IP122.225.105.23:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1078), with CRLF, LF line terminators Hash45660e701b12b440e5ae70f170e1fafe 293996b841d64bb4d9018136c1c9add81ed5ffa2 714dcfe081e35e530ef615de310dd2538ca697f733bbff3b5b712901f2bb4d2b
GET / HTTP/1.1
Host: dl.9xu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 20 Apr 2024 12:54:20 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
| dl.9xu.com/js/ueditor/lang/zh-cn/images/apportion.php | 122.225.105.23 | 200 OK | 440 B |
URL User Request GET HTTP/1.1dl.9xu.com/js/ueditor/lang/zh-cn/images/apportion.php IP122.225.105.23:80
File typeHTML document, ASCII text Hashc5bc239bb990ca808b5645078c6710d1 a9964c999a28c850ef3fbb061d8272025ac38aaf 2f58ac50edbc16d8aa708d2f6b928076c3411a2fdeefa3031013148ec59ad6fe
NIDS | Severity | Alert | suricata | high | URLhaus Known malware download URL detected (1649857) | suricata | high | URLhaus Known malware download URL detected (1649857) |
GET /js/ueditor/lang/zh-cn/images/apportion.php HTTP/1.1
Host: dl.9xu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 20 Apr 2024 12:54:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
| dl.9xu.com/js/ueditor/lang/zh-cn/images/apportion.php | 122.225.105.23 | 200 OK | 433 B |
URL User Request GET HTTP/1.1dl.9xu.com/js/ueditor/lang/zh-cn/images/apportion.php IP122.225.105.23:80
File typeHTML document, ASCII text Hash6f1c7a9570631912d895aa07d1756b41 fcf0775e77e3a0121353e343d0b558ca8bf3ed91 7fd466b7fb93e4ed445c58cef8764d29cfb584ce6d9daff9c3f4b267bcbdae96
NIDS | Severity | Alert | suricata | high | URLhaus Known malware download URL detected (1649857) | suricata | high | URLhaus Known malware download URL detected (1649857) |
GET /js/ueditor/lang/zh-cn/images/apportion.php HTTP/1.1
Host: dl.9xu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: d=0; n=UTC
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 20 Apr 2024 12:54:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
IP122.225.105.23:80
Requested byhttp://dl.9xu.com/js/ueditor/lang/zh-cn/images/apportion.php
File typeHTML document, ASCII text, with CRLF line terminators Hash68b370690b488d04badc85eb3240a30b 522921200201872b838867b6925c7f840788d449 7ab4ab9fdc8e1ee7d30e1f35fcb4dc25c25f2703ad86a869c757e5c006b980d5
GET /favicon.ico HTTP/1.1
Host: dl.9xu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dl.9xu.com/js/ueditor/lang/zh-cn/images/apportion.php
Cookie: d=0; n=UTC
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: openresty
Date: Sat, 20 Apr 2024 12:54:22 GMT
Content-Type: text/html
Content-Length: 166
Connection: keep-alive
|