URL User Request GET HTTP/1.1IP146.70.138.107:443
CertificateIssuerSectigo Limited Subject*.jumptoserver.com Fingerprint13:27:B7:50:22:55:FC:78:3B:35:B9:40:9F:B8:E8:D4:29:97:B5:F5 ValidityTue, 17 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File typeXML 1.0 document, ASCII text Hashda8d8cdd87111962f9de1b5d0797d655 5da7f49c6d0be637688ae0860052082b20d0d165 fe5cb372aa2fc74c4e1458045868e7d13c64ea2f48640a8e9bea6ab15a5bd9fb
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 146.70.138.107
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Set-Cookie: webvpncontext=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/; Secure; HttpOnly
Content-Type: text/xml
Content-Length: 306
X-Transcend-Version: 1
|
| 146.70.138.107/favicon.ico | 146.70.138.107 | 404 Not found | 50 B |
URL GET HTTP/1.1146.70.138.107/favicon.ico IP146.70.138.107:443
CertificateIssuerSectigo Limited Subject*.jumptoserver.com Fingerprint13:27:B7:50:22:55:FC:78:3B:35:B9:40:9F:B8:E8:D4:29:97:B5:F5 ValidityTue, 17 Oct 2023 00:00:00 GMT - Fri, 15 Nov 2024 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash6edf8fb04caa388e4cc7468e9441a905 0507e1f054595174aa71b2926896be653ef07175 b08465c9a9f669159fe90c91a20fb2ad946174cf68e1da1285b677173ea546b1
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 146.70.138.107
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://146.70.138.107/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not found
Content-Length: 50
Connection: close
|