URL User Request GET HTTP/1.1IP13.249.160.72:80
File typeHTML document, ASCII text Hash5b5af1adc59d19d6f41e9b41c289e9d4 0f84af9db0ef8eb2eb391eb2fe9e9e40af112993 9c67f6f2e65f288bc876e78fa134fb6b02355f330b72130b80e700a196761af1
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 13.249.160.72
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Tue, 07 May 2024 07:34:33 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 50a43b7c97289c9dbc95b3d68d422190.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT12-C3
X-Amz-Cf-Id: oGsiVgsDPN-4ufYoaliHuQbkkKKH5VsvfvHcnWR5WNTVYJSYEPOQSg==
|
| 13.249.160.72/favicon.ico | 13.249.160.72 | 403 Forbidden | 915 B |
URL GET HTTP/1.113.249.160.72/favicon.ico IP13.249.160.72:80
File typeHTML document, ASCII text Hash31d12f8fc5333fb4f4c069a6d30ddbc6 49d24c68cedc0f71246f767084f9b98283d72452 e5de29fb0a52492ad692796f3fcff9169b8c1c399ea688610cfe9fff95614314
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 13.249.160.72
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://13.249.160.72/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Tue, 07 May 2024 07:34:33 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 e9ecff7f1e95f59d05af07214105f33c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: NRT12-C3
X-Amz-Cf-Id: YixkaewNK-rFfPGEkVq8WfkZ-wrGp57823slcAlXYQt3iPmvfNZnEg==
|