URL User Request GET HTTP/1.1IP 140.174.14.103:80
File typeHTML document, ASCII text, with very long lines (849), with no line terminators Hash32c64b2fbb287465280d8a3676c03660 f4e9afea07e1137d9753e1fabcba5ca23fc0d852 ec6a36aa15b6097c113cdfe64ba3ecfdfb000a0620cfa45c786635d3d55dd57f
GET / HTTP/1.1
Host: www.empiretoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 503 Service Unavailable
date: Fri, 10 May 2024 08:18:28 GMT
content-type: text/html; charset=utf-8
content-length: 849
x-yottaa-fw: fb/100 tid/564a391b0b53447bf7000d9f rid/5afee2122bb0ac671d102397 stid/5ba4dcb82bb0ac41c5dd58bb
age: 0
x-yottaa-metrics: 36D18cae0e67/[-,0.150]
x-yottaa-optimizations: ob/0 si/36D18cae0e67-1715192428-7038465776 tts/1715329108614 ti/0 ai/564a391b0b53447bf7000d9f
X-Firefox-Spdy: h2
|
URL User Request GET HTTP/1.1IP140.174.14.102:80
File typeHTML document, ASCII text, with very long lines (849), with no line terminators Hash32c64b2fbb287465280d8a3676c03660 f4e9afea07e1137d9753e1fabcba5ca23fc0d852 ec6a36aa15b6097c113cdfe64ba3ecfdfb000a0620cfa45c786635d3d55dd57f
GET / HTTP/1.1
Host: www.empiretoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 503 Service Unavailable
Date: Fri, 10 May 2024 08:18:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 849
Connection: keep-alive
X-Yottaa-FW: fb/100 tid/564a391b0b53447bf7000d9f rid/5afee2122bb0ac671d102397 stid/5ba4dcb82bb0ac41c5dd58bb
Age: 0
X-Yottaa-Metrics: 36D18cae0e66/[-,0.161]
X-Yottaa-Optimizations: ob/0 si/36D18cae0e66-1715192426-2088082197 tts/1715329108929 ti/0 ai/564a391b0b53447bf7000d9f
|
| www.empiretoday.com/favicon.ico | 140.174.14.102 | 503 Service Unavailable | 849 B |
URL GET HTTP/1.1www.empiretoday.com/favicon.ico IP140.174.14.102:80
Requested byhttp://www.empiretoday.com/
File typeHTML document, ASCII text, with very long lines (849), with no line terminators Hash32c64b2fbb287465280d8a3676c03660 f4e9afea07e1137d9753e1fabcba5ca23fc0d852 ec6a36aa15b6097c113cdfe64ba3ecfdfb000a0620cfa45c786635d3d55dd57f
GET /favicon.ico HTTP/1.1
Host: www.empiretoday.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.empiretoday.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 503 Service Unavailable
Date: Fri, 10 May 2024 08:18:29 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 849
Connection: keep-alive
X-Yottaa-FW: fb/100 tid/564a391b0b53447bf7000d9f rid/5afee2122bb0ac671d102397 stid/5ba4dcb82bb0ac41c5dd58bb
Age: 0
X-Yottaa-Metrics: 36D18cae0e66/[-,0.128]
X-Yottaa-Optimizations: ob/0 si/36D18cae0e66-1715192426-2088082201 tts/1715329109200 ti/0 ai/564a391b0b53447bf7000d9f
|
| prod-02-empiretodaycontent-app.azureedge.net/assets/Images/Header/empire-residential-logo.svg |  0.0.0.0 | | 0 B |
URL GET prod-02-empiretodaycontent-app.azureedge.net/assets/Images/Header/empire-residential-logo.svg IP0.0.0.0:0
Requested byhttp://www.empiretoday.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/Images/Header/empire-residential-logo.svg HTTP/1.1
Host: prod-02-empiretodaycontent-app.azureedge.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.empiretoday.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|