| |  203.121.40.210 | 200 OK | 162 B |
URL User Request GET HTTP/2IP203.121.40.210:443 ASN#9930 TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al
CertificateIssuerLet's Encrypt Subjectuxerafw.on-the-web.tv Fingerprint3C:40:AC:7C:D9:8B:67:B2:CA:0E:99:13:E6:04:08:22:7B:0F:E4:1C ValiditySun, 24 Mar 2024 18:16:19 GMT - Sat, 22 Jun 2024 18:16:18 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 203.121.40.210
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 25 Apr 2024 22:02:26 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://203.121.40.210/
X-Frame-Options: SAMEORIGIN
|
|
| 203.121.40.210/csrf/csrf-magic.js | 203.121.40.210 | 200 OK | 7.3 kB |
URL GET HTTP/2203.121.40.210/csrf/csrf-magic.js IP203.121.40.210:443 ASN#9930 TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al
CertificateIssuerLet's Encrypt Subjectuxerafw.on-the-web.tv Fingerprint3C:40:AC:7C:D9:8B:67:B2:CA:0E:99:13:E6:04:08:22:7B:0F:E4:1C ValiditySun, 24 Mar 2024 18:16:19 GMT - Sat, 22 Jun 2024 18:16:18 GMT
Hash3ccaf1823ef289cb98094729c40e6234 e37d78b2f77d93273a0e3053a08a202f9ddef1ee 5d7756e79cc40b660cef1f3cfe7e836567f8f0a96193ee829868a0588c4ccbbf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /csrf/csrf-magic.js HTTP/1.1
Host: 203.121.40.210
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://203.121.40.210/
Cookie: PHPSESSID=456151d142e319e266fd80b7ed21772b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 22:02:30 GMT
content-type: application/javascript
content-length: 7313
last-modified: Wed, 06 Dec 2023 20:10:52 GMT
etag: "6570d54c-1c91"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 203.121.40.210/vendor/bootstrap/js/bootstrap.min.js?v=1701893452 | 203.121.40.210 | 200 OK | 40 kB |
URL GET HTTP/2203.121.40.210/vendor/bootstrap/js/bootstrap.min.js?v=1701893452 IP203.121.40.210:443 ASN#9930 TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al
CertificateIssuerLet's Encrypt Subjectuxerafw.on-the-web.tv Fingerprint3C:40:AC:7C:D9:8B:67:B2:CA:0E:99:13:E6:04:08:22:7B:0F:E4:1C ValiditySun, 24 Mar 2024 18:16:19 GMT - Sat, 22 Jun 2024 18:16:18 GMT
File typeJavaScript source, ASCII text, with very long lines (39553) Hash2f34b630ffe30ba2ff2b91e3f3c322a1 b16fd8226bd6bfb08e568f1b1d0a21d60247cefb 9ee2fcff6709e4d0d24b09ca0fc56aade12b4961ed9c43fd13b03248bfb57afe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /vendor/bootstrap/js/bootstrap.min.js?v=1701893452 HTTP/1.1
Host: 203.121.40.210
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://203.121.40.210/
Cookie: PHPSESSID=456151d142e319e266fd80b7ed21772b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 22:02:30 GMT
content-type: application/javascript
content-length: 39680
last-modified: Wed, 06 Dec 2023 20:10:52 GMT
etag: "6570d54c-9b00"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 203.121.40.210/js/pfSense.js?v=1701893452 | 203.121.40.210 | 200 OK | 12 kB |
URL GET HTTP/2203.121.40.210/js/pfSense.js?v=1701893452 IP203.121.40.210:443 ASN#9930 TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al
CertificateIssuerLet's Encrypt Subjectuxerafw.on-the-web.tv Fingerprint3C:40:AC:7C:D9:8B:67:B2:CA:0E:99:13:E6:04:08:22:7B:0F:E4:1C ValiditySun, 24 Mar 2024 18:16:19 GMT - Sat, 22 Jun 2024 18:16:18 GMT
File typeJavaScript source, ASCII text Hashe8258f3c74351492887e959c2126590e 118b1a19d375f858a5d048dabd77343197068478 c9af228952d3fdb8c2ab2f0189be7da70a2e6f03773fce10b75acef1a8f6f86c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/pfSense.js?v=1701893452 HTTP/1.1
Host: 203.121.40.210
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://203.121.40.210/
Cookie: PHPSESSID=456151d142e319e266fd80b7ed21772b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 22:02:30 GMT
content-type: application/javascript
content-length: 11595
last-modified: Wed, 06 Dec 2023 20:10:52 GMT
etag: "6570d54c-2d4b"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 203.121.40.210/vendor/jquery/jquery-3.5.1.min.js?v=1701893452 | 203.121.40.210 | 200 OK | 90 kB |
URL GET HTTP/2203.121.40.210/vendor/jquery/jquery-3.5.1.min.js?v=1701893452 IP203.121.40.210:443 ASN#9930 TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al
CertificateIssuerLet's Encrypt Subjectuxerafw.on-the-web.tv Fingerprint3C:40:AC:7C:D9:8B:67:B2:CA:0E:99:13:E6:04:08:22:7B:0F:E4:1C ValiditySun, 24 Mar 2024 18:16:19 GMT - Sat, 22 Jun 2024 18:16:18 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /vendor/jquery/jquery-3.5.1.min.js?v=1701893452 HTTP/1.1
Host: 203.121.40.210
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://203.121.40.210/
Cookie: PHPSESSID=456151d142e319e266fd80b7ed21772b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 22:02:30 GMT
content-type: application/javascript
content-length: 89476
last-modified: Wed, 06 Dec 2023 20:10:52 GMT
etag: "6570d54c-15d84"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 203.121.40.210/favicon.ico | 203.121.40.210 | 200 OK | 15 kB |
URL GET HTTP/2203.121.40.210/favicon.ico IP203.121.40.210:443 ASN#9930 TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al
CertificateIssuerLet's Encrypt Subjectuxerafw.on-the-web.tv Fingerprint3C:40:AC:7C:D9:8B:67:B2:CA:0E:99:13:E6:04:08:22:7B:0F:E4:1C ValiditySun, 24 Mar 2024 18:16:19 GMT - Sat, 22 Jun 2024 18:16:18 GMT
File typeMS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hash5567e9ce23e5549e0fcd7195f3882816 caf74e24414d131e0ec95b336854f4919b1f5b9c b2dd935235013a51fde0a2afc12ba965952e384b7ab43fe1746cc21c7eafc38c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 203.121.40.210
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://203.121.40.210/
Cookie: PHPSESSID=456151d142e319e266fd80b7ed21772b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 22:02:31 GMT
content-type: image/x-icon
content-length: 15086
last-modified: Wed, 06 Dec 2023 20:10:52 GMT
etag: "6570d54c-3aee"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 203.121.40.210/vendor/bootstrap/css/bootstrap.min.css | 203.121.40.210 | 200 OK | 121 kB |
URL GET HTTP/2203.121.40.210/vendor/bootstrap/css/bootstrap.min.css IP203.121.40.210:443 ASN#9930 TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al
CertificateIssuerLet's Encrypt Subjectuxerafw.on-the-web.tv Fingerprint3C:40:AC:7C:D9:8B:67:B2:CA:0E:99:13:E6:04:08:22:7B:0F:E4:1C ValiditySun, 24 Mar 2024 18:16:19 GMT - Sat, 22 Jun 2024 18:16:18 GMT
File typeASCII text, with very long lines (65369) Size121 kB (121412 bytes) Hashbbbac04cb90f77fb07ace4837963a970 3a7ed05b0c26d424582f790ba812485b43ba77cb c28eb8900abce3c478234e62390838556d839c10b7073b2ba42bcbae20d6e2fc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /vendor/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: 203.121.40.210
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://203.121.40.210/
Cookie: PHPSESSID=456151d142e319e266fd80b7ed21772b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 22:02:30 GMT
content-type: text/css
last-modified: Wed, 06 Dec 2023 20:10:52 GMT
etag: W/"6570d54c-1da44"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 203.121.40.210/css/logo.css | 203.121.40.210 | 200 OK | 174 B |
URL GET HTTP/2203.121.40.210/css/logo.css IP203.121.40.210:443 ASN#9930 TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al
CertificateIssuerLet's Encrypt Subjectuxerafw.on-the-web.tv Fingerprint3C:40:AC:7C:D9:8B:67:B2:CA:0E:99:13:E6:04:08:22:7B:0F:E4:1C ValiditySun, 24 Mar 2024 18:16:19 GMT - Sat, 22 Jun 2024 18:16:18 GMT
File typeASCII text, with no line terminators Hashe6e49c475e684a2e242c1bc2cfe775e2 4ce65629a811aeee6dacb77bcb8de4eaf1957872 a9c032c2f5b39844fa1f9961b99be96b8400e84cc289fd5cdf3643868394ee6d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/logo.css HTTP/1.1
Host: 203.121.40.210
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://203.121.40.210/css/login.css?v=1701893452
Cookie: PHPSESSID=456151d142e319e266fd80b7ed21772b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 22:02:30 GMT
content-type: text/css
last-modified: Wed, 06 Dec 2023 20:10:52 GMT
etag: W/"6570d54c-ae"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 203.121.40.210/css/login.css?v=1701893452 | 203.121.40.210 | 200 OK | 2.9 kB |
URL GET HTTP/2203.121.40.210/css/login.css?v=1701893452 IP203.121.40.210:443 ASN#9930 TIME dotCom Berhad No. 14, Jalan Majistret U126 Hicom Glenmarie Industrial Park 40150 Shah Al
CertificateIssuerLet's Encrypt Subjectuxerafw.on-the-web.tv Fingerprint3C:40:AC:7C:D9:8B:67:B2:CA:0E:99:13:E6:04:08:22:7B:0F:E4:1C ValiditySun, 24 Mar 2024 18:16:19 GMT - Sat, 22 Jun 2024 18:16:18 GMT
File typeASCII text, with very long lines (3091), with no line terminators Hashf08b44e3819b512ca9b0675f08c34978 fdc8f502bd5bab6cff5983cdce003a705dd5ca62 669964a4ec069a974483430232612062cebe94d42c3aaf9e27b9c9c0120918b5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/login.css?v=1701893452 HTTP/1.1
Host: 203.121.40.210
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://203.121.40.210/
Cookie: PHPSESSID=456151d142e319e266fd80b7ed21772b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 22:02:30 GMT
content-type: text/css
last-modified: Wed, 06 Dec 2023 20:10:52 GMT
etag: W/"6570d54c-b2f"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|