Report - 103.203.175.90:81/

Report Overview

Visited public
2024-12-02 17:59:35
Tags
Submit Tags
URL
103.203.175.90:81/
Finishing URL
103.203.175.90:81/
IP / ASN
103.203.175.90
#139490 Aspt Networks Pvt Ltd
Title
NPTEL - Web and Video Courses - NBKR IST

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
103.203.175.90	unknown	unknown	No data	No data	1.2 kB	121 kB	103.203.175.90
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-11-27	351 B	34 kB	142.250.74.74
jgateplus.com	unknown	2012-10-12	2017-02-01	2021-11-25	747 B	701 B	52.172.156.220

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-12-02	medium	103.203.175.90	Sinkholed
2024-12-02	medium	103.203.175.90	Sinkholed
2024-12-02	medium	103.203.175.90	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js	ScriptElement	96 kB	2023-03-07	2025-07-21
Pretty URL ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js IP 142.250.74.74 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-07-21 06:04 Times Seen7081 Hash 5790ead7ad3ba27397aedfa3d263b867 8130544c215fe5d1ec081d83461bf4a711e74882 2ecd295d295bec062cedebe177e54b9d6b19fc0a841dc5c178c654c9ccff09c0 Loading...

HTTP Transactions (6)

URL IP Response Size

103.203.175.90:81/

103.203.175.90

200 OK

1.9 kB

URL
103.203.175.90:81/
IP
103.203.175.90:0
ASN
#139490 Aspt Networks Pvt Ltd

File type
HTML document, ASCII text, with very long lines (347), with CRLF line terminators
Size
1.9 kB (1860 bytes)
Hash
da73c8b840af27c0e4b9f3acdd0149e3
1293427b8fdd9a4bd5b303e92203201f0ca365ac
9240327fff74599e781ae70b7fcd5c79f77238a6dcc4985b55950a6230898770

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 103.203.175.90:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 02 Dec 2024 18:00:14 GMT
Server: Apache/2.4.7 (Ubuntu)
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Set-Cookie: PHPSESSID=vko35tqcqblrdu4ugt2ln45nc7; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1860
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

GET ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js

142.250.74.74

200 OK

34 kB

URL GET HTTP/1.1
ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js
IP
142.250.74.74:80
ASN
#15169 GOOGLE

Requested by
http://103.203.175.90:81/

File type
JavaScript source, ASCII text, with very long lines (32047)
Size
34 kB (33495 bytes)
Hash
5790ead7ad3ba27397aedfa3d263b867
8130544c215fe5d1ec081d83461bf4a711e74882
2ecd295d295bec062cedebe177e54b9d6b19fc0a841dc5c178c654c9ccff09c0

HTTP Headers

GET /ajax/libs/jquery/1.11.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.203.175.90:81/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 33495
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 29 Nov 2024 07:54:36 GMT
Expires: Sat, 29 Nov 2025 07:54:36 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 295474
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding

GET jgateplus.com/cdn/js/jgateplussearch.js

52.172.156.220

301 Moved Permanently

169 B

URL GET HTTP/1.1
jgateplus.com/cdn/js/jgateplussearch.js
IP
52.172.156.220:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
http://103.203.175.90:81/
Certificate
IssuerGoDaddy.com, Inc.
Subjectjgateplus.com
Fingerprint5F:E2:A9:F3:EA:1D:90:A7:69:BA:93:D3:76:7F:BD:FD:52:D1:BA:9B
ValidityThu, 19 Sep 2024 11:17:21 GMT - Sat, 20 Sep 2025 03:53:38 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
169 B (169 bytes)
Hash
5584cd241a762d7a7488f14d5409293c
a88c6560e46f39dca33a1bbbc74c319e89adfe2a
56fd937f2948b7fc1b223fc1da61e781a93f6b4c74cfd88e1115bb74418c7dff

HTTP Headers

GET /cdn/js/jgateplussearch.js HTTP/1.1
Host: jgateplus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.203.175.90:81/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx/1.24.0
Date: Mon, 02 Dec 2024 17:54:12 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://jgateplus.com/cdn/js/jgateplussearch.js

GET jgateplus.com/cdn/js/jgateplussearch.js

52.172.156.220

502 Bad Gateway

157 B

URL GET HTTP/1.1
jgateplus.com/cdn/js/jgateplussearch.js
IP
52.172.156.220:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
http://103.203.175.90:81/
Certificate
IssuerGoDaddy.com, Inc.
Subjectjgateplus.com
Fingerprint5F:E2:A9:F3:EA:1D:90:A7:69:BA:93:D3:76:7F:BD:FD:52:D1:BA:9B
ValidityThu, 19 Sep 2024 11:17:21 GMT - Sat, 20 Sep 2025 03:53:38 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
157 B (157 bytes)
Hash
1554885dd74435de1aa4afe066711723
4fbb3076904c8238907d286c0e70662ccaf0fdca
b26b886ad4f828f720fda5e9ce3f32d66df603d87261e6fcccdf1f9aa970a88a

HTTP Headers

GET /cdn/js/jgateplussearch.js HTTP/1.1
Host: jgateplus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://103.203.175.90:81/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 502 Bad Gateway
Server: nginx/1.24.0
Date: Mon, 02 Dec 2024 17:54:12 GMT
Content-Type: text/html
Content-Length: 157
Connection: keep-alive

GET 103.203.175.90:81/images/logo_90per.jpg

103.203.175.90

200 OK

118 kB

URL GET HTTP/1.1
103.203.175.90:81/images/logo_90per.jpg
IP
103.203.175.90:81
ASN
#139490 Aspt Networks Pvt Ltd

Requested by
http://103.203.175.90:81/

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 1000x1000, segment length 16, baseline, precision 8, 714x748, components 3
Size
118 kB (117870 bytes)
Hash
c458318a9d3d984e247850aaf5965689
100aca4a8107e08fc1e0b33b905f9dd88df2e765
00f3467b0c6e76f833f72440cd191c719a491b738a7251438519100350385346

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/logo_90per.jpg HTTP/1.1
Host: 103.203.175.90:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.203.175.90:81/
Cookie: PHPSESSID=vko35tqcqblrdu4ugt2ln45nc7
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 02 Dec 2024 18:00:15 GMT
Server: Apache/2.4.7 (Ubuntu)
Last-Modified: Mon, 07 Nov 2016 13:32:42 GMT
ETag: "1cc6e-540b60eea1280"
Accept-Ranges: bytes
Content-Length: 117870
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

GET 103.203.175.90:81/favicon.ico

103.203.175.90

404 Not Found

288 B

URL GET HTTP/1.1
103.203.175.90:81/favicon.ico
IP
103.203.175.90:81
ASN
#139490 Aspt Networks Pvt Ltd

Requested by
http://103.203.175.90:81/

File type
HTML document, ASCII text
Size
288 B (288 bytes)
Hash
d3e2df4dbfe9c5cf0416fea8d181f926
028b5507eee7b1ac3ba35dc87e9990aa1f87399a
e1b96d809034f4c1f6534de1872f4881e37702168708520a7e4548375f74c4e2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 103.203.175.90:81
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.203.175.90:81/
Cookie: PHPSESSID=vko35tqcqblrdu4ugt2ln45nc7
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Mon, 02 Dec 2024 18:00:16 GMT
Server: Apache/2.4.7 (Ubuntu)
Content-Length: 288
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (6)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers