Report - 116.204.103.99:8090/login

Report Overview

Submitted URL
116.204.103.99:8090/login
IP
116.204.103.99
ASN
#55990 Huawei Cloud Service data center
Submitted
2024-04-25 11:47:23
Access
public
Website Title
云时空商业ERP系统
Final URL
116.204.103.99:8090/login
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
28

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
116.204.103.99:8090	unknown	unknown	No data	No data	6.1 kB	842 kB	116.204.103.99

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	116.204.103.99	Sinkholed
2024-04-25	medium	116.204.103.99	Sinkholed
2024-04-25	medium	116.204.103.99	Sinkholed
2024-04-25	medium	116.204.103.99	Sinkholed
2024-04-25	medium	116.204.103.99	Sinkholed
2024-04-25	medium	116.204.103.99	Sinkholed
2024-04-25	medium	116.204.103.99	Sinkholed
2024-04-25	medium	116.204.103.99	Sinkholed
2024-04-25	medium	116.204.103.99	Sinkholed
2024-04-25	medium	116.204.103.99	Sinkholed
2024-04-25	medium	116.204.103.99	Sinkholed
2024-04-25	medium	116.204.103.99	Sinkholed
2024-04-25	medium	116.204.103.99	Sinkholed
2024-04-25	medium	116.204.103.99	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	116.204.103.99:8090/static/js/jquery-1.9.1.min.js	93 kB	2023-03-07	2024-04-26
Pretty URL 116.204.103.99:8090/static/js/jquery-1.9.1.min.js IP 116.204.103.99 ASN #55990 Huawei Cloud Service data center Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 17:02:08 Last Seen2024-04-26 14:29:40 Times Seen395 Hash ace6bda2067c29bcd15eb89a8221df3d b5926d5e80b94d7eee4e9f1c18b91427d47f2530 f76e9ad77bc5d73afc3d4208a860b9447a6e6a41fcfd8336a0ed30dd35252e82 Loading...

	116.204.103.99:8090/static/plugin/bootstrap/3.3.4/js/bootstrap.min.js	36 kB	2023-03-07	2024-05-04
Pretty URL 116.204.103.99:8090/static/plugin/bootstrap/3.3.4/js/bootstrap.min.js IP 116.204.103.99 ASN #55990 Huawei Cloud Service data center Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:08 Last Seen2024-05-04 13:22:20 Times Seen7835 Hash 8c237312864d2e4c4f03544cd4f9b195 253711c6d825de55a8360552573be950da180614 d5fd173d00d9733900834e0e1083de86b532e048b15c0420ba5c2db0623644b8 Loading...

	116.204.103.99:8090/static/plugin/lhgdialog/lhgdialog.min.js	15 kB	2023-03-13	2024-04-26
Pretty URL 116.204.103.99:8090/static/plugin/lhgdialog/lhgdialog.min.js IP 116.204.103.99 ASN #55990 Huawei Cloud Service data center Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 02:14:21 Last Seen2024-04-26 14:29:40 Times Seen12 Hash 87fc19e38df5cd0181b50a70b08f172d 3f20a1d505ff78e7061422a6c3ab873c616dfe81 b2f39145aa0bcd5f0710dd273d8879818d0281f7bb7564ecee1b32220154a84a Loading...

	116.204.103.99:8090/login	108 B	2023-03-13	2024-05-04
Pretty URL 116.204.103.99:8090/login IP 116.204.103.99 ASN #55990 Huawei Cloud Service data center Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 01:41:40 Last Seen2024-05-04 14:23:43 Times Seen12 Hash ad4796beef06eefafc6267b8e923e0ea bb2ecd5a88730618278d525460075eb4ebbcf764 cc3eda2625d7d6a2b010f338996b6c5480e4379392e7fbf7e08b679bafcd5ca1 Loading...

	116.204.103.99:8090/login	9.4 kB	2024-04-25	2024-04-25
Pretty URL 116.204.103.99:8090/login IP 116.204.103.99 ASN #55990 Huawei Cloud Service data center Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 13:47:30 Last Seen2024-04-25 13:47:30 Times Seen1 Hash 60bbe0f520f41a2c1b6fccf5f5b3edea e688168b7fb60398b402effbeb3182243198cd46 07abfcb06072f32487c71ca0553a769b7868dd3ac2621db0c9a955d9becc41de Loading...

	116.204.103.99:8090/login	341 B	2024-04-25	2024-04-26
Pretty URL 116.204.103.99:8090/login IP 116.204.103.99 ASN #55990 Huawei Cloud Service data center Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-25 13:47:30 Last Seen2024-04-26 14:29:40 Times Seen2 Hash 552607089db6f531ccc12fbb94fca4ee cfd81081ef8d81841d103b15bcadc797436ba387 814c474bf5fdb5d22c4148cd35ba58279b6937645e0cf55ff3ec93c865b7d235 Loading...

		Size	First Seen	Last Seen
	#1 Eval - b02fa1e2a4b33100c89cb9a39082682f	20 kB	2023-03-07	2024-04-26
Pretty Observations First Seen2023-03-07 12:08:37 Last Seen2024-04-26 14:29:40 Times Seen28 Hash b02fa1e2a4b33100c89cb9a39082682f 2a8d1dadf26fd7b1a20aae3e26253af7e1e66912 0a08f481e494307cebf366b5de79ccecfac9bbf1ec8fb056d63f71ae0b84434b Loading...

HTTP Transactions (14)

URL IP Response Size

116.204.103.99:8090/login

116.204.103.99

200 OK

17 kB

URL User Request GET HTTP/1.1
116.204.103.99:8090/login
IP
116.204.103.99:8090
ASN
#55990 Huawei Cloud Service data center

File type
JavaScript source, Unicode text, UTF-8 text, with CRLF, LF line terminators
Size
17 kB (17094 bytes)
Hash
2419293f82dfabee3cc2ede38f765527
69b78f5039f70ea2a1b611cd4a07671cb6d241bb
7d4df41600241fd1d98b9d36f7f1bdc70531cb96b82d7118c85876a5b1ac1d88

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login HTTP/1.1
Host: 116.204.103.99:8090
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Set-Cookie: emscm.session.id=89be0bcf-2840-4122-bccb-bbb0ad64456a; Path=/; HttpOnly; SameSite=lax
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
Transfer-Encoding: chunked
Date: Thu, 25 Apr 2024 11:46:58 GMT

116.204.103.99:8090/static/css/login/css_home.css

116.204.103.99

200 OK

3.2 kB

URL GET HTTP/1.1
116.204.103.99:8090/static/css/login/css_home.css
IP
116.204.103.99:8090
ASN
#55990 Huawei Cloud Service data center

Requested by
http://116.204.103.99:8090/login

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
3.2 kB (3212 bytes)
Hash
452793f0cece6c883bb7fa93d2da9326
1eaef09508b2da3a795050ec6cb759faf91cd250
d0d24459716c6d3ba370843b8ed96b2c9820704534a20d0d1b06ea6abfb768bd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/login/css_home.css HTTP/1.1
Host: 116.204.103.99:8090
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://116.204.103.99:8090/login
Cookie: emscm.session.id=89be0bcf-2840-4122-bccb-bbb0ad64456a
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Wed, 20 Jul 2022 09:24:52 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
Content-Type: text/css;charset=UTF-8
Content-Length: 3212
Date: Thu, 25 Apr 2024 11:46:58 GMT

116.204.103.99:8090/static/plugin/lhgdialog/lhgdialog.min.js

116.204.103.99

200 OK

15 kB

URL GET HTTP/1.1
116.204.103.99:8090/static/plugin/lhgdialog/lhgdialog.min.js
IP
116.204.103.99:8090
ASN
#55990 Huawei Cloud Service data center

Requested by
http://116.204.103.99:8090/login

File type
JavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (14479), with CRLF line terminators
Size
15 kB (14630 bytes)
Hash
d5bad21059f6b37b47ca371948fcd140
ea5b86a8a28a68657e7e5abb98a66392d25a1a85
412d053f5379026e3e4db689fc48b0e7def9eb5d1eedf46fb34b7ebce02cc6e8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugin/lhgdialog/lhgdialog.min.js HTTP/1.1
Host: 116.204.103.99:8090
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://116.204.103.99:8090/login
Cookie: emscm.session.id=89be0bcf-2840-4122-bccb-bbb0ad64456a
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Mon, 01 Nov 2021 03:34:04 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
Content-Type: application/javascript;charset=UTF-8
Content-Length: 14630
Date: Thu, 25 Apr 2024 11:46:58 GMT

116.204.103.99:8090/static/plugin/bootstrap/3.3.4/js/bootstrap.min.js

116.204.103.99

200 OK

36 kB

URL GET HTTP/1.1
116.204.103.99:8090/static/plugin/bootstrap/3.3.4/js/bootstrap.min.js
IP
116.204.103.99:8090
ASN
#55990 Huawei Cloud Service data center

Requested by
http://116.204.103.99:8090/login

File type
JavaScript source, ASCII text, with very long lines (32025)
Size
36 kB (35951 bytes)
Hash
8c237312864d2e4c4f03544cd4f9b195
253711c6d825de55a8360552573be950da180614
d5fd173d00d9733900834e0e1083de86b532e048b15c0420ba5c2db0623644b8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugin/bootstrap/3.3.4/js/bootstrap.min.js HTTP/1.1
Host: 116.204.103.99:8090
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://116.204.103.99:8090/login
Cookie: emscm.session.id=89be0bcf-2840-4122-bccb-bbb0ad64456a
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Mon, 01 Nov 2021 03:33:54 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
Content-Type: application/javascript;charset=UTF-8
Content-Length: 35951
Date: Thu, 25 Apr 2024 11:46:58 GMT

116.204.103.99:8090/static/js/jquery-1.9.1.min.js

116.204.103.99

200 OK

93 kB

URL GET HTTP/1.1
116.204.103.99:8090/static/js/jquery-1.9.1.min.js
IP
116.204.103.99:8090
ASN
#55990 Huawei Cloud Service data center

Requested by
http://116.204.103.99:8090/login

File type
JavaScript source, ASCII text, with very long lines (32089)
Size
93 kB (92593 bytes)
Hash
ace6bda2067c29bcd15eb89a8221df3d
b5926d5e80b94d7eee4e9f1c18b91427d47f2530
f76e9ad77bc5d73afc3d4208a860b9447a6e6a41fcfd8336a0ed30dd35252e82

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/js/jquery-1.9.1.min.js HTTP/1.1
Host: 116.204.103.99:8090
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://116.204.103.99:8090/login
Cookie: emscm.session.id=89be0bcf-2840-4122-bccb-bbb0ad64456a
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Mon, 01 Nov 2021 03:33:18 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
Content-Type: application/javascript;charset=UTF-8
Content-Length: 92593
Date: Thu, 25 Apr 2024 11:46:58 GMT

116.204.103.99:8090/static/plugin/bootstrap/3.3.4/css/bootstrap.min.css

116.204.103.99

200 OK

119 kB

URL GET HTTP/1.1
116.204.103.99:8090/static/plugin/bootstrap/3.3.4/css/bootstrap.min.css
IP
116.204.103.99:8090
ASN
#55990 Huawei Cloud Service data center

Requested by
http://116.204.103.99:8090/login

File type
ASCII text, with very long lines (65371)
Size
119 kB (119421 bytes)
Hash
281750a1063a448bfa4cc98a0fbbb022
611cf9be134a7b283309d2c8758b35c8f1df9cc6
4bf5962471099607f072e86456ca41325c186450e22fc1de45b28df25ac9a0da

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugin/bootstrap/3.3.4/css/bootstrap.min.css HTTP/1.1
Host: 116.204.103.99:8090
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://116.204.103.99:8090/login
Cookie: emscm.session.id=89be0bcf-2840-4122-bccb-bbb0ad64456a
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Mon, 01 Nov 2021 03:33:54 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
Content-Type: text/css;charset=UTF-8
Content-Length: 119421
Date: Thu, 25 Apr 2024 11:46:58 GMT

116.204.103.99:8090/static/css/login/ace.css

116.204.103.99

200 OK

490 kB

URL GET HTTP/1.1
116.204.103.99:8090/static/css/login/ace.css
IP
116.204.103.99:8090
ASN
#55990 Huawei Cloud Service data center

Requested by
http://116.204.103.99:8090/login

File type
ASCII text
Size
490 kB (489723 bytes)
Hash
a3eb815bd671601507aa14eb720c0813
2219a2ffb2b1d373e48078f06e9d7c9830f815cd
2e427bd0fe5e45b021096a05a87d41f766cd3bda6b471cef942ab943ef8fa06c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/css/login/ace.css HTTP/1.1
Host: 116.204.103.99:8090
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://116.204.103.99:8090/login
Cookie: emscm.session.id=89be0bcf-2840-4122-bccb-bbb0ad64456a
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Thu, 14 Jul 2022 01:23:00 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
Content-Type: text/css;charset=UTF-8
Content-Length: 489723
Date: Thu, 25 Apr 2024 11:46:58 GMT

116.204.103.99:8090/static/img/user.png

116.204.103.99

200 OK

3.3 kB

URL GET HTTP/1.1
116.204.103.99:8090/static/img/user.png
IP
116.204.103.99:8090
ASN
#55990 Huawei Cloud Service data center

Requested by
http://116.204.103.99:8090/login

File type
PNG image data, 37 x 37, 8-bit/color RGBA, non-interlaced
Size
3.3 kB (3259 bytes)
Hash
19d8ab48ddfb4390a5bb693ec84412cd
ae507d113ac779f9c7a4a830d95427eb1784ecff
414977480a579310eb297c78acb7b22741699dab1d2fd57a1761dfbb9a2a3e9e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/img/user.png HTTP/1.1
Host: 116.204.103.99:8090
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://116.204.103.99:8090/login
Cookie: emscm.session.id=89be0bcf-2840-4122-bccb-bbb0ad64456a
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Tue, 12 Jul 2022 10:09:44 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
Content-Type: image/png;charset=UTF-8
Content-Length: 3259
Date: Thu, 25 Apr 2024 11:47:00 GMT

116.204.103.99:8090/static/img/psd.png

116.204.103.99

200 OK

3.1 kB

URL GET HTTP/1.1
116.204.103.99:8090/static/img/psd.png
IP
116.204.103.99:8090
ASN
#55990 Huawei Cloud Service data center

Requested by
http://116.204.103.99:8090/login

File type
PNG image data, 37 x 37, 8-bit/color RGBA, non-interlaced
Size
3.1 kB (3129 bytes)
Hash
ad17eb8bb46d894b1b3216fe60cd9369
4f4636640ce388d39f071a78fa44a16503ecd276
336f54510429ebc8a0bd2cb88a29b375dbcd5b9a21b91322db6c9494ee2cfca6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/img/psd.png HTTP/1.1
Host: 116.204.103.99:8090
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://116.204.103.99:8090/login
Cookie: emscm.session.id=89be0bcf-2840-4122-bccb-bbb0ad64456a
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Tue, 12 Jul 2022 10:09:58 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
Content-Type: image/png;charset=UTF-8
Content-Length: 3129
Date: Thu, 25 Apr 2024 11:47:00 GMT

116.204.103.99:8090/static/img/yunlogo_home.png

116.204.103.99

200 OK

7.1 kB

URL GET HTTP/1.1
116.204.103.99:8090/static/img/yunlogo_home.png
IP
116.204.103.99:8090
ASN
#55990 Huawei Cloud Service data center

Requested by
http://116.204.103.99:8090/login

File type
PNG image data, 201 x 58, 8-bit/color RGBA, non-interlaced
Size
7.1 kB (7102 bytes)
Hash
6b34ab307e2b18ff6c1e98e9754b92a8
81fbad6a8ec935bfcc61b54c5dba1e45ed3c46e4
9e7ac66e0232142bb334563213954494d1d80d555be50c847d6e413e37832950

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/img/yunlogo_home.png HTTP/1.1
Host: 116.204.103.99:8090
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://116.204.103.99:8090/login
Cookie: emscm.session.id=89be0bcf-2840-4122-bccb-bbb0ad64456a
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Tue, 12 Jul 2022 10:10:14 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
Content-Type: image/png;charset=UTF-8
Content-Length: 7102
Date: Thu, 25 Apr 2024 11:47:00 GMT

116.204.103.99:8090/static/plugin/lhgdialog/skins/default.css

116.204.103.99

200 OK

7.8 kB

URL GET HTTP/1.1
116.204.103.99:8090/static/plugin/lhgdialog/skins/default.css
IP
116.204.103.99:8090
ASN
#55990 Huawei Cloud Service data center

Requested by
http://116.204.103.99:8090/login

File type
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
7.8 kB (7774 bytes)
Hash
0c9d19621808430aba1101b49b7db7fe
3647372ccec37fd0951ad8317ac69829c5ec32fd
f9a061375d2f91de081d235616ec30e25cbf2fe06015cc82761dfe08d6e68ce9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugin/lhgdialog/skins/default.css HTTP/1.1
Host: 116.204.103.99:8090
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://116.204.103.99:8090/login
Cookie: emscm.session.id=89be0bcf-2840-4122-bccb-bbb0ad64456a
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Mon, 01 Nov 2021 03:34:04 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
Content-Type: text/css;charset=UTF-8
Content-Length: 7774
Date: Thu, 25 Apr 2024 11:47:00 GMT

116.204.103.99:8090/static/plugin/lhgdialog/skins/icons/loading.gif

116.204.103.99

200 OK

6.7 kB

URL GET HTTP/1.1
116.204.103.99:8090/static/plugin/lhgdialog/skins/icons/loading.gif
IP
116.204.103.99:8090
ASN
#55990 Huawei Cloud Service data center

Requested by
http://116.204.103.99:8090/login

File type
GIF image data, version 89a, 28 x 28
Size
6.7 kB (6666 bytes)
Hash
ed413f9ccf47d1ea7a9495e7477a8d66
b0d281c3b25f7be20f8a41ffa32e6e7af37b1641
4ef597f010f8715e6ccf6b78c9abc5ab75e618cff74b36d3b0971e28127bc2b5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/plugin/lhgdialog/skins/icons/loading.gif HTTP/1.1
Host: 116.204.103.99:8090
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://116.204.103.99:8090/static/plugin/lhgdialog/skins/default.css
Cookie: emscm.session.id=89be0bcf-2840-4122-bccb-bbb0ad64456a
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Mon, 01 Nov 2021 03:34:04 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
Content-Type: image/gif;charset=UTF-8
Content-Length: 6666
Date: Thu, 25 Apr 2024 11:47:00 GMT

116.204.103.99:8090/favicon.ico

116.204.103.99

200 OK

4.3 kB

URL GET HTTP/1.1
116.204.103.99:8090/favicon.ico
IP
116.204.103.99:8090
ASN
#55990 Huawei Cloud Service data center

Requested by
http://116.204.103.99:8090/login

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
5f7dad1942cfc6f4c4f7729e00ae5725
60fbd16294e6f5ad0b28784b906e14f676994253
e5d197ca356c0aa4ff5a49625d03b561f52258f9c86a845fb1ff7a5158d03301

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 116.204.103.99:8090
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://116.204.103.99:8090/login
Cookie: emscm.session.id=89be0bcf-2840-4122-bccb-bbb0ad64456a
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Accept-Ranges: bytes
ETag: W/"4286-1657705312000"
Last-Modified: Wed, 13 Jul 2022 09:41:52 GMT
Content-Type: image/x-icon;charset=UTF-8
Content-Length: 4286
Date: Thu, 25 Apr 2024 11:47:00 GMT

116.204.103.99:8090/static/img/homepage_img.png

116.204.103.99

200 OK

33 kB

URL GET HTTP/1.1
116.204.103.99:8090/static/img/homepage_img.png
IP
116.204.103.99:8090
ASN
#55990 Huawei Cloud Service data center

Requested by
http://116.204.103.99:8090/login

File type
PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced
Size
33 kB (33083 bytes)
Hash
2bf6a0de4abd81bca97b92623a88a5f3
daa952865df99ec7a3c3ce485a63f0ae767ade4f
069aaa21a6b502d904e833bb9e29b3ed6345e31227b5b799e1e59ffab547852a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/img/homepage_img.png HTTP/1.1
Host: 116.204.103.99:8090
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://116.204.103.99:8090/static/css/login/css_home.css
Cookie: emscm.session.id=89be0bcf-2840-4122-bccb-bbb0ad64456a
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
Last-Modified: Tue, 12 Jul 2022 10:09:32 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
Content-Type: image/png;charset=UTF-8
Content-Length: 33083
Date: Thu, 25 Apr 2024 11:47:00 GMT

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (14)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1