Report - p91290.mybetterdl.com

Report Overview

Submitted URL
p91290.mybetterdl.com
IP
99.83.154.118
ASN
#16509 AMAZON-02
Submitted
2023-05-08 17:43:45
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.google.com	7	1997-09-15	2015-05-10	2023-05-06	343 B	54 kB	142.250.74.132
d38psrni17bvxu.cloudfront.net	unknown	2008-04-25	2022-09-22	2023-05-08	403 B	12 kB	54.230.245.130
d1lxhc4jvstzrp.cloudfront.net	unknown	2008-04-25	2020-12-02	2023-05-08	470 B	6.4 kB	54.230.245.141
p91290.mybetterdl.com	unknown	2018-04-16	2023-03-18	2023-04-27	1.9 kB	15 kB	99.83.154.118

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator
2023-05-08	medium	mybetterdl.com
2023-05-08	medium	mybetterdl.com
2023-05-08	medium	mybetterdl.com
2023-05-08	medium	mybetterdl.com
2023-05-08	medium	mybetterdl.com

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	p91290.mybetterdl.com/	968 B	2023-03-08	2024-07-27
Pretty URL p91290.mybetterdl.com/ IP 99.83.154.118 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 02:24:08 Last Seen2024-07-27 01:03:21 Times Seen30091 Hash c77554570ae0fa8e4fb31747dc213058 e989fbde07e6a68975c7a31e1d4df76afd90b96f c3f831fe1717c6d76a8950ac5e7dc88ceee7440d079b11584be5c6c5b3269e77 Loading...

	p91290.mybetterdl.com/	738 B	2023-05-08	2023-05-08
Pretty URL p91290.mybetterdl.com/ IP 99.83.154.118 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-08 19:43:46 Last Seen2023-05-08 19:43:46 Times Seen1 Hash 89f19e5bb825209f4cd16e94ebe17404 b275beee653a3eaf1d47ed263ca6fbcdc071abe5 57106521edfd881d1a0032272527d2fd3e05dff75f556f13e0534c6c3c932a2a Loading...

	p91290.mybetterdl.com/	246 B	2023-05-08	2023-05-08
Pretty URL p91290.mybetterdl.com/ IP 99.83.154.118 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-08 19:43:46 Last Seen2023-05-08 19:43:46 Times Seen1 Hash 0cc69b38374b9568809e137d0261834a 32c010d73bc2c1d88618c64d911a3432aef2d7f6 357c69f3cfce7893fe608502179db5f90d1787e55bc8e1cec54bf98899e7b11f Loading...

	p91290.mybetterdl.com/	7.0 kB	2023-03-13	2024-01-03
Pretty URL p91290.mybetterdl.com/ IP 99.83.154.118 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 06:10:31 Last Seen2024-01-03 14:22:39 Times Seen25920 Hash 04b2b624f94797c26d17a57f399d9356 3143986e839c47a5c1eff03bd9df63ecc54dca9c 233b1cbfb295a0629bcf68a2a4198a62132f02ee1f061ada2ce7143bd5d2dabb Loading...

	p91290.mybetterdl.com/	1.3 kB	2023-05-08	2023-05-08
Pretty URL p91290.mybetterdl.com/ IP 99.83.154.118 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-08 19:43:46 Last Seen2023-05-08 19:43:46 Times Seen1 Hash 045a7d38916ad89f8ec2359093272178 5411e508abad7452523d82a6e12e640628399b17 7534543fbb84a99a6ddaf3f12b2b5eff25b6c88f47fc3761f305a3e2aeb514a4 Loading...

	p91290.mybetterdl.com/	20 B	2023-03-12	2024-01-03
Pretty URL p91290.mybetterdl.com/ IP 99.83.154.118 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-12 13:00:05 Last Seen2024-01-03 14:22:39 Times Seen13851 Hash bb9472ed191ad69435d630c50e139a17 4efa10c70dbfe37ec4c8bb5a04b907c549de7e3d eec645c8d410f4d6accc5c4c3326bbff80fdd9d105e423ad50c5c87b22845492 Loading...

	p91290.mybetterdl.com/	65 B	2023-03-12	2023-05-10
Pretty URL p91290.mybetterdl.com/ IP 99.83.154.118 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-12 12:56:36 Last Seen2023-05-10 11:11:31 Times Seen388 Hash 3b796dac066c75434e239ef0c60bdd9f 49a33283a5b2c57806a7ec34feae6416b5c225f8 f02e55ff4587b6277ae36e4316850ebbb24022b95c3ebc98c87af6be7894986b Loading...

	p91290.mybetterdl.com/	472 B	2023-03-13	2024-01-03
Pretty URL p91290.mybetterdl.com/ IP 99.83.154.118 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 06:13:46 Last Seen2024-01-03 14:22:39 Times Seen25251 Hash d31eefc1e54bdae9204297e4ae5b9cce fc49bf319586a623670a81c01d43bbd93b477fbb 2683a6247a15433dd269eaefbc7131b1326c7bc0146361913ea10ad8fa23bb14 Loading...

	p91290.mybetterdl.com/	669 B	2023-05-08	2023-05-08
Pretty URL p91290.mybetterdl.com/ IP 99.83.154.118 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-08 19:43:46 Last Seen2023-05-08 19:43:46 Times Seen1 Hash 418c58d45f3c9f8b7d76f3a092befdfd 2d9a391dd595d6da5ce7aeb2bc62675fd0da4f09 1921be731d0e852d66487d46634f948442f551636314a1d65fa7dfdb80c3cc7c Loading...

	p91290.mybetterdl.com/	40 B	2023-04-18	2023-06-27
Pretty URL p91290.mybetterdl.com/ IP 99.83.154.118 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-18 09:10:37 Last Seen2023-06-27 14:44:07 Times Seen10821 Hash bcdb5f35f5da29644017c63a72a72921 5bd1c81154b546c01c88b02fdb29b687f0c9cef3 a71d2bc0274b66fc2cb2c8daf1bf8b8a6a4cbfd5bd1e30574e9abb61aa9c3983 Loading...

	www.google.com/adsense/domains/caf.js?abp=1	148 kB	2023-05-08	2023-05-08
Pretty URL www.google.com/adsense/domains/caf.js?abp=1 IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-08 19:43:46 Last Seen2023-05-08 19:43:46 Times Seen2 Hash 4b1a8eaf4b52718f6ad1675063f292cd ea0d4ae83659b777db8f81db9ac25201e68387fd 405076e8649b79aa09de6516954e6b85ebe1689f6a0b2e44cbb3d7cfdee243b4 Loading...

	p91290.mybetterdl.com/	71 B	2023-03-08	2024-01-04
Pretty URL p91290.mybetterdl.com/ IP 99.83.154.118 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 02:23:53 Last Seen2024-01-04 08:38:22 Times Seen25410 Hash 1a5a5e1b6a26f57b95e3dd42f60612f4 b62a27e55a59b49084e682bd3c1588f6a40881ab 4066da16910907c7962da8e7011bf0cd62b6f2dcddb1911e3ea2de03ce3e1dc7 Loading...

HTTP Transactions (8)

URL IP Response Size

p91290.mybetterdl.com/

99.83.154.118

200 OK

6.1 kB

URL User Request GET HTTP/1.1
p91290.mybetterdl.com/
IP
99.83.154.118:80
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1328)
Size
6.1 kB (6053 bytes)
Hash
064acca2f0d126547dcf113d041c71aa
8af45d2bbc4b77bf79acd444b97ecc0ce7d3337c
774d01a4f5d5ce03e36ebac53ee98805397915ce2bd7b37f7a74b0cf3a9a8c6b

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: p91290.mybetterdl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 08 May 2023 17:43:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket003
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_TyFPvLOBk+rUy1thq/mExFWl1gmAASgC6/6fpq2qufvVn52qil/RMPXXmah3auFLjcrXRLWtZSUBmx7M5IE8LQ==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: mybetterdl.com
X-Subdomain: p91290
Content-Encoding: gzip

p91290.mybetterdl.com/

99.83.154.118

200 OK

6.1 kB

URL User Request GET HTTP/1.1
p91290.mybetterdl.com/
IP
99.83.154.118:80
ASN
#16509 AMAZON-02

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1336)
Size
6.1 kB (6122 bytes)
Hash
b2117c8c1e86d251e790aa757dd60434
1b7e197610bcc628071951dbee9658fd34706e54
9fbaa35d3260ab9186a4a795ba7e25c8ce2914451afa7093c62db0e1a5194b5a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: p91290.mybetterdl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 08 May 2023 17:43:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket003
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_TyFPvLOBk+rUy1thq/mExFWl1gmAASgC6/6fpq2qufvVn52qil/RMPXXmah3auFLjcrXRLWtZSUBmx7M5IE8LQ==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: mybetterdl.com
X-Subdomain: p91290
Content-Encoding: gzip

www.google.com/adsense/domains/caf.js?abp=1

142.250.74.132

200 OK

54 kB

URL GET HTTP/1.1
www.google.com/adsense/domains/caf.js?abp=1
IP
142.250.74.132:80
ASN
#15169 GOOGLE

Requested by
http://p91290.mybetterdl.com/

File type
ASCII text, with very long lines (2125)
Size
54 kB (53805 bytes)
Hash
4b1a8eaf4b52718f6ad1675063f292cd
ea0d4ae83659b777db8f81db9ac25201e68387fd
405076e8649b79aa09de6516954e6b85ebe1689f6a0b2e44cbb3d7cfdee243b4

HTTP Headers

GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://p91290.mybetterdl.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Mon, 08 May 2023 17:43:32 GMT
Expires: Mon, 08 May 2023 17:43:32 GMT
Cache-Control: private, max-age=3600
ETag: "10690206167508710463"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0

p91290.mybetterdl.com/track.php?domain=mybetterdl.com&toggle=browserjs&uid=MTY4MzU2NzgxMi40NjA3OmZkNzE0NjJiYWUxNWJiYjJlNjU0YTkzNjUwNDRiNDcwYmU1MzBjYTZlNDg3ODY0YzA3MjFjMmNhNmYzNzNjMGU6NjQ1OTM0YzQ3MDdiYw%3D%3D

99.83.154.118

200 OK

20 B

URL GET HTTP/1.1
p91290.mybetterdl.com/track.php?domain=mybetterdl.com&toggle=browserjs&uid=MTY4MzU2NzgxMi40NjA3OmZkNzE0NjJiYWUxNWJiYjJlNjU0YTkzNjUwNDRiNDcwYmU1MzBjYTZlNDg3ODY0YzA3MjFjMmNhNmYzNzNjMGU6NjQ1OTM0YzQ3MDdiYw%3D%3D
IP
99.83.154.118:80
ASN
#16509 AMAZON-02

Requested by
http://p91290.mybetterdl.com/

File type
gzip compressed data, max speed, from Unix\012- data
Size
20 B (20 bytes)
Hash
a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /track.php?domain=mybetterdl.com&toggle=browserjs&uid=MTY4MzU2NzgxMi40NjA3OmZkNzE0NjJiYWUxNWJiYjJlNjU0YTkzNjUwNDRiNDcwYmU1MzBjYTZlNDg3ODY0YzA3MjFjMmNhNmYzNzNjMGU6NjQ1OTM0YzQ3MDdiYw%3D%3D HTTP/1.1
Host: p91290.mybetterdl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://p91290.mybetterdl.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 08 May 2023 17:43:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip

p91290.mybetterdl.com/ls.php?t=645934c4&token=c1052c6ceb9c7b74b951eb088e251efa09bd023e

99.83.154.118

201 Created

16 B

URL GET HTTP/1.1
p91290.mybetterdl.com/ls.php?t=645934c4&token=c1052c6ceb9c7b74b951eb088e251efa09bd023e
IP
99.83.154.118:80
ASN
#16509 AMAZON-02

Requested by
http://p91290.mybetterdl.com/

File type
JSON data\012- , ASCII text, with no line terminators
Size
16 B (16 bytes)
Hash
7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /ls.php?t=645934c4&token=c1052c6ceb9c7b74b951eb088e251efa09bd023e HTTP/1.1
Host: p91290.mybetterdl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://p91290.mybetterdl.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 201 Created
Date: Mon, 08 May 2023 17:43:32 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 645934c42feaff34231c3da7
Charset: utf-8
Access-Control-Allow-Origin: 
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_gNQ+qSaQFZ0wQ2BvSvJKuuXmPtdsXyQN4trRHbdbCKipqKHujcNDv/PH6EyXBGB3JTpuWQfLGqnaitTuebArwQ==

d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png

54.230.245.130

200 OK

11 kB

URL GET HTTP/1.1
d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
IP
54.230.245.130:80
ASN
#16509 AMAZON-02

Requested by
http://p91290.mybetterdl.com/

File type
PNG image data, 1500 x 600, 8-bit colormap, non-interlaced\012- data
Size
11 kB (11375 bytes)
Hash
0cb2e5165dc9324eb462199f04e1ffa9
9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865

HTTP Headers

GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://p91290.mybetterdl.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 11375
Connection: keep-alive
Server: nginx
Date: Mon, 08 May 2023 01:24:46 GMT
Last-Modified: Thu, 23 Jun 2022 10:44:43 GMT
Accept-Ranges: bytes
ETag: "62b4441b-2c6f"
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FGGCDpvRzNSDAF0_L8leK2u-kmhJDa-Y86nic885TgC7SVgP166zhw==
Age: 58726

d1lxhc4jvstzrp.cloudfront.net/themes/registrar/images/namecheap1.svg

54.230.245.141

200 OK

6.0 kB

URL GET HTTP/2
d1lxhc4jvstzrp.cloudfront.net/themes/registrar/images/namecheap1.svg
IP
54.230.245.141:443
ASN
#16509 AMAZON-02

Requested by
http://p91290.mybetterdl.com/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (5960)
Size
6.0 kB (5961 bytes)
Hash
9ad9730e4598e0229836c880ea5b97d7
3464e6c254f31b1f3dbdbc9993a91388aa9321b8
9b2a876745aa41319eab335a8b1dfa10c1afd8413f421314e6eea36f14779701

HTTP Headers

GET /themes/registrar/images/namecheap1.svg HTTP/1.1
Host: d1lxhc4jvstzrp.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://p91290.mybetterdl.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/svg+xml
content-length: 5961
server: nginx
date: Mon, 08 May 2023 02:01:43 GMT
last-modified: Fri, 30 Apr 2021 08:33:04 GMT
accept-ranges: bytes
etag: "608bc0c0-1749"
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1LnxAKj78xHygmpVIbdcBNjzx6EGBCBR0Iq1jf_0-vT8hLcP9wkuFA==
age: 56509
X-Firefox-Spdy: h2

p91290.mybetterdl.com/favicon.ico

99.83.154.118

200 OK

0 B

URL GET HTTP/1.1
p91290.mybetterdl.com/favicon.ico
IP
99.83.154.118:80
ASN
#16509 AMAZON-02

Requested by
http://p91290.mybetterdl.com/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: p91290.mybetterdl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://p91290.mybetterdl.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 08 May 2023 17:43:32 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML