| m2.ohaedjzgcy.xyz/favicon.ico |  172.67.182.253 | 200 OK | 0 B |
URL GET HTTP/3m2.ohaedjzgcy.xyz/favicon.ico IP172.67.182.253:443
Requested byhttps://m2.ohaedjzgcy.xyz/media/dfa727ed/720/hls/xRePcZn4SusXqhMO7ACv22.html CertificateIssuerGoogle Trust Services LLC Subjectohaedjzgcy.xyz Fingerprint89:53:62:3E:CB:BF:AD:41:C2:E8:4F:F4:69:25:07:E5:1B:47:FB:6C ValiditySat, 24 Feb 2024 14:33:45 GMT - Fri, 24 May 2024 14:33:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: m2.ohaedjzgcy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m2.ohaedjzgcy.xyz/media/dfa727ed/720/hls/xRePcZn4SusXqhMO7ACv22.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 12:16:21 GMT
content-type: image/x-icon
content-length: 0
etag: "623309a6-0"
access-control-allow-origin: *
last-modified: Sun, 19 Nov 2000 08:52:00 GMT
cache-control: public, max-age=31536000, immutable
access-control-expose-headers: Server, Range, Content-Length, Content-Range
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eu%2BMy8G9jwg9%2FY5ov4bMGY5lmmouuHfysZoawq0N%2FGsaTCztgefqxT338r1GzSqQH%2BWIDU6DfAHeGO2JBiiqUwZahxaMNMcDa1FWuT72hLGhDzOZsPVTkAalLu019%2F6j%2FgT1ug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876495e65b54b511-OSL
alt-svc: h3=":443"; ma=86400
|
| m2.ohaedjzgcy.xyz/media/dfa727ed/720/hls/xRePcZn4SusXqhMO7ACv22.html | 172.67.182.253 | 200 OK | 656 kB |
URL User Request GET HTTP/2m2.ohaedjzgcy.xyz/media/dfa727ed/720/hls/xRePcZn4SusXqhMO7ACv22.html IP172.67.182.253:443
CertificateIssuerGoogle Trust Services LLC Subjectohaedjzgcy.xyz Fingerprint89:53:62:3E:CB:BF:AD:41:C2:E8:4F:F4:69:25:07:E5:1B:47:FB:6C ValiditySat, 24 Feb 2024 14:33:45 GMT - Fri, 24 May 2024 14:33:44 GMT
Size656 kB (655932 bytes) Hash2459cee533234c74ca20829bbf3245d7 1c1fba6d667ee13e82aafcb6583447f26e214eac faecc21be3fb2b00a5b7eb80a021496078fa51e877a597a545f7df0af9946443
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /media/dfa727ed/720/hls/xRePcZn4SusXqhMO7ACv22.html HTTP/1.1
Host: m2.ohaedjzgcy.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 12:16:21 GMT
content-type: text/html
vary: Accept-Encoding
etag: W/"6583ddd5-a023c"
expires: Fri, 18 Apr 2025 12:16:12 GMT
cache-control: public, max-age=31536000, immutable
access-control-allow-origin: *
last-modified: Sun, 19 Nov 2000 08:52:00 GMT
access-control-expose-headers: Server, Range, Content-Length, Content-Range
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ClTPWlOzxoR2ixSOXYkQU5rAqfHPZyQomwczc8zew6R%2BYwl%2BPkCTlSYjNMXrL2w3UxDcznuJVh69SfNI2VUq5ZNcpDwEG1hUx1f9zFBbCFyj%2BitPPJF%2BQZPi%2FbFuTs9Pfl2WLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876495e43b5156b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
104.21.51.167