URL User Request GET HTTP/1.1IP18.164.78.122:80
File typeHTML document, ASCII text Hash6b57a37dab41200d14b3ac31fd66d5b9 c68b355901077c4a9a716600be37fa813c2d633f 5ae5cac4ef83e11f33cb79dbbd31a5d07bf388eec3de5be58ed1e74850fb0c42
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 18.164.78.122
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Thu, 09 May 2024 08:44:56 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 bfcf96734b4cc9857b114ec0d9419dc0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ATL58-P5
X-Amz-Cf-Id: w5ucbftdkTKIXzNl7KgPWkG_BuO_hYlWYGwcBKt4Q7LvSYMekEDOJg==
|
| 18.164.78.122/favicon.ico | 18.164.78.122 | 403 Forbidden | 915 B |
URL GET HTTP/1.118.164.78.122/favicon.ico IP18.164.78.122:80
File typeHTML document, ASCII text Hashd1d53d003f290889d19a8f14926bb024 0146a4b31ed905be696d5b932b7659dca88c6460 acf7094d5142079a24d6be35a664bd38bad5adead4077bb05d2f256eb153b74b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 18.164.78.122
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://18.164.78.122/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Thu, 09 May 2024 08:44:57 GMT
Content-Type: text/html
Content-Length: 915
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 bfcf96734b4cc9857b114ec0d9419dc0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ATL58-P5
X-Amz-Cf-Id: abSqnOmRBlqcPszX116FjP6qGhge-utF28GMdqczGNDXxPG3FdC1bg==
|