Report - tbg.iblocklist.com/Lists/SearchEngines.zip

Report Overview

Visited public
2023-09-21 19:25:38
Tags
URL
tbg.iblocklist.com/Lists/SearchEngines.zip
Finishing URL
list.iblocklist.com/humantest?
IP / ASN
54.175.167.220
#14618 AMAZON-AES
Title
I-BlockList | Human Check

Detections

urlquery

0

Network Intrusion Detection

2

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
list.iblocklist.com	715091	2008-01-14	2012-11-20 06:59:07	2023-09-20 18:15:18	2.2 kB	41 kB	54.175.167.220
tbg.iblocklist.com	unknown	2008-01-14	2015-06-24 12:46:35	2023-09-21 05:14:44	414 B	635 B	54.175.167.220

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-21 19:25:23	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
2023-09-21 19:25:33	medium	Client IP	192.169.69.26	ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

	URL	IP	Response	Size
	tbg.iblocklist.com/Lists/SearchEngines.zip	54.175.167.220	301 Moved Permanently	346 B
URL User Request GET HTTP/1.1 tbg.iblocklist.com/Lists/SearchEngines.zip IP 54.175.167.220:80 ASN #14618 AMAZON-AES File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 346 B (346 bytes) Hash d40dc5aeb7907346b632f261bd93d9cc 7f856baefe88772622b3ace480a20470b81e0614 714de95f18cfba982adb2289f2fb0b2d0d8d7fc1e510ffcdf25e4f59e916070e HTTP Headers `GET /Lists/SearchEngines.zip HTTP/1.1 Host: tbg.iblocklist.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 301 Moved Permanently Date: Thu, 21 Sep 2023 19:25:22 GMT Server: Apache/2.4.52 (Ubuntu) Location: http://list.iblocklist.com/lists/tbg/SearchEngines.zip Content-Length: 346 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1`

	list.iblocklist.com/lists/tbg/SearchEngines.zip	54.175.167.220	302 Found	0 B
URL User Request GET HTTP/2 list.iblocklist.com/lists/tbg/SearchEngines.zip IP 54.175.167.220:443 ASN #14618 AMAZON-AES Certificate IssuerLet's Encrypt Subjectlist.iblocklist.com Fingerprint82:96:4C:12:24:3C:4B:B7:00:E8:E2:76:74:46:2B:46:7A:32:D9:18 ValidityWed, 09 Aug 2023 00:47:13 GMT - Tue, 07 Nov 2023 00:47:12 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /lists/tbg/SearchEngines.zip HTTP/1.1 Host: list.iblocklist.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache set-cookie: PHPSESSID=dt5hktffdcejqlsgnfstb24qr9; path=/ location: /humantest? content-length: 0 content-type: text/plain;charset=UTF-8 date: Thu, 21 Sep 2023 19:25:22 GMT server: Apache/2.4.52 (Ubuntu) X-Firefox-Spdy: h2`

	list.iblocklist.com/humantest?	54.175.167.220	401 Unauthorized	1.5 kB
URL User Request GET HTTP/1.1 list.iblocklist.com/humantest? IP 54.175.167.220:80 ASN #14618 AMAZON-AES File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size 1.5 kB (1492 bytes) Hash 5a831b08f4af2619f06512eacefe9768 e123119522d527b9776bb12fa2d51cda078b9f29 8d870846403910761b12c67c8ecf696db19392810a3685a8fc5c518847dd32e6 HTTP Headers `GET /humantest? HTTP/1.1 Host: list.iblocklist.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Cookie: PHPSESSID=dt5hktffdcejqlsgnfstb24qr9 Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 401 Unauthorized Date: Thu, 21 Sep 2023 19:25:23 GMT Server: Apache/2.4.52 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Keep-Alive: timeout=5, max=100 Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8`

	list.iblocklist.com/sitefiles/css/style.css	54.175.167.220	200 OK	826 B
URL GET HTTP/1.1 list.iblocklist.com/sitefiles/css/style.css IP 54.175.167.220:80 ASN #14618 AMAZON-AES Requested by http://list.iblocklist.com/humantest? File type ASCII text Size 826 B (826 bytes) Hash f78c24d6a9c80378c8379a89eb360dbd f0effc042fbcb138bd2d550acc674cf78a3b2f44 fe60ed1c628824f9e3da22e97242ee456227849bcda3474d64d18a1d727ca7df HTTP Headers `GET /sitefiles/css/style.css HTTP/1.1 Host: list.iblocklist.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://list.iblocklist.com/humantest? Cookie: PHPSESSID=dt5hktffdcejqlsgnfstb24qr9 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 21 Sep 2023 19:25:23 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Sun, 23 Jan 2022 18:58:47 GMT ETag: "eaf-5d6447116e7c0-gzip" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 826 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/css`

	list.iblocklist.com/sitefiles/images/captcha.png	54.175.167.220	200 OK	4.9 kB
URL GET HTTP/1.1 list.iblocklist.com/sitefiles/images/captcha.png IP 54.175.167.220:80 ASN #14618 AMAZON-AES Requested by http://list.iblocklist.com/humantest? File type PNG image data, 200 x 50, 8-bit/color RGB, non-interlaced\012- data Size 4.9 kB (4904 bytes) Hash 9c73da49dbf355a6ae702b274c0d39b1 835cbce003536639cfaa35ce8cf3e5c7206895d2 8ed12020fc9245a4b120a2bb4b9d38356160fc8d5d68e041f284450c7e282e97 HTTP Headers `GET /sitefiles/images/captcha.png HTTP/1.1 Host: list.iblocklist.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://list.iblocklist.com/humantest? Cookie: PHPSESSID=dt5hktffdcejqlsgnfstb24qr9 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 21 Sep 2023 19:25:23 GMT Server: Apache/2.4.52 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Keep-Alive: timeout=5, max=100 Transfer-Encoding: chunked Content-Type: image/png`

	list.iblocklist.com/sitefiles/images/favicon.ico	54.175.167.220	200 OK	32 kB
URL GET HTTP/1.1 list.iblocklist.com/sitefiles/images/favicon.ico IP 54.175.167.220:80 ASN #14618 AMAZON-AES Requested by http://list.iblocklist.com/humantest? File type MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data Size 32 kB (32038 bytes) Hash ca9fab12fe23e576985d8b003d4d35f5 e673246eb69bdc2ef015bfe52e36b5789428e067 29a9bad9e59a6d5c14e26d1eef52dbbe471410aae8a54968a8021d8ad58d4b13 HTTP Headers `GET /sitefiles/images/favicon.ico HTTP/1.1 Host: list.iblocklist.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://list.iblocklist.com/humantest? Cookie: PHPSESSID=dt5hktffdcejqlsgnfstb24qr9 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 21 Sep 2023 19:25:23 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Thu, 30 Aug 2012 08:43:11 GMT ETag: "7d26-4c877aa51e5c0" Accept-Ranges: bytes Content-Length: 32038 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: image/vnd.microsoft.icon`