URL User Request GET HTTP/1.1IP108.156.22.4:80
File typeHTML document, ASCII text Hash2ff2ef10b99a90c2cdf7fce9f52e72cd 61dd5807d17c859bd11be0782467d7954be6979a cedbc514e0f2eeec27b5b222acf21c66ac1eb9e8ef7a075531097ac360a3118e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 108.156.22.4
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Wed, 08 May 2024 13:37:19 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 d6095b4d9fa82f5d25465246e397ad4e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HEL51-P1
X-Amz-Cf-Id: yo6JKfaZlz-EEsWNS3qyowHjAuJJ2Zgx3hG7KGaGFwqtzshhabqHpQ==
|
IP108.156.22.4:80
File typeHTML document, ASCII text Hash339ea25d5b8531ab7fb1da5ee28cd075 6344aa8966f96c1bc289c468b478e84dd5a1cb7a a303fb7932f82a4b2d6339a5a602a476f7647ec5ea63c6a8f7dd37d673b12c7f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 108.156.22.4
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://108.156.22.4/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Wed, 08 May 2024 13:37:19 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 d6095b4d9fa82f5d25465246e397ad4e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HEL51-P1
X-Amz-Cf-Id: h6hdrvAHyaOEc3gVeGJX443MYcOChhfFv8k2xQeFG1H1hRCOu04sOg==
|