| eu-west-2.cloudprotector.com/console/resources/images/DenyAll-Cloud-Protector-logo.png |  178.33.22.1 | 200 OK | 9.2 kB |
URL GET HTTP/2eu-west-2.cloudprotector.com/console/resources/images/DenyAll-Cloud-Protector-logo.png IP178.33.22.1:443
CertificateIssuerGandi Subject*.cloudprotector.com Fingerprint6F:78:EF:F9:90:1F:92:37:BA:DE:BA:55:E7:12:39:62:27:AD:1D:D2 ValidityTue, 30 Apr 2024 00:00:00 GMT - Mon, 12 May 2025 23:59:59 GMT
File typePNG image data, 390 x 56, 8-bit/color RGBA, non-interlaced Hash35f55f8cd1767143145e8ab03a8f540e 5ea84fb0937c3f6bf259032832e8a37d05e215dd 3c82e96ddaf91c0dab07ec999e4a1d120e6c83209a9695668f8cc718b7ccd5e2
GET /console/resources/images/DenyAll-Cloud-Protector-logo.png HTTP/1.1
Host: eu-west-2.cloudprotector.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eu-west-2.cloudprotector.com/console/resources/css/error_page.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 04:25:40 GMT
accept-ranges: bytes
etag: W/"9153-1710322540000"
last-modified: Wed, 13 Mar 2024 09:35:40 GMT
expires: Tue, 14 May 2024 04:25:40 GMT
content-type: image/png
content-length: 9153
x-ua-compatible: IE=Edge
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=63072000
set-cookie: GUI=1bc87a20-a7cd-5361-ae52-70eff3361c36; path=/; HttpOnly
cache-control: max-age=604800, private
X-Firefox-Spdy: h2
|
URL User Request GET HTTP/1.0IP178.33.22.52:80
File typeHTML document, ASCII text, with very long lines (1020), with no line terminators Hashfe0e21c67d3f9cc1cff9cc288715d59c 5d1397da0c947aba80efbb638b7566985b39bb68 b2cc4c70084258ec47efbdee3698f209249e55651d86de6a5778f69364151b49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 178.33.22.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 503 Service Unavailable
cache-control: no-cache
content-type: text/html
|
| eu-west-2.cloudprotector.com/console/resources/css/error_page.css | 178.33.22.1 | 200 OK | 1.7 kB |
URL GET HTTP/2eu-west-2.cloudprotector.com/console/resources/css/error_page.css IP178.33.22.1:443
CertificateIssuerGandi Subject*.cloudprotector.com Fingerprint6F:78:EF:F9:90:1F:92:37:BA:DE:BA:55:E7:12:39:62:27:AD:1D:D2 ValidityTue, 30 Apr 2024 00:00:00 GMT - Mon, 12 May 2025 23:59:59 GMT
File typeASCII text, with very long lines (1849), with no line terminators Hashed9f60967d6d10e75d2725d784b4d72a 99f76fb8016fe87cbf728fe608c682ce9c801938 7d573bce6fb11d85b3d05a63f9568ba58bb96808dd247c0307a2589a9be2c7b0
GET /console/resources/css/error_page.css HTTP/1.1
Host: eu-west-2.cloudprotector.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.33.22.52/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 04:25:40 GMT
accept-ranges: bytes
etag: W/"1747-1710322541000"
last-modified: Wed, 13 Mar 2024 09:35:41 GMT
expires: Wed, 08 May 2024 04:25:40 GMT
content-type: text/css
x-ua-compatible: IE=Edge
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=63072000
set-cookie: GUI=cea902c5-c180-5f76-9102-ba3c9fec8df3; path=/; HttpOnly
cache-control: max-age=86400, private
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
IP178.33.22.52:80
File typeHTML document, ASCII text, with very long lines (1020), with no line terminators Hashfe0e21c67d3f9cc1cff9cc288715d59c 5d1397da0c947aba80efbb638b7566985b39bb68 b2cc4c70084258ec47efbdee3698f209249e55651d86de6a5778f69364151b49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 178.33.22.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://178.33.22.52/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 503 Service Unavailable
cache-control: no-cache
content-type: text/html
|
IP 0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 178.33.22.52
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|