URL User Request GET HTTP/2IP172.67.140.149:443
CertificateIssuerLet's Encrypt Subjectcvxzwjfjej5f2f1.space Fingerprint48:6B:FA:7E:E7:CB:B5:AB:DE:8F:C3:38:43:15:A1:C3:CE:A0:D5:B3 ValidityWed, 20 Mar 2024 20:32:22 GMT - Tue, 18 Jun 2024 20:32:21 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash9fe3cb2b7313dc79bb477bc8fde184a7 4d7b3cb41e90618358d0ee066c45c76227a13747 32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: a.cvxzwjfjej5f2f1.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 04 May 2024 18:41:12 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=72aoUY%2B8mQLJEdfF6ahsE0ndhrlj0eJV02JCFnhGxZ3xMTgkBAPNkBPh0WLgwE7qs%2F3a%2FZQMeOTwFktkAzWa%2BKCekZ5ZEPPsH%2F8kbtFUaQRgYkGa1e8VvKlIJHpd4diJ8XGaZBVLA%2BQu4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87ea9fa42d9a5696-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
| a.cvxzwjfjej5f2f1.space/favicon.ico | 172.67.140.149 | 403 Forbidden | 117 B |
URL GET HTTP/1.1a.cvxzwjfjej5f2f1.space/favicon.ico IP172.67.140.149:80
Requested byhttp://a.cvxzwjfjej5f2f1.space/
File typeHTML document, ASCII text, with CRLF line terminators Hash9fe3cb2b7313dc79bb477bc8fde184a7 4d7b3cb41e90618358d0ee066c45c76227a13747 32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: a.cvxzwjfjej5f2f1.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://a.cvxzwjfjej5f2f1.space/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 04 May 2024 18:41:12 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jgFbhGkkk5zNY4PF3eEE7LcVjvplf44lwGzgeaOVC9Tl77s9IsNFDq6WVMLBy1Pfstzz4lbwxKhVN9NE6iIsfL%2FfP%2FI1sRNlOewJ%2BVvk8dV%2BsiDTITM%2FrlMvat3sbIZHe3rOB9GNLhsoxA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87ea9fa5e8555696-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|