Report - 134.236.101.168/

Report Overview

Submitted URL
134.236.101.168/
IP
134.236.101.168
ASN
#131090 CAT TELECOM Public Company Ltd,CAT
Submitted
2024-04-25 15:37:25
Access
public
Website Title
H8102E
Final URL
134.236.101.168/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
42

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
134.236.101.168	unknown	unknown	No data	No data	9.4 kB	569 kB	134.236.101.168

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed
2024-04-25	medium	134.236.101.168	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	134.236.101.168/jquery/common_lib.js	359 kB	2023-03-08	2024-04-25
Pretty URL 134.236.101.168/jquery/common_lib.js IP 134.236.101.168 ASN #131090 CAT TELECOM Public Company Ltd,CAT Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 07:41:31 Last Seen2024-04-25 17:37:32 Times Seen71 Hash 4c9bc9be9e3f2ec880603aeb186266b5 b81cb1badcd256eef399c51452258a307a6ccec2 9b78bc11eb74279e9ee5e68c43ad7a6e116b2782e7389666dd98bcea2e910076 Loading...

	unknown	248 B	2023-05-27	2024-04-25
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-05-27 01:35:41 Last Seen2024-04-25 17:37:32 Times Seen51 Hash 8be80ad77f7e7a17ce04cf37b6bb7c49 eb789945c06e00e5804bc0afae610b5d8f5d1fab fa1f4e3d1817ade08b863753489f9860423b74afefd903dfed847a110c699875 Loading...

	134.236.101.168/	45 kB	2023-03-08	2024-04-25
Pretty URL 134.236.101.168/ IP 134.236.101.168 ASN #131090 CAT TELECOM Public Company Ltd,CAT Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 07:41:31 Last Seen2024-04-25 17:37:32 Times Seen31 Hash 727d04aad20edfe9f9706a78f8f70abb 7bad252e65843ec5b7dd9823b92ae0c8a09e832c 33dcd4f612e08ddeb9d97256e87c6e788beffd8146194a445d5ae0da9d48776c Loading...

	134.236.101.168/	461 B	2023-03-08	2024-04-25
Pretty URL 134.236.101.168/ IP 134.236.101.168 ASN #131090 CAT TELECOM Public Company Ltd,CAT Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 07:41:31 Last Seen2024-04-25 17:37:32 Times Seen47 Hash 878fca442ad09f4c87682e3c30ed0361 47d2f3066599f83de8e9b1d27c34af8f6c596ff2 7029c8c430ef34e201b922b43c7da1d25336356f2653e45e647415454cc08795 Loading...

	134.236.101.168/	65 kB	2023-03-10	2024-04-25
Pretty URL 134.236.101.168/ IP 134.236.101.168 ASN #131090 CAT TELECOM Public Company Ltd,CAT Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 00:22:03 Last Seen2024-04-25 17:37:32 Times Seen6 Hash 1e77de20187e01b1fc6eebb9e2e7fef8 9de73a8c0f554810126cf8031b7916d5e08b5750 69bfa20ef6dfd7f0cb176e5410ebdf37aeb6dca18c4342212af1a96c8ce69adf Loading...

	134.236.101.168/	5.6 kB	2023-03-07	2024-04-25
Pretty URL 134.236.101.168/ IP 134.236.101.168 ASN #131090 CAT TELECOM Public Company Ltd,CAT Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 16:59:00 Last Seen2024-04-25 17:37:32 Times Seen34 Hash eff1abd6a8de58aca5a3a0292e94bd6e 5841246c3905248487ca00f6046a3b72435bfcaa b9496c30b4299b15f0da282379d6be7e6943a6559055188e9f0950867411b53b Loading...

	134.236.101.168/	5.7 kB	2023-03-10	2024-04-25
Pretty URL 134.236.101.168/ IP 134.236.101.168 ASN #131090 CAT TELECOM Public Company Ltd,CAT Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 00:22:03 Last Seen2024-04-25 17:37:32 Times Seen14 Hash ebc826af2c489ad599eea7aaeed52331 11a0ef84c6314c260d09f7fa1e926859809b8339 cf0b0ba8ca0dd2e1c4a1dfeb1061e1133d2dd600160e742de398ad96530e1564 Loading...

HTTP Transactions (21)

URL IP Response Size

134.236.101.168/

134.236.101.168

200 OK

147 kB

URL User Request GET HTTP/1.1
134.236.101.168/
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (474)
Size
147 kB (146567 bytes)
Hash
3cbee36bae8f2cf0ded9c0765eae84dc
ec70aefc7a06baa1ae6ca023c86c5a869f238824
350046ee8ed97370415d37457b4edd17b7592d4940c889c1dcf62869e40089fc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache,no-store
Content-Length: 146567
Set-Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; PATH=/; HttpOnly
_TESTCOOKIESUPPORT=1; PATH=/; HttpOnly
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: frame-ancestors 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Type: text/html; charset=utf-8

134.236.101.168/css/login.css

134.236.101.168

200 OK

657 B

URL GET HTTP/1.1
134.236.101.168/css/login.css
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
ASCII text
Size
657 B (657 bytes)
Hash
f2dbfe8fc3afa7967615c16e47cd45b9
dbdb8df2aa678189a784ea3ddd76479a4f0689a6
618ed548aa1edb60f298dfa14099000ab0ceacbe99435571f3b4383973cdd6b1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/login.css HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: text/css
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 657

134.236.101.168/jquery/common_lib.js

134.236.101.168

200 OK

359 kB

URL GET HTTP/1.1
134.236.101.168/jquery/common_lib.js
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators
Size
359 kB (359367 bytes)
Hash
4c9bc9be9e3f2ec880603aeb186266b5
b81cb1badcd256eef399c51452258a307a6ccec2
9b78bc11eb74279e9ee5e68c43ad7a6e116b2782e7389666dd98bcea2e910076

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /jquery/common_lib.js HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: application/x-javascript
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 359367

134.236.101.168/img/transparent.gif

134.236.101.168

200 OK

43 B

URL GET HTTP/1.1
134.236.101.168/img/transparent.gif
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/transparent.gif HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/gif
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 43

134.236.101.168/img/nv_left.gif

134.236.101.168

200 OK

582 B

URL GET HTTP/1.1
134.236.101.168/img/nv_left.gif
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
GIF image data, version 89a, 5 x 38
Size
582 B (582 bytes)
Hash
bb430a55a2570c4f45bc816cb281b57f
d1c82d958b541005aeda41c9f7624bde09150a34
ff7e41113e22fab09cbcbb7d4c3819f81638855cb6f80799f251f36be0bf64e0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/nv_left.gif HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/gif
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 582

134.236.101.168/?_type=loginData&_tag=login_entry

134.236.101.168

200 OK

89 B

URL GET HTTP/1.1
134.236.101.168/?_type=loginData&_tag=login_entry
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
JSON text data
Size
89 B (89 bytes)
Hash
bd1a48b8b232aa09738542ad8a75816b
732c4bebd2a0423238e0dee6f84791811dcaf4ad
dcb1a52959d6fad3fcc47788cd114baf18e52d36144b2bb2bb60f398a8f84b44

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?_type=loginData&_tag=login_entry HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache,no-store
Content-Length: 89
Set-Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; PATH=/; HttpOnly
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: frame-ancestors 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Type: application/json; charset=utf-8

134.236.101.168/?_type=hiddenData&_tag=captcha_data

134.236.101.168

200 OK

0 B

URL GET HTTP/1.1
134.236.101.168/?_type=hiddenData&_tag=captcha_data
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?_type=hiddenData&_tag=captcha_data HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache,no-store
Content-Length: 0
Set-Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; PATH=/; HttpOnly
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: frame-ancestors 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Type: text/xml; charset=utf-8

134.236.101.168/img/nv_middle.gif

134.236.101.168

200 OK

157 B

URL GET HTTP/1.1
134.236.101.168/img/nv_middle.gif
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
GIF image data, version 89a, 1 x 38
Size
157 B (157 bytes)
Hash
771a932a94de4419f1c05185f5f92a81
de9803bae0e17bbd54b64c82801601a6d803d8bb
f905ab8f1cb924b9ffa9941bdc9591869b0e33219ddd7ec20fe34d1b8a87ada9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/nv_middle.gif HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/gif
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 157

134.236.101.168/img/nv_right.gif

134.236.101.168

200 OK

585 B

URL GET HTTP/1.1
134.236.101.168/img/nv_right.gif
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
GIF image data, version 89a, 5 x 38
Size
585 B (585 bytes)
Hash
38030b4383e03efd94bad48f3158906b
2a75672c662c10527d804689910443835dcfd69f
e3a7c24c3f84f494fb6bda27260baae835eeda888828a88ff1b319730bbf381b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/nv_right.gif HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/gif
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 585

134.236.101.168/img/catLogo.png

134.236.101.168

200 OK

3.9 kB

URL GET HTTP/1.1
134.236.101.168/img/catLogo.png
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
PNG image data, 138 x 45, 8-bit/color RGBA, non-interlaced
Size
3.9 kB (3860 bytes)
Hash
137dbf42bf8edcc7919b29888315c4a3
e8cc287803d5a4cb764221f47d21e73e09126839
e8d1663770cea75699d10f82ad095b8ce55346360f295428550b9936da2ad410

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/catLogo.png HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/png
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 3860

134.236.101.168/img/Logo_ZTE.png

134.236.101.168

200 OK

1.5 kB

URL GET HTTP/1.1
134.236.101.168/img/Logo_ZTE.png
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
PNG image data, 105 x 40, 8-bit/color RGB, non-interlaced
Size
1.5 kB (1459 bytes)
Hash
3a471305bb1870220c99c4986fa35cfd
b699a60c5e512568b43b51bd377a08e3beffc19e
be5755ccb9383d9a4e4f1a6042ebf7bca928f983c7ae7e3b67d63aba1ad88599

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/Logo_ZTE.png HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/png
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 1459

134.236.101.168/img/catInternet.png

134.236.101.168

200 OK

8.5 kB

URL GET HTTP/1.1
134.236.101.168/img/catInternet.png
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
PNG image data, 128 x 113, 8-bit/color RGBA, non-interlaced
Size
8.5 kB (8464 bytes)
Hash
f22e84a1197ddbc8354f957ac7aac826
3371ad4522e76a8bba5ee38625155d9fc8c99bff
a14f05c2369353c176f5fb540b782fbcf4043e41605f9eeb3c5e0e9db48b0e75

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/catInternet.png HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/png
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 8464

134.236.101.168/img/login_title.gif

134.236.101.168

200 OK

4.6 kB

URL GET HTTP/1.1
134.236.101.168/img/login_title.gif
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
GIF image data, version 89a, 473 x 72
Size
4.6 kB (4602 bytes)
Hash
090900b7cca9ad3907e0fed113752841
22ce7d162ad4cb56468aaea0759f5ea348395c2a
8e3f674718a8b69b975c522084944828e325744ffde24a52a16bdd5fc0382bbf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/login_title.gif HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/css/login.css
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/gif
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 4602

134.236.101.168/img/login_footer.gif

134.236.101.168

200 OK

1.1 kB

URL GET HTTP/1.1
134.236.101.168/img/login_footer.gif
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
GIF image data, version 89a, 473 x 40
Size
1.1 kB (1052 bytes)
Hash
549585e6f2a828a8e31185d7ec9c5053
d5b02f9c5bde094c22e9e0b4af9dcd8bb645741a
14384825463a38732fbda7a85f73c8ec73363b0799e0d6d403f6f1087800e8b9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/login_footer.gif HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/css/login.css
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/gif
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 1052

134.236.101.168/img/login_bg.gif

134.236.101.168

200 OK

84 B

URL GET HTTP/1.1
134.236.101.168/img/login_bg.gif
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
GIF image data, version 89a, 473 x 1
Size
84 B (84 bytes)
Hash
0e2c22e827fcbcd0cfadc90079510474
4c6a96b77206d0c8e97826f4fcf4310219c33995
c13e18237108ee9d5ace7cb98842dc106f0cf842c21e0e0d4323e03eb6f47ecb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/login_bg.gif HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/css/login.css
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/gif
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 84

134.236.101.168/img/nv_s.gif

134.236.101.168

200 OK

162 B

URL GET HTTP/1.1
134.236.101.168/img/nv_s.gif
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
GIF image data, version 89a, 1 x 38
Size
162 B (162 bytes)
Hash
4c7c3e61dd34f27e04dcb59e97f46848
611372fef71b89a7f44c608a134f3d8aa290e81f
54df50d6cff6a082c29f9dffb6dd03e78f15b3c9292ab056b765292dde1cd3dc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/nv_s.gif HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/gif
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 162

134.236.101.168/img/waiting.gif

134.236.101.168

200 OK

12 kB

URL GET HTTP/1.1
134.236.101.168/img/waiting.gif
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
GIF image data, version 89a, 48 x 48
Size
12 kB (12543 bytes)
Hash
fffb4247b0c5882f929cd7e52eb2cb58
135b26a9e481dbb541d2471278db256c5c4f9992
b3ece3ffe451b3e09729697faa20926d4124ffafdad341f458ef2a3baad2f4eb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/waiting.gif HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/gif
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 12543

134.236.101.168/img/waiting_w.gif

134.236.101.168

200 OK

14 kB

URL GET HTTP/1.1
134.236.101.168/img/waiting_w.gif
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
GIF image data, version 89a, 48 x 48
Size
14 kB (13668 bytes)
Hash
65b1a8b8fcaf808ac92f909b8482583d
e453206d8e1ecc25be246874879c9d0ffb8e3359
8d696b5d937ab4f9542b5608baa3d0b3a18a7f355307df4ba92c1ff685ebcaec

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/waiting_w.gif HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/gif
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 13668

134.236.101.168/webimg/captcha.jpg?0.29297877188293386

134.236.101.168

200 OK

3.8 kB

URL GET HTTP/1.1
134.236.101.168/webimg/captcha.jpg?0.29297877188293386
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 100", baseline, precision 8, 60x20, components 3
Size
3.8 kB (3807 bytes)
Hash
837a85eceb58919af94258815af7f77e
5807e7c50301f60008fda71d76c43f073ad4bb69
6c7ed1e1a7b6a28d659198534528f1f0e759219c4636bb6679de8dd8f32c8662

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /webimg/captcha.jpg?0.29297877188293386 HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
Content-Type: image/jpeg
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 3807

134.236.101.168/img/info_m.png

134.236.101.168

200 OK

2.3 kB

URL GET HTTP/1.1
134.236.101.168/img/info_m.png
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
2.3 kB (2287 bytes)
Hash
23d6c94b34c82ff20862c8a4feca0574
8dd630f5e25eebcc7ae91d4dfb94ba018f1eaec5
5e09405383f883ed1863b663f70fc60f2f45d52ded0b5e2e10be985fe23fcc81

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/info_m.png HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/png
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 2287

134.236.101.168/img/favicon.ico

134.236.101.168

200 OK

1.2 kB

URL GET HTTP/1.1
134.236.101.168/img/favicon.ico
IP
134.236.101.168:80
ASN
#131090 CAT TELECOM Public Company Ltd,CAT

Requested by
http://134.236.101.168/

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Size
1.2 kB (1150 bytes)
Hash
5e966bb5036dc2624a0187a91e59d3dd
c0a7655cf2bb71ebd6c6a27d09c8894a94d5ca75
45af46af50c2a28934f9f9017e4126f615adbbb4dff185d45904285ec7dbd835

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/favicon.ico HTTP/1.1
Host: 134.236.101.168
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://134.236.101.168/
Cookie: SID=08e23fd565908c78b45f4ec48df94ab124e79864a2b086595877e0cae37f822b; _TESTCOOKIESUPPORT=1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: ZTE web server 1.0 ZTE corp 2015.
Accept-Ranges: bytes
Connection: close
X-Frame-Options: SAMEORIGIN
ETag: "47fb952a20ab0c00e293fbd476c1a579"
Content-Type: image/x-icon
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data:
Content-Length: 1150

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (21)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections