api.php?a=uplog&apiver=903&c=0&gdata=1&softcode=1000025&&x=136126
Cookie: PHPSESSID=lvjh18n7rbct95ipckvhbbnp52
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/x-icon
Last-Modified: Tue, 15 Mar 2016 00:53:28 GMT
Accept-Ranges: bytes
ETag: "0b42f16557ed11:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 09 Jun 2023 05:32:15 GMT
Content-Length: 4286

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers