Report - 41.215.149.253/

Report Overview

Submitted URL
41.215.149.253/
IP
41.215.149.253
ASN
#19711 SWAZINET
Submitted
2024-04-25 14:21:59
Access
public
Website Title
D-Link xDSL Router
Final URL
41.215.149.253/login.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
16

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
41.215.149.253	unknown	unknown	No data	No data	3.1 kB	60 kB	41.215.149.253

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	41.215.149.253	Sinkholed
2024-04-25	medium	41.215.149.253	Sinkholed
2024-04-25	medium	41.215.149.253	Sinkholed
2024-04-25	medium	41.215.149.253	Sinkholed
2024-04-25	medium	41.215.149.253	Sinkholed
2024-04-25	medium	41.215.149.253	Sinkholed
2024-04-25	medium	41.215.149.253	Sinkholed
2024-04-25	medium	41.215.149.253	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	41.215.149.253/login.html	0 B	2023-03-07	2024-05-05
Pretty URL 41.215.149.253/login.html IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-05 02:28:17 Times Seen37352139 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	41.215.149.253/login.html	0 B	2023-03-07	2024-05-05
Pretty URL 41.215.149.253/login.html IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-05 02:28:17 Times Seen37352139 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	unknown	16 B	2023-06-06	2024-04-25
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-06-06 00:48:54 Last Seen2024-04-25 16:22:05 Times Seen14 Hash b5a64b6c9b2800485b7022bc34657d36 f2352cf4134ae6135dfbfa5eb1f6bf1a857f9c59 9a24b0d93ba3595b4092ec8ebb05d276c746df7a87f610dd4340d6284d9ca7ee Loading...

HTTP Transactions (8)

URL IP Response Size

41.215.149.253/

41.215.149.253

6.9 kB

URL
41.215.149.253/
IP
41.215.149.253:0
ASN
#19711 SWAZINET

File type
data
Size
6.9 kB (6884 bytes)
Hash
d5b985af9d9e2bcc9537431ef1626d4e
fc44564bb5f68c2bf4411fdf1fd6c73de5cdcdc9
7bdfbde749456230f57a0d4a233abea8705d66f548ed7f6d060448273e55bf87

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 41.215.149.253
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 Ok
Server: micro_httpd
Cache-Control: no-cache
Date: Thu, 25 Apr 2024 16:21:42 GMT
Set-Cookie: webuicookie=; path=/
Content-Type: text/html
Connection: close

41.215.149.253/login.html

0.0.0.0

0 B

URL User Request GET
41.215.149.253/login.html
IP
0.0.0.0:0
ASN
#0

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login.html HTTP/1.1
Host: 41.215.149.253
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://41.215.149.253/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: webuicookie=
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

41.215.149.253/login.html

41.215.149.253

200 Ok

5.4 kB

URL User Request GET HTTP/1.1
41.215.149.253/login.html
IP
41.215.149.253:80
ASN
#19711 SWAZINET

File type
HTML document, ASCII text, with very long lines (6208), with no line terminators
Size
5.4 kB (5404 bytes)
Hash
ea5b19a4b48600e04ae93ae585fd07d3
136153a7feba683a950bebbcd45a03d76d9b20cb
d66a9c549450ed9abdc915b814450eaf01ccce2328ebfdfc5b1e806c9fbd13af

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login.html HTTP/1.1
Host: 41.215.149.253
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://41.215.149.253/
DNT: 1
Connection: keep-alive
Cookie: webuicookie=
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 Ok
Server: micro_httpd
Cache-Control: no-cache
Date: Thu, 25 Apr 2024 16:21:44 GMT
Content-Type: text/html
Connection: close

41.215.149.253/stylemain.css

41.215.149.253

200 Ok

22 kB

URL GET HTTP/1.1
41.215.149.253/stylemain.css
IP
41.215.149.253:80
ASN
#19711 SWAZINET

Requested by
http://41.215.149.253/login.html

File type
ASCII text, with very long lines (377), with CRLF line terminators
Size
22 kB (21696 bytes)
Hash
5ddd55d198bb73b7f7dc50bf78075d6b
0e48237f47b8a8cc0e82ceae57c07a52ff17bfba
c4265fa9433bdac738eeff6b86416b02e547c972f7acec5e0ccc65ca62f5770a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /stylemain.css HTTP/1.1
Host: 41.215.149.253
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://41.215.149.253/login.html
Cookie: webuicookie=
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 Ok
Server: micro_httpd
Date: Thu, 25 Apr 2024 16:21:44 GMT
Last-Modified: Mon, 11 Apr 2016 00:57:59 GMT
Content-Type: text/css
Connection: close

41.215.149.253/pic/img_wireless_bottom.gif

41.215.149.253

200 Ok

573 B

URL GET HTTP/1.1
41.215.149.253/pic/img_wireless_bottom.gif
IP
41.215.149.253:80
ASN
#19711 SWAZINET

Requested by
http://41.215.149.253/login.html

File type
GIF image data, version 89a, 114 x 35
Size
573 B (573 bytes)
Hash
ce61afc10498dc3bc8bf205c9f50d3ca
34867cfadb29869a5456120ac5fdab4cf47a0ac2
c6811085aaf8e074c740ead2f3c80bbd4f2ce064218594058f81d00a991affac

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pic/img_wireless_bottom.gif HTTP/1.1
Host: 41.215.149.253
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://41.215.149.253/login.html
Cookie: webuicookie=
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 Ok
Server: micro_httpd
Date: Thu, 25 Apr 2024 16:21:46 GMT
Last-Modified: Mon, 11 Apr 2016 00:58:00 GMT
Content-Type: image/gif
Connection: close

41.215.149.253/stylemain.css

41.215.149.253

200 Ok

22 kB

URL GET HTTP/1.1
41.215.149.253/stylemain.css
IP
41.215.149.253:80
ASN
#19711 SWAZINET

Requested by
http://41.215.149.253/login.html

File type
ASCII text, with very long lines (377), with CRLF line terminators
Size
22 kB (21696 bytes)
Hash
5ddd55d198bb73b7f7dc50bf78075d6b
0e48237f47b8a8cc0e82ceae57c07a52ff17bfba
c4265fa9433bdac738eeff6b86416b02e547c972f7acec5e0ccc65ca62f5770a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /stylemain.css HTTP/1.1
Host: 41.215.149.253
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://41.215.149.253/login.html
Cookie: webuicookie=
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 Ok
Server: micro_httpd
Date: Thu, 25 Apr 2024 16:21:45 GMT
Last-Modified: Mon, 11 Apr 2016 00:57:59 GMT
Content-Type: text/css
Connection: close

41.215.149.253/favicon.ico

41.215.149.253

404 Not Found

218 B

URL GET HTTP/1.1
41.215.149.253/favicon.ico
IP
41.215.149.253:80
ASN
#19711 SWAZINET

Requested by
http://41.215.149.253/login.html

File type
HTML document, ASCII text, with no line terminators
Size
218 B (218 bytes)
Hash
9705b177d6a949cc3d8ab2bbae55bf9b
13cbcace00a5aad2f5bd240efafc63719e082a5a
ef81f2a88e42deeef50bbf3f51344abac06f1894b48c3ee5fae12982fc4ec97b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 41.215.149.253
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://41.215.149.253/login.html
Cookie: webuicookie=
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: micro_httpd
Cache-Control: no-cache
Date: Thu, 25 Apr 2024 16:21:46 GMT
Content-Type: text/html
Connection: close

41.215.149.253/pic/img_masthead.gif

41.215.149.253

200 Ok

2.4 kB

URL GET HTTP/1.1
41.215.149.253/pic/img_masthead.gif
IP
41.215.149.253:80
ASN
#19711 SWAZINET

Requested by
http://41.215.149.253/login.html

File type
GIF image data, version 89a, 836 x 92
Size
2.4 kB (2352 bytes)
Hash
0e8f3efa24e2c464067953d36825ae5c
21801cab191457ef6fbd02c491d32f750e33ff48
d1f30e36f2b0e7157dae95666a12ad0e4b1720c20edf4585828de97aee124736

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pic/img_masthead.gif HTTP/1.1
Host: 41.215.149.253
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://41.215.149.253/login.html
Cookie: webuicookie=
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 Ok
Server: micro_httpd
Date: Thu, 25 Apr 2024 16:21:46 GMT
Last-Modified: Mon, 11 Apr 2016 00:58:00 GMT
Content-Type: image/gif
Connection: close

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP