URL User Request GET HTTP/1.1IP5.8.10.73:80 ASN#34665 Petersburg Internet Network ltd.
File typeHTML document, ASCII text Hash222ae132b122457e3b8fcc961a5f8345 15ff7ef6181b676922e6833ead8f4ff17feab4bd 11e5887ffc7d99ecf459907ec470b8ec7dca2fbd49562530aed83072fafeb6ed
Analyzer | Verdict | Alert | urlquery | none | Audit - Open directory | Quad9 DNS | malicious | Sinkholed |
NIDS | Severity | Alert | suricata | medium | ET INFO HTTP Request to a *.top domain |
GET / HTTP/1.1
Host: bitpolnex.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 07:21:49 GMT
Server: Apache/2.4.29 (Ubuntu)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 453
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html;charset=UTF-8
|
| bitpolnex.top/icons/blank.gif | 5.8.10.73 | 200 OK | 148 B |
URL GET HTTP/1.1bitpolnex.top/icons/blank.gif IP5.8.10.73:80 ASN#34665 Petersburg Internet Network ltd.
File typeGIF image data, version 89a, 20 x 22 Hash19517fb39a31be6b8d7ccf53ad84908f ebbcfdc6acc99f7aac3bf7fe72bc55f07f03f7e9 3cb0e54babf019703fe671a32fcc3947aab9079ec2871cf0f9639245cc12d878
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /icons/blank.gif HTTP/1.1
Host: bitpolnex.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bitpolnex.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 07:21:49 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 20 Nov 2004 20:16:24 GMT
ETag: "94-3e9564c23b600"
Accept-Ranges: bytes
Content-Length: 148
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif
|
| bitpolnex.top/icons/compressed.gif | 5.8.10.73 | 200 OK | 1.0 kB |
URL GET HTTP/1.1bitpolnex.top/icons/compressed.gif IP5.8.10.73:80 ASN#34665 Petersburg Internet Network ltd.
File typeGIF image data, version 89a, 20 x 22 Hash4f2cb253390d6dcf57a3eb144feed7ca 2417c47df268a568e07f61d312a637461d46cc0f 72028ff517a6e81f72a2184c7f5d191944db4890e5a6d7aab5ca1f5945b6d2ed
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /icons/compressed.gif HTTP/1.1
Host: bitpolnex.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bitpolnex.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 07:21:49 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 20 Nov 2004 20:16:24 GMT
ETag: "40e-3e9564c23b600"
Accept-Ranges: bytes
Content-Length: 1038
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/gif
|
| bitpolnex.top/icons/folder.gif | 5.8.10.73 | 200 OK | 225 B |
URL GET HTTP/1.1bitpolnex.top/icons/folder.gif IP5.8.10.73:80 ASN#34665 Petersburg Internet Network ltd.
File typeGIF image data, version 89a, 20 x 22 Hashd342cba375fea336967317bdb5d7cf19 768de3abb08abc5fe2db93454a78c9d3d955d5e4 fbe5eca717cfbcb58891d431f9afaf30aa740d9fce007e820a599f22afa0dee2
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /icons/folder.gif HTTP/1.1
Host: bitpolnex.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bitpolnex.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 07:21:49 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 20 Nov 2004 20:16:24 GMT
ETag: "e1-3e9564c23b600"
Accept-Ranges: bytes
Content-Length: 225
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/gif
|
| bitpolnex.top/favicon.ico | 5.8.10.73 | 404 Not Found | 275 B |
URL GET HTTP/1.1bitpolnex.top/favicon.ico IP5.8.10.73:80 ASN#34665 Petersburg Internet Network ltd.
File typeHTML document, ASCII text Hash652e82ec65426e3c28e2573a101fa8f7 e8a1aeeb1799bad9e39b33111d2dc932173b1b28 822eff9e1f24f871db8b96846abed4ee799311b97ad10a800e6959c63fa46b56
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: bitpolnex.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://bitpolnex.top/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 07:21:49 GMT
Server: Apache/2.4.29 (Ubuntu)
Content-Length: 275
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|