URL User Request GET HTTP/1.1IP 109.123.253.230:80
File typeHTML document, ASCII text, with CRLF line terminators Hash6089b6cb65c59a5ae01e3f50620c2eaa df40259d3a60af08fb048db40ac395d1ee435c64 7e4a050b3ebd08d9c1cfc227b53b2122beec5f2dcb531f8ac46da51d7145bda4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 109.123.253.230
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Wed, 01 May 2024 21:09:41 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Last-Modified: Thu, 29 Feb 2024 12:55:16 GMT
ETag: W/"13b8-61284c557ed9c"
X-Cache: HIT from Backend
Content-Encoding: gzip
|
| 109.123.253.230/favicon.ico | 109.123.253.230 | 404 Not Found | 196 B |
URL GET HTTP/1.1109.123.253.230/favicon.ico IP109.123.253.230:80
File typeHTML document, ASCII text Hash62962daa1b19bbcc2db10b7bfd531ea6 d64bae91091eda6a7532ebec06aa70893b79e1f8 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 109.123.253.230
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://109.123.253.230/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.26.0
Date: Wed, 01 May 2024 21:09:42 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 196
Connection: keep-alive
Keep-Alive: timeout=60
|
| static.cdn-cwp.com/files/images/cwp_logo.png |  137.74.148.116 | | 20 kB |
URL GET static.cdn-cwp.com/files/images/cwp_logo.png IP137.74.148.116:0
File typePNG image data, 330 x 95, 8-bit/color RGBA, non-interlaced Hashed6dc3667a491af7b390856386b6f553 13afe86fdb8683b6b6f701fb5143c3692e63d430 0e7653738cd77a5a907e4e8033e64c13c3a132556a8c616e66f2ae15cb5e31bd
GET /files/images/cwp_logo.png HTTP/1.1
Host: static.cdn-cwp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://109.123.253.230/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.8.0
Date: Wed, 01 May 2024 21:09:42 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 14 Sep 2016 20:56:05 GMT
ETag: W/"4dd2-53c7df5256340"
Content-Encoding: gzip
|