URL User Request GET HTTP/1.1IP64.23.163.215:80 ASN#14061 DIGITALOCEAN-ASN
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash8180b5cb69a9563344f363860125c965 04d3eaa3b5525299193b4584b24cbed48bfca59b 216501c74a89606436b9c30ae0d91c7c761e3c20152e04c6aca07f2f4aa2febe
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /plug3.ps1 HTTP/1.1
Host: 64.23.163.215
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 20:00:44 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 25 Apr 2024 09:00:59 GMT
ETag: "2603-616e8069648c0"
Accept-Ranges: bytes
Content-Length: 9731
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
|
| 64.23.163.215/favicon.ico | 64.23.163.215 | 404 Not Found | 275 B |
URL GET HTTP/1.164.23.163.215/favicon.ico IP64.23.163.215:80 ASN#14061 DIGITALOCEAN-ASN
Requested byhttp://64.23.163.215/plug3.ps1
File typeHTML document, ASCII text Hash2484ed8a4ad5bf8647e7605e6ad3ed2e 67569896b163e1e55bc3e2f487e3135c37272334 b7ebc7566075cdcc8f2c92f0614e35e401d4a5c468816d264055f3701fe2a172
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 64.23.163.215
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://64.23.163.215/plug3.ps1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 26 Apr 2024 20:00:45 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 275
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|