URL User Request GET HTTP/1.1 IP 104.21.14.104:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7df3d7cf3358af3f470ac7229387ef94
c51a3f0e6de4eb802d5630941c3fd9e1d0efae4b
fb47468a2cd3953c7131431991afcc6a2703f14640520102eea0a685a7e8d6de
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
NIDS Severity Alert suricata medium ET INFO Unconfigured nginx Access
GET / HTTP/1.1
Host: mickens-murray.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 07 Dec 2023 22:15:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 14 Jan 2022 07:23:06 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fCs%2B8JOVYuQGcPZBkNC%2FjgLl5i9qaVlHdukhelGD46tybp9rqoy0v5p2QPKLDzoKgsfCVIgBrzQH2HifrLh7sArrvPlYd%2B1kFhk%2FJybb5XE%2F1kNB3UO3MJemWEXNyCOqMrfomt0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8320208e296cd92a-HEL
Content-Encoding: gzip
mickens-murray.com/favicon.ico
104.21.14.104404 Not Found 109 B URL GET HTTP/1.1 mickens-murray.com/favicon.ico
IP 104.21.14.104:80
Requested by http://mickens-murray.com/
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: mickens-murray.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://mickens-murray.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 07 Dec 2023 22:15:26 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BVnFykd5pcD5xebxoVEhlpqlr9o1bWK%2BNr%2Bfkx%2FTO5EZP5UWnKfqOVNECQepArzoYPgyHplU%2Fyww6RRIO3tkEJXt9%2B%2FrVSa4ZxBWEwysS5Smh32tc9OuSNbzDqhb%2FNKMXbMDPgM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 832020936fd4d92a-HEL
Content-Encoding: gzip