| 97.92.125.74/62/0/GHBEKBIIBIM.dll | 97.92.125.74 | 307 Temporary Redirect | 0 B |
URL User Request GET HTTP/1.197.92.125.74/62/0/GHBEKBIIBIM.dll IP97.92.125.74:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /62/0/GHBEKBIIBIM.dll HTTP/1.1
Host: 97.92.125.74
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Location: /0.1/0/GHBEKBIIBIM.dll
Content-Length: 0
Date: Fri, 29 Mar 2024 15:43:56 GMT
Server: HTTP Server
|
| 97.92.125.74/0.1/0/GHBEKBIIBIM.dll | 97.92.125.74 | 404 Not Found | 345 B |
URL User Request GET HTTP/1.197.92.125.74/0.1/0/GHBEKBIIBIM.dll IP97.92.125.74:80
File typeXML 1.0 document, ASCII text Hashab99593efdf397078f11d9c37dd218a1 34540ffc5331cc545c1035b06a72b4f8d375973d beab79184bf1fca1f52ff3761f8a533827106fef3749c6c9c9a3e7eec619a226
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /0.1/0/GHBEKBIIBIM.dll HTTP/1.1
Host: 97.92.125.74
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: text/html
Content-Length: 345
Date: Fri, 29 Mar 2024 15:43:56 GMT
Server: HTTP Server
|
IP97.92.125.74:80
Requested byhttp://97.92.125.74/0.1/0/GHBEKBIIBIM.dll
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 97.92.125.74
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://97.92.125.74/0.1/0/GHBEKBIIBIM.dll
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Location: /0.1/gui/?item=favicon.ico
Content-Length: 0
Date: Fri, 29 Mar 2024 15:43:56 GMT
Server: HTTP Server
|
| 97.92.125.74/0.1/gui/?item=favicon.ico | 97.92.125.74 | 200 OK | 3.3 kB |
URL GET HTTP/1.197.92.125.74/0.1/gui/?item=favicon.ico IP97.92.125.74:80
Requested byhttp://97.92.125.74/0.1/0/GHBEKBIIBIM.dll
File typeJavaScript source, ASCII text, with CRLF line terminators Hash28a6f45b75faac382edfc89bc07601a4 41aa92d26cc586ff9a67dadd744e3e2527a013cc 616c609ca2c692402b36d163efde1506fd2255d9945bd1119a874153eb3fd695
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /0.1/gui/?item=favicon.ico HTTP/1.1
Host: 97.92.125.74
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://97.92.125.74/0.1/0/GHBEKBIIBIM.dll
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
ETag: "1682943582"
Last-Modified: Thu, 19 Dec 2019 11:57:15 GMT
Content-Length: 3255
Date: Fri, 29 Mar 2024 15:43:57 GMT
Server: HTTP Server
|