| api2.check-data.xyz/api/get_stat_options/2C6A44CB_AD42_4731_A544_3FBD3D83AB5B/wrtzr_ytab_a_1?0.9539276555647949 |  35.82.94.151 | 200 OK | 141 B |
URL User Request GET HTTP/1.1api2.check-data.xyz/api/get_stat_options/2C6A44CB_AD42_4731_A544_3FBD3D83AB5B/wrtzr_ytab_a_1?0.9539276555647949 IP35.82.94.151:443
CertificateIssuerAmazon Subject*.tracemonitors.com FingerprintEC:EE:D4:25:81:1B:4F:9D:46:E3:B7:7C:91:91:0C:C5:E7:61:C1:0F ValidityTue, 06 Feb 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
Hash4402f3dc654bf2078849318cbb58f1a9 4f0c3f0426118ba9c170be9cbed303aa68d2cfd9 7c5ccb8c52ec68037a4057446ddf8f3f26211b6b59924d15a27d816b68de9dbb
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /api/get_stat_options/2C6A44CB_AD42_4731_A544_3FBD3D83AB5B/wrtzr_ytab_a_1?0.9539276555647949 HTTP/1.1
Host: api2.check-data.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-control: no-cache="set-cookie"
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Tue, 07 May 2024 07:50:59 GMT
Server: nginx
Set-Cookie: AWSELB=9327DF5F0AF3D375CDC9DE0AFF98FDC82A9589C9820401D99493DFDF796F3DAB0062EEFB3E4A533F5B2753F2532FBA9D17E5754692E8600D254000879A4CE3001E279F1EF5;PATH=/;MAX-AGE=43200
AWSELBCORS=9327DF5F0AF3D375CDC9DE0AFF98FDC82A9589C9820401D99493DFDF796F3DAB0062EEFB3E4A533F5B2753F2532FBA9D17E5754692E8600D254000879A4CE3001E279F1EF5;PATH=/;MAX-AGE=43200;SECURE;SAMESITE=None
Content-Length: 141
Connection: keep-alive
|
| api2.check-data.xyz/favicon.ico | 35.82.94.151 | 200 OK | 372 B |
URL GET HTTP/1.1api2.check-data.xyz/favicon.ico IP35.82.94.151:443
Requested byhttps://api2.check-data.xyz/api/get_stat_options/2C6A44CB_AD42_4731_A544_3FBD3D83AB5B/wrtzr_ytab_a_1?0.9539276555647949 CertificateIssuerAmazon Subject*.tracemonitors.com FingerprintEC:EE:D4:25:81:1B:4F:9D:46:E3:B7:7C:91:91:0C:C5:E7:61:C1:0F ValidityTue, 06 Feb 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typePNG image data, 32 x 32, 8-bit colormap, non-interlaced Hash66b3119d379aee26ba668fef49188dd3 4569014add6981f25b53898dcf491a314c4418bb 2414211797f445e0d8286f799e2af9b4fa8efc8207e8c17d204323b0cf0b0d90
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: api2.check-data.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://api2.check-data.xyz/api/get_stat_options/2C6A44CB_AD42_4731_A544_3FBD3D83AB5B/wrtzr_ytab_a_1?0.9539276555647949
Cookie: AWSELB=9327DF5F0AF3D375CDC9DE0AFF98FDC82A9589C9820401D99493DFDF796F3DAB0062EEFB3E4A533F5B2753F2532FBA9D17E5754692E8600D254000879A4CE3001E279F1EF5; AWSELBCORS=9327DF5F0AF3D375CDC9DE0AFF98FDC82A9589C9820401D99493DFDF796F3DAB0062EEFB3E4A533F5B2753F2532FBA9D17E5754692E8600D254000879A4CE3001E279F1EF5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/x-icon
Date: Tue, 07 May 2024 07:51:00 GMT
ETag: "6639d879-174"
Last-Modified: Tue, 07 May 2024 07:30:01 GMT
Server: nginx
Content-Length: 372
Connection: keep-alive
|