Report - 103.42.75.164/bgscegate/user.php?id=2023ED37login.php

Report Overview

Submitted URL
103.42.75.164/bgscegate/user.php?id=2023ED37login.php
IP
103.42.75.164
ASN
#139195 Seans Media Pvt Ltd
Submitted
2024-04-20 10:43:16
Access
public
Website Title
Login
Final URL
103.42.75.164/bgscegate/login.php
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
38

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
103.42.75.164	unknown	unknown	No data	No data	8.1 kB	669 kB	103.42.75.164

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed
2024-04-20	medium	103.42.75.164	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	103.42.75.164/bgscegate/assets/js/custom.js	390 B	2023-09-16	2024-04-20
Pretty URL 103.42.75.164/bgscegate/assets/js/custom.js IP 103.42.75.164 ASN #139195 Seans Media Pvt Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-16 02:10:38 Last Seen2024-04-20 12:43:23 Times Seen92 Hash 61cf52973a34ec2ff4a183a6b07cd2a2 09b687d802b008208950f7cf7725806918d9c4b9 e3b32f2af50b857dc5fe07d3790d4a6ceb46a0609bb27133b5229355ab45b1a2 Loading...

	103.42.75.164/bgscegate/assets/js/plugins/bootstrap-notify.js	14 kB	2023-03-08	2024-04-20
Pretty URL 103.42.75.164/bgscegate/assets/js/plugins/bootstrap-notify.js IP 103.42.75.164 ASN #139195 Seans Media Pvt Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:48:28 Last Seen2024-04-20 12:43:23 Times Seen112 Hash 189a72b15d45e9f29e2b89b636f5dbf9 3c276d666277a997fce497fee981faa1701ef96a 679d7aea7c4b161793b76aa9b8f42f31aa91814cc7d2845ab95a20cb9aaf7669 Loading...

	103.42.75.164/bgscegate/assets/js/core/popper.min.js	34 kB	2023-03-07	2024-04-20
Pretty URL 103.42.75.164/bgscegate/assets/js/core/popper.min.js IP 103.42.75.164 ASN #139195 Seans Media Pvt Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:59:12 Last Seen2024-04-20 12:43:23 Times Seen222 Hash 10a554dd975faf4004fc557d7cf8c998 01bbb5c50ebe83e0b866a82a53514e5bc7939170 bef1acd24d825c495f65c5603c443adf00e08086620e5eaf9ded75b6e8b4012d Loading...

	103.42.75.164/bgscegate/assets/js/plugins/bootstrap-selectpicker.js	95 kB	2023-09-16	2024-04-20
Pretty URL 103.42.75.164/bgscegate/assets/js/plugins/bootstrap-selectpicker.js IP 103.42.75.164 ASN #139195 Seans Media Pvt Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-16 02:10:38 Last Seen2024-04-20 12:43:23 Times Seen92 Hash c1d5e60fe8a11ee52cc820ba02cec7f9 761fee4eb78cb80f705e1580b687884e8cc6f931 c6de56fca491f77479291b15538f2b20b6db758857e28081294278c78ed714a8 Loading...

	103.42.75.164/bgscegate/assets/js/material-dashboard.min.js?v=2.0.2	12 kB	2023-09-16	2024-04-20
Pretty URL 103.42.75.164/bgscegate/assets/js/material-dashboard.min.js?v=2.0.2 IP 103.42.75.164 ASN #139195 Seans Media Pvt Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-16 02:10:38 Last Seen2024-04-20 12:43:23 Times Seen92 Hash 5c8f38cd0eac52ef4d4c4366a79f7400 290dd866aaf5eba1fd02208499c82fd2ff768fd1 50306d6009f9c1f9377a8dc1ee4350b78eb03d45b8c93195014967a1af904e08 Loading...

	103.42.75.164/bgscegate/assets/js/core/jquery.min.js	146 kB	2023-03-07	2024-04-20
Pretty URL 103.42.75.164/bgscegate/assets/js/core/jquery.min.js IP 103.42.75.164 ASN #139195 Seans Media Pvt Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09:45 Last Seen2024-04-20 12:43:23 Times Seen226 Hash 986d2baef41aa37ae02ab33355413b98 ddb65f1fb486e0142e2ad61d11621e93bd34e4c9 cb3c74487498e9f91ec9a5f5840f128445caf82d5d1fce5d4f691a71c3e1a631 Loading...

	103.42.75.164/bgscegate/login.php	40 B	2023-03-07	2024-05-03
Pretty URL 103.42.75.164/bgscegate/login.php IP 103.42.75.164 ASN #139195 Seans Media Pvt Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:07 Last Seen2024-05-03 08:18:37 Times Seen4746 Hash 6bd43cf0ae158526c6ab93dc3be79f28 15c289e342bd3fdf5b1e95f7abf25a2bc78bf357 7a13d5ae0755d86c09084ec300c4a0f1a0a06921f74d9980eba9d966ff17ad38 Loading...

	103.42.75.164/bgscegate/assets/js/core/bootstrap-material-design.min.js	77 kB	2023-03-07	2024-04-20
Pretty URL 103.42.75.164/bgscegate/assets/js/core/bootstrap-material-design.min.js IP 103.42.75.164 ASN #139195 Seans Media Pvt Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09:45 Last Seen2024-04-20 12:43:23 Times Seen154 Hash 479f5022008b8d4b6ef6f2d406ead5cf 739bd3fe963745c8ba7ec37e4f7aa0d1024afa93 75bb54b3aca68071a4fc568ecb5f1b1a97a2b31be8c6bed0283183665c5b64bb Loading...

	103.42.75.164/bgscegate/assets/js/plugins/perfect-scrollbar.jquery.min.js	25 kB	2023-03-07	2024-04-20
Pretty URL 103.42.75.164/bgscegate/assets/js/plugins/perfect-scrollbar.jquery.min.js IP 103.42.75.164 ASN #139195 Seans Media Pvt Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 14:22:53 Last Seen2024-04-20 12:43:23 Times Seen147 Hash 01554ac137637d449ff38ea0dc4244fc 19dbee910cf4b98c0d8e3a3a14ad2444aad9d521 99a06a2f5c8a4757b224e2348fa36ce5be57bcd9d1b62874b9d7344cb5095d04 Loading...

		Size	First Seen	Last Seen
	#1 Write - 07811dc6c422334ce36a09ff5cd6fe71	4 B	2023-03-11	2024-05-03
Pretty Observations First Seen2023-03-11 11:15:57 Last Seen2024-05-03 08:18:37 Times Seen2119 Hash 07811dc6c422334ce36a09ff5cd6fe71 7e79a3af2634de6635e59c9404d251b3955d39f9 6557739a67283a8de383fc5c0997fbec7c5721a46f28f3235fc9607598d9016b Loading...

HTTP Transactions (19)

URL IP Response Size

103.42.75.164/bgscegate/user.php?id=2023ED37login.php

103.42.75.164

4.7 kB

URL User Request GET
103.42.75.164/bgscegate/user.php?id=2023ED37login.php
IP
103.42.75.164:0
ASN
#139195 Seans Media Pvt Ltd

File type
HTML document, ASCII text, with CRLF line terminators
Size
4.7 kB (4724 bytes)
Hash
68fd05b002fb45022976d994f80eeb37
b4fe112188bc1fc76d829a36e4427f77b0a21316
7a8936c3363b79d26acaf180ea526545c3d28ec8bc2a2d6d9c25499c5c1a6114

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/user.php?id=2023ED37login.php HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Sat, 20 Apr 2024 10:42:49 GMT
Server: Apache/2.4.18 (Ubuntu)
Set-Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
location: login.php
Content-Length: 4724
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

103.42.75.164/bgscegate/login.php

103.42.75.164

1.5 kB

URL User Request GET
103.42.75.164/bgscegate/login.php
IP
103.42.75.164:0
ASN
#139195 Seans Media Pvt Ltd

File type
HTML document, Unicode text, UTF-8 text
Size
1.5 kB (1481 bytes)
Hash
10ec2fa66864d5b6f57cef1d6289acc6
2ae42ec119eca8fb6e95e8984c0f43de7ba13c07
f9bd51a58c011762e6b08a018ff41211fa4066b19900f3df97cd5700b5f54954

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/login.php HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:50 GMT
Server: Apache/2.4.18 (Ubuntu)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1481
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

103.42.75.164/bgscegate/assets/css/material-icons.css

103.42.75.164

200 OK

350 B

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/css/material-icons.css
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
ASCII text
Size
350 B (350 bytes)
Hash
10bb1df0a8ba9b080138c5f9d329c7d5
b1cd41242f501530738a842220922f2a1f65626f
e1f370fdd97405deff3833aea52f1f14148a47d7808379ce1227b052a782a6e6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/css/material-icons.css HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:50 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "2c1-5a73189a996c1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 350
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

103.42.75.164/bgscegate/assets/css/custom.css

103.42.75.164

200 OK

962 B

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/css/custom.css
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
ASCII text
Size
962 B (962 bytes)
Hash
7ae54d0fa620329c08d83648128b9eeb
48c083a9c6fd5f0db97161e593760cdf5010162b
89def58401ab697c02d92751e0bcb36a9d77dfb747c6fb27f285011a789e22cf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/css/custom.css HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:51 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "a51-5a73189a95840-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 962
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

103.42.75.164/bgscegate/assets/js/custom.js

103.42.75.164

200 OK

254 B

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/js/custom.js
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
ASCII text
Size
254 B (254 bytes)
Hash
61cf52973a34ec2ff4a183a6b07cd2a2
09b687d802b008208950f7cf7725806918d9c4b9
e3b32f2af50b857dc5fe07d3790d4a6ceb46a0609bb27133b5229355ab45b1a2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/js/custom.js HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:51 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "186-5a73189a9d541-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 254
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript

103.42.75.164/bgscegate/assets/css/font-awesome.min.css

103.42.75.164

200 OK

6.9 kB

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/css/font-awesome.min.css
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
ASCII text, with very long lines (30835)
Size
6.9 kB (6932 bytes)
Hash
1726449ae36962c3280a48b20a12c82c
378eb1102f4f0da755f40b2143079ae493806f83
4417d83635e73c0a98fcb1c5a151883b74cd505b505c5f2a04dd6901bc8141e5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/css/font-awesome.min.css HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:51 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "791a-5a73189a95840-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6932
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

103.42.75.164/bgscegate/assets/css/bootstrap-select.min.css

103.42.75.164

200 OK

2.0 kB

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/css/bootstrap-select.min.css
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
ASCII text, with very long lines (9568), with CRLF line terminators
Size
2.0 kB (1975 bytes)
Hash
7551bdcaa335fbd51d4c6095dba2a7bf
35f4cb27d97fdfa3aade55b7512271f87206fa14
0f10c5f18c1a08c7ac7b91e3510be995476218667bc3f3bbf7cfc9773131e28a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/css/bootstrap-select.min.css HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:51 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "2650-5a73189a95840-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1975
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

103.42.75.164/bgscegate/assets/js/plugins/bootstrap-notify.js

103.42.75.164

200 OK

4.0 kB

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/js/plugins/bootstrap-notify.js
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
JavaScript source, ASCII text, with very long lines (595)
Size
4.0 kB (4016 bytes)
Hash
189a72b15d45e9f29e2b89b636f5dbf9
3c276d666277a997fce497fee981faa1701ef96a
679d7aea7c4b161793b76aa9b8f42f31aa91814cc7d2845ab95a20cb9aaf7669

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/js/plugins/bootstrap-notify.js HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:51 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "3882-5a73189a9e4e1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4016
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

103.42.75.164/bgscegate/assets/js/plugins/perfect-scrollbar.jquery.min.js

103.42.75.164

200 OK

6.5 kB

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/js/plugins/perfect-scrollbar.jquery.min.js
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
JavaScript source, ASCII text, with very long lines (25300)
Size
6.5 kB (6470 bytes)
Hash
01554ac137637d449ff38ea0dc4244fc
19dbee910cf4b98c0d8e3a3a14ad2444aad9d521
99a06a2f5c8a4757b224e2348fa36ce5be57bcd9d1b62874b9d7344cb5095d04

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/js/plugins/perfect-scrollbar.jquery.min.js HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:51 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "62f4-5a73189aa3302-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6470
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

103.42.75.164/bgscegate/assets/js/core/jquery.min.js

103.42.75.164

200 OK

36 kB

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/js/core/jquery.min.js
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
JavaScript source, ASCII text, with very long lines (522)
Size
36 kB (35549 bytes)
Hash
986d2baef41aa37ae02ab33355413b98
ddb65f1fb486e0142e2ad61d11621e93bd34e4c9
cb3c74487498e9f91ec9a5f5840f128445caf82d5d1fce5d4f691a71c3e1a631

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/js/core/jquery.min.js HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:51 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "2394d-5a73189a9d541-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 35549
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

103.42.75.164/bgscegate/assets/js/material-dashboard.min.js?v=2.0.2

103.42.75.164

200 OK

4.0 kB

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/js/material-dashboard.min.js?v=2.0.2
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
JavaScript source, ASCII text, with very long lines (11473)
Size
4.0 kB (3976 bytes)
Hash
5c8f38cd0eac52ef4d4c4366a79f7400
290dd866aaf5eba1fd02208499c82fd2ff768fd1
50306d6009f9c1f9377a8dc1ee4350b78eb03d45b8c93195014967a1af904e08

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/js/material-dashboard.min.js?v=2.0.2 HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:51 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "2d19-5a73189a9e4e1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3976
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

103.42.75.164/bgscegate/assets/js/core/bootstrap-material-design.min.js

103.42.75.164

200 OK

20 kB

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/js/core/bootstrap-material-design.min.js
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
20 kB (20198 bytes)
Hash
479f5022008b8d4b6ef6f2d406ead5cf
739bd3fe963745c8ba7ec37e4f7aa0d1024afa93
75bb54b3aca68071a4fc568ecb5f1b1a97a2b31be8c6bed0283183665c5b64bb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/js/core/bootstrap-material-design.min.js HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:51 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "12b6c-5a73189a9d541-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20198
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

103.42.75.164/bgscegate/assets/css/material-dashboard.min.css

103.42.75.164

200 OK

76 kB

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/css/material-dashboard.min.css
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
ASCII text, with very long lines (65092)
Size
76 kB (76195 bytes)
Hash
42c8f50d47e12e11c94864c6b074f773
4e0f2ebd725a11084e1fe268e5f52175ff53a876
aca0685996f68d506cd3dd9b0375aa834794b6d88d896377d3d1489777a84b4d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/css/material-dashboard.min.css HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:51 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "7dfbe-5a73189a996c1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css

103.42.75.164/bgscegate/assets/js/plugins/bootstrap-selectpicker.js

103.42.75.164

200 OK

21 kB

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/js/plugins/bootstrap-selectpicker.js
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
JavaScript source, ASCII text
Size
21 kB (21147 bytes)
Hash
c1d5e60fe8a11ee52cc820ba02cec7f9
761fee4eb78cb80f705e1580b687884e8cc6f931
c6de56fca491f77479291b15538f2b20b6db758857e28081294278c78ed714a8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/js/plugins/bootstrap-selectpicker.js HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:51 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "1733d-5a73189a9e4e1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 21147
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

103.42.75.164/bgscegate/assets/js/core/popper.min.js

103.42.75.164

200 OK

8.0 kB

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/js/core/popper.min.js
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
JavaScript source, ASCII text, with very long lines (526)
Size
8.0 kB (7955 bytes)
Hash
10a554dd975faf4004fc557d7cf8c998
01bbb5c50ebe83e0b866a82a53514e5bc7939170
bef1acd24d825c495f65c5603c443adf00e08086620e5eaf9ded75b6e8b4012d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/js/core/popper.min.js HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:51 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "82c5-5a73189a9d541-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7955
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript

103.42.75.164/bgscegate/assets/css/fonts/goo-custom.woff2

103.42.75.164

200 OK

55 kB

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/css/fonts/goo-custom.woff2
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
Web Open Font Format (Version 2), TrueType, length 55088, version 1.0
Size
55 kB (55088 bytes)
Hash
8a9a261c8b8dfe90db11f1817a9d22e1
75c69e8b7c1ceaeac5f8876e77a4d67c3d01ce43
5dbb3a972022659dd6da5878c41474f5eb70280fac4608c8b5cb72c8debd4a40

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/css/fonts/goo-custom.woff2 HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/assets/css/material-icons.css
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:51 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "d730-5a73189a97781"
Accept-Ranges: bytes
Content-Length: 55088
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive

103.42.75.164/bgscegate/assets/css/fonts/goo-custom.woff2

103.42.75.164

200 OK

55 kB

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/css/fonts/goo-custom.woff2
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
Web Open Font Format (Version 2), TrueType, length 55088, version 1.0
Size
55 kB (55088 bytes)
Hash
8a9a261c8b8dfe90db11f1817a9d22e1
75c69e8b7c1ceaeac5f8876e77a4d67c3d01ce43
5dbb3a972022659dd6da5878c41474f5eb70280fac4608c8b5cb72c8debd4a40

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/css/fonts/goo-custom.woff2 HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/assets/css/material-icons.css
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:52 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "d730-5a73189a97781"
Accept-Ranges: bytes
Content-Length: 55088
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive

103.42.75.164/bgscegate/assets/img/login.jpg

103.42.75.164

200 OK

335 kB

URL GET HTTP/1.1
103.42.75.164/bgscegate/assets/img/login.jpg
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=3493, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=5957], baseline, precision 8, 1920x1126, components 3
Size
335 kB (335211 bytes)
Hash
7fd8452cafd2292a15ea05bc4e0a67f0
45db53e74adc391103a33a0569e7627e2b39f790
e0d20ebde04367211e813dfcd4b5629fc9abe26c8b1c486043b7cc3f0fd16f64

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bgscegate/assets/img/login.jpg HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Apr 2024 10:42:51 GMT
Server: Apache/2.4.18 (Ubuntu)
Last-Modified: Wed, 03 Jun 2020 17:41:28 GMT
ETag: "51d6b-5a73189a9c5a1"
Accept-Ranges: bytes
Content-Length: 335211
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

103.42.75.164/favicon.ico

103.42.75.164

404 Not Found

25 kB

URL GET HTTP/1.1
103.42.75.164/favicon.ico
IP
103.42.75.164:80
ASN
#139195 Seans Media Pvt Ltd

Requested by
http://103.42.75.164/bgscegate/login.php

File type
HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Size
25 kB (24914 bytes)
Hash
4d600900ae28e4ff620e9a0538f4fbb2
da4b019ca9bc15bc84f17f9010c7c4741c6ba941
2d079916e9259a80a064eb75d23229668ebdb6d4e98553014a0b94cfa6be938f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 103.42.75.164
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.42.75.164/bgscegate/login.php
Cookie: PHPSESSID=kjb4gupn49nm49372ntdfb4q55
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Sat, 20 Apr 2024 10:42:52 GMT
Server: Apache/2.4.18 (Ubuntu)
Cache-control: no-cache
Content-script-type: text/javascript
Content-style-type: text/css
Pragma: no-cache
X-frame-options: SAMEORIGIN
Set-Cookie: CGISESSID=560699fd0c54fb9bd5c33170cd4cf152; path=/; HttpOnly
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML