| 142.11.216.61/bins/katana.arm | 142.11.216.61 | | 210 B |
URL 142.11.216.61/bins/katana.arm IP142.11.216.61:0
File typeHTML document, ASCII text Hash88011fbe1c1169bdef56d98e276681f8 7ce6f04002fba42a7cba3d8befd52c0f6b24a72c 3470e374c8a5667c513f2fad79ec9d35f43eb63ce3b6b9a5e4e642b6d5d37735
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /bins/katana.arm HTTP/1.1
Host: 142.11.216.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sun, 05 May 2024 01:19:26 GMT
Server: Apache
Location: /cgi-sys/suspendedpage.cgi
Content-Length: 210
Keep-Alive: timeout=5, max=10000
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 142.11.216.61/cgi-sys/suspendedpage.cgi | 142.11.216.61 | 200 OK | 1.8 kB |
URL GET HTTP/1.1142.11.216.61/cgi-sys/suspendedpage.cgi IP142.11.216.61:80
Requested byhttp://142.11.216.61/cgi-sys/suspendedpage.cgi
File typeHTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators Hashefba6a95a017cb365de79efa1d9ea5ea 950cbf18ce048699d9674d8cd7b1e040844e3cc5 3bed08fcedf2cb72a647eb138192c429da4d346085f6775b8d47d25dd7572611
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /cgi-sys/suspendedpage.cgi HTTP/1.1
Host: 142.11.216.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 01:19:26 GMT
Server: Apache
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9999
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html
|
|
| www.hostwinds.com/images/partners/hosted-by-hostwinds-alien.png | 104.18.7.250 | | 12 kB |
URL www.hostwinds.com/images/partners/hosted-by-hostwinds-alien.png IP104.18.7.250:0
File typeRIFF (little-endian) data, Web/P image Hashdbcf9ced120c881433cf5a83a1525876 3305331e79843868c3dc65fcbf660881d3f20cba 4965a9768d7257c0e35b52bd91bc3027d7ea3cdd0359246b4d357181a7c61f63
GET /images/partners/hosted-by-hostwinds-alien.png HTTP/1.1
Host: www.hostwinds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://142.11.216.61/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 01:19:27 GMT
content-type: image/webp
content-length: 11566
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=21238
content-disposition: inline; filename="hosted-by-hostwinds-alien.webp"
access-control-allow-origin: *
etag: "52f6-662cf670;br"
last-modified: Sat, 27 Apr 2024 12:58:24 GMT
vary: Accept
cf-cache-status: HIT
age: 359109
accept-ranges: bytes
set-cookie: __cf_bm=GacikjSU8Sm5kzbqv_sN2oLR8ZLP11wIhkrXdM6BNLM-1714871967-1.0.1.1-MEGdmzRQm4qYuEKdUyM8SHz4OJqeyXl5FtoeZRxl2OY23phdz2hxfaST_vb2Wio3diFOWL.ZMNVHVQBCeyzDHGBTQTKere4HuVzVNq8iWYs; path=/; expires=Sun, 05-May-24 01:49:27 GMT; domain=.hostwinds.com; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87ece7038ed256af-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 142.11.216.61/favicon.ico | 142.11.216.61 | | 210 B |
URL 142.11.216.61/favicon.ico IP142.11.216.61:0
File typeHTML document, ASCII text Hash88011fbe1c1169bdef56d98e276681f8 7ce6f04002fba42a7cba3d8befd52c0f6b24a72c 3470e374c8a5667c513f2fad79ec9d35f43eb63ce3b6b9a5e4e642b6d5d37735
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 142.11.216.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://142.11.216.61/cgi-sys/suspendedpage.cgi
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Sun, 05 May 2024 01:19:27 GMT
Server: Apache
Location: /cgi-sys/suspendedpage.cgi
Content-Length: 210
Keep-Alive: timeout=5, max=9998
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 142.11.216.61/cgi-sys/suspendedpage.cgi | 142.11.216.61 | 200 OK | 1.8 kB |
URL GET HTTP/1.1142.11.216.61/cgi-sys/suspendedpage.cgi IP142.11.216.61:80
Requested byhttp://142.11.216.61/cgi-sys/suspendedpage.cgi
File typeHTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators Hashefba6a95a017cb365de79efa1d9ea5ea 950cbf18ce048699d9674d8cd7b1e040844e3cc5 3bed08fcedf2cb72a647eb138192c429da4d346085f6775b8d47d25dd7572611
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /cgi-sys/suspendedpage.cgi HTTP/1.1
Host: 142.11.216.61
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://142.11.216.61/cgi-sys/suspendedpage.cgi
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 05 May 2024 01:19:27 GMT
Server: Apache
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9997
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html
|
|