URL User Request GET HTTP/2IP 104.21.6.70:443
CertificateIssuerLet's Encrypt Subjectpkxzfvlhtvlfdi.shop Fingerprint56:BF:0D:5A:04:97:04:D0:B5:93:66:86:40:D5:13:1C:B0:59:C6:A2 ValidityThu, 04 Apr 2024 06:15:07 GMT - Wed, 03 Jul 2024 06:15:06 GMT
File typeASCII text, with no line terminators Hash73687388f76fe3029516f1c40fd5678f 5e155cb5551267a9c1371a9c5c8c5b90353c43f9 faccd86bdd3f1fddeddc64984c2365cf5a252ca520c9f1ca32755c64fc291075
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: pkxzfvlhtvlfdi.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Tue, 30 Apr 2024 20:49:48 GMT
content-type: text/plain; charset=utf-8
content-length: 12
vary: Origin, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=77OfWgE9MsPivE0RM6NCrupeNZAJHcz8DttTc3UUvx8RbBKtxrUC%2BhHvDoS2OlRx2jOk9HJ845%2FiM0LYmFuTa5yeePzOsTM64qeTmXM7T3%2FvQ8jqpSGw2EQXAf63im52q7WjbZaX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ca6685bb15b518-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
URL User Request GET HTTP/2IP104.21.6.70:443
CertificateIssuerLet's Encrypt Subjectpkxzfvlhtvlfdi.shop Fingerprint56:BF:0D:5A:04:97:04:D0:B5:93:66:86:40:D5:13:1C:B0:59:C6:A2 ValidityThu, 04 Apr 2024 06:15:07 GMT - Wed, 03 Jul 2024 06:15:06 GMT
File typeASCII text, with no line terminators Hash73687388f76fe3029516f1c40fd5678f 5e155cb5551267a9c1371a9c5c8c5b90353c43f9 faccd86bdd3f1fddeddc64984c2365cf5a252ca520c9f1ca32755c64fc291075
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: pkxzfvlhtvlfdi.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 30 Apr 2024 20:49:48 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 12
Connection: keep-alive
Vary: Origin
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SdXnxa89aZqGiThDemEtMiI3sj8gzgF91fxtMptEmPaJftJ63x5MUohe%2FUqlhL5%2BQlRt8%2FiUf%2BT0td2k90iIKMldff%2Bz2l9O18JqXcFCtFeMdqIYwT7Dqp%2B1dBp4CKivThAKyt2E"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ca66875f3ab521-OSL
alt-svc: h2=":443"; ma=60
|
| pkxzfvlhtvlfdi.shop/favicon.ico | 104.21.6.70 | 404 Not Found | 23 B |
URL GET HTTP/1.1pkxzfvlhtvlfdi.shop/favicon.ico IP104.21.6.70:80
Requested byhttp://pkxzfvlhtvlfdi.shop/
File typeASCII text, with no line terminators Hash2cac9a07feff87dcd74e5e5dc872e048 416dc4827ff7f287106cd81cf571b08a997d5c29 e4422adad223e8034173238afe605f3f63570dfd6c19dbbf4a971407ad7100f2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: pkxzfvlhtvlfdi.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://pkxzfvlhtvlfdi.shop/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 30 Apr 2024 20:49:49 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 23
Connection: keep-alive
Vary: Origin, Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LlfivqyhaclfPyiBx%2Fa%2BySlXGyu8Xe9yzSc44j3KIlO7k0jlO%2FY7JUGnp4pMhIWLXWZop7qzLQLVh22TtO2MOXoIwRJQZmWmm%2BuRj9266wIUA09OqOHNWWhnhnr0xnTW0HGeBPoc"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ca66895961b521-OSL
alt-svc: h2=":443"; ma=60
|
172.67.134.149