URL User Request GET HTTP/1.1IP108.158.20.58:80
File typeHTML document, ASCII text Hashe59945db9c40a621c0a3f9cc3bcf53b2 52dc128325272661f7f4a442325d8521f76a93bc c167e92d0bb929b5d106520597b4e2486d5b97852d6f33b922518211c96adcca
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 108.158.20.58
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Fri, 26 Apr 2024 14:17:30 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 19f48f8a678ef4e5c0ca07e0cf91cbc6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: SYD62-P3
X-Amz-Cf-Id: u4uam5Nd8Z82HA3bgrlV6pF41XJ0ittUofkR1UPn9YVwThpSPdrauA==
|
| 108.158.20.58/favicon.ico | 108.158.20.58 | 403 Forbidden | 915 B |
URL GET HTTP/1.1108.158.20.58/favicon.ico IP108.158.20.58:80
File typeHTML document, ASCII text Hash425b5fc2c2ae5e840db91874a8377d01 c25b3dfd0664970f297e58953da6b68b870f515b fe5392987d469839694a8205618ed7dbc93747dcdf4d369794ea048c5f308ec7
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 108.158.20.58
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://108.158.20.58/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Fri, 26 Apr 2024 14:17:30 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 ece2a231e09716eb97b51099bf5928fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: SYD62-P3
X-Amz-Cf-Id: xvqHXfic8hHl9kKOxkAqRbLqJz2jCddsS8CitRLlvLc1jivHckOGkw==
|