| 111.20.230.94:19160/login/ |  111.20.230.94 | 200 OK | 438 B |
URL User Request GET HTTP/1.1111.20.230.94:19160/login/ IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash912639ce98fb9ae3a90fedd8d5e0fc0c 3b8ac82ba86c61b2a901b1903cbf449e42e038a0 d042ab42264c68eeeefbad9b6465ad124e14da719040ad7ffb9b8e63a37653c0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login/ HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:18 GMT
Content-Type: text/html
Content-Length: 438
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:33 GMT
Content-Encoding: gzip
ETag: f1f9cbb2-399-64d44c7d
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/com/css/base.css | 111.20.230.94 | 200 OK | 2.1 kB |
URL GET HTTP/1.1111.20.230.94:19160/com/css/base.css IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeASCII text, with very long lines (10116) Hash6ceaaf3b8741df779d070c9738f49a16 a2c5e058e0c0b2b65495c4996ee58b7369eb617e 7300561617b40b67b05a1a062a780828e341f898666c4b93f2001a091a8c9a6a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /com/css/base.css HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:18 GMT
Content-Type: text/css
Content-Length: 2086
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:29 GMT
Content-Encoding: gzip
ETag: 289beb86-28ac-64d44c79
Expires: Sat, 27 Apr 2024 10:39:18 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/require.js | 111.20.230.94 | 200 OK | 6.4 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/require.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (544), with CRLF line terminators Hash56486042cca4a23f626e6acd30eee21d a88756bc4a1cb5d6b8c1bed28ad834e275950b51 af47d4b06d3b0005573e04d602b0bc868ad16d255454039bc8929fe05a39b4fb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/require.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:18 GMT
Content-Type: application/x-javascript
Content-Length: 6365
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:32 GMT
Content-Encoding: gzip
ETag: ffa02f7-3cc9-64d44c7c
Expires: Sat, 27 Apr 2024 10:39:18 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/iconfont/iconfont.css | 111.20.230.94 | 200 OK | 650 B |
URL GET HTTP/1.1111.20.230.94:19160/libs/iconfont/iconfont.css IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeASCII text, with CRLF line terminators Hash19229965b6844423c86128c5e9880590 3befd5ae0d22aff9439acfa9af42cefad853e558 a0b2ab280d6683d87eaf077ae0eefa4f4d7393d778ffb7a9442436c9c5fe921b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/iconfont/iconfont.css HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/com/css/base.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:18 GMT
Content-Type: text/css
Content-Length: 650
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: 80065461-863-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:18 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/bootstrap/css/bootstrap.min.css | 111.20.230.94 | 200 OK | 20 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/bootstrap/css/bootstrap.min.css IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeASCII text, with very long lines (65367), with CRLF line terminators Hash3e53c6843a02b42ed881307d0c17af7d f2cd0488a33734345987059e7c183ba88dd4c213 7ced8587d3adc7516df82cbaf8f8330937968f87d1fb227b1bd06b62040d33d9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/com/css/base.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:18 GMT
Content-Type: text/css
Content-Length: 19882
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: 2c48cf00-1deb0-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:18 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/font-awesome/css/font-awesome.min.css | 111.20.230.94 | 200 OK | 7.1 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/font-awesome/css/font-awesome.min.css IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeASCII text, with very long lines (30837), with CRLF line terminators Hash4258bd5c7a06955b6dae720a835fb7b2 84dceb26861254989c3af1b57179432ad0513f9a b139f243c33a32098b98fe104d2070f65662d47c93cbdee9b80ac9ea4e060830
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/com/css/base.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:19 GMT
Content-Type: text/css
Content-Length: 7051
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: 151e1a57-791a-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:19 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/iconfont_mah/iconfont.css | 111.20.230.94 | 200 OK | 2.8 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/iconfont_mah/iconfont.css IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeASCII text, with very long lines (3131), with CRLF line terminators Hash69fb1855f295d36270f30cf383f2f378 69133ba24cd191c5f9b68e75f25600676aa4b019 d84a45b36604fa0cf690b27a34e9409313f5d43cdc353c0b7374d8a3aaafe93f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/iconfont_mah/iconfont.css HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/com/css/base.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:19 GMT
Content-Type: text/css
Content-Length: 2765
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: 7d1c8d4e-fb4-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:19 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/login/app.js | 111.20.230.94 | 200 OK | 532 B |
URL GET HTTP/1.1111.20.230.94:19160/login/app.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash7a2f3563d6ed81d43c28b966ddf228cf fdc137732bbf4a1a2b0af6d42ed6c8886e2dc4d8 f350dd34687c6f8d699164391eb15ab69c1a13be6b6e7a5342d7dae2e3999d3f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login/app.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:19 GMT
Content-Type: application/x-javascript
Content-Length: 532
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:33 GMT
Content-Encoding: gzip
ETag: b0a7a104-55f-64d44c7d
Expires: Sat, 27 Apr 2024 10:39:19 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/com/bootstrapper.js | 111.20.230.94 | 200 OK | 3.5 kB |
URL GET HTTP/1.1111.20.230.94:19160/com/bootstrapper.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash66bbb97ab1c22e0b3e5d098a00aee7f2 568a5f858bd8078c97144f70c68021fa34a3c0d8 12f2c0287333c7b6b7560ebd9b65cf8d75072f01d14e13a9c57583b52ef17f65
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /com/bootstrapper.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:20 GMT
Content-Type: application/x-javascript
Content-Length: 3498
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:30 GMT
Content-Encoding: gzip
ETag: fde394e2-3ba8-64d44c7a
Expires: Sat, 27 Apr 2024 10:39:20 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/CryptoJS/components/core-min.js | 111.20.230.94 | 200 OK | 1.4 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/CryptoJS/components/core-min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeASCII text, with very long lines (548), with CRLF line terminators Hash556fcbaf96680b77cc9d773133cb4ba6 4fe51a7afb953d609c39f637c26dacc58d5e3fdb 4ddc5eda7fbfd049a90018f53d1d9d031152aac14c110497cda63d5c609d5033
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/CryptoJS/components/core-min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:20 GMT
Content-Type: application/x-javascript
Content-Length: 1397
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: 4c92ed35-cef-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:20 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/favicon.ico | 111.20.230.94 | 200 OK | 32 kB |
URL GET HTTP/1.1111.20.230.94:19160/favicon.ico IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeMS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash4859e39ae6c0f1f428f2126a6bb32bd9 1c0c85678ae963bc96d0b7fbe1eb89074cf1fbe0 a94f8a8553caea8430dd4ca3cc01d4e318d19828f74cb65453ffb7f5d9e2f44d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:20 GMT
Content-Type: image/x-ico
Content-Length: 32038
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:29 GMT
ETag: b0bac599-7d26-64d44c79
Expires: Sat, 27 Apr 2024 10:39:20 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/jquery-impromptu/jquery-impromptu.min.js | 111.20.230.94 | 200 OK | 4.5 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/jquery-impromptu/jquery-impromptu.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (682), with CRLF line terminators Hash25f1a27f25190dcca1e7f33b6dcf0520 8d8a0b1ec75e13116bf4529428c76ee1a18b9977 92c2a94f9168c2ff41945edfa53f67560f04e38bbddf50bc4b38d0550318594d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/jquery-impromptu/jquery-impromptu.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:20 GMT
Content-Type: application/x-javascript
Content-Length: 4452
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: e1a57de7-38be-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:20 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/require-plugins/css.min.js | 111.20.230.94 | 200 OK | 839 B |
URL GET HTTP/1.1111.20.230.94:19160/libs/require-plugins/css.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (1705), with no line terminators Hashd722bdd634bafa420d65377d30c867cd 2b5c9cf912b5b0e1c0aaafa8cc252c5133778fe0 70558f0f38b896f2d068eafdd6623118d1bd04b98702db0a99571a3c170f5a20
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/require-plugins/css.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:20 GMT
Content-Type: application/x-javascript
Content-Length: 839
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:32 GMT
Content-Encoding: gzip
ETag: 1be44780-6ac-64d44c7c
Expires: Sat, 27 Apr 2024 10:39:20 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/CryptoJS/rollups/aes.js | 111.20.230.94 | 200 OK | 4.9 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/CryptoJS/rollups/aes.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, ASCII text, with very long lines (548), with CRLF line terminators Hash11c5114e2a1face42de239b2b17943fb a56ff0cb2cafaa41bc5a892cc780bbbfd5d8452a a0a28d71883d6791d7feb6c8ba3ca3fb089994f4cf111a34ed78ae803a638c3b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/CryptoJS/rollups/aes.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:20 GMT
Content-Type: application/x-javascript
Content-Length: 4937
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: 6c8ac657-3453-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:20 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/lodash/lodash.min.js | 111.20.230.94 | 200 OK | 21 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/lodash/lodash.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (3735), with CRLF line terminators Hash7a6ff511a4ddbb6168c1849a9bb46bb3 da23157064cbfaaff9d4e668c2bcb40cae2be8ef 84f9c039bceb7abb296c80113ab9db4b4a5570dc53154fefe379c43016b74de4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/lodash/lodash.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:20 GMT
Content-Type: application/x-javascript
Content-Length: 20950
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: 55ece072-f51e-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:20 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/jquery/dist/jquery.min.js | 111.20.230.94 | 200 OK | 31 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/jquery/dist/jquery.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators Hasha6b6350ee94a3ea74595c065cbf58af0 b15f7cfa79519756dff1ad22553fd0ed09024343 412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/jquery/dist/jquery.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:20 GMT
Content-Type: application/x-javascript
Content-Length: 30726
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: d208be75-15853-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:20 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/angular-ui/ng-animate.css | 111.20.230.94 | 200 OK | 2.3 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/angular-ui/ng-animate.css IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash26fd9d441c22e6eee6670f22deef91fd bf95962be2046a86c0e7f9e269cc5527b57d217f 5d3e73100f41ed7e8c06a371a9855359a623ed5f5df293c61d04627ed07df49c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/angular-ui/ng-animate.css HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:20 GMT
Content-Type: text/css
Content-Length: 2322
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:30 GMT
Content-Encoding: gzip
ETag: 20631ec7-a8ea-64d44c7a
Expires: Sat, 27 Apr 2024 10:39:20 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/CryptoJS/components/mode-ecb-min.js | 111.20.230.94 | 200 OK | 399 B |
URL GET HTTP/1.1111.20.230.94:19160/libs/CryptoJS/components/mode-ecb-min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeASCII text, with CRLF line terminators Hash376d5366660b4e5515b6a272553798bb c21d5ba2b63a2b55311707f248dc3530873b571a 0069c392b5f965c396e1f11f536f61334514e5324a108e7ae51c2ac056700f98
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/CryptoJS/components/mode-ecb-min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:20 GMT
Content-Type: application/x-javascript
Content-Length: 399
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
ETag: 441be9a9-18f-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:20 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/ui-select/select.css | 111.20.230.94 | 200 OK | 2.0 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/ui-select/select.css IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeASCII text, with CRLF line terminators Hash50b1e68cdd7cd41513f62001ca6fbc80 c0da959771e827c722214281ec2960c75f7eaf56 6e888db408cc09e87ecafe4d08d5fcf6215b6190595f6a50c30ebee5ab2a549d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/ui-select/select.css HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:20 GMT
Content-Type: text/css
Content-Length: 2045
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:33 GMT
Content-Encoding: gzip
ETag: 785a748c-225f-64d44c7d
Expires: Sat, 27 Apr 2024 10:39:20 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/angular/angular.min.js | 111.20.230.94 | 200 OK | 59 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/angular/angular.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, ASCII text, with very long lines (566), with CRLF line terminators Hash3768a8a7901bb67b48170f360a9281ed 2e57ea10ecabe09e0b209839efeca99e85855a4f 64e327b8fae7a4714dd9b5205e2e665f513baa4ea29d642d1864e78ecf9745da
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/angular/angular.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:20 GMT
Content-Type: application/x-javascript
Content-Length: 58663
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:30 GMT
Content-Encoding: gzip
ETag: 1c783de0-28e27-64d44c7a
Expires: Sat, 27 Apr 2024 10:39:20 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/mam-base/dist/mam-base.js | 111.20.230.94 | 200 OK | 55 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/mam-base/dist/mam-base.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (4357), with CRLF line terminators Hashfe8a5751363462e5fb6dbf755721def3 d7dba485267751f7dbf7b8ae40eb243383b7adf7 8fa7f9c3da63c74e8a657590b5748a659fd97c67996c4f702e981c467cf2bdb3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/mam-base/dist/mam-base.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:20 GMT
Content-Type: application/x-javascript
Content-Length: 55267
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: 6e511e96-30d47-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:20 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/angular/angular-sanitize.min.js | 111.20.230.94 | 200 OK | 3.2 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/angular/angular-sanitize.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, ASCII text, with very long lines (1253), with CRLF line terminators Hash4ab0f26e31dbcf2061f474f97d42484f f826a497c8e31b18295b09cd52b6df347c0a797f 85a0a4a47cc7e1232607f72b3612f557947818c42e112e6e1622917671dbc31a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/angular/angular-sanitize.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:21 GMT
Content-Type: application/x-javascript
Content-Length: 3179
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:30 GMT
Content-Encoding: gzip
ETag: 6c5678bf-17e5-64d44c7a
Expires: Sat, 27 Apr 2024 10:39:21 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/angular-ui/angular-ui-router.min.js | 111.20.230.94 | 200 OK | 12 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/angular-ui/angular-ui-router.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators Hash269e4881a78b5b5ff5f3e1162293ebd7 a5793265c502c2c9557873216530a413eebfd344 d60393084bab0b6b42f986bdb09686c1259368a3ee654c7852ad787186eff66d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/angular-ui/angular-ui-router.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:21 GMT
Content-Type: application/x-javascript
Content-Length: 12365
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:30 GMT
Content-Encoding: gzip
ETag: c5eaa7a3-843f-64d44c7a
Expires: Sat, 27 Apr 2024 10:39:21 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/angular/angular-animate.min.js | 111.20.230.94 | 200 OK | 9.3 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/angular/angular-animate.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, ASCII text, with very long lines (529), with CRLF line terminators Hash1fc48ac22c7d49596b454747659e4812 6b2c3f16a1e80b0463bf08a125f4228f0e9791c9 884327fa5faad2742bf14978d20d4faf6196b62c73a7cd218ad103f1127299a5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/angular/angular-animate.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:21 GMT
Content-Type: application/x-javascript
Content-Length: 9280
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:30 GMT
Content-Encoding: gzip
ETag: c7e5a85d-6482-64d44c7a
Expires: Sat, 27 Apr 2024 10:39:21 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/angular/angular-route.min.js | 111.20.230.94 | 200 OK | 2.6 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/angular/angular-route.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, ASCII text, with very long lines (533), with CRLF line terminators Hash306980b1d63c5195126b5013f41cdb44 3f99c8826703cb0388371e050281fd9d3e326a64 aee9deffb6395abfb473a5264a1eac47c6d7f0d9fca231c3c37c496c138adf10
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/angular/angular-route.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:21 GMT
Content-Type: application/x-javascript
Content-Length: 2559
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:30 GMT
Content-Encoding: gzip
ETag: 35729466-15fc-64d44c7a
Expires: Sat, 27 Apr 2024 10:39:21 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/angular/angular-cookies.min.js | 111.20.230.94 | 200 OK | 827 B |
URL GET HTTP/1.1111.20.230.94:19160/libs/angular/angular-cookies.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, ASCII text, with very long lines (544), with CRLF line terminators Hash9993436d6610c1a0213bada373e2ef43 2de5542737e8aae92df7f2a56f7a83734c94d118 e4262113070c9a5cdc4a72c4bf924dc79f8c2cdf8f55b5afe87eb515057c1626
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/angular/angular-cookies.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:21 GMT
Content-Type: application/x-javascript
Content-Length: 827
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:30 GMT
Content-Encoding: gzip
ETag: eebbe395-5cf-64d44c7a
Expires: Sat, 27 Apr 2024 10:39:21 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/mb-scrollbar/mb-scrollbar-mam.js | 111.20.230.94 | 200 OK | 3.1 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/mb-scrollbar/mb-scrollbar-mam.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, ISO-8859 text, with very long lines (355), with CRLF line terminators Hashe45de0f07140a345f4e29c264b919ed3 f234e728321dcaa254e02648bc044be919f3ab22 df3768821e287cf556af441a4dd996eff5461e06a7a95fceef7be3cb0ba59267
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/mb-scrollbar/mb-scrollbar-mam.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:21 GMT
Content-Type: application/x-javascript
Content-Length: 3141
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:32 GMT
Content-Encoding: gzip
ETag: 2697e679-32d6-64d44c7c
Expires: Sat, 27 Apr 2024 10:39:21 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/angular/i18n/angular-locale_zh-cn.js | 111.20.230.94 | 200 OK | 762 B |
URL GET HTTP/1.1111.20.230.94:19160/libs/angular/i18n/angular-locale_zh-cn.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, ASCII text, with CRLF line terminators Hash77edc7e8d5da826bfe64fde79debebc3 61600267a46ad71ad335924e00b11d59c0987194 12cd37b86d31fa1f36de666ed6490f8e42858e74f8abbb04a97a7ba7172a2867
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/angular/i18n/angular-locale_zh-cn.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:21 GMT
Content-Type: application/x-javascript
Content-Length: 762
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: ece4eb40-9d3-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:21 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/angular/angular-messages.min.js | 111.20.230.94 | 200 OK | 1.5 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/angular/angular-messages.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, ASCII text, with very long lines (514), with CRLF line terminators Hash5e8a2301a99507f9a9c1929af96ee6ac 209fe48ce1a9fbddec4dd22646c3969619dec16d 7d3a06eec2af5172c323d5a496c365aabca93974f92f691be6d3f6e6517d70dd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/angular/angular-messages.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:21 GMT
Content-Type: application/x-javascript
Content-Length: 1469
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:30 GMT
Content-Encoding: gzip
ETag: 62939178-bed-64d44c7a
Expires: Sat, 27 Apr 2024 10:39:21 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/angular-ui/ui-bootstrap-tpls.min.js | 111.20.230.94 | 200 OK | 29 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/angular-ui/ui-bootstrap-tpls.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (32048), with CRLF line terminators Hash6781bf1d7890db0281ba175d6fbdc948 629ba5e8a24236b547db2d849987101420c04f11 1dee2a962825bee3f1556f4c00226ae87ab6dd2acc008f51206600c2b9d92fb1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/angular-ui/ui-bootstrap-tpls.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:22 GMT
Content-Type: application/x-javascript
Content-Length: 28977
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:30 GMT
Content-Encoding: gzip
ETag: 932aeb71-1aeee-64d44c7a
Expires: Sat, 27 Apr 2024 10:39:22 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/dropdown-select/jquery.dropdown.css | 111.20.230.94 | 200 OK | 1.5 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/dropdown-select/jquery.dropdown.css IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeASCII text, with CRLF line terminators Hashd2af967e0f50265524646c5916b2e563 b1aaf4075ca6581ac1937a68fa53967c6864d561 3f61a3f8282f1dd46ac4c14b952c25ade4bbbc2afe152d80976f27785dc0a5b1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/dropdown-select/jquery.dropdown.css HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:22 GMT
Content-Type: text/css
Content-Length: 1458
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: c59c726-1c48-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:22 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/ui-select/select.min.js | 111.20.230.94 | 200 OK | 12 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/ui-select/select.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, ASCII text, with very long lines (32403), with CRLF line terminators Hashe4a9cfc0df255a27182c529c1a64bd17 d6d9df98fe7161d9554fb55e294a42455430ba2d 0cf5de5ec906b37177fe876ca2f9b29fbae08a7a8b1aa5ec4fba9b92461a6775
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/ui-select/select.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:22 GMT
Content-Type: application/x-javascript
Content-Length: 12004
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:33 GMT
Content-Encoding: gzip
ETag: efc6f41-a59a-64d44c7d
Expires: Sat, 27 Apr 2024 10:39:22 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/dropdown-select/jquery.dropdown.js | 111.20.230.94 | 200 OK | 5.2 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/dropdown-select/jquery.dropdown.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (388), with CRLF line terminators Hash1b049fc1ded45f15292401f4e075d06d 27f05ca9819f17579963b85056e2a16bc2646aab 40ff451ddb929a08b915d6ee07d0be79fc438806e67176f4b997271ca611589d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/dropdown-select/jquery.dropdown.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:22 GMT
Content-Type: application/x-javascript
Content-Length: 5182
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: ebdeee2a-4bbb-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:22 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/mam-ng/dist/mam-ng.js | 111.20.230.94 | 200 OK | 36 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/mam-ng/dist/mam-ng.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (599), with CRLF line terminators Hash8aa22a323715aa28bc11361d368a6495 348ea7ca589766d1a1addf13ee978a1bc1dd8870 d54d34fb2372172806729aba2185f174862dba96d92e9616966c6d2925be4628
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/mam-ng/dist/mam-ng.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:22 GMT
Content-Type: application/x-javascript
Content-Length: 35542
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: a6eba6e9-3001d-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:22 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/assets/lang/zh.js | 111.20.230.94 | 200 OK | 323 B |
URL GET HTTP/1.1111.20.230.94:19160/assets/lang/zh.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash379241a0da37947161798652c678de96 e3b139498068e2e8a22725fede19060c5b9b2631 0f9162c8a82d6f2c435856f3c7639bf338f08845d62ae3b4f6cc96f4a704bf3d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/lang/zh.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:23 GMT
Content-Type: application/x-javascript
Content-Length: 323
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:30 GMT
ETag: 8ac8c9bb-143-64d44c7a
Expires: Sat, 27 Apr 2024 10:39:23 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/config/get-login-config?r=911714127963300 | 111.20.230.94 | 200 OK | 548 B |
URL GET HTTP/1.1111.20.230.94:19160/config/get-login-config?r=911714127963300 IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
Hashef2ea6f49c045286becfbc2b3bc594c6 2f93bf3b03efcf596a8351ef497024a759f74ccd 0a08bb0b68bb36b894ebd2516a73b0ad4b3d8d9376a2f6f78c206c66c043449a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /config/get-login-config?r=911714127963300 HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:23 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 548
Connection: keep-alive
Cache-Control: private
Set-Cookie: ASP.NET_SessionId=B0BEB77FF62000B36696470C; path=/
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/login/controllers/login.js | 111.20.230.94 | 200 OK | 2.4 kB |
URL GET HTTP/1.1111.20.230.94:19160/login/controllers/login.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashe72ffb3665db0aa4ed2912e7cf717125 593e7280a239ff6486b4e21a1bd1e946beaa7a03 3fce1ff12bac29c8c106438dd3dc22c63ac4261aabf660dc505a4cc0356325c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login/controllers/login.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Cookie: lang=zh; ASP.NET_SessionId=B0BEB77FF62000B36696470C
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:24 GMT
Content-Type: application/x-javascript
Content-Length: 2418
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:33 GMT
Content-Encoding: gzip
ETag: bd8429d7-21b6-64d44c7d
Expires: Sat, 27 Apr 2024 10:39:24 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/com/theme/blue/main.css | 111.20.230.94 | 200 OK | 17 kB |
URL GET HTTP/1.1111.20.230.94:19160/com/theme/blue/main.css IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeUnicode text, UTF-8 text, with very long lines (65532), with no line terminators Hash751ba73e96153c273af60a56dc81615c aa524d5a746676030445aff125a4cc2f81d64e7b 94c950106e45ef51d8271a847161228fdd3c5ef7ba5373d6376a37ee5469c741
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /com/theme/blue/main.css HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Cookie: ASP.NET_SessionId=B0BEB77FF62000B36696470C
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:24 GMT
Content-Type: text/css
Content-Length: 17101
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:30 GMT
Content-Encoding: gzip
ETag: ed595933-23e07-64d44c7a
Expires: Sat, 27 Apr 2024 10:39:24 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/getCode/getCode.js | 111.20.230.94 | 200 OK | 1.5 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/getCode/getCode.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hash4c13471af0a95ba15ee4f5f9132da7d3 e681f89435ae9de686d94da67602525cc66c11a3 651f73555fb07141d422f2cf1417e06f6606e184d63442056ee548598ead9967
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/getCode/getCode.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Cookie: ASP.NET_SessionId=B0BEB77FF62000B36696470C
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:24 GMT
Content-Type: application/x-javascript
Content-Length: 1536
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: 85384c73-1084-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:24 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/md5/spark-md5.js | 111.20.230.94 | 200 OK | 4.5 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/md5/spark-md5.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash2e4d6e5ba7d4c971380d54b88cdf8012 c3a6cc013ce821c59cd9c8778a8514383828817a 4d0e7c32b85988eb376d934c202d5359f2e708312440905c4dba0387816bb31d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/md5/spark-md5.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Cookie: ASP.NET_SessionId=B0BEB77FF62000B36696470C
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:24 GMT
Content-Type: application/x-javascript
Content-Length: 4496
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:32 GMT
Content-Encoding: gzip
ETag: ad3f7907-4a83-64d44c7c
Expires: Sat, 27 Apr 2024 10:39:24 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/com/js/mam.js | 111.20.230.94 | 200 OK | 17 kB |
URL GET HTTP/1.1111.20.230.94:19160/com/js/mam.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash860f29fa1c5dc5b843f0bd1dc5884f52 25a30dbd78bba49a34a0e29f42f97b787e5623da 601168721f2eb19e681df52015052a4940cb35edc441df99fa42c5077d252fc1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /com/js/mam.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Cookie: ASP.NET_SessionId=B0BEB77FF62000B36696470C
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:24 GMT
Content-Type: application/x-javascript
Content-Length: 17021
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:30 GMT
Content-Encoding: gzip
ETag: 7bd598de-16e7a-64d44c7a
Expires: Sat, 27 Apr 2024 10:39:24 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/dateOption/dateoption.js | 111.20.230.94 | 200 OK | 517 B |
URL GET HTTP/1.1111.20.230.94:19160/libs/dateOption/dateoption.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeUnicode text, UTF-8 (with BOM) text, with CRLF line terminators Hash67dfb2f8d1b2f4f69058c8250557a11f 3565b63620097d9ed514e11eac18c920edece3e7 ae54133dd2cb373a080807e0e89ec88d081ffa31ec79904f9b9cf5484dbe92ca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/dateOption/dateoption.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Cookie: ASP.NET_SessionId=B0BEB77FF62000B36696470C
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:25 GMT
Content-Type: application/x-javascript
Content-Length: 517
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: 30209144-4ef-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:25 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/datetimepicker/jquery.datetimepicker.css | 111.20.230.94 | 200 OK | 4.8 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/datetimepicker/jquery.datetimepicker.css IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeASCII text, with very long lines (1959), with CRLF line terminators Hashb805db3bb4266a831760b26c19f3614a e0ee385fbaad5e889a051d9c3cc47e8c0b1e252b 4b3c7edbd12646c83ebe893ef4626e34821346e08037f8d56e0d55f3853ddb0e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/datetimepicker/jquery.datetimepicker.css HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Cookie: ASP.NET_SessionId=B0BEB77FF62000B36696470C
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:25 GMT
Content-Type: text/css
Content-Length: 4804
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: 2842d74d-4a2c-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:25 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/datetimepicker/jquery.datetimepicker.full.min.js | 111.20.230.94 | 200 OK | 18 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/datetimepicker/jquery.datetimepicker.full.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (32113), with CRLF line terminators Hash7900d7ca4ea8247baf1507d69256b994 af86eec11ed1f2ba6e879bbbb56b5abc58ebb213 5c7a464838c34828f415a0e4c4ae66a33f125914056be6cb5f5596d72e393da4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/datetimepicker/jquery.datetimepicker.full.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Cookie: ASP.NET_SessionId=B0BEB77FF62000B36696470C
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:25 GMT
Content-Type: application/x-javascript
Content-Length: 18142
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: b3ac0787-dca7-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:25 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/jquery.mousewheel.min.js | 111.20.230.94 | 200 OK | 1.3 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/jquery.mousewheel.min.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (2609), with CRLF line terminators Hash053daaaf6ae4f0f85aa609fc2bfc7187 7a5633065fe06cd2dde3f9251c78f77849269c2b a5efc8efc69cfa7788d9df8d5a41cf6cf5c003510691ea9e17ab068d4dd864d4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/jquery.mousewheel.min.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Cookie: ASP.NET_SessionId=B0BEB77FF62000B36696470C
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:25 GMT
Content-Type: application/x-javascript
Content-Length: 1255
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
Content-Encoding: gzip
ETag: bc71fda1-add-64d44c7b
Expires: Sat, 27 Apr 2024 10:39:25 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/mam-timecode-convert/dist/mam-timecode-convert.js | 111.20.230.94 | 200 OK | 7.3 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/mam-timecode-convert/dist/mam-timecode-convert.js IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hash65750333726c75fd5386f09d70d87023 7406c7b162218b27f0690a3fd8da3104c4b57928 d183fdb758a4cd216140a0ba08e40a9a7c8c0cd49b1deeecdb45cc767787f81f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/mam-timecode-convert/dist/mam-timecode-convert.js HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Cookie: ASP.NET_SessionId=B0BEB77FF62000B36696470C
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:26 GMT
Content-Type: application/x-javascript
Content-Length: 7339
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:32 GMT
Content-Encoding: gzip
ETag: e49cacdc-f3c2-64d44c7c
Expires: Sat, 27 Apr 2024 10:39:26 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/login/views/login.html | 111.20.230.94 | 200 OK | 1.2 kB |
URL GET HTTP/1.1111.20.230.94:19160/login/views/login.html IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeexported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators Hashbf70abbd08fa4f4deea7c3dcd8a4ac04 4ad8c77d2b8f8dc9fbed031097e3a9d8219f7851 ab91b5ca71f6ab5907db405754997cfc8ba2d04df20e112f875e2e5a96c67e2b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login/views/login.html HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
mam-product: mah
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Cookie: lang=zh; ASP.NET_SessionId=B0BEB77FF62000B36696470C
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:26 GMT
Content-Type: text/html
Content-Length: 1175
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:33 GMT
Content-Encoding: gzip
ETag: 8a2b6b6d-131c-64d44c7d
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/login/theme/blue/main.css | 111.20.230.94 | 200 OK | 1.4 kB |
URL GET HTTP/1.1111.20.230.94:19160/login/theme/blue/main.css IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeASCII text, with very long lines (5101), with no line terminators Hashd843d68ed4a4224d45d3d3ff782bd846 bc380b36fc5453e1f5570fc7cb97c3740b370773 3aa34ee7a0132f7200fe8ef57d574167d4650ca70381c4afe02b0f828d823f4f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login/theme/blue/main.css HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Cookie: lang=zh; ASP.NET_SessionId=B0BEB77FF62000B36696470C
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:27 GMT
Content-Type: text/css
Content-Length: 1449
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:33 GMT
Content-Encoding: gzip
ETag: f48b372f-13ed-64d44c7d
Expires: Sat, 27 Apr 2024 10:39:27 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/home/get-sites?r=301714127966911 | 111.20.230.94 | 200 OK | 156 B |
URL GET HTTP/1.1111.20.230.94:19160/home/get-sites?r=301714127966911 IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
Hash3196736b954a8aa0cf789603ba6b5f46 63c6c282091a1f4858eb1abcebc3ef4440be86e4 636c979cad260074873880bb4451ec6406b1c9312c8020387af451d993c0303b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/get-sites?r=301714127966911 HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
mam-product: mah
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/
Cookie: ASP.NET_SessionId=B0BEB77FF62000B36696470C
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:27 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 156
Connection: keep-alive
Cache-Control: private
Set-Cookie: ASP.NET_SessionId=D1BB8CA88EF31F791958B8E1; path=/
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/libs/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 | 111.20.230.94 | 200 OK | 77 kB |
URL GET HTTP/1.1111.20.230.94:19160/libs/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /libs/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/libs/font-awesome/css/font-awesome.min.css
Cookie: ASP.NET_SessionId=D1BB8CA88EF31F791958B8E1; site=S1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:27 GMT
Content-Type: application/x-font-woff
Content-Length: 77160
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:31 GMT
ETag: 24e0fcdb-12d68-64d44c7b
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|
| 111.20.230.94:19160/login/img/login-bg-blue.jpg | 111.20.230.94 | 200 OK | 184 kB |
URL GET HTTP/1.1111.20.230.94:19160/login/img/login-bg-blue.jpg IP111.20.230.94:19160 ASN#9808 China Mobile Communications Group Co., Ltd.
Requested byhttp://111.20.230.94:19160/login/
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1300x900, components 3 Size184 kB (184525 bytes) Hash2793377f3bb4550b3f23fc0be787ef9e 7f29f580b4ab2249f40bbf1896f06d911479de21 76c101bb6a822928bcb069affa1cd6534b0161374657d946738da71b1c6676bf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /login/img/login-bg-blue.jpg HTTP/1.1
Host: 111.20.230.94:19160
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://111.20.230.94:19160/login/theme/blue/main.css
Cookie: lang=zh; ASP.NET_SessionId=D1BB8CA88EF31F791958B8E1; site=S1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.12.0
Date: Fri, 26 Apr 2024 10:39:27 GMT
Content-Type: image/jpeg
Content-Length: 184525
Connection: keep-alive
Accept-Ranges: bytes
Last-Modified: Thu, 10 Aug 2023 02:33:33 GMT
ETag: 34886de2-2d0cd-64d44c7d
Expires: Sat, 27 Apr 2024 10:39:27 GMT
Cache-Control: max-age=86400
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Credentials: true, true
Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE, GET,POST,PUT,OPTIONS,DELETE
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type, DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
|
|