Report - 117.50.95.62:9880/Go3k/Demo/master/Android/link.xml

Report Overview

Visited public
2024-12-16 23:06:51
Tags
Submit Tags
twitter-banthisguy9349
URL
117.50.95.62:9880/Go3k/Demo/master/Android/link.xml
Finishing URL
117.50.95.62:9880/Go3k/Demo/master/Android/link.xml
IP / ASN
117.50.95.62
#4808 China Unicom Beijing Province Network
Title
117.50.95.62:9880/Go3k/Demo/master/Android/link.xml

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
117.50.95.62	unknown	unknown	No data	No data	799 B	6.8 kB	117.50.95.62

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-12-16	medium	117.50.95.62	Sinkholed
2024-12-16	medium	117.50.95.62	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

117.50.95.62:9880/Go3k/Demo/master/Android/link.xml

117.50.95.62

200 OK

6.3 kB

URL
117.50.95.62:9880/Go3k/Demo/master/Android/link.xml
IP
117.50.95.62:0
ASN
#4808 China Unicom Beijing Province Network

File type
ASCII text
Size
6.3 kB (6254 bytes)
Hash
a3bbcef5a339317986155439d5798a47
a8fa884b4919022b86e66b1b8946f9d65f9db0f2
6fc245d5a7a3c0a1d333aec273ced821e9e4e0eae83a39e55daf24c92a4ee499

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Go3k/Demo/master/Android/link.xml HTTP/1.1
Host: 117.50.95.62:9880
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.26.1
Date: Mon, 16 Dec 2024 23:06:27 GMT
Content-Type: text/xml
Content-Length: 6254
Last-Modified: Tue, 25 Apr 2023 03:38:34 GMT
Connection: keep-alive
ETag: "64474b3a-186e"
Accept-Ranges: bytes

117.50.95.62:9880/favicon.ico

117.50.95.62

404 Not Found

153 B

URL
117.50.95.62:9880/favicon.ico
IP
117.50.95.62:0
ASN
#4808 China Unicom Beijing Province Network

File type
HTML document, ASCII text, with CRLF line terminators
Size
153 B (153 bytes)
Hash
0c15efb063518101d9c90fe81af08102
bc9febeb54c46618ae04ad7f50b12ffd063bf018
aa450538ea08784191ada10ed065620e614b09daaefd7321041b7c6b5abab9bc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 117.50.95.62:9880
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://117.50.95.62:9880/Go3k/Demo/master/Android/link.xml
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx/1.26.1
Date: Mon, 16 Dec 2024 23:06:27 GMT
Content-Type: text/html
Content-Length: 153
Connection: keep-alive

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers