IP 192.229.221.95:0
Hash 3ea0915a9666f45ac3e8c5bd9a1d334f
ae37587ab883923f0d974c535b3b1400a3818f9d
a8dd2486c0ada9e994f7682827779ffed5bec280160058f9eb4f7187ef66a1e5
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3903
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Sat, 04 May 2024 22:18:56 GMT
Last-Modified: Sat, 04 May 2024 21:13:53 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 471
URL User Request GET HTTP/1.1 IP 79.110.91.25:80
ASN #47195 Gameforge 4D GmbH
File type HTML document, ASCII text
Hash 9ad421244b28db9cb4a6857edd297ef5
86764a1deaad320418a49851c64ce17bf146d826
ac5fd72a422a0bd1d5e16a8b2b52adfd95c3e4096c723a5491b885ebb6bb0693
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 79.110.91.25
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 22:18:57 GMT
Server: Apache
Last-Modified: Thu, 01 Jun 2017 11:42:15 GMT
ETag: "2c39-550e487443728-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3186
Connection: close
Content-Type: text/html
79.110.91.25/icons/ubuntu-logo.png
79.110.91.25200 OK 3.3 kB URL GET HTTP/1.1 79.110.91.25/icons/ubuntu-logo.png
IP 79.110.91.25:80
ASN #47195 Gameforge 4D GmbH
File type PNG image data, 119 x 99, 8-bit/color RGBA, non-interlaced
Hash 432e7fd02785cfeb03a8805dbb5a08a3
ec7a23d14ca7a382c2f3464df24adb6b3949fa6a
82de663216496d3d244d4b90bacd05b40a2f296da24eb698452c1814d35953ee
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /icons/ubuntu-logo.png HTTP/1.1
Host: 79.110.91.25
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://79.110.91.25/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 May 2024 22:18:57 GMT
Server: Apache
Last-Modified: Thu, 13 Aug 2020 01:36:53 GMT
ETag: "d0a-5acb856c0f740"
Accept-Ranges: bytes
Content-Length: 3338
Connection: close
Content-Type: image/png
IP 79.110.91.25:80
ASN #47195 Gameforge 4D GmbH
File type HTML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: 79.110.91.25
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://79.110.91.25/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sat, 04 May 2024 22:18:57 GMT
Server: Apache
Content-Length: 196
Connection: close
Content-Type: text/html; charset=iso-8859-1