URL User Request GET HTTP/1.1IP 12.219.172.175:80
File typeHTML document, ASCII text, with CRLF line terminators Hashdb4fce5f4e82fa5f8a1fe296d22eb57a 25f7e7d324c67496e8017fcc3d4d24ef5f5e4968 60ee67ecec5ecfe2108f2a56099a7f49e44bd06c3b083cbf6e9836ed34e8e969
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 12.219.172.175
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Fri, 22 Oct 2021 16:02:02 GMT
Accept-Ranges: bytes
ETag: "039a6265ec7d71:0"
Vary: Accept-Encoding
Server:
X-Powered-By:
Referrer-Policy: origin-when-cross-origin
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self' data: 'unsafe-eval' 'unsafe-inline' https://*.selectmgmt.com https://*.title.cash https://*.googleapis.com https://*.google-analytics.com https://*.gstatic.com https://*.brookwoodloans.com https://*.quickclickloans.com;
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: ARRAffinity=7127dc4ba17942e8ef192dab6f6e5d96bc60f13a438eff8740ee8d0fe0e1c4cc;Path=/;Domain=12.219.172.175; Priority=High
Date: Wed, 24 Apr 2024 19:08:32 GMT
Content-Length: 171
|
| 12.219.172.175/favicon.ico | 12.219.172.175 | 404 Not Found | 1.2 kB |
URL GET HTTP/1.112.219.172.175/favicon.ico IP12.219.172.175:80
File typeHTML document, ASCII text, with CRLF line terminators Hash5343c1a8b203c162a3bf3870d9f50fd4 04b5b886c20d88b57eea6d8ff882624a4ac1e51d dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 12.219.172.175
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://12.219.172.175/
DNT: 1
Connection: keep-alive
Cookie: ARRAffinity=7127dc4ba17942e8ef192dab6f6e5d96bc60f13a438eff8740ee8d0fe0e1c4cc
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: text/html
Server:
X-Powered-By:
Referrer-Policy: origin-when-cross-origin
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self' data: 'unsafe-eval' 'unsafe-inline' https://*.selectmgmt.com https://*.title.cash https://*.googleapis.com https://*.google-analytics.com https://*.gstatic.com https://*.brookwoodloans.com https://*.quickclickloans.com;
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Date: Wed, 24 Apr 2024 19:08:32 GMT
Content-Length: 1245
|