Report - 168.205.217.92/cookiechecker?uri=//nocookies.html/nocookies.html/nocookies.html

Report Overview

Submitted URL
168.205.217.92/cookiechecker?uri=//nocookies.html/nocookies.html/nocookies.html
IP
168.205.217.92
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME
Submitted
2024-04-25 14:47:44
Access
public
Website Title
Login
Final URL
168.205.217.92/login.cgi?uri=/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
66

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
168.205.217.92	unknown	unknown	No data	No data	17 kB	150 kB	168.205.217.92

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed
2024-04-25	medium	168.205.217.92	Sinkholed

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	168.205.217.92/190703.1116/js/jquery.js	105 kB	2023-03-07	2024-05-04
Pretty URL 168.205.217.92/190703.1116/js/jquery.js IP 168.205.217.92 ASN #264869 SPEED MAX TELECOMUNICACOES LTDA ME Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:30 Last Seen2024-05-04 01:01:32 Times Seen267 Hash 98e8a92c72eb057abf3eff283d923095 de9d5c7870d91c155db54304a8a1a409b334d6e6 bf5df11b8d8fe7305b92c7dbfa0571fb876b103f30da4a683041ed9ab9b36e11 Loading...

	168.205.217.92/190703.1116/index.js	12 kB	2023-03-07	2024-05-04
Pretty URL 168.205.217.92/190703.1116/index.js IP 168.205.217.92 ASN #264869 SPEED MAX TELECOMUNICACOES LTDA ME Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:40:23 Last Seen2024-05-04 01:01:32 Times Seen242 Hash a4352377a733ce1881b9019ddbd9302a 7e088f242f8d12e9b194a1dd27234e5cbf18f30a 24370d734b9d23d49244ee0a9388d166696b0b6fd2a9f5dea9b894df8a3a0d3e Loading...

	168.205.217.92/190703.1116/js/jquery.ui.js	132 kB	2023-03-07	2024-05-04
Pretty URL 168.205.217.92/190703.1116/js/jquery.ui.js IP 168.205.217.92 ASN #264869 SPEED MAX TELECOMUNICACOES LTDA ME Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:30 Last Seen2024-05-04 01:01:32 Times Seen266 Hash d84b72c03e8d1ce1c75d784711cf9d47 0166264e22ea6e15850e4a7942a6095a40432258 dbeb99860622f12537c47b91241a66480ac9b9ea556aaef64cacf2367920bc98 Loading...

	168.205.217.92/login.cgi?uri=/	0 B	2023-03-07	2024-05-05
Pretty URL 168.205.217.92/login.cgi?uri=/ IP 168.205.217.92 ASN #264869 SPEED MAX TELECOMUNICACOES LTDA ME Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-05 01:39:03 Times Seen37351498 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	168.205.217.92/jsl10n.cgi?l=en_US&v=/190703.1116	788 B	2023-03-07	2024-05-04
Pretty URL 168.205.217.92/jsl10n.cgi?l=en_US&v=/190703.1116 IP 168.205.217.92 ASN #264869 SPEED MAX TELECOMUNICACOES LTDA ME Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:30 Last Seen2024-05-04 01:01:32 Times Seen200 Hash 8a7604ca3f263f6c849fecbd84571cbb 0a0f363e228ec7d5c90c550040d791a8977a5eac 42ff5458fffc8bb01a0b65f2aece6fe0891042ac504a543fc2aa652fd1850da5 Loading...

	168.205.217.92/190703.1116/util.js	12 kB	2023-03-11	2024-04-25
Pretty URL 168.205.217.92/190703.1116/util.js IP 168.205.217.92 ASN #264869 SPEED MAX TELECOMUNICACOES LTDA ME Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:56:18 Last Seen2024-04-25 16:47:50 Times Seen13 Hash 36c66efa05408c4da596cf07dbb0daae 8afba75ebfa36016d0124e79021cc45d8569554a df79474b8fc9e57bb368b0dd2e9ce161d0593075339da718ab289765f94676b7 Loading...

HTTP Transactions (33)

URL IP Response Size

168.205.217.92/cookiechecker?uri=//nocookies.html/nocookies.html/nocookies.html

168.205.217.92

0 B

URL
168.205.217.92/cookiechecker?uri=//nocookies.html/nocookies.html/nocookies.html
IP
168.205.217.92:0
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cookiechecker?uri=//nocookies.html/nocookies.html/nocookies.html HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Location: https://168.205.217.92/cookiechecker?uri=//nocookies.html/nocookies.html/nocookies.html
Content-Length: 0
Date: Thu, 08 Aug 2019 07:58:18 GMT
Server: lighttpd/1.4.39

168.205.217.92/cookiechecker?uri=//nocookies.html/nocookies.html/nocookies.html

168.205.217.92

0 B

URL
168.205.217.92/cookiechecker?uri=//nocookies.html/nocookies.html/nocookies.html
IP
168.205.217.92:0
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cookiechecker?uri=//nocookies.html/nocookies.html/nocookies.html HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Location: /nocookies.html
Content-Length: 0
Date: Thu, 08 Aug 2019 07:58:21 GMT
Server: lighttpd/1.4.39

168.205.217.92/nocookies.html

168.205.217.92

1.0 kB

URL
168.205.217.92/nocookies.html
IP
168.205.217.92:0
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

File type
HTML document, ASCII text
Size
1.0 kB (1027 bytes)
Hash
286dd13dbae38af5870a30b821de74c8
adee716e78058f7e6c59278de826cf45b9124321
85b618de2a795afba5fdecc4245dd89f85e9cc4f66c0e038963b00f097d537e8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /nocookies.html HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Set-Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; Path=/; Version=1
Content-Type: text/html
Content-Length: 1027
Date: Thu, 08 Aug 2019 07:58:21 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/style.css

168.205.217.92

200 OK

3.3 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/style.css
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
ASCII text
Size
3.3 kB (3337 bytes)
Hash
bde56c16324669bcb6d0b9568a7d02c8
cd4ab57b2096050075f542a0bd042ca1ee5ab3b8
400fc8e9143e69ca1f664808cae15f06012f352618c7152e5629132f79464a2a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/style.css HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/nocookies.html
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:21 GMT
Cache-Control: max-age=31536000
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Wed, 03 Jul 2019 08:16:23 GMT
ETag: "12462890"
Accept-Ranges: bytes
Content-Length: 3337
Date: Thu, 08 Aug 2019 07:58:21 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/favicon.ico

168.205.217.92

200 OK

1.4 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/favicon.ico
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Size
1.4 kB (1406 bytes)
Hash
6dcab71e60f0242907940f0fcda69ea5
f3ece350d92c75c7e0a5994a5aef8e8b95c8c7ab
02f015e66462a0fe6391c3b1de2b31ef4dd81f846f2724e0fa86b950df507956

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/favicon.ico HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/nocookies.html
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:22 GMT
Cache-Control: max-age=31536000
Content-Type: image/vnd.microsoft.icon
Accept-Ranges: bytes
ETag: "679422886"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 1406
Date: Thu, 08 Aug 2019 07:58:22 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/bginside.png

168.205.217.92

204 B

URL
168.205.217.92/190703.1116/images/bginside.png
IP
168.205.217.92:0
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

File type
PNG image data, 1 x 148, 8-bit/color RGB, non-interlaced
Size
204 B (204 bytes)
Hash
169dfa5a673f4160cc9aab19f61b5dfb
cfcefb7f7c052f875ede721eaecb4ad890f94321
120a294f4f783e2275f7c1e3663ca5240ec31b9bf68b3b277fba95b81f230845

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/bginside.png HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/190703.1116/style.css
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:22 GMT
Cache-Control: max-age=31536000
Content-Type: image/png
Accept-Ranges: bytes
ETag: "4248820906"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 204
Date: Thu, 08 Aug 2019 07:58:22 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/bg.png

168.205.217.92

200 OK

311 B

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/bg.png
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
PNG image data, 1 x 379, 8-bit/color RGB, non-interlaced
Size
311 B (311 bytes)
Hash
2f190f6005b6e68ee10f2a694bac5834
9b1220e67c93d66bdfa29dae7f3fba79507e6d0e
7aaa6900d07fcf8edfaf3eaeb1a6951b21283244fd4b2a82335d837f8e12a9f5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/bg.png HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/190703.1116/style.css
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:23 GMT
Cache-Control: max-age=31536000
Content-Type: image/png
Accept-Ranges: bytes
ETag: "4022000808"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 311
Date: Thu, 08 Aug 2019 07:58:23 GMT
Server: lighttpd/1.4.39

168.205.217.92/

168.205.217.92

302 Found

0 B

URL User Request GET HTTP/1.1
168.205.217.92/
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Location: /login.cgi?uri=/
Content-Length: 0
Date: Thu, 08 Aug 2019 07:58:28 GMT
Server: lighttpd/1.4.39

168.205.217.92/login.cgi?uri=/

168.205.217.92

200 OK

4.5 kB

URL User Request GET HTTP/1.1
168.205.217.92/login.cgi?uri=/
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
HTML document, ASCII text
Size
4.5 kB (4549 bytes)
Hash
94680ce9fb6a7dbe4794ac1f0258fd86
708aa063d0a03fe7b2806e5bdca48db0b384c842
c312fd340251d7e0aa623f8648b08f09f8f6db6ffc0b9f0197d98e54d8c35ad1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login.cgi?uri=/ HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Set-Cookie: ui_language=en_US; Path=/; Expires=Tuesday, 1-Jan-38 00:00:00 GMT; HttpOnly
Content-Type: text/html
Transfer-Encoding: chunked
Date: Thu, 08 Aug 2019 07:58:29 GMT
Server: lighttpd/1.4.39

168.205.217.92/jsl10n.cgi?l=en_US&v=/190703.1116

168.205.217.92

200 OK

788 B

URL GET HTTP/1.1
168.205.217.92/jsl10n.cgi?l=en_US&v=/190703.1116
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
ASCII text
Size
788 B (788 bytes)
Hash
8a7604ca3f263f6c849fecbd84571cbb
0a0f363e228ec7d5c90c550040d791a8977a5eac
42ff5458fffc8bb01a0b65f2aece6fe0891042ac504a543fc2aa652fd1850da5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /jsl10n.cgi?l=en_US&v=/190703.1116 HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: 33033
Set-Cookie: ui_language=en_US; Path=/; Expires=Tuesday, 1-Jan-38 00:00:00 GMT; HttpOnly
Content-Type: text/javascript
Transfer-Encoding: chunked
Date: Thu, 08 Aug 2019 07:58:29 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/index.js

168.205.217.92

200 OK

4.1 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/index.js
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
ASCII text, with very long lines (11594), with no line terminators
Size
4.1 kB (4073 bytes)
Hash
a4352377a733ce1881b9019ddbd9302a
7e088f242f8d12e9b194a1dd27234e5cbf18f30a
24370d734b9d23d49244ee0a9388d166696b0b6fd2a9f5dea9b894df8a3a0d3e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/index.js HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:30 GMT
Cache-Control: max-age=31536000
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Wed, 03 Jul 2019 08:16:23 GMT
ETag: "1448749804"
Accept-Ranges: bytes
Content-Length: 4073
Date: Thu, 08 Aug 2019 07:58:30 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/login.css

168.205.217.92

200 OK

1.7 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/login.css
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
ASCII text
Size
1.7 kB (1715 bytes)
Hash
39f2079980309bc1b0868d83e0495fde
6bdd046b2c126f88e2889ef6fb80619a4b82ec9d
80bd478ea41f777418fccf4a81bc3e44979a6c0573dd85dc09cb870c659f7672

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/login.css HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:30 GMT
Cache-Control: max-age=31536000
Content-Type: text/css
Accept-Ranges: bytes
ETag: "232532896"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 1715
Date: Thu, 08 Aug 2019 07:58:30 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/help.css

168.205.217.92

200 OK

864 B

URL GET HTTP/1.1
168.205.217.92/190703.1116/help.css
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
ASCII text
Size
864 B (864 bytes)
Hash
3f5c12d45d882b60bd2a04377f07c136
05a676bd9b07083e2c2c66084bee3edf61726c43
046e9092a8c540cc5c7c54e8fcdb20779bbd380951862e2e81df4f0d44cee474

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/help.css HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:30 GMT
Cache-Control: max-age=31536000
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Wed, 03 Jul 2019 08:16:24 GMT
ETag: "2639430843"
Accept-Ranges: bytes
Content-Length: 864
Date: Thu, 08 Aug 2019 07:58:30 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/style.css

168.205.217.92

200 OK

3.3 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/style.css
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
ASCII text
Size
3.3 kB (3337 bytes)
Hash
bde56c16324669bcb6d0b9568a7d02c8
cd4ab57b2096050075f542a0bd042ca1ee5ab3b8
400fc8e9143e69ca1f664808cae15f06012f352618c7152e5629132f79464a2a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/style.css HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:30 GMT
Cache-Control: max-age=31536000
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Wed, 03 Jul 2019 08:16:23 GMT
ETag: "12462890"
Accept-Ranges: bytes
Content-Length: 3337
Date: Thu, 08 Aug 2019 07:58:30 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/util.js

168.205.217.92

200 OK

4.4 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/util.js
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
JavaScript source, ASCII text, with very long lines (11939), with no line terminators
Size
4.4 kB (4408 bytes)
Hash
36c66efa05408c4da596cf07dbb0daae
8afba75ebfa36016d0124e79021cc45d8569554a
df79474b8fc9e57bb368b0dd2e9ce161d0593075339da718ab289765f94676b7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/util.js HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:31 GMT
Cache-Control: max-age=31536000
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Wed, 03 Jul 2019 08:16:23 GMT
ETag: "458435300"
Accept-Ranges: bytes
Content-Length: 4408
Date: Thu, 08 Aug 2019 07:58:31 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/js/jquery.ui.js

168.205.217.92

200 OK

33 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/js/jquery.ui.js
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
JavaScript source, ASCII text, with very long lines (43991)
Size
33 kB (33344 bytes)
Hash
d84b72c03e8d1ce1c75d784711cf9d47
0166264e22ea6e15850e4a7942a6095a40432258
dbeb99860622f12537c47b91241a66480ac9b9ea556aaef64cacf2367920bc98

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/js/jquery.ui.js HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:30 GMT
Cache-Control: max-age=31536000
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Wed, 03 Jul 2019 08:16:23 GMT
ETag: "4119255856"
Accept-Ranges: bytes
Content-Length: 33344
Date: Thu, 08 Aug 2019 07:58:30 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/js/jquery.js

168.205.217.92

200 OK

37 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/js/jquery.js
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
JavaScript source, ASCII text, with very long lines (41067)
Size
37 kB (36776 bytes)
Hash
98e8a92c72eb057abf3eff283d923095
de9d5c7870d91c155db54304a8a1a409b334d6e6
bf5df11b8d8fe7305b92c7dbfa0571fb876b103f30da4a683041ed9ab9b36e11

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/js/jquery.js HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:31 GMT
Cache-Control: max-age=31536000
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Wed, 03 Jul 2019 08:16:23 GMT
ETag: "3360086648"
Accept-Ranges: bytes
Content-Length: 36776
Date: Thu, 08 Aug 2019 07:58:31 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/unms.svg

168.205.217.92

200 OK

2.5 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/unms.svg
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
SVG Scalable Vector Graphics image
Size
2.5 kB (2451 bytes)
Hash
5aa596a2575cd07a2bb1522cc62dd933
f1bb613eca8d1eac0e18427c2ed49e85cf23f410
2a60cb11bb72c3ed0fda19e524bbd81d30ca0a69741431cd9d587b813c62226b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/unms.svg HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Accept-Ranges: bytes
ETag: "2006854502"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 2451
Date: Thu, 08 Aug 2019 07:58:32 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/bg.png

168.205.217.92

200 OK

311 B

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/bg.png
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
PNG image data, 1 x 379, 8-bit/color RGB, non-interlaced
Size
311 B (311 bytes)
Hash
2f190f6005b6e68ee10f2a694bac5834
9b1220e67c93d66bdfa29dae7f3fba79507e6d0e
7aaa6900d07fcf8edfaf3eaeb1a6951b21283244fd4b2a82335d837f8e12a9f5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/bg.png HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/190703.1116/style.css
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:32 GMT
Cache-Control: max-age=31536000
Content-Type: image/png
Accept-Ranges: bytes
ETag: "4022000808"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 311
Date: Thu, 08 Aug 2019 07:58:32 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/airos_logo.png

168.205.217.92

200 OK

4.5 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/airos_logo.png
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
PNG image data, 97 x 70, 8-bit/color RGBA, non-interlaced
Size
4.5 kB (4473 bytes)
Hash
fda7a4cb23cb936c5a85ccda6a48fb38
ac461cea59d41649584e7feec3b32be3f55f8750
1373dc70a2b14d11d753cc47e8d502bfb8f2b7209c32b2f534745be548ea84a0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/airos_logo.png HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:32 GMT
Cache-Control: max-age=31536000
Content-Type: image/png
Accept-Ranges: bytes
ETag: "1467951846"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 4473
Date: Thu, 08 Aug 2019 07:58:32 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/astore.svg

168.205.217.92

200 OK

8.5 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/astore.svg
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
SVG Scalable Vector Graphics image
Size
8.5 kB (8504 bytes)
Hash
9686bd9b84bbb252d8ffdcc5d6add2ad
49ab58b6ea7cf5fbb570485455916612917573a1
1558d2b9000b22452a3ff3118bbf8c757e571fa9b17cc065c81b4fd438bbd7fc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/astore.svg HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Accept-Ranges: bytes
ETag: "566176228"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 8504
Date: Thu, 08 Aug 2019 07:58:32 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/gplay.svg

168.205.217.92

200 OK

5.4 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/gplay.svg
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
SVG Scalable Vector Graphics image
Size
5.4 kB (5395 bytes)
Hash
5da74d30c98a2e061f5e54597fef699e
f9344247ba6d3715b2ad06bf99713932a30b3103
304ef09b37f6dadb200b397310c91bab45105b39973a25c320ae262af1448e55

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/gplay.svg HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Accept-Ranges: bytes
ETag: "3025873576"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 5395
Date: Thu, 08 Aug 2019 07:58:32 GMT
Server: lighttpd/1.4.39

168.205.217.92/images/login-logos.svg

168.205.217.92

200 OK

6.2 kB

URL GET HTTP/1.1
168.205.217.92/images/login-logos.svg
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
SVG Scalable Vector Graphics image
Size
6.2 kB (6163 bytes)
Hash
3676c36c326298b71e45988cf54ab714
4e9791e6aa81ed0ac4b0b7d47cfb94a31986dbcf
e98975c10b863116d02b2db8f655d382690b583931042739e7d8ce30b82242fb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/login-logos.svg HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Accept-Ranges: bytes
ETag: "1199385196"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 6163
Date: Thu, 08 Aug 2019 07:58:32 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/main_top.png

168.205.217.92

200 OK

1.4 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/main_top.png
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
PNG image data, 77 x 26, 8-bit/color RGB, non-interlaced
Size
1.4 kB (1431 bytes)
Hash
37bcdd37ea7ef85dcfb4e05a9b0862cd
17df53d25e2d8aac982890e1320651142ccaa27f
f0ddbdc0e57db7f877b722cdce38d9f111daca9368571ef77b2df9111d8949f9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/main_top.png HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:32 GMT
Cache-Control: max-age=31536000
Content-Type: image/png
Accept-Ranges: bytes
ETag: "322775974"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 1431
Date: Thu, 08 Aug 2019 07:58:32 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/main.png

168.205.217.92

200 OK

1.5 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/main.png
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
PNG image data, 77 x 26, 8-bit/color RGB, non-interlaced
Size
1.5 kB (1470 bytes)
Hash
97798b70f004995eecced3d6a6c0ea09
b51af187620ef247879abd02b0b3301039339489
7bfb30eec795a9a69f4c8d7bb8ffee0fe1a7b8d5ae4c69ef8b3cb2dbae020268

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/main.png HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:33 GMT
Cache-Control: max-age=31536000
Content-Type: image/png
Accept-Ranges: bytes
ETag: "1465723814"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 1470
Date: Thu, 08 Aug 2019 07:58:33 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/link.png

168.205.217.92

200 OK

1.6 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/link.png
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
PNG image data, 77 x 26, 8-bit/color RGB, non-interlaced
Size
1.6 kB (1567 bytes)
Hash
b3e4328d547751d9829139a40bc3dd13
81f8ac6671080d85e57d1614e7389819dbfd047f
cccfb41e456d316495ab3e5b6e3beb353fd0c46863bfa1fdf2da308f52fefd4d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/link.png HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:33 GMT
Cache-Control: max-age=31536000
Content-Type: image/png
Accept-Ranges: bytes
ETag: "1156721572"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 1567
Date: Thu, 08 Aug 2019 07:58:33 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/net.png

168.205.217.92

200 OK

1.6 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/net.png
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
PNG image data, 77 x 26, 8-bit/color RGB, non-interlaced
Size
1.6 kB (1647 bytes)
Hash
c7be509a0b902b5b96b2bf943010e634
12c385d63c4ce6ce40721043ffe8fafe11009a70
805d0a3601d3d9c8307013b089b11b3aec00ce498539f40bab5e7e60a5816f18

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/net.png HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:33 GMT
Cache-Control: max-age=31536000
Content-Type: image/png
Accept-Ranges: bytes
ETag: "1623075746"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 1647
Date: Thu, 08 Aug 2019 07:58:33 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/4dv.png

168.205.217.92

200 OK

1.7 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/4dv.png
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
PNG image data, 77 x 26, 8-bit/color RGB, non-interlaced
Size
1.7 kB (1666 bytes)
Hash
45bba3f21658c2fefa826b9e4740d29c
e5729e17fc743d00441935d04d1e13e3073a6522
7b8ead80456896fd74cc88e6a6019730497b1272bbeb8cf423a2b324151b7c5a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/4dv.png HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:33 GMT
Cache-Control: max-age=31536000
Content-Type: image/png
Accept-Ranges: bytes
ETag: "1087974306"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 1666
Date: Thu, 08 Aug 2019 07:58:33 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/srv.png

168.205.217.92

200 OK

1.5 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/srv.png
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
PNG image data, 77 x 26, 8-bit/color RGB, non-interlaced
Size
1.5 kB (1533 bytes)
Hash
8f32c995a477cce3d5a5428cdf27217b
1d773dda55b839f6abd18a7283530361425435bd
5b76baabba2b44cc7a023e491e16c5e2a53ffcdab55c44e6b4261700bf6f83c7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/srv.png HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:33 GMT
Cache-Control: max-age=31536000
Content-Type: image/png
Accept-Ranges: bytes
ETag: "315763620"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 1533
Date: Thu, 08 Aug 2019 07:58:33 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/system.png

168.205.217.92

200 OK

1.5 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/system.png
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
PNG image data, 77 x 26, 8-bit/color RGB, non-interlaced
Size
1.5 kB (1544 bytes)
Hash
fe812cb85aeadf9784450648edc191ac
8fb9df688d6b391189390d9abc2e9c16ec876b7b
7e047522078daf79ebf02857cafee41d07f237b3a3de312f2095f44a8e755f67

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/system.png HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:33 GMT
Cache-Control: max-age=31536000
Content-Type: image/png
Accept-Ranges: bytes
ETag: "1702636452"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 1544
Date: Thu, 08 Aug 2019 07:58:33 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/border.gif

168.205.217.92

200 OK

3.7 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/border.gif
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
GIF image data, version 89a, 147 x 12
Size
3.7 kB (3741 bytes)
Hash
1e4359431f8fa15ec24d93a8198ff68a
b33a505d4b66c62b626b3f4c065e0822a02eab95
84e87c32df6003daa0981535bbaad4a043f2a3735b0459118dc5ea7caf67b80a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/border.gif HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:33 GMT
Cache-Control: max-age=31536000
Content-Type: image/gif
Accept-Ranges: bytes
ETag: "1675307808"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 3741
Date: Thu, 08 Aug 2019 07:58:33 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/images/spectr.gif

168.205.217.92

200 OK

1.4 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/images/spectr.gif
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
GIF image data, version 87a, 145 x 10
Size
1.4 kB (1433 bytes)
Hash
f6b21e4d43a3ee92004073a1c8bc950a
0dff11054b3c032ed94d1d08b50fca8077d21493
acf85563ed6aaff3e85eece69e83632f0d89bf775503c1d1dad9d915dc2023fc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/images/spectr.gif HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:33 GMT
Cache-Control: max-age=31536000
Content-Type: image/gif
Accept-Ranges: bytes
ETag: "325004198"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 1433
Date: Thu, 08 Aug 2019 07:58:33 GMT
Server: lighttpd/1.4.39

168.205.217.92/190703.1116/favicon.ico

168.205.217.92

200 OK

1.4 kB

URL GET HTTP/1.1
168.205.217.92/190703.1116/favicon.ico
IP
168.205.217.92:443
ASN
#264869 SPEED MAX TELECOMUNICACOES LTDA ME

Requested by
https://168.205.217.92/login.cgi?uri=/
Certificate
IssuerUbiquiti Networks Inc.
SubjectUBNT-E4:38:83:C8:0F:C3
Fingerprint8F:56:EC:56:3D:5E:E4:A0:85:E0:11:72:3D:0B:52:57:D5:B8:EF:DF
ValidityWed, 03 Jul 2019 08:17:00 GMT - Wed, 03 Jul 2024 08:17:00 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Size
1.4 kB (1406 bytes)
Hash
6dcab71e60f0242907940f0fcda69ea5
f3ece350d92c75c7e0a5994a5aef8e8b95c8c7ab
02f015e66462a0fe6391c3b1de2b31ef4dd81f846f2724e0fa86b950df507956

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /190703.1116/favicon.ico HTTP/1.1
Host: 168.205.217.92
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://168.205.217.92/login.cgi?uri=/
Cookie: AIROS_E43883C80FC3=ac27b5c7033d7a62beff7a09c044892c; ui_language=en_US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Expires: Fri, 07 Aug 2020 07:58:33 GMT
Cache-Control: max-age=31536000
Content-Type: image/vnd.microsoft.icon
Accept-Ranges: bytes
ETag: "679422886"
Last-Modified: Wed, 03 Jul 2019 08:16:21 GMT
Content-Length: 1406
Date: Thu, 08 Aug 2019 07:58:33 GMT
Server: lighttpd/1.4.39

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (33)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN