Report - mailx.org.ng/original/login.php

Report Overview

Submitted URL
mailx.org.ng/original/login.php
IP
104.194.10.93
ASN
#23470 RELIABLESITE
Submitted
2024-04-18 08:40:36
Access
public
Website Title
Login
Final URL
mailx.org.ng/original/login.php
Tags
botpanel malware
urlquery detections
Malware - Botnet panel

Detections

urlquery
12
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mailx.org.ng	unknown	2024-01-23	2024-03-24	2024-04-18	5.2 kB	98 kB	104.194.10.93

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	mailx.org.ng/original/plugins/bower_components/jquery/dist/jquery.min.js	84 kB	2023-03-07	2024-04-29
Pretty URL mailx.org.ng/original/plugins/bower_components/jquery/dist/jquery.min.js IP 104.194.10.93 ASN #23470 RELIABLESITE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:26:04 Last Seen2024-04-29 11:39:31 Times Seen243 Hash 512d9517dac8bd35b30856de88170212 fcb6d93a78864e9068c597ac843b0c4724248337 70ea5c0fd61a431fef3e564d404e868b8017cdf8525f37ef2e1a64299246003b Loading...

	mailx.org.ng/original/bootstrap/dist/js/tether.min.js	25 kB	2023-03-07	2024-04-29
Pretty URL mailx.org.ng/original/bootstrap/dist/js/tether.min.js IP 104.194.10.93 ASN #23470 RELIABLESITE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:26:04 Last Seen2024-04-29 11:39:31 Times Seen293 Hash 99d5eb445062f5f3b82d29aa2680e4a2 5c2a19c60f8ab7306c43bd68feebb3c9d3282c3c ff9a470d98767efd5e6489b27e24e1b41e408382ea0e3ca2b6d4fb7cb8dd4fff Loading...

	mailx.org.ng/original/bootstrap/dist/js/bootstrap.min.js	47 kB	2023-03-07	2024-05-01
Pretty URL mailx.org.ng/original/bootstrap/dist/js/bootstrap.min.js IP 104.194.10.93 ASN #23470 RELIABLESITE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10:42 Last Seen2024-05-01 05:32:14 Times Seen1284 Hash 0827a0bdcd9a917990eee461a77dd33e 6107d146e54a67c9998230abf839301575d05702 fa421b6ebbd2fb474d3a3866409ce6c1efd120b47ff256fffb8f8f50d556d3d9 Loading...

	mailx.org.ng/original/plugins/bower_components/bootstrap-extension/js/bootstrap-extension.min.js	27 kB	2023-03-07	2024-04-29
Pretty URL mailx.org.ng/original/plugins/bower_components/bootstrap-extension/js/bootstrap-extension.min.js IP 104.194.10.93 ASN #23470 RELIABLESITE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:26:04 Last Seen2024-04-29 11:39:31 Times Seen222 Hash 0c241eb74c0986ffefa56dc8308dd0ee 26b62a6286256442b6be8ce4b51dd3a34ac6588d bb5e2d3039b4fddffc1e711897eaffc7ddcf7256fea855989d37c4b1aa8bed8d Loading...

	mailx.org.ng/original/plugins/sweetalert/dist/sweetalert.min.js	17 kB	2023-03-07	2024-04-29
Pretty URL mailx.org.ng/original/plugins/sweetalert/dist/sweetalert.min.js IP 104.194.10.93 ASN #23470 RELIABLESITE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:43 Last Seen2024-04-29 11:39:31 Times Seen2115 Hash 2f9966a615f3f46d846807adbe42644f 441544c084828da55ca0bafdc4c3df7dc7020820 be4d1215ef6f2b2915b7f65cd28b9a9f7dcef17e1f0d883edd19400ca0ea795c Loading...

HTTP Transactions (10)

URL IP Response Size

mailx.org.ng/original/login.php

104.194.10.93

200 OK

619 B

URL User Request GET HTTP/2
mailx.org.ng/original/login.php
IP
104.194.10.93:443
ASN
#23470 RELIABLESITE

Certificate
IssuerLet's Encrypt
Subject*.mailx.org.ng
Fingerprint99:9A:E7:EF:75:8E:62:35:26:90:62:6E:10:62:E1:06:13:36:A3:B6
ValiditySun, 24 Mar 2024 09:36:05 GMT - Sat, 22 Jun 2024 09:36:04 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
619 B (619 bytes)
Hash
fe63b1c5a4c1cef5831e1c53fea96819
85d83d158b35a42c8f02d75618d624ea9ae5e0d1
66570233b27c0c11c1bf1a393b51332ffc0d274fd514afbecda91dabe1750d59

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /original/login.php HTTP/1.1
Host: mailx.org.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
set-cookie: PHPSESSID=72623578d207e8e2cbd9c6291885f656; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=utf-8
content-length: 619
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 08:40:10 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

mailx.org.ng/original/bootstrap/dist/css/bootstrap.min.css

104.194.10.93

200 OK

18 kB

URL GET HTTP/2
mailx.org.ng/original/bootstrap/dist/css/bootstrap.min.css
IP
104.194.10.93:443
ASN
#23470 RELIABLESITE

Requested by
https://mailx.org.ng/original/login.php
Certificate
IssuerLet's Encrypt
Subject*.mailx.org.ng
Fingerprint99:9A:E7:EF:75:8E:62:35:26:90:62:6E:10:62:E1:06:13:36:A3:B6
ValiditySun, 24 Mar 2024 09:36:05 GMT - Sat, 22 Jun 2024 09:36:04 GMT

File type
ASCII text, with very long lines (65317)
Size
18 kB (18042 bytes)
Hash
7e923ad223e9f33e54d22e50cf2bcce5
8b7cb193d70bb476db06651c878dfcd1a7e1c0ee
aebf611c1438dc7ec748e9a6364c734066b34bf2a1c7e2fc6511ed784635b50e

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /original/bootstrap/dist/css/bootstrap.min.css HTTP/1.1
Host: mailx.org.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailx.org.ng/original/login.php
Cookie: PHPSESSID=72623578d207e8e2cbd9c6291885f656
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 08:40:11 GMT
content-type: text/css
last-modified: Fri, 06 Jan 2017 19:12:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 18042
date: Thu, 18 Apr 2024 08:40:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

mailx.org.ng/original/plugins/sweetalert/dist/sweetalert.css

104.194.10.93

200 OK

3.5 kB

URL GET HTTP/2
mailx.org.ng/original/plugins/sweetalert/dist/sweetalert.css
IP
104.194.10.93:443
ASN
#23470 RELIABLESITE

Requested by
https://mailx.org.ng/original/login.php
Certificate
IssuerLet's Encrypt
Subject*.mailx.org.ng
Fingerprint99:9A:E7:EF:75:8E:62:35:26:90:62:6E:10:62:E1:06:13:36:A3:B6
ValiditySun, 24 Mar 2024 09:36:05 GMT - Sat, 22 Jun 2024 09:36:04 GMT

File type
ASCII text
Size
3.5 kB (3487 bytes)
Hash
d8cc26070373f41241f37ce5a9c9d885
3ecb6f91187c0153724c950efcea0b0d944fd5aa
460df149ba9d2eb000637d9bfb2df51c5080a19e9071ff4ed5a4b7e21a0bd2f1

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /original/plugins/sweetalert/dist/sweetalert.css HTTP/1.1
Host: mailx.org.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailx.org.ng/original/login.php
Cookie: PHPSESSID=72623578d207e8e2cbd9c6291885f656
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 08:40:11 GMT
content-type: text/css
last-modified: Thu, 15 Dec 2016 06:39:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3487
date: Thu, 18 Apr 2024 08:40:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

mailx.org.ng/original/plugins/bower_components/bootstrap-extension/css/bootstrap-extension.css

104.194.10.93

200 OK

12 kB

URL GET HTTP/2
mailx.org.ng/original/plugins/bower_components/bootstrap-extension/css/bootstrap-extension.css
IP
104.194.10.93:443
ASN
#23470 RELIABLESITE

Requested by
https://mailx.org.ng/original/login.php
Certificate
IssuerLet's Encrypt
Subject*.mailx.org.ng
Fingerprint99:9A:E7:EF:75:8E:62:35:26:90:62:6E:10:62:E1:06:13:36:A3:B6
ValiditySun, 24 Mar 2024 09:36:05 GMT - Sat, 22 Jun 2024 09:36:04 GMT

File type
ASCII text, with very long lines (65511)
Size
12 kB (11768 bytes)
Hash
83f991966f4fe9b5e26dcb79c267a630
9810c2f654b171419de327c8048a7141b663a783
0ca13f118a0ac8dc77f0894b67dffe9861d52218cbbbaa2150ccf113665c6bfc

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /original/plugins/bower_components/bootstrap-extension/css/bootstrap-extension.css HTTP/1.1
Host: mailx.org.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailx.org.ng/original/login.php
Cookie: PHPSESSID=72623578d207e8e2cbd9c6291885f656
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 08:40:11 GMT
content-type: text/css
last-modified: Thu, 13 Apr 2017 22:47:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11768
date: Thu, 18 Apr 2024 08:40:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

mailx.org.ng/original/plugins/bower_components/jquery/dist/jquery.min.js

104.194.10.93

200 OK

29 kB

URL GET HTTP/2
mailx.org.ng/original/plugins/bower_components/jquery/dist/jquery.min.js
IP
104.194.10.93:443
ASN
#23470 RELIABLESITE

Requested by
https://mailx.org.ng/original/login.php
Certificate
IssuerLet's Encrypt
Subject*.mailx.org.ng
Fingerprint99:9A:E7:EF:75:8E:62:35:26:90:62:6E:10:62:E1:06:13:36:A3:B6
ValiditySun, 24 Mar 2024 09:36:05 GMT - Sat, 22 Jun 2024 09:36:04 GMT

File type
JavaScript source, ASCII text, with very long lines (32025)
Size
29 kB (28814 bytes)
Hash
512d9517dac8bd35b30856de88170212
fcb6d93a78864e9068c597ac843b0c4724248337
70ea5c0fd61a431fef3e564d404e868b8017cdf8525f37ef2e1a64299246003b

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /original/plugins/bower_components/jquery/dist/jquery.min.js HTTP/1.1
Host: mailx.org.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailx.org.ng/original/login.php
Cookie: PHPSESSID=72623578d207e8e2cbd9c6291885f656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 08:40:11 GMT
content-type: application/javascript
last-modified: Sun, 09 Apr 2017 19:51:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 28814
date: Thu, 18 Apr 2024 08:40:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

mailx.org.ng/original/bootstrap/dist/js/tether.min.js

104.194.10.93

200 OK

7.2 kB

URL GET HTTP/2
mailx.org.ng/original/bootstrap/dist/js/tether.min.js
IP
104.194.10.93:443
ASN
#23470 RELIABLESITE

Requested by
https://mailx.org.ng/original/login.php
Certificate
IssuerLet's Encrypt
Subject*.mailx.org.ng
Fingerprint99:9A:E7:EF:75:8E:62:35:26:90:62:6E:10:62:E1:06:13:36:A3:B6
ValiditySun, 24 Mar 2024 09:36:05 GMT - Sat, 22 Jun 2024 09:36:04 GMT

File type
JavaScript source, ASCII text, with very long lines (24900), with no line terminators
Size
7.2 kB (7188 bytes)
Hash
99d5eb445062f5f3b82d29aa2680e4a2
5c2a19c60f8ab7306c43bd68feebb3c9d3282c3c
ff9a470d98767efd5e6489b27e24e1b41e408382ea0e3ca2b6d4fb7cb8dd4fff

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /original/bootstrap/dist/js/tether.min.js HTTP/1.1
Host: mailx.org.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailx.org.ng/original/login.php
Cookie: PHPSESSID=72623578d207e8e2cbd9c6291885f656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 08:40:11 GMT
content-type: application/javascript
last-modified: Tue, 15 Nov 2016 23:37:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7188
date: Thu, 18 Apr 2024 08:40:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

mailx.org.ng/original/bootstrap/dist/js/bootstrap.min.js

104.194.10.93

200 OK

12 kB

URL GET HTTP/2
mailx.org.ng/original/bootstrap/dist/js/bootstrap.min.js
IP
104.194.10.93:443
ASN
#23470 RELIABLESITE

Requested by
https://mailx.org.ng/original/login.php
Certificate
IssuerLet's Encrypt
Subject*.mailx.org.ng
Fingerprint99:9A:E7:EF:75:8E:62:35:26:90:62:6E:10:62:E1:06:13:36:A3:B6
ValiditySun, 24 Mar 2024 09:36:05 GMT - Sat, 22 Jun 2024 09:36:04 GMT

File type
JavaScript source, ASCII text, with very long lines (32075)
Size
12 kB (11465 bytes)
Hash
0827a0bdcd9a917990eee461a77dd33e
6107d146e54a67c9998230abf839301575d05702
fa421b6ebbd2fb474d3a3866409ce6c1efd120b47ff256fffb8f8f50d556d3d9

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /original/bootstrap/dist/js/bootstrap.min.js HTTP/1.1
Host: mailx.org.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailx.org.ng/original/login.php
Cookie: PHPSESSID=72623578d207e8e2cbd9c6291885f656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 08:40:11 GMT
content-type: application/javascript
last-modified: Fri, 06 Jan 2017 19:12:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11465
date: Thu, 18 Apr 2024 08:40:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

mailx.org.ng/original/plugins/bower_components/bootstrap-extension/js/bootstrap-extension.min.js

104.194.10.93

200 OK

6.9 kB

URL GET HTTP/2
mailx.org.ng/original/plugins/bower_components/bootstrap-extension/js/bootstrap-extension.min.js
IP
104.194.10.93:443
ASN
#23470 RELIABLESITE

Requested by
https://mailx.org.ng/original/login.php
Certificate
IssuerLet's Encrypt
Subject*.mailx.org.ng
Fingerprint99:9A:E7:EF:75:8E:62:35:26:90:62:6E:10:62:E1:06:13:36:A3:B6
ValiditySun, 24 Mar 2024 09:36:05 GMT - Sat, 22 Jun 2024 09:36:04 GMT

File type
JavaScript source, ASCII text, with very long lines (26402)
Size
6.9 kB (6928 bytes)
Hash
0c241eb74c0986ffefa56dc8308dd0ee
26b62a6286256442b6be8ce4b51dd3a34ac6588d
bb5e2d3039b4fddffc1e711897eaffc7ddcf7256fea855989d37c4b1aa8bed8d

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /original/plugins/bower_components/bootstrap-extension/js/bootstrap-extension.min.js HTTP/1.1
Host: mailx.org.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailx.org.ng/original/login.php
Cookie: PHPSESSID=72623578d207e8e2cbd9c6291885f656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 08:40:11 GMT
content-type: application/javascript
last-modified: Mon, 13 Mar 2017 15:12:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6928
date: Thu, 18 Apr 2024 08:40:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

mailx.org.ng/original/plugins/sweetalert/dist/sweetalert.min.js

104.194.10.93

200 OK

5.1 kB

URL GET HTTP/2
mailx.org.ng/original/plugins/sweetalert/dist/sweetalert.min.js
IP
104.194.10.93:443
ASN
#23470 RELIABLESITE

Requested by
https://mailx.org.ng/original/login.php
Certificate
IssuerLet's Encrypt
Subject*.mailx.org.ng
Fingerprint99:9A:E7:EF:75:8E:62:35:26:90:62:6E:10:62:E1:06:13:36:A3:B6
ValiditySun, 24 Mar 2024 09:36:05 GMT - Sat, 22 Jun 2024 09:36:04 GMT

File type
JavaScript source, ASCII text, with very long lines (16994), with no line terminators
Size
5.1 kB (5135 bytes)
Hash
2f9966a615f3f46d846807adbe42644f
441544c084828da55ca0bafdc4c3df7dc7020820
be4d1215ef6f2b2915b7f65cd28b9a9f7dcef17e1f0d883edd19400ca0ea795c

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /original/plugins/sweetalert/dist/sweetalert.min.js HTTP/1.1
Host: mailx.org.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailx.org.ng/original/login.php
Cookie: PHPSESSID=72623578d207e8e2cbd9c6291885f656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 08:40:11 GMT
content-type: application/javascript
last-modified: Thu, 15 Dec 2016 06:39:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5135
date: Thu, 18 Apr 2024 08:40:11 GMT
server: LiteSpeed
X-Firefox-Spdy: h2

mailx.org.ng/favicon.ico

104.194.10.93

404 Not Found

1.2 kB

URL GET HTTP/3
mailx.org.ng/favicon.ico
IP
104.194.10.93:443
ASN
#23470 RELIABLESITE

Requested by
https://mailx.org.ng/original/login.php
Certificate
IssuerLet's Encrypt
Subject*.mailx.org.ng
Fingerprint99:9A:E7:EF:75:8E:62:35:26:90:62:6E:10:62:E1:06:13:36:A3:B6
ValiditySun, 24 Mar 2024 09:36:05 GMT - Sat, 22 Jun 2024 09:36:04 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.2 kB (1238 bytes)
Hash
0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: mailx.org.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mailx.org.ng/original/login.php
Cookie: PHPSESSID=72623578d207e8e2cbd9c6291885f656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 18 Apr 2024 08:40:11 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections