Report - 5908501.mammothmilalion.com/

Report Overview

Submitted URL
5908501.mammothmilalion.com/
IP
198.54.115.51
ASN
#22612 NAMECHEAP-NET
Submitted
2024-04-26 06:47:29
Access
public
Website Title
Index of /
Final URL
5908501.mammothmilalion.com/
Tags
opendir
urlquery detections
Audit - Open directory

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
5908501.mammothmilalion.com	unknown	unknown	No data	No data	2.3 kB	9.0 kB	198.54.115.51

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	mammothmilalion.com	Sinkholed
2024-04-26	medium	mammothmilalion.com	Sinkholed
2024-04-26	medium	mammothmilalion.com	Sinkholed
2024-04-26	medium	mammothmilalion.com	Sinkholed
2024-04-26	medium	mammothmilalion.com	Sinkholed
2024-04-26	medium	mammothmilalion.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	5908501.mammothmilalion.com/_autoindex/assets/js/tablesort.js	7.7 kB	2023-03-07	2024-05-05
Pretty URL 5908501.mammothmilalion.com/_autoindex/assets/js/tablesort.js IP 198.54.115.51 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:32 Last Seen2024-05-05 18:49:31 Times Seen9065 Hash 0fa71bf6cb125ddac365683ea3352cb0 b94eeac8764b23ab614d148007c360fd2ab46f58 6a6b3fd328d213b1c6211581fc0dd5b56dd9db878e4fee73d33f5dd699aced3e Loading...

	5908501.mammothmilalion.com/_autoindex/assets/js/tablesort.number.js	682 B	2023-03-07	2024-05-05
Pretty URL 5908501.mammothmilalion.com/_autoindex/assets/js/tablesort.number.js IP 198.54.115.51 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:32 Last Seen2024-05-05 18:49:31 Times Seen9067 Hash 377b82a88aeda884475d40fa1051c70a e7619035db4c628248b82237f3a99683e29ed7a4 5ff78b7ea9124ad40c205b606048c819dbbdc9c708105961d89859f79092cd07 Loading...

	5908501.mammothmilalion.com/	58 B	2023-04-05	2024-05-05
Pretty URL 5908501.mammothmilalion.com/ IP 198.54.115.51 ASN #22612 NAMECHEAP-NET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 03:56:22 Last Seen2024-05-05 18:49:31 Times Seen3872 Hash 821524a21b9d31d8e5d87899a346e04a 92582c750f6ff8ddb212023b48fc49fe40891d75 7b0cac9d1c981314ca25d8d0f4c4dcf1b2dec8f0a8a5b46ee029c6754a9f7edc Loading...

HTTP Transactions (6)

URL IP Response Size

5908501.mammothmilalion.com/

198.54.115.51

200 OK

838 B

URL User Request GET HTTP/1.1
5908501.mammothmilalion.com/
IP
198.54.115.51:80
ASN
#22612 NAMECHEAP-NET

File type
HTML document, ASCII text, with very long lines (547)
Size
838 B (838 bytes)
Hash
39fca4c7b1261550e65887e063dfb802
d2f005e148ff2872eb39374d9e90eeca1cc9a5a9
ea5231259e8459d080a26e944dd7cefacf6857fa03b772428ad1b1de15309e7a

Detections

Analyzer	Verdict	Alert
urlquery	none	Audit - Open directory
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 5908501.mammothmilalion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
keep-alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 838
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 26 Apr 2024 06:47:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed

5908501.mammothmilalion.com/_autoindex/assets/css/autoindex.css

198.54.115.51

200 OK

1.4 kB

URL GET HTTP/1.1
5908501.mammothmilalion.com/_autoindex/assets/css/autoindex.css
IP
198.54.115.51:80
ASN
#22612 NAMECHEAP-NET

Requested by
http://5908501.mammothmilalion.com/

File type
ASCII text
Size
1.4 kB (1397 bytes)
Hash
590db3a115b1e82a26b09f98964030a5
e792179b620700c09bd763ebf3b5f163fd18f213
37e1e1cbb4256d8006ccfcc7c7c8e891276191714768291589b40483d3f0fe46

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_autoindex/assets/css/autoindex.css HTTP/1.1
Host: 5908501.mammothmilalion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://5908501.mammothmilalion.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
keep-alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 06:47:05 GMT
content-type: text/css
last-modified: Wed, 10 Apr 2024 06:44:07 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 1397
date: Fri, 26 Apr 2024 06:47:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed

5908501.mammothmilalion.com/_autoindex/assets/js/tablesort.js

198.54.115.51

200 OK

2.6 kB

URL GET HTTP/1.1
5908501.mammothmilalion.com/_autoindex/assets/js/tablesort.js
IP
198.54.115.51:80
ASN
#22612 NAMECHEAP-NET

Requested by
http://5908501.mammothmilalion.com/

File type
JavaScript source, ASCII text
Size
2.6 kB (2634 bytes)
Hash
0fa71bf6cb125ddac365683ea3352cb0
b94eeac8764b23ab614d148007c360fd2ab46f58
6a6b3fd328d213b1c6211581fc0dd5b56dd9db878e4fee73d33f5dd699aced3e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_autoindex/assets/js/tablesort.js HTTP/1.1
Host: 5908501.mammothmilalion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://5908501.mammothmilalion.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
keep-alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 06:47:05 GMT
content-type: application/javascript
last-modified: Wed, 10 Apr 2024 06:44:07 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2634
date: Fri, 26 Apr 2024 06:47:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed

5908501.mammothmilalion.com/_autoindex/assets/js/tablesort.number.js

198.54.115.51

200 OK

375 B

URL GET HTTP/1.1
5908501.mammothmilalion.com/_autoindex/assets/js/tablesort.number.js
IP
198.54.115.51:80
ASN
#22612 NAMECHEAP-NET

Requested by
http://5908501.mammothmilalion.com/

File type
JavaScript source, Unicode text, UTF-8 text
Size
375 B (375 bytes)
Hash
377b82a88aeda884475d40fa1051c70a
e7619035db4c628248b82237f3a99683e29ed7a4
5ff78b7ea9124ad40c205b606048c819dbbdc9c708105961d89859f79092cd07

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_autoindex/assets/js/tablesort.number.js HTTP/1.1
Host: 5908501.mammothmilalion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://5908501.mammothmilalion.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
keep-alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 06:47:05 GMT
content-type: application/javascript
last-modified: Wed, 10 Apr 2024 06:44:07 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 375
date: Fri, 26 Apr 2024 06:47:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed

5908501.mammothmilalion.com/_autoindex/assets/icons/folder-fill.svg

198.54.115.51

200 OK

411 B

URL GET HTTP/1.1
5908501.mammothmilalion.com/_autoindex/assets/icons/folder-fill.svg
IP
198.54.115.51:80
ASN
#22612 NAMECHEAP-NET

Requested by
http://5908501.mammothmilalion.com/

File type
SVG Scalable Vector Graphics image
Size
411 B (411 bytes)
Hash
5d0e817dca10aab2cb58087551767a9c
9286a744de09b180f4d29750e5b16613280a2a09
e52ea75a526a963a5d7371795d5dacb4ceaabfe6c77bdd9649f0b457b0d6009e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_autoindex/assets/icons/folder-fill.svg HTTP/1.1
Host: 5908501.mammothmilalion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://5908501.mammothmilalion.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
keep-alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 06:47:05 GMT
content-type: image/svg+xml
last-modified: Wed, 10 Apr 2024 06:44:07 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 411
date: Fri, 26 Apr 2024 06:47:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed

5908501.mammothmilalion.com/favicon.ico

198.54.115.51

404 Not Found

1.3 kB

URL GET HTTP/1.1
5908501.mammothmilalion.com/favicon.ico
IP
198.54.115.51:80
ASN
#22612 NAMECHEAP-NET

Requested by
http://5908501.mammothmilalion.com/

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 5908501.mammothmilalion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://5908501.mammothmilalion.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
keep-alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Fri, 26 Apr 2024 06:47:05 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (6)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size