| ocsp.r2m02.amazontrust.com/ |  54.230.80.227 | | 471 B |
URL ocsp.r2m02.amazontrust.com/ IP54.230.80.227:0
Hashe8e988defeff27ceb89e1b8dc3aacd65 3fcc713b644e163aa523ef83c33cfdab4ad48575 2ccb069f4d85d6f9d8c11d9810474f5e5487c6ce531b1793c3dd7419dd3ab298
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 07 Jun 2023 06:38:15 GMT
Last-Modified: Wed, 07 Jun 2023 05:28:27 GMT
Server: ECAcc (nya/789D)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: AMSLOyUY-Qq09RT1Fpo9ZzaiYo0ZUkSNqjhjxGjMx_7bipsNpOiE7Q==
Age: 4188
|
| api.check-data.xyz/api/get_stat_options/2C6A44CB_AD42_4731_A544_3FBD3D83AB5B/wrtzr_ytab_a_1/?0.8011947864737188 | 52.42.108.179 | 200 OK | 141 B |
URL User Request GET HTTP/1.1api.check-data.xyz/api/get_stat_options/2C6A44CB_AD42_4731_A544_3FBD3D83AB5B/wrtzr_ytab_a_1/?0.8011947864737188 IP52.42.108.179:443
CertificateIssuerAmazon Subject*.tracemonitors.com Fingerprint9D:82:D0:6C:41:EC:2D:3E:E8:33:47:AE:87:F8:89:11:7C:4C:F1:AE ValidityThu, 09 Feb 2023 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File typeJSON data\012- , ASCII text, with no line terminators Hash4402f3dc654bf2078849318cbb58f1a9 4f0c3f0426118ba9c170be9cbed303aa68d2cfd9 7c5ccb8c52ec68037a4057446ddf8f3f26211b6b59924d15a27d816b68de9dbb
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /api/get_stat_options/2C6A44CB_AD42_4731_A544_3FBD3D83AB5B/wrtzr_ytab_a_1/?0.8011947864737188 HTTP/1.1
Host: api.check-data.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-control: no-cache="set-cookie"
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Wed, 07 Jun 2023 06:38:12 GMT
Server: nginx
Set-Cookie: AWSELB=9327DF5F0AF3D375CDC9DE0AFF98FDC82A9589C9820401D99493DFDF796F3DAB0062EEFB3E4A533F5B2753F2532FBA9D17E5754692E8600D254000879A4CE3001E279F1EF5;PATH=/;MAX-AGE=43200
AWSELBCORS=9327DF5F0AF3D375CDC9DE0AFF98FDC82A9589C9820401D99493DFDF796F3DAB0062EEFB3E4A533F5B2753F2532FBA9D17E5754692E8600D254000879A4CE3001E279F1EF5;PATH=/;MAX-AGE=43200;SECURE;SAMESITE=None
Content-Length: 141
Connection: keep-alive
|
| api.check-data.xyz/favicon.ico | 52.42.108.179 | 200 OK | 372 B |
URL GET HTTP/1.1api.check-data.xyz/favicon.ico IP52.42.108.179:443
Requested byhttps://api.check-data.xyz/api/get_stat_options/2C6A44CB_AD42_4731_A544_3FBD3D83AB5B/wrtzr_ytab_a_1/?0.8011947864737188 CertificateIssuerAmazon Subject*.tracemonitors.com Fingerprint9D:82:D0:6C:41:EC:2D:3E:E8:33:47:AE:87:F8:89:11:7C:4C:F1:AE ValidityThu, 09 Feb 2023 00:00:00 GMT - Sat, 28 Oct 2023 23:59:59 GMT
File typePNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data Hash66b3119d379aee26ba668fef49188dd3 4569014add6981f25b53898dcf491a314c4418bb 2414211797f445e0d8286f799e2af9b4fa8efc8207e8c17d204323b0cf0b0d90
| Analyzer | Verdict | Alert |
|---|
| mnemonic_dns | Sinkholed | | | quad9 | Sinkholed | |
GET /favicon.ico HTTP/1.1
Host: api.check-data.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://api.check-data.xyz/api/get_stat_options/2C6A44CB_AD42_4731_A544_3FBD3D83AB5B/wrtzr_ytab_a_1/?0.8011947864737188
Cookie: AWSELB=9327DF5F0AF3D375CDC9DE0AFF98FDC82A9589C9820401D99493DFDF796F3DAB0062EEFB3E4A533F5B2753F2532FBA9D17E5754692E8600D254000879A4CE3001E279F1EF5; AWSELBCORS=9327DF5F0AF3D375CDC9DE0AFF98FDC82A9589C9820401D99493DFDF796F3DAB0062EEFB3E4A533F5B2753F2532FBA9D17E5754692E8600D254000879A4CE3001E279F1EF5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/x-icon
Date: Wed, 07 Jun 2023 06:38:13 GMT
ETag: "648023e9-174"
Last-Modified: Wed, 07 Jun 2023 06:30:01 GMT
Server: nginx
Content-Length: 372
Connection: keep-alive
|