URL User Request GET HTTP/2IP 188.114.97.1:443
CertificateIssuerGoogle Trust Services LLC Subjectrossalober.xyz Fingerprint84:BD:A8:23:BE:23:DF:46:66:06:91:06:B7:2B:1D:17:54:77:A2:8A ValiditySun, 17 Mar 2024 20:53:25 GMT - Sat, 15 Jun 2024 20:53:24 GMT
File typeHTML document, ASCII text, with very long lines (3156), with no line terminators Hash205528610ab8b0bbcd89cad371f195a9 49b95f26dd79d885090d4c04ef4eda5baf0f3b6b 71f3ab005383c5098fb897d8e2c087b3602d4a16abccb34118babb20a081ba84
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: rossalober.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 12:11:38 GMT
content-type: text/html; charset=utf-8
last-modified: Mon, 04 Mar 2024 01:48:50 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sntjqn1eazbEm9JkdHR5%2Fxsxtxu6WK3P5zn5LtY3nzN%2FT7b1gNhRKHqtXnOc7TVa%2FGQDjqkArQ9ydseQUKOZA5uRFegCZC6xht9ELsh1WPutwsH%2B6EtwV5voGF4no5B7Kg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87648efe2eaf0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
| rossalober.xyz/favicon.ico | 188.114.97.1 | 404 Not Found | 3.0 kB |
URL GET HTTP/3rossalober.xyz/favicon.ico IP188.114.97.1:443
CertificateIssuerGoogle Trust Services LLC Subjectrossalober.xyz Fingerprint84:BD:A8:23:BE:23:DF:46:66:06:91:06:B7:2B:1D:17:54:77:A2:8A ValiditySun, 17 Mar 2024 20:53:25 GMT - Sat, 15 Jun 2024 20:53:24 GMT
File typeHTML document, ASCII text, with very long lines (3525), with no line terminators Hash616160ab316ba6235fe9c0f4c9af9db4 918351f89b0f390a1182968bb019268ce12d523b dc2211c829a20fe3500fca173ea01dfb1eff65f1d0f0835e79a11695571a0500
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: rossalober.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rossalober.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 18 Apr 2024 12:11:38 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
last-modified: Mon, 04 Mar 2024 01:48:50 GMT
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MK%2B2Q2oWUiNfCsBlsTmAadcGqsL8WER7c4HBv6GHD3O7S%2BZDgyImRKn0sK8FlCj94bsL2blGUQqIIJLcmdqns8LElir3GaVaaiQ%2Fy1dY9KO77EC08aPe7yOb95hAM8SJ%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87648effef180b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|