| 69.128.62.126/ |  69.128.62.126 | | 863 B |
IP69.128.62.126:0
File typeHTML document, ASCII text Hashb047a527da493362dcf8f51329fb0778 0a448c37c6a7af687e4def019d9152a65860d9f7 79ff4bacc2a704be0339c5f89841628b1fa36668145367c682fcd5b3f2e2f465
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 69.128.62.126
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
date: Thu, 25 Apr 2024 23:36:46 GMT
content-length: 863
expires: Thu, 01 Jan 1970 00:00:00 GMT
accept-language: en-US,en;q=0.5
x-frame-options: sameorigin
content-type: text/html; charset=UTF-8
location: http://69.128.62.126/login
cache-control: private, must-revalidate
set-cookie: niagara_session=s62bf308456a3f204bf9b280f14bc6d47583d94510acb27d6c0; path=/; HttpOnly
|
|
| | 69.128.62.126 | 200 OK | 1.1 kB |
URL User Request GET HTTP/1.1IP69.128.62.126:80
File typeHTML document, ASCII text, with very long lines (370) Hash027b97c8c7ebbd6731bd85dc0390fcf1 f4f9a487240f4c0fda147d0816890ec2ad12d819 b0540eb6e3c8b225dae4458295be98397435b164bf98a7ae7f588ae37fee896d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login HTTP/1.1
Host: 69.128.62.126
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Thu, 25 Apr 2024 23:36:47 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
transfer-encoding: chunked
accept-language: en-US,en;q=0.5
x-frame-options: sameorigin
content-encoding: gzip
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store
set-cookie: niagara_session=sdd0036f42f4eba8ec06d3b901e8c029ce86e384b3ab61648bb; path=/; HttpOnly
|
|
| | 69.128.62.126 | 200 OK | 1.1 kB |
URL User Request GET HTTP/1.1IP69.128.62.126:80
File typeHTML document, ASCII text, with very long lines (370) Hash027b97c8c7ebbd6731bd85dc0390fcf1 f4f9a487240f4c0fda147d0816890ec2ad12d819 b0540eb6e3c8b225dae4458295be98397435b164bf98a7ae7f588ae37fee896d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login HTTP/1.1
Host: 69.128.62.126
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Thu, 25 Apr 2024 23:36:47 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
transfer-encoding: chunked
accept-language: en-US,en;q=0.5
x-frame-options: sameorigin
content-encoding: gzip
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store
set-cookie: niagara_session=s583c24baff90043d9f444e5bcdf21d4e6e52595f71acdc31e5; path=/; HttpOnly
|
|
| 69.128.62.126/login/login.css?3.8.403.1 | 69.128.62.126 | 200 OK | 872 B |
URL GET HTTP/1.169.128.62.126/login/login.css?3.8.403.1 IP69.128.62.126:80
Requested byhttp://69.128.62.126/login
File typeassembler source, ASCII text Hash4669d38dcfa8febc0150174d421010bd 35d8dbbe5f30be06e0bc3370626a06a229a08805 cea0c0c0d78ed7168550b8c37e493d3419984113991fb416820c4d92aa5296d8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login/login.css?3.8.403.1 HTTP/1.1
Host: 69.128.62.126
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://69.128.62.126/login
Cookie: niagara_session=s583c24baff90043d9f444e5bcdf21d4e6e52595f71acdc31e5
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Thu, 25 Apr 2024 23:36:48 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
transfer-encoding: chunked
accept-language: en-US,en;q=0.5
x-frame-options: sameorigin
content-encoding: gzip
content-type: text/css; charset=UTF-8
cache-control: private, must-revalidate
|
|
| 69.128.62.126/login/auth.min.js?3.8.403.1 | 69.128.62.126 | 200 OK | 41 kB |
URL GET HTTP/1.169.128.62.126/login/auth.min.js?3.8.403.1 IP69.128.62.126:80
Requested byhttp://69.128.62.126/login
File typeJavaScript source, ASCII text, with very long lines (8624) Hash6c8a63e40f08d3ce371fd22e8d46243d 96a2bb6540398c5b31df7b598a84becfe35976c4 c3931ac40f2381bcd91e768582ca8c7157e8e43c0567e57a0ea8d2afad95cc80
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login/auth.min.js?3.8.403.1 HTTP/1.1
Host: 69.128.62.126
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://69.128.62.126/login
Cookie: niagara_session=s583c24baff90043d9f444e5bcdf21d4e6e52595f71acdc31e5
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Thu, 25 Apr 2024 23:36:48 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
transfer-encoding: chunked
accept-language: en-US,en;q=0.5
x-frame-options: sameorigin
content-encoding: gzip
content-type: text/javascript; charset=UTF-8
cache-control: private, must-revalidate
|
|
| 69.128.62.126/login/login.js?3.8.403.1 |  0.0.0.0 | | 0 B |
URL GET 69.128.62.126/login/login.js?3.8.403.1 IP0.0.0.0:0
Requested byhttp://69.128.62.126/login
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login/login.js?3.8.403.1 HTTP/1.1
Host: 69.128.62.126
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://69.128.62.126/login
Cookie: niagara_session=s583c24baff90043d9f444e5bcdf21d4e6e52595f71acdc31e5
Pragma: no-cache
Cache-Control: no-cache
|
|
| 69.128.62.126/login/logo | 0.0.0.0 | | 0 B |
IP0.0.0.0:0
Requested byhttp://69.128.62.126/login
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login/logo HTTP/1.1
Host: 69.128.62.126
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://69.128.62.126/login
Cookie: niagara_session=s583c24baff90043d9f444e5bcdf21d4e6e52595f71acdc31e5
Pragma: no-cache
Cache-Control: no-cache
|
|
| 69.128.62.126/login/keys.png | 0.0.0.0 | | 0 B |
URL GET 69.128.62.126/login/keys.png IP0.0.0.0:0
Requested byhttp://69.128.62.126/login
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login/keys.png HTTP/1.1
Host: 69.128.62.126
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://69.128.62.126/login
Cookie: niagara_session=s583c24baff90043d9f444e5bcdf21d4e6e52595f71acdc31e5
Pragma: no-cache
Cache-Control: no-cache
|
|