| 185.215.150.204/file/btc.exe |  185.215.150.204 | | 309 B |
URL 185.215.150.204/file/btc.exe IP185.215.150.204:0
File typeHTML document, ASCII text Hash31582c54b5f3abaacca6f6466065e8fd b7547aef32fe531c229711f036ff2b2be86266d4 c9263425eb949741292ddbb5bcc3a8f87e6d053167cc255ee16e48ad15b38322
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /file/btc.exe HTTP/1.1
Host: 185.215.150.204
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 18 Apr 2024 02:56:42 GMT
Server: Apache/2.4.6 (CentOS)
Location: http://185.215.150.204/index.php?file=btc.exe
Content-Length: 309
Connection: close
Content-Type: text/html; charset=iso-8859-1
|
|
| 185.215.150.204/index.php?file=btc.exe | 185.215.150.204 | | 267 B |
URL 185.215.150.204/index.php?file=btc.exe IP185.215.150.204:0
File typeHTML document, ASCII text Hash3f8ff725d32ed1e3b879f644be2fa549 e34f46a57a239ab0c6ada719f1a33b3655d0a2ae e35b898556b39762d39d653a9deab3ab49a382d22ea7b70d110d6e95c0f8defe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /index.php?file=btc.exe HTTP/1.1
Host: 185.215.150.204
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 02:56:43 GMT
Server: Apache/2.4.6 (CentOS)
X-Powered-By: PHP/7.2.34
Connection: close
Content-Length: 267
Content-Type: text/html; charset=UTF-8
|
|
| | 185.215.150.204 | | 762 B |
IP185.215.150.204:0
File typeHTML document, ASCII text Hash1b0d31a9d99324814f59433000eca747 46fda77bc95c66ff46ea5ade1665a289668fe12a 747c4dc4296f4a622f32f6c30a87f3c7a63a1e8504a9f2e77d0fc11fde18d327
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 185.215.150.204
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://185.215.150.204/index.php?file=btc.exe
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 02:56:44 GMT
Server: Apache/2.4.6 (CentOS)
X-Powered-By: PHP/7.2.34
Content-Length: 762
Connection: close
Content-Type: text/html; charset=UTF-8
|
|
| 185.215.150.204/favicon.ico | 185.215.150.204 | 302 Found | 296 B |
URL GET HTTP/1.1185.215.150.204/favicon.ico IP185.215.150.204:80
File typeHTML document, ASCII text Hashe2d7e9228325859bfce2b97b1006cba6 26cfa9dcad56e47b2194174175493a5c0c6deb3e 81bd73b5231cf6c97ef083d6bdca67a7320d0775e6aad9e6277608d656982719
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 185.215.150.204
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.215.150.204/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 18 Apr 2024 02:56:44 GMT
Server: Apache/2.4.6 (CentOS)
Location: http://185.215.150.204/index.php
Content-Length: 296
Connection: close
Content-Type: text/html; charset=iso-8859-1
|
|
| 185.215.150.204/index.php | 185.215.150.204 | 200 OK | 762 B |
URL GET HTTP/1.1185.215.150.204/index.php IP185.215.150.204:80
File typeHTML document, ASCII text Hash1b0d31a9d99324814f59433000eca747 46fda77bc95c66ff46ea5ade1665a289668fe12a 747c4dc4296f4a622f32f6c30a87f3c7a63a1e8504a9f2e77d0fc11fde18d327
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /index.php HTTP/1.1
Host: 185.215.150.204
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://185.215.150.204/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 02:56:44 GMT
Server: Apache/2.4.6 (CentOS)
X-Powered-By: PHP/7.2.34
Content-Length: 762
Connection: close
Content-Type: text/html; charset=UTF-8
|
|
| 185.215.150.204/sad.gif | 185.215.150.204 | 200 OK | 65 kB |
IP185.215.150.204:80
File typeGIF image data, version 89a, 450 x 330 Hash56eee54829b93d403008bdca5d6a0878 760c696a1a8278ec619ca9118d38b683407b692e 99365f4d2a85819d9f9ef635d664e3a3c7fc1fd7f7b4135c2fa244ae94752bc4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sad.gif HTTP/1.1
Host: 185.215.150.204
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.215.150.204/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 02:56:44 GMT
Server: Apache/2.4.6 (CentOS)
X-Powered-By: PHP/7.2.34
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|