| api2.check-data.xyz/api/get_update_options/C9423817_5DA7_494E_87E4_111F1B49A1FD/wrtzr_yt_a_1/1/?0.5886815134089196 |  44.231.33.228 | 200 OK | 233 B |
URL User Request GET HTTP/1.1api2.check-data.xyz/api/get_update_options/C9423817_5DA7_494E_87E4_111F1B49A1FD/wrtzr_yt_a_1/1/?0.5886815134089196 IP44.231.33.228:443
CertificateIssuerAmazon Subject*.tracemonitors.com FingerprintEC:EE:D4:25:81:1B:4F:9D:46:E3:B7:7C:91:91:0C:C5:E7:61:C1:0F ValidityTue, 06 Feb 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
Hashb2ce20025cc35cee8500dff517dc8008 3fbf6fa123474ad3efa6ce70bb2bb73a102031f4 b6a64fe41630bec33c1ed02c3ca1ca715806af44115278bc2dae298797ecfca9
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /api/get_update_options/C9423817_5DA7_494E_87E4_111F1B49A1FD/wrtzr_yt_a_1/1/?0.5886815134089196 HTTP/1.1
Host: api2.check-data.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-control: no-cache="set-cookie"
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Sat, 04 May 2024 06:38:30 GMT
Server: nginx
Set-Cookie: AWSELB=9327DF5F0AF3D375CDC9DE0AFF98FDC82A9589C9820401D99493DFDF796F3DAB0062EEFB3E4A533F5B2753F2532FBA9D17E5754692E8600D254000879A4CE3001E279F1EF5;PATH=/;MAX-AGE=43200
AWSELBCORS=9327DF5F0AF3D375CDC9DE0AFF98FDC82A9589C9820401D99493DFDF796F3DAB0062EEFB3E4A533F5B2753F2532FBA9D17E5754692E8600D254000879A4CE3001E279F1EF5;PATH=/;MAX-AGE=43200;SECURE;SAMESITE=None
Content-Length: 233
Connection: keep-alive
|
| api2.check-data.xyz/favicon.ico | 44.231.33.228 | 200 OK | 372 B |
URL GET HTTP/1.1api2.check-data.xyz/favicon.ico IP44.231.33.228:443
Requested byhttps://api2.check-data.xyz/api/get_update_options/C9423817_5DA7_494E_87E4_111F1B49A1FD/wrtzr_yt_a_1/1/?0.5886815134089196 CertificateIssuerAmazon Subject*.tracemonitors.com FingerprintEC:EE:D4:25:81:1B:4F:9D:46:E3:B7:7C:91:91:0C:C5:E7:61:C1:0F ValidityTue, 06 Feb 2024 00:00:00 GMT - Thu, 06 Mar 2025 23:59:59 GMT
File typePNG image data, 32 x 32, 8-bit colormap, non-interlaced Hash66b3119d379aee26ba668fef49188dd3 4569014add6981f25b53898dcf491a314c4418bb 2414211797f445e0d8286f799e2af9b4fa8efc8207e8c17d204323b0cf0b0d90
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: api2.check-data.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://api2.check-data.xyz/api/get_update_options/C9423817_5DA7_494E_87E4_111F1B49A1FD/wrtzr_yt_a_1/1/?0.5886815134089196
Cookie: AWSELB=9327DF5F0AF3D375CDC9DE0AFF98FDC82A9589C9820401D99493DFDF796F3DAB0062EEFB3E4A533F5B2753F2532FBA9D17E5754692E8600D254000879A4CE3001E279F1EF5; AWSELBCORS=9327DF5F0AF3D375CDC9DE0AFF98FDC82A9589C9820401D99493DFDF796F3DAB0062EEFB3E4A533F5B2753F2532FBA9D17E5754692E8600D254000879A4CE3001E279F1EF5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/x-icon
Date: Sat, 04 May 2024 06:38:30 GMT
ETag: "6635d5ea-174"
Last-Modified: Sat, 04 May 2024 06:30:02 GMT
Server: nginx
Content-Length: 372
Connection: keep-alive
|