URL User Request GET HTTP/1.1IP103.113.157.20:80
File typeASCII text, with no line terminators Hasha22ab9bc08799e79240c7f51bc9b2151 086e96b8569b2afdbe162aba2eadde3bb71d05eb 3c7728801204e30ae412e255d92668cd4a264ba9835b726d6ec6fb8c3dd6583e
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /pwd.txt HTTP/1.1
Host: 103.113.157.20
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 21:16:08 GMT
Content-Type: text/plain
Content-Length: 32
Last-Modified: Fri, 26 Apr 2024 21:07:00 GMT
Connection: keep-alive
ETag: "662c1774-20"
Accept-Ranges: bytes
|
| 103.113.157.20/favicon.ico | 103.113.157.20 | 404 Not Found | 738 B |
URL GET HTTP/1.1103.113.157.20/favicon.ico IP103.113.157.20:80
Requested byhttp://103.113.157.20/pwd.txt
File typeHTML document, ASCII text Hash6906d14b5af5316ce832c289538539ee 938a3e270527288565d8b9b8a9e6d8ca090836a9 33da7357c9030b48f7c703439c6a5335fbee5e311b9782bbbf664bbf9c5a6280
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 103.113.157.20
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://103.113.157.20/pwd.txt
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 26 Apr 2024 21:16:09 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|