| globessl.ocsp.sectigo.com/ |  172.64.149.23 | | 471 B |
URL globessl.ocsp.sectigo.com/ IP172.64.149.23:0
Hash8ebe36a188f3ff43b87ef3068b51f908 efb7f6c0b08b69bd21f16f158828ebc4b1d99d9c 52215c0cd35f61934b1bdeca5155e7167bcf1a845f3e7706642635fc9b396fb5
POST / HTTP/1.1
Host: globessl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 May 2024 21:52:16 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 29 Apr 2024 16:48:53 GMT
Expires: Mon, 06 May 2024 16:48:52 GMT
Etag: "efb7f6c0b08b69bd21f16f158828ebc4b1d99d9c"
Cache-Control: max-age=326795,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 87db3cc5bb2db52d-OSL
|
URL User Request GET HTTP/1.1IP 4.224.106.80:80
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
File typeHTML document, ASCII text Hash720999b43a3be0674180354ac41f20b1 152a75d80c0bdadb382e1cafe517159cb76a19cc 6faef4d5d777fdcaa653766b0ac8b9ed32d0fd87f7dcd79f02ff524dd1b0eb69
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 4.224.106.80
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 May 2024 21:52:16 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Wed, 25 Oct 2023 09:30:09 GMT
ETag: "29af-6088719f0edd9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3121
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
|
| 4.224.106.80/icons/ubuntu-logo.png | 4.224.106.80 | 200 OK | 3.3 kB |
URL GET HTTP/1.14.224.106.80/icons/ubuntu-logo.png IP4.224.106.80:80 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
File typePNG image data, 184 x 146, 8-bit/color RGBA, non-interlaced Hash3b026dd0605e5d46688845f7ce6c2df1 395c14329336735f983e16203e73f00a4e18dac3 e2e656cce0aaf97b1c94b01592fca89088fd771f55768fb69f95e10c0099cf25
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /icons/ubuntu-logo.png HTTP/1.1
Host: 4.224.106.80
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://4.224.106.80/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 May 2024 21:52:16 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Wed, 10 Apr 2024 17:45:18 GMT
ETag: "cfa-615c19a11e780"
Accept-Ranges: bytes
Content-Length: 3322
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
|
IP4.224.106.80:80 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
File typeHTML document, ASCII text Hashc5e81e815498aaf2329b38c46efc4ff7 7fd2839dd5049e06b6878bddf3296eabb468b7f1 8d373d27dd1e723200628be4a63d3ec0046fda45ccc3c1ccd5d9e2ee14f611a1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 4.224.106.80
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://4.224.106.80/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 02 May 2024 21:52:17 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Length: 274
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|