200 OK 7.0 kB URL User Request GET HTTP/1.1 IP
ASN #24441 CityLink Corporation, LTD
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 149ae1632dbfb055698c035f935540b4
5882b3b884be25fb95322a8c55902b31681a5d84
75a7ae503977df3832964d43ca29ded912c51fa48323bfddd622d1431ff07666
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 202.84.76.58
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 7023
Content-Type: text/html
Date: Sat, 02 Dec 2023 00:37:33 GMT
Expires: 0
202.84.76.58/help.png
200 OK 7.5 kB IP
ASN #24441 CityLink Corporation, LTD
File type PNG image data, 48 x 48, 8-bit/color RGBA, interlaced\012- data
Hash 6220f00b190723200494ffaa4dc8c00a
0a100a5b36ad5eb6c216585e0602142affa1ccbc
1371322a0e3b8bcdfc9495078cb74f00bfc4fa57481c6028492f70e4986a6b55
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /help.png HTTP/1.1
Host: 202.84.76.58
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://202.84.76.58/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 7457
Content-Type: image/png
Date: Sat, 02 Dec 2023 00:37:34 GMT
Expires: 0
202.84.76.58/license.png
200 OK 5.5 kB IP
ASN #24441 CityLink Corporation, LTD
File type PNG image data, 48 x 48, 8-bit/color RGBA, interlaced\012- data
Hash b5c66b07a742597376263bb23fc11b15
d8fd9b8087abbaaa751aa5319297083bac3b3d79
b07c34f68a53461b5c5d25bc187e185564ba8853d3b088056e834a699b9dd6a4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /license.png HTTP/1.1
Host: 202.84.76.58
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://202.84.76.58/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 5506
Content-Type: image/png
Date: Sat, 02 Dec 2023 00:37:34 GMT
Expires: 0
202.84.76.58/console.png
200 OK 6.5 kB IP
ASN #24441 CityLink Corporation, LTD
File type PNG image data, 48 x 48, 8-bit/color RGBA, interlaced\012- data
Hash b89823b3f483bdbebfa9c6ceaaefeecf
3bdfe66e1c1011f7ef5a9a3376afbb806d2bfdf0
c976e884845ebee31a0712fbc928fb58992bee1873cfdd79fd4bebf84c996867
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /console.png HTTP/1.1
Host: 202.84.76.58
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://202.84.76.58/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 6463
Content-Type: image/png
Date: Sat, 02 Dec 2023 00:37:34 GMT
Expires: 0
202.84.76.58/mikrotik_logo.png
200 OK 3.8 kB URL GET HTTP/1.1 202.84.76.58/mikrotik_logo.png
IP
ASN #24441 CityLink Corporation, LTD
File type PNG image data, 180 x 44, 8-bit/color RGBA, non-interlaced\012- data
Hash 1f52cc8ce9a3ab7ea704820f5f6a185e
710b4d6fd05e54c073243b580f7f51f03ac4599a
2ac03ffa9b6ae889988a2073b95ba9639582e6c04a70b4fa5f4a530d8e908c94
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /mikrotik_logo.png HTTP/1.1
Host: 202.84.76.58
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://202.84.76.58/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 3774
Content-Type: image/png
Date: Sat, 02 Dec 2023 00:37:34 GMT
Expires: 0
202.84.76.58/winbox.png
200 OK 7.7 kB IP
ASN #24441 CityLink Corporation, LTD
File type PNG image data, 48 x 48, 8-bit/color RGBA, interlaced\012- data
Hash 44071663a97aa46640d124dd31fe7521
1040db97f1ba79a53b9477aa68262bf1463a1fef
833fb60ef92676e23cedf5c86427006cccc5da5327d05e835f48ab3f106a52ad
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /winbox.png HTTP/1.1
Host: 202.84.76.58
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://202.84.76.58/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 7659
Content-Type: image/png
Date: Sat, 02 Dec 2023 00:37:34 GMT
Expires: 0
202.84.76.58/green.png
200 OK 6.1 kB IP
ASN #24441 CityLink Corporation, LTD
File type PNG image data, 48 x 48, 8-bit/color RGBA, interlaced\012- data
Hash 83ad768167a370db201db71c482fc9e8
319bfa79b6c8fee588e1aa6818fd2e9cc3885971
bcdee70bb925f292f7294b36b5ff1040f57c005ed4fa3bf9b04a3458b6f61fd4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /green.png HTTP/1.1
Host: 202.84.76.58
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://202.84.76.58/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Length: 6114
Content-Type: image/png
Date: Sat, 02 Dec 2023 00:37:34 GMT
Expires: 0
202.84.76.58/favicon.ico
404 Not Found 109 B IP
ASN #24441 CityLink Corporation, LTD
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 411a4824b53ebe3e5d2326f3b29bb05a
4ddd60e763f0bdf9ba74862ef0eb0b8cf69bbc7e
eab0e531a4deb98f604c0fdd761f76981f5a991cd5168b3c62f6365641a4da60
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: 202.84.76.58
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://202.84.76.58/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Content-Length: 109
Date: Sat, 02 Dec 2023 00:37:34 GMT
Expires: 0
202.84.76.58