Report - 340b039b.nat123.cc/

Report Overview

Visitedpublic

2025-07-23 10:40:42

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
106.52.95.226	unknown	unknown	2023-07-28	2023-09-08	1.0 kB	82 kB	106.52.95.226
340b039b.nat123.cc	unknown	2016-12-24	2025-07-23	2025-07-23	1.3 kB	3.0 kB	23.95.34.138
images.nat123.com	unknown	2013-10-26	2014-07-01	2025-07-19	1.1 kB	85 kB	47.104.222.149

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-07-23	medium	106.52.95.226	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (8)

URL IP Response Size

GET 340b039b.nat123.cc/

23.95.34.138

200 server2ok

2.4 kB

URL User Request GET HTTP

340b039b.nat123.cc/

IP / ASN

23.95.34.138

#36352 AS-COLOCROSSING

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators

First Seen2025-07-23

Last Seen2025-07-23

Times Seen1

Size2.4 kB (2390 bytes)

MD5c4f04aae892fea38e46cfcd09862e727

SHA11d8357f5fe28818a02edbd83f9a360fba5a8e42c

SHA2564f038898670b97c4a9e900d1676afc5068a16b5752fc1b492f811a4cecb2a4d3

HTTP Headers

GET / HTTP/1.1
Host: 340b039b.nat123.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 server2ok
Server: nat123web
ServerIp: 23.95.34.138v4
ServerTime: 2025/7/23 10:41:07
Content-Length: 2390
Connection: close
Content-Type: text/html

GET images.nat123.com/Content/logogw.gif

47.104.222.149

200 OK

2.6 kB

URL GET HTTP

images.nat123.com/Content/logogw.gif

IP / ASN

47.104.222.149

#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested byhttp://340b039b.nat123.cc/

Resource Info

File typeGIF image data, version 89a, 190 x 50

First Seen2023-07-14

Last Seen2025-07-23

Times Seen13

Size2.6 kB (2553 bytes)

MD547e0977807a0462f2489ee2f9e4b1b2a

SHA15a712b4ce509ef7fec0fc9de07100be03953b1e5

SHA25651d661bba59a31e9a9b0e62c991406c5afbc7b9f8488fe32fdf00deed2641380

HTTP Headers

GET /Content/logogw.gif HTTP/1.1
Host: images.nat123.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://340b039b.nat123.cc/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
IsHtml: false
IsSpeedUp: false
Proxy-By: nat123.com/x.241207
Access-Control-Allow-Origin: *
Content-Type: image/gif
Last-Modified: Thu, 17 Dec 2015 00:49:23 GMT
Accept-Ranges: bytes
ETag: "5fba77c56438d11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Wed, 23 Jul 2025 10:40:22 GMT
Content-Length: 2553

GET images.nat123.com/temple/images/bg.jpg

47.104.222.149

301 Moved fornat123

78 kB

URL GET HTTP

images.nat123.com/temple/images/bg.jpg

IP / ASN

47.104.222.149

#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested byhttp://340b039b.nat123.cc/

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-09

Times Seen5738491

Size78 kB (78327 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /temple/images/bg.jpg HTTP/1.1
Host: images.nat123.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://340b039b.nat123.cc/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved fornat123
Date: Mon, 28 Apr 2014 17:44:38 GMT
Server: NAT123/ForSpeedUp2014
X-Powered-By: NAT123/1.14
location: http://106.52.95.226/nat123CacheFolder/696D616765732E6E61743132332E636F6D/386624c3a7ad408fa734f6d4866a50faCD30CD35D037D032CC20CE38C534CF3ACD33_5a6ae96869f37c48454923e30ba78de0/temple/images/bg.jpg
Content-Length: 0
Content-Type: text/html

GET images.nat123.com/Content/logobbs.gif

47.104.222.149

301 Moved fornat123

3.2 kB

URL GET HTTP

images.nat123.com/Content/logobbs.gif

IP / ASN

47.104.222.149

#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested byhttp://340b039b.nat123.cc/

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-09

Times Seen5738491

Size3.2 kB (3180 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /Content/logobbs.gif HTTP/1.1
Host: images.nat123.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://340b039b.nat123.cc/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved fornat123
Date: Mon, 28 Apr 2014 17:44:38 GMT
Server: NAT123/ForSpeedUp2014
X-Powered-By: NAT123/1.14
location: http://106.52.95.226/nat123CacheFolder/696D616765732E6E61743132332E636F6D/839604cf58de41ce9142df53cddd340aCD30CD35D037D032CC20CE38C534CF3ACD33_5a6ae96869f37c48454923e30ba78de0/Content/logobbs.gif
Content-Length: 0
Content-Type: text/html

GET 340b039b.nat123.cc/favicon.ico

23.95.34.138

200 server1ok

289 B

URL GET HTTP

340b039b.nat123.cc/favicon.ico

IP / ASN

23.95.34.138

#36352 AS-COLOCROSSING

Requested byhttp://340b039b.nat123.cc/

Resource Info

File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators

First Seen2023-07-14

Last Seen2025-07-23

Times Seen11

Size289 B (289 bytes)

MD5eda3b92a0c7d64aef51bb902aad8a5ae

SHA1729c9bbd5b68ab15cbb1665b71f5af1dd57ef839

SHA2560fe24925a8813d74a2ed828f121c6d4c039d4fe5f26e1b8fb1a27bd6e18894ac

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 340b039b.nat123.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://340b039b.nat123.cc/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 server1ok
Server: nat123
ServerIp: 23.95.34.138v4
ServerTime: 2025/7/23 10:41:07
Content-Length: 289
Connection: close
Content-Type: text/html

GET 106.52.95.226/nat123CacheFolder/696D616765732E6E61743132332E636F6D/386624c3a7ad408fa734f6d4866a50faCD30CD35D037D032CC20CE38C534CF3ACD33_5a6ae96869f37c48454923e30ba78de0/temple/images/bg.jpg

106.52.95.226

200 OK

78 kB

URL GET HTTP

106.52.95.226/nat123CacheFolder/696D616765732E6E61743132332E636F6D/386624c3a7ad408fa734f6d4866a50faCD30CD35D037D032CC20CE38C534CF3ACD33_5a6ae96869f37c48454923e30ba78de0/temple/images/bg.jpg

IP / ASN

106.52.95.226

#45090 Shenzhen Tencent Computer Systems Company Limited

Requested byhttp://340b039b.nat123.cc/

Resource Info

File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2012:12:27 17:17:51], baseline, precision 8, 860x500, components 3

First Seen2023-05-12

Last Seen2025-07-24

Times Seen30

Size78 kB (78327 bytes)

MD58f9a6af0a8f2905437c28e0acf58029e

SHA170e0415e58dd915e2879beeff5589c0eab142661

SHA2561e94793416bd7c824d5822af99d7465993379bcb17f7f47540467ff92b5fd66d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /nat123CacheFolder/696D616765732E6E61743132332E636F6D/386624c3a7ad408fa734f6d4866a50faCD30CD35D037D032CC20CE38C534CF3ACD33_5a6ae96869f37c48454923e30ba78de0/temple/images/bg.jpg HTTP/1.1
Host: 106.52.95.226
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://340b039b.nat123.cc/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
IsHtml: false
IsSpeedUp: false
Proxy-By: nat123.com/x.241207
Access-Control-Allow-Origin: *
Content-Type: image/jpeg
Last-Modified: Thu, 17 Dec 2015 00:47:52 GMT
Accept-Ranges: bytes
ETag: "23f28b8f6438d11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Fri, 18 Jul 2025 17:00:28 GMT
Content-Length: 78327

GET 106.52.95.226/nat123CacheFolder/696D616765732E6E61743132332E636F6D/839604cf58de41ce9142df53cddd340aCD30CD35D037D032CC20CE38C534CF3ACD33_5a6ae96869f37c48454923e30ba78de0/Content/logobbs.gif

106.52.95.226

200 OK

3.2 kB

URL GET HTTP

106.52.95.226/nat123CacheFolder/696D616765732E6E61743132332E636F6D/839604cf58de41ce9142df53cddd340aCD30CD35D037D032CC20CE38C534CF3ACD33_5a6ae96869f37c48454923e30ba78de0/Content/logobbs.gif

IP / ASN

106.52.95.226

#45090 Shenzhen Tencent Computer Systems Company Limited

Requested byhttp://340b039b.nat123.cc/

Resource Info

File typePNG image data, 190 x 50, 8-bit/color RGBA, non-interlaced

First Seen2023-07-27

Last Seen2025-07-23

Times Seen12

Size3.2 kB (3180 bytes)

MD5e8677d6894a141865f5dece9ab441143

SHA1fc40ec3b0f5530cd4c32a4ccfbc29d735c1315d1

SHA256bdad68c05f0ed459ff8af9233b720160681c4dc97afb01f9d081d07dbde1b416

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /nat123CacheFolder/696D616765732E6E61743132332E636F6D/839604cf58de41ce9142df53cddd340aCD30CD35D037D032CC20CE38C534CF3ACD33_5a6ae96869f37c48454923e30ba78de0/Content/logobbs.gif HTTP/1.1
Host: 106.52.95.226
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://340b039b.nat123.cc/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
IsHtml: false
IsSpeedUp: false
Proxy-By: nat123.com/x.241207
Access-Control-Allow-Origin: *
Content-Type: image/gif
Last-Modified: Tue, 05 Sep 2017 23:27:27 GMT
Accept-Ranges: bytes
ETag: "667f80899e26d31:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 15 Jul 2025 17:00:16 GMT
Content-Length: 3180

GET 340b039b.nat123.cc/

0.0.0.0

0 B

URL User Request GET HTTP

340b039b.nat123.cc/

IP / ASN

0.0.0.0

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-09

Times Seen5738491

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: 340b039b.nat123.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache