| ocsp.r2m02.amazontrust.com/ |  54.230.80.227 | | 471 B |
URL ocsp.r2m02.amazontrust.com/ IP54.230.80.227:0
Hashe0b10f716bb45e121fe1c27e4135bbce ef5727380cd3c4d29dcd14f2b0347207b2d7a5c9 57b8ad8d9775a8bbeb4dac0c8ba06a19743f1f48695968df73bacdcad8d33f06
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 17 Oct 2023 20:44:17 GMT
Server: ECAcc (amb/6B09)
X-Cache: Miss from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: x5iRBMOvOx77HCkDuhOSxTLqFBaJ-k2w41jYLzj8xBYXLHkZPyboow==
|
| orctpgp2uqjpvm4jghsuac5h440gdqch.lambda-url.us-west-1.on.aws/cfcb343485a222dad02dd240d136876c/pEZZ6X?url=https://Fcalendly.com/Fintro-phone-call-w-joe-wein | 54.183.122.136 | 302 Found | 0 B |
URL User Request GET HTTP/1.1orctpgp2uqjpvm4jghsuac5h440gdqch.lambda-url.us-west-1.on.aws/cfcb343485a222dad02dd240d136876c/pEZZ6X?url=https://Fcalendly.com/Fintro-phone-call-w-joe-wein IP54.183.122.136:443
CertificateIssuerAmazon Subject*.lambda-url.us-west-1.on.aws Fingerprint76:EE:2B:40:0A:A0:93:13:9F:62:32:0D:34:BB:B2:93:AB:67:4B:71 ValidityWed, 25 Jan 2023 00:00:00 GMT - Sat, 24 Feb 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cfcb343485a222dad02dd240d136876c/pEZZ6X?url=https://Fcalendly.com/Fintro-phone-call-w-joe-wein HTTP/1.1
Host: orctpgp2uqjpvm4jghsuac5h440gdqch.lambda-url.us-west-1.on.aws
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Tue, 17 Oct 2023 20:44:17 GMT
Content-Type: application/json
Content-Length: 0
Connection: keep-alive
x-amzn-RequestId: b9a04a28-6f41-4f9f-bc15-52c08125e1fc
location: https://Fcalendly.com/Fintro-phone-call-w-joe-wein
X-Amzn-Trace-Id: root=1-652ef221-410657116b9048412e60dc6f;sampled=0;lineage=b50bc639:0
|
| fcalendly.com/Fintro-phone-call-w-joe-wein |  0.0.0.0 | | 0 B |
URL User Request GET fcalendly.com/Fintro-phone-call-w-joe-wein IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Fintro-phone-call-w-joe-wein HTTP/1.1
Host: fcalendly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|