Report - 91.39.110.14/

Report Overview

Submitted URL
91.39.110.14/
IP
91.39.110.14
ASN
#3320 Deutsche Telekom AG
Submitted
2024-04-26 21:45:14
Access
public
Website Title
FRITZ!Box
Final URL
91.39.110.14/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
36

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
91.39.110.14	unknown	unknown	No data	No data	7.6 kB	306 kB	91.39.110.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed
2024-04-26	medium	91.39.110.14	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	91.39.110.14/js/login.js	22 kB	2024-04-26	2024-04-26
Pretty URL 91.39.110.14/js/login.js IP 91.39.110.14 ASN #3320 Deutsche Telekom AG Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 23:45:20 Last Seen2024-04-26 23:45:21 Times Seen2 Hash cffbfafc1ad9a711b89d2398d76c8eb7 3e1ea4e65605780df01b4a852c39ce93b791e89c 16cf177718cbb852ab2b27e27fbb7b7de9487f933e85dc4f552ecaf441dba0e7 Loading...

	91.39.110.14/js/html.js	6.7 kB	2024-02-24	2024-04-26
Pretty URL 91.39.110.14/js/html.js IP 91.39.110.14 ASN #3320 Deutsche Telekom AG Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-24 13:38:40 Last Seen2024-04-26 23:45:21 Times Seen4 Hash b27c480aad9cd70051d0433fe4243b98 7fb16d3fe967ab33487c7f489388694991b61990 09d30173d5863718b8c37d5e782fb001cd41a737d96010ba0603163f4723f056 Loading...

	91.39.110.14/js/func.js	1.8 kB	2024-02-24	2024-04-26
Pretty URL 91.39.110.14/js/func.js IP 91.39.110.14 ASN #3320 Deutsche Telekom AG Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-24 13:38:39 Last Seen2024-04-26 23:45:21 Times Seen4 Hash 5a29a4aab98b11a934b746ecfcdba766 b043227732c952218087ed10dc36e8734618ba41 aa4b7b56f3a273a2cfe272d7a3edf58cdcb8ea3dc440746dc6201667798cec77 Loading...

	91.39.110.14/js/jsl.js	17 kB	2024-02-24	2024-04-26
Pretty URL 91.39.110.14/js/jsl.js IP 91.39.110.14 ASN #3320 Deutsche Telekom AG Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-24 13:38:40 Last Seen2024-04-26 23:45:21 Times Seen4 Hash f49a0072b43750beb44b9b7762c0d926 50091adcbb52bf530b266757a73916f9738960bc 98384fef0ed781f9596600e7758d0f2d7b9e405bb73591606fe3db8de0d00ef9 Loading...

	91.39.110.14/	0 B	2023-03-07	2024-05-07
Pretty URL 91.39.110.14/ IP 91.39.110.14 ASN #3320 Deutsche Telekom AG Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 14:43:30 Times Seen37410305 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	91.39.110.14/js/browser.js	257 B	2024-02-24	2024-04-26
Pretty URL 91.39.110.14/js/browser.js IP 91.39.110.14 ASN #3320 Deutsche Telekom AG Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-24 13:38:39 Last Seen2024-04-26 23:45:21 Times Seen4 Hash 9b665adc49358117b585c101783187a7 2410cd28f0446d7153881c55211133629beaf8be 7345c1ba1b5f6689d2160cb76be8b56a81fb422c8418be7d2d7993a9a8bba6e7 Loading...

	91.39.110.14/js/html2.js	4.6 kB	2024-04-26	2024-04-26
Pretty URL 91.39.110.14/js/html2.js IP 91.39.110.14 ASN #3320 Deutsche Telekom AG Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 23:45:21 Last Seen2024-04-26 23:45:21 Times Seen2 Hash c75047f718693fbe28556811717aad46 fc3af54697be5a0e968dca91e863e853958c30b8 c43010c310131b863b8466a4ed41c658446e93c40fbe72fc50b8649b742c6364 Loading...

	91.39.110.14/js/jxl.js	18 kB	2024-02-24	2024-04-26
Pretty URL 91.39.110.14/js/jxl.js IP 91.39.110.14 ASN #3320 Deutsche Telekom AG Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-24 13:38:40 Last Seen2024-04-26 23:45:21 Times Seen4 Hash 71ecc9d2e46cdd8987315afd64232c6c 99fdf31097c6b6b0a5d490fe71e23bc1f31750ed e5be671eee823bf9b8e64e168d48a68a5269ab5850c4015d877a5ba75f75c178 Loading...

	91.39.110.14/js/http.js	5.3 kB	2024-02-24	2024-04-26
Pretty URL 91.39.110.14/js/http.js IP 91.39.110.14 ASN #3320 Deutsche Telekom AG Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-24 13:38:40 Last Seen2024-04-26 23:45:21 Times Seen4 Hash fcc3bd42ebe402353f34492695c37a06 ff3254caa22c798a657d7a65b91f3176a272e303 054cc2f71ef94288ee3cccada23f9f0780bf8986fcce3a661348c0b37ffc6668 Loading...

	91.39.110.14/js/md5.js	6.3 kB	2024-02-24	2024-04-26
Pretty URL 91.39.110.14/js/md5.js IP 91.39.110.14 ASN #3320 Deutsche Telekom AG Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-24 13:38:40 Last Seen2024-04-26 23:45:21 Times Seen4 Hash 8642b5c4f6b2d789509773b1d4f169dd bf1b63fc17676e5a5907875ce98f044228762a09 b5a8bab62b4af992214f62f8ddb52d587926c54023bc54a296b67460bad2c286 Loading...

HTTP Transactions (18)

URL IP Response Size

91.39.110.14/

91.39.110.14

200 OK

6.4 kB

URL User Request GET HTTP/1.1
91.39.110.14/
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
HTML document, Unicode text, UTF-8 text
Size
6.4 kB (6381 bytes)
Hash
76880412b8fda0cd24bd442555659e76
0109cc1e4ebc5ec203082980e94a6831bd9d15bf
8be1e6722ab9997682260905746d02f2e54d24d893f55b7b13e3327daf8cf8ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-type: text/html; charset=utf-8
Date: Fri, 26 Apr 2024 21:44:51 GMT
Expires: -1
Pragma: no-cache
Keep-Alive: timeout=60, max=300

91.39.110.14/css/rd/login.css

91.39.110.14

200 OK

8.5 kB

URL GET HTTP/1.1
91.39.110.14/css/rd/login.css
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
Unicode text, UTF-8 text
Size
8.5 kB (8463 bytes)
Hash
7c57a32fafea835dc8e0d2887999977c
688dd1bdb05f60851e332ac534a98f2bcddf4768
dda9357de5cd8d6a9b245e2b91292ae585a643439f80dc4d7177c0e21ef22960

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/rd/login.css HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/css
Date: Fri, 26 Apr 2024 21:44:51 GMT
ETag: "C7B8CEBE6466A754C"
Expires: Fri, 26 Apr 2024 21:46:51 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:01 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/js/browser.js

91.39.110.14

200 OK

257 B

URL GET HTTP/1.1
91.39.110.14/js/browser.js
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
ASCII text
Size
257 B (257 bytes)
Hash
9b665adc49358117b585c101783187a7
2410cd28f0446d7153881c55211133629beaf8be
7345c1ba1b5f6689d2160cb76be8b56a81fb422c8418be7d2d7993a9a8bba6e7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/browser.js HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript;charset=utf-8
Date: Fri, 26 Apr 2024 21:44:53 GMT
ETag: "73F4887BACEFE4662"
Expires: Fri, 26 Apr 2024 21:46:53 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:01 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/js/jsl.js

91.39.110.14

200 OK

17 kB

URL GET HTTP/1.1
91.39.110.14/js/jsl.js
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
JavaScript source, ASCII text
Size
17 kB (17043 bytes)
Hash
f49a0072b43750beb44b9b7762c0d926
50091adcbb52bf530b266757a73916f9738960bc
98384fef0ed781f9596600e7758d0f2d7b9e405bb73591606fe3db8de0d00ef9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/jsl.js HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript;charset=utf-8
Date: Fri, 26 Apr 2024 21:44:53 GMT
ETag: "BB21FF2BCC8F84177"
Expires: Fri, 26 Apr 2024 21:46:53 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:01 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/js/jxl.js

91.39.110.14

200 OK

18 kB

URL GET HTTP/1.1
91.39.110.14/js/jxl.js
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
JavaScript source, ASCII text
Size
18 kB (17741 bytes)
Hash
71ecc9d2e46cdd8987315afd64232c6c
99fdf31097c6b6b0a5d490fe71e23bc1f31750ed
e5be671eee823bf9b8e64e168d48a68a5269ab5850c4015d877a5ba75f75c178

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/jxl.js HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript;charset=utf-8
Date: Fri, 26 Apr 2024 21:44:53 GMT
ETag: "A3E32FB63E2BC8153"
Expires: Fri, 26 Apr 2024 21:46:53 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:00 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/js/func.js

91.39.110.14

200 OK

1.8 kB

URL GET HTTP/1.1
91.39.110.14/js/func.js
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
JavaScript source, ASCII text
Size
1.8 kB (1805 bytes)
Hash
5a29a4aab98b11a934b746ecfcdba766
b043227732c952218087ed10dc36e8734618ba41
aa4b7b56f3a273a2cfe272d7a3edf58cdcb8ea3dc440746dc6201667798cec77

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/func.js HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript;charset=utf-8
Date: Fri, 26 Apr 2024 21:44:53 GMT
ETag: "5C750E07E7F92B783"
Expires: Fri, 26 Apr 2024 21:46:53 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:01 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/js/html.js

91.39.110.14

200 OK

6.7 kB

URL GET HTTP/1.1
91.39.110.14/js/html.js
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
JavaScript source, ASCII text
Size
6.7 kB (6730 bytes)
Hash
b27c480aad9cd70051d0433fe4243b98
7fb16d3fe967ab33487c7f489388694991b61990
09d30173d5863718b8c37d5e782fb001cd41a737d96010ba0603163f4723f056

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/html.js HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript;charset=utf-8
Date: Fri, 26 Apr 2024 21:44:54 GMT
ETag: "B059B436F33D06BEF"
Expires: Fri, 26 Apr 2024 21:46:54 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:01 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/js/html2.js

91.39.110.14

200 OK

4.6 kB

URL GET HTTP/1.1
91.39.110.14/js/html2.js
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
JavaScript source, Unicode text, UTF-8 text
Size
4.6 kB (4556 bytes)
Hash
c75047f718693fbe28556811717aad46
fc3af54697be5a0e968dca91e863e853958c30b8
c43010c310131b863b8466a4ed41c658446e93c40fbe72fc50b8649b742c6364

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/html2.js HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript;charset=utf-8
Date: Fri, 26 Apr 2024 21:44:54 GMT
ETag: "8D52D721D64D461F1"
Expires: Fri, 26 Apr 2024 21:46:54 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:01 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/js/http.js

91.39.110.14

200 OK

5.3 kB

URL GET HTTP/1.1
91.39.110.14/js/http.js
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
JavaScript source, ASCII text
Size
5.3 kB (5326 bytes)
Hash
fcc3bd42ebe402353f34492695c37a06
ff3254caa22c798a657d7a65b91f3176a272e303
054cc2f71ef94288ee3cccada23f9f0780bf8986fcce3a661348c0b37ffc6668

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/http.js HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript;charset=utf-8
Date: Fri, 26 Apr 2024 21:44:54 GMT
ETag: "9E6C4A7459C64DF43"
Expires: Fri, 26 Apr 2024 21:46:54 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:02 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/js/md5.js

91.39.110.14

200 OK

6.3 kB

URL GET HTTP/1.1
91.39.110.14/js/md5.js
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
JavaScript source, ASCII text
Size
6.3 kB (6275 bytes)
Hash
8642b5c4f6b2d789509773b1d4f169dd
bf1b63fc17676e5a5907875ce98f044228762a09
b5a8bab62b4af992214f62f8ddb52d587926c54023bc54a296b67460bad2c286

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/md5.js HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript;charset=utf-8
Date: Fri, 26 Apr 2024 21:44:54 GMT
ETag: "7EEA867E3C3A79F8E"
Expires: Fri, 26 Apr 2024 21:46:54 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:01 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/js/login.js

91.39.110.14

200 OK

22 kB

URL GET HTTP/1.1
91.39.110.14/js/login.js
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
JavaScript source, Unicode text, UTF-8 text
Size
22 kB (21674 bytes)
Hash
cffbfafc1ad9a711b89d2398d76c8eb7
3e1ea4e65605780df01b4a852c39ce93b791e89c
16cf177718cbb852ab2b27e27fbb7b7de9487f933e85dc4f552ecaf441dba0e7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/login.js HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript;charset=utf-8
Date: Fri, 26 Apr 2024 21:44:54 GMT
ETag: "01748BF937F295101"
Expires: Fri, 26 Apr 2024 21:46:54 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:01 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/css/rd/fonts/sourcesanspro.woff

91.39.110.14

200 OK

36 kB

URL GET HTTP/1.1
91.39.110.14/css/rd/fonts/sourcesanspro.woff
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
Web Open Font Format, TrueType, length 36232, version 2.10
Size
36 kB (36232 bytes)
Hash
4b659aae9ca3d08245bbcb7addb3edb0
4295356c6bd1c384ee03442b546226b399992161
7ff7c44e51b3cbf016c7ca4bf64332f0362a087774436203b977103301b8032e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/rd/fonts/sourcesanspro.woff HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html;charset=utf-8
Date: Fri, 26 Apr 2024 21:44:54 GMT
ETag: "F72145030E82AF652"
Expires: Fri, 26 Apr 2024 21:46:54 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:00 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/css/rd/images/login_background.svg

91.39.110.14

200 OK

19 kB

URL GET HTTP/1.1
91.39.110.14/css/rd/images/login_background.svg
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
SVG Scalable Vector Graphics image
Size
19 kB (18709 bytes)
Hash
e66458376cf6b05cabad465ab61f2148
add4ba30cb4bed0ece6f020016a4cea2f57314ab
79e19f36aa04c320c2f8ab26bef87e042f93c0fb07de5743a507cc1b8e83277e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/rd/images/login_background.svg HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/css/rd/login.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Content-Length: 18709
Content-Type: image/svg+xml;charset=utf-8
Date: Fri, 26 Apr 2024 21:44:54 GMT
ETag: "30ABE6704F2C76492"
Expires: Fri, 26 Apr 2024 21:46:54 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:00 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/css/rd/images/fritzLogo.svg

91.39.110.14

200 OK

42 kB

URL GET HTTP/1.1
91.39.110.14/css/rd/images/fritzLogo.svg
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
SVG Scalable Vector Graphics image
Size
42 kB (42164 bytes)
Hash
983982f937251be84708a93a9d45023d
6a4a8b2f110652a5d7d9495efec96fa5e772942e
162ea11fae55459cce594fef762bb5459a6969f423542e84e4faf3a3f6c52521

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/rd/images/fritzLogo.svg HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/css/rd/login.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Content-Length: 42164
Content-Type: image/svg+xml;charset=utf-8
Date: Fri, 26 Apr 2024 21:44:54 GMT
ETag: "A58A0977E40868771"
Expires: Fri, 26 Apr 2024 21:46:54 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:00 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/css/rd/fonts/sourcesansproBold.woff

91.39.110.14

200 OK

36 kB

URL GET HTTP/1.1
91.39.110.14/css/rd/fonts/sourcesansproBold.woff
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
Web Open Font Format, TrueType, length 35668, version 2.10
Size
36 kB (35668 bytes)
Hash
c8130b729993da4d055f5e35ee9538b4
f931baea0cd47176cab60d344623566067b584b5
7ce82ea6e58fd88d9792d9b5f9c4797dc6961b64dfbebedaa33c1ed59921fb4d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/rd/fonts/sourcesansproBold.woff HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html;charset=utf-8
Date: Fri, 26 Apr 2024 21:44:54 GMT
ETag: "7BAE723E533EA7395"
Expires: Fri, 26 Apr 2024 21:46:54 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:00 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/css/rd/fonts/metaWebProBold.woff

91.39.110.14

200 OK

65 kB

URL GET HTTP/1.1
91.39.110.14/css/rd/fonts/metaWebProBold.woff
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
Web Open Font Format, TrueType, length 65424, version 7.504
Size
65 kB (65424 bytes)
Hash
e6094a36508e7b30807335d21b190305
d3de8b630675f86f2662b4ccec40870425b55b5b
0a2586b5f53f86b24c59c4052e159c1c64ff7940573d6ab1d06d51691ed9c471

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/rd/fonts/metaWebProBold.woff HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html;charset=utf-8
Date: Fri, 26 Apr 2024 21:44:54 GMT
ETag: "97C93C1E502D76A0A"
Expires: Fri, 26 Apr 2024 21:46:54 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:00 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/favicon.ico

91.39.110.14

200 OK

1.2 kB

URL GET HTTP/1.1
91.39.110.14/favicon.ico
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Size
1.2 kB (1150 bytes)
Hash
45210ace96ce9c893f8c27c5decab10d
8b0326ee496ed0866660d7d33f1d6c2fadf4ad63
77322c31320fb5c917bd48247c9f1b88058cd1583f00a2f4e78df090eb9b9777

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Content-Length: 1150
Content-Type: image/x-icon
Date: Fri, 26 Apr 2024 21:44:54 GMT
ETag: "FD4B248906D4C2DB9"
Expires: Fri, 26 Apr 2024 21:46:54 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:00 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

91.39.110.14/css/default/images/kopfbalken_links.png

91.39.110.14

200 OK

4.5 kB

URL GET HTTP/1.1
91.39.110.14/css/default/images/kopfbalken_links.png
IP
91.39.110.14:443
ASN
#3320 Deutsche Telekom AG

Requested by
https://91.39.110.14/
Certificate
Issuer
Subjectteam-bc-neustadt.dyndns.org
FingerprintEF:BC:23:A0:B6:68:84:EC:5A:7D:6B:46:0D:A6:85:A7:F8:4A:58:35
ValidityMon, 27 Jun 2022 13:17:18 GMT - Fri, 15 Jan 2038 13:17:18 GMT

File type
PNG image data, 98 x 77, 8-bit/color RGBA, non-interlaced
Size
4.5 kB (4539 bytes)
Hash
5e58c7a7c14c992b36f4935836e5e73f
9e1547ac0979463e8dd406ddaed2830fbb149983
ee923f2c26e714c798e0cbd0acde6faf8fca83d17c4a3d286abed1c78ba97474

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/default/images/kopfbalken_links.png HTTP/1.1
Host: 91.39.110.14
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://91.39.110.14/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: max-age=120
Connection: Keep-Alive
Content-Length: 4539
Content-Type: image/png
Date: Fri, 26 Apr 2024 21:44:54 GMT
ETag: "15241C255ECD0BF73"
Expires: Fri, 26 Apr 2024 21:46:54 GMT
Last-Modified: Wed, 06 Sep 2023 12:20:00 GMT
Mime-Version: 1.0
Keep-Alive: timeout=60, max=300

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML