Report - capitalistocracy.com/images/

Report Overview

Visitedpublic

2023-12-31 21:56:07

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
capitalistocracy.com	unknown	2005-08-21	2013-10-09 02:21:35	2023-12-30 20:57:14	1.3 kB	1.5 kB	136.243.60.66

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-31 21:55:40	high	Client IP	136.243.60.66	ET HUNTING Suspicious Request for Pdf.exe Observed in Zeus/Luminosity Link

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

GET capitalistocracy.com/images/_notes/pdf.exetcpip.dll

136.243.60.66

508 Loop Detected

288 B

URL User Request GET HTTP

capitalistocracy.com/images/_notes/pdf.exetcpip.dll

IP / ASN

136.243.60.66

#24940 Hetzner Online GmbH

Requested byN/A

Resource Info

File typeHTML document, ASCII text

First Seen2023-03-13

Last Seen2025-08-01

Times Seen2939

Size288 B (288 bytes)

MD5ef220a553813acc9ede80405df3b7fd7

SHA1382fcf28d5b5ace81e818fa5a2f9c6d54eec179b

SHA256d3cffe9f37702e95b3702696987f93ab39922a033e06610275a82a7aae14c96a

Detections

Analyzer	Verdict	Alert
suricata	high	ET HUNTING Suspicious Request for Pdf.exe Observed in Zeus/Luminosity Link

HTTP Headers

GET /images/_notes/pdf.exetcpip.dll HTTP/1.1
Host: capitalistocracy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 508 Loop Detected
Date: Sun, 31 Dec 2023 21:55:42 GMT
Server: Apache
Retry-After: 14400
Content-Length: 288
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

GET capitalistocracy.com/images/_notes/pdf.exetcpip.dll

136.243.60.66

508 Loop Detected

288 B

URL User Request GET HTTP

capitalistocracy.com/images/_notes/pdf.exetcpip.dll

IP / ASN

136.243.60.66

#24940 Hetzner Online GmbH

Requested byN/A

Resource Info

File typeHTML document, ASCII text

First Seen2023-03-13

Last Seen2025-08-01

Times Seen2939

Size288 B (288 bytes)

MD5ef220a553813acc9ede80405df3b7fd7

SHA1382fcf28d5b5ace81e818fa5a2f9c6d54eec179b

SHA256d3cffe9f37702e95b3702696987f93ab39922a033e06610275a82a7aae14c96a

Detections

Analyzer	Verdict	Alert
suricata	high	ET HUNTING Suspicious Request for Pdf.exe Observed in Zeus/Luminosity Link

HTTP Headers

GET /images/_notes/pdf.exetcpip.dll HTTP/1.1
Host: capitalistocracy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 508 Loop Detected
Date: Sun, 31 Dec 2023 21:55:42 GMT
Server: Apache
Retry-After: 14400
Content-Length: 288
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

GET capitalistocracy.com/favicon.ico

136.243.60.66

508 Loop Detected

288 B

URL GET HTTP

capitalistocracy.com/favicon.ico

IP / ASN

136.243.60.66

#24940 Hetzner Online GmbH

Requested byhttp://capitalistocracy.com/images/_notes/pdf.exetcpip.dll

Resource Info

File typeHTML document, ASCII text

First Seen2023-03-13

Last Seen2025-08-01

Times Seen2939

Size288 B (288 bytes)

MD5ef220a553813acc9ede80405df3b7fd7

SHA1382fcf28d5b5ace81e818fa5a2f9c6d54eec179b

SHA256d3cffe9f37702e95b3702696987f93ab39922a033e06610275a82a7aae14c96a

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: capitalistocracy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://capitalistocracy.com/images/_notes/pdf.exetcpip.dll
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 508 Loop Detected
Date: Sun, 31 Dec 2023 21:55:42 GMT
Server: Apache
Retry-After: 14400
Content-Length: 288
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html