Report - 52.50.90.84

Report Overview

Submitted URL
52.50.90.84
IP
52.50.90.84
ASN
#16509 AMAZON-02
Submitted
2023-05-29 14:21:43
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.r2m02.amazontrust.com	unknown	2007-05-11	2022-10-12	2023-05-29	340 B	1.0 kB	54.230.80.227
52.50.90.84	unknown	unknown	2023-04-22	2023-05-29	1.7 kB	43 kB	52.50.90.84

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator
2023-05-29	medium	52.50.90.84
2023-05-29	medium	52.50.90.84
2023-05-29	medium	52.50.90.84
2023-05-29	medium	52.50.90.84
2023-05-29	medium	52.50.90.84

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

URL IP Response Size

ocsp.r2m02.amazontrust.com/

54.230.80.227

471 B

URL
ocsp.r2m02.amazontrust.com/
IP
54.230.80.227:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
6ded4133842feb1783064045af750b4d
86c901a7d1c0b145b330685dfdf1a119e4e2d51b
23436f50e35ba5e5254e904b1028985769de99da43f51a62acb44afc25f47fec

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Mon, 29 May 2023 14:21:26 GMT
Etag: "647381c7-1d7"
Expires: Mon, 29 May 2023 16:21:26 GMT
Last-Modified: Sun, 28 May 2023 16:31:03 GMT
Server: ECAcc (nya/789D)
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FNix-vF1jONWj5hsJgMQcEWi-BPa4JoWBBVUQk8ePYTINEfs-pN4eA==
Age: 6042

52.50.90.84/

52.50.90.84

844 B

URL User Request GET
52.50.90.84/
IP
52.50.90.84:0
ASN
#16509 AMAZON-02

File type
XML 1.0 document text\012- XHTML document text (version 1.0)\012- broken XHTML document text (version 1.0)\012- HTML document text\012- XML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size
844 B (844 bytes)
Hash
899f71a53418bf4b41ca760ee05aa30a
b4899cbe2a563515b3e67a7fa488e821971f16c8
b0c730cf13404d564e610b94d953952edf1ff58434287c0be1c2a21b568f50e8

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 52.50.90.84
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: text/html
Date: Mon, 29 May 2023 14:21:26 GMT
ETag: "1466489234"
Last-Modified: Tue, 19 Oct 2021 02:36:58 GMT
Server: lighttpd/1.4.53
Content-Length: 844
Connection: keep-alive

52.50.90.84/light_logo.png

52.50.90.84

200 OK

35 kB

URL GET HTTP/1.1
52.50.90.84/light_logo.png
IP
52.50.90.84:80
ASN
#16509 AMAZON-02

Requested by
http://52.50.90.84/

File type
PNG image data, 249 x 239, 8-bit/color RGBA, non-interlaced\012- data
Size
35 kB (35431 bytes)
Hash
ac20784510e420d5cbe5fc1cdb53d7a7
7b214997fabe0de0074696fd5a3dc44e1f22b912
6cbac241e026381d710f9110d209ef6198f448ddb241b95556d4f700a2e177d1

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /light_logo.png HTTP/1.1
Host: 52.50.90.84
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://52.50.90.84/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Mon, 29 May 2023 14:21:26 GMT
ETag: "2774168877"
Last-Modified: Tue, 19 Oct 2021 02:36:58 GMT
Server: lighttpd/1.4.53
Content-Length: 35431
Connection: keep-alive

52.50.90.84/poweredby.png

52.50.90.84

404 Not Found

341 B

URL GET HTTP/1.1
52.50.90.84/poweredby.png
IP
52.50.90.84:80
ASN
#16509 AMAZON-02

Requested by
http://52.50.90.84/

File type
XML 1.0 document text\012- XHTML document text (version 1.0)\012- broken XHTML document text (version 1.0)\012- HTML document text\012- XML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
341 B (341 bytes)
Hash
1ec31972ec65a65470d3b5d790c1f401
ff246ff3f34725545777856854cd50034c1eba55
664f2b1654c363a6348b688d5d475ed9ec0e7ef3c72f6f315f37fe97a2fe63eb

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /poweredby.png HTTP/1.1
Host: 52.50.90.84
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://52.50.90.84/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Date: Mon, 29 May 2023 14:21:26 GMT
Server: lighttpd/1.4.53
Content-Length: 341
Connection: keep-alive

52.50.90.84/light_button.png

52.50.90.84

200 OK

2.1 kB

URL GET HTTP/1.1
52.50.90.84/light_button.png
IP
52.50.90.84:80
ASN
#16509 AMAZON-02

Requested by
http://52.50.90.84/

File type
PNG image data, 80 x 27, 8-bit/color RGBA, non-interlaced\012- data
Size
2.1 kB (2072 bytes)
Hash
02330e2313fadc29144edfd6000879f8
32a0b6a600fb88bcdbcf68799fc6053ff51ef0ef
2080e74437fe44333974c5268bccbfec96abaf19266cbbc96e896652d7a38183

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /light_button.png HTTP/1.1
Host: 52.50.90.84
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://52.50.90.84/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/png
Date: Mon, 29 May 2023 14:21:26 GMT
ETag: "1504202978"
Last-Modified: Tue, 19 Oct 2021 02:36:58 GMT
Server: lighttpd/1.4.53
Content-Length: 2072
Connection: keep-alive

52.50.90.84/favicon.ico

52.50.90.84

200 OK

3.6 kB

URL GET HTTP/1.1
52.50.90.84/favicon.ico
IP
52.50.90.84:80
ASN
#16509 AMAZON-02

Requested by
http://52.50.90.84/

File type
MS Windows icon resource - 2 icons, 16x16, 32x32\012- data
Size
3.6 kB (3638 bytes)
Hash
a358994becabd4060393a5454bde505d
d040e5733994a7a67705c9c99c37955561893fbf
cda64e394a43e9f9e5a3775f31892c0f96b23787f0cf17d25f6d3747d991fe24

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 52.50.90.84
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://52.50.90.84/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/vnd.microsoft.icon
Date: Mon, 29 May 2023 14:21:26 GMT
ETag: "481251502"
Last-Modified: Tue, 19 Oct 2021 02:36:58 GMT
Server: lighttpd/1.4.53
Content-Length: 3638
Connection: keep-alive

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (6)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

File type

Size

Hash

Detections

HTTP Headers