ocsp.sectigo.com/
104.18.14.101 472 B IP 104.18.14.101:0
Hash c518254636875fcc80089573c7a3bd8e
e317def2255e6540925dfe5ec040092b13489281
8c971b29bff384c3a30aca89288c83f2350a2d9a28e22a00552b798a2c5a15dc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 05:31:51 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 29 May 2023 21:47:38 GMT
Expires: Mon, 05 Jun 2023 21:47:37 GMT
Etag: "e317def2255e6540925dfe5ec040092b13489281"
Cache-Control: max-age=404325,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d05129e5bbfb524-OSL
192.185.180.229/~calmmed/Dun/xps/update=NWSC_USER/d54f3f4c54d3ee73bca7d536b236c4d7/update/
192.185.180.229 0 B URL User Request GET 192.185.180.229/~calmmed/Dun/xps/update=NWSC_USER/d54f3f4c54d3ee73bca7d536b236c4d7/update/
IP 192.185.180.229:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /~calmmed/Dun/xps/update=NWSC_USER/d54f3f4c54d3ee73bca7d536b236c4d7/update/ HTTP/1.1
Host: 192.185.180.229
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 01 Jun 2023 05:31:51 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: /404.html
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
192.185.180.229/404.html
192.185.180.229200 OK 4.7 kB IP 192.185.180.229:80
ASN #46606 UNIFIEDLAYER-AS-1
Requested by http://192.185.180.229/404.html
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (358)
Hash a8063bd37d3c8fb3176a6bf140558a4d
e32cf4b407db3d3773ded13ff64b70fdbad7735f
bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482
Analyzer Verdict Alert quad9 Sinkholed
GET /404.html HTTP/1.1
Host: 192.185.180.229
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 05:31:52 GMT
Server: Apache
Last-Modified: Fri, 30 Sep 2022 11:42:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 4677
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html
code.jquery.com/jquery-3.3.1.min.js
69.16.175.42200 OK 30 kB URL GET HTTP/1.1 code.jquery.com/jquery-3.3.1.min.js
IP 69.16.175.42:80
Requested by http://192.185.180.229/404.html
File type ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /jquery-3.3.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://192.185.180.229/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 05:31:52 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 30288
Content-Type: application/javascript; charset=utf-8
Last-Modified: Wed, 16 Feb 2022 10:50:39 GMT
Accept-Ranges: bytes
Server: nginx
ETag: W/"620cd6ff-1538f"
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-HW: 1685597512.dop013.sk1.t,1685597512.cds240.sk1.c
192.185.180.229/cgi-sys/js/simple-expand.min.js
192.185.180.229200 OK 1.2 kB URL GET HTTP/1.1 192.185.180.229/cgi-sys/js/simple-expand.min.js
IP 192.185.180.229:80
ASN #46606 UNIFIEDLAYER-AS-1
Requested by http://192.185.180.229/404.html
File type ASCII text, with very long lines (2608)
Hash 42cb9467fd660b25209863c072e69342
c4d32879d225f46588fba989f8a2afcb9b49a519
7989430e3c85121caa76c6da31aa38d43ef139062e2c3bd4f4350b62fe90d4d4
Analyzer Verdict Alert quad9 Sinkholed
GET /cgi-sys/js/simple-expand.min.js HTTP/1.1
Host: 192.185.180.229
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://192.185.180.229/404.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 05:31:52 GMT
Server: Apache
Last-Modified: Fri, 30 Sep 2022 11:44:02 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1191
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: application/javascript
192.185.180.229/cgi-sys/images/x.png
192.185.180.229200 OK 2.7 kB URL GET HTTP/1.1 192.185.180.229/cgi-sys/images/x.png
IP 192.185.180.229:80
ASN #46606 UNIFIEDLAYER-AS-1
Requested by http://192.185.180.229/404.html
File type PNG image data, 97 x 97, 8-bit colormap, non-interlaced\012- data
Hash f851db995b0253a71d638f779be88330
5f5319e016676e6b92f7e597b837677ddf52c0a5
2c024e287d53dcc084b60b01a69990c369e758dc7c91b0fe4791f02d18aae61a
Analyzer Verdict Alert quad9 Sinkholed
GET /cgi-sys/images/x.png HTTP/1.1
Host: 192.185.180.229
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://192.185.180.229/404.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 05:31:52 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 30 Sep 2022 11:44:01 GMT
Accept-Ranges: bytes
Content-Length: 2672
Keep-Alive: timeout=5, max=75
Content-Type: image/png
192.185.180.229/cgi-sys/images/404top_w.jpg
192.185.180.229200 OK 4.3 kB URL GET HTTP/1.1 192.185.180.229/cgi-sys/images/404top_w.jpg
IP 192.185.180.229:80
ASN #46606 UNIFIEDLAYER-AS-1
Requested by http://192.185.180.229/404.html
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 868x169, components 3\012- data
Hash de6ecbbb2471827d90bf32c47a0cbc45
ffeaafe8b9ca2752908c5d4e95e4803ef7ffdd18
5cae6c33f0f9d4449ce8539a60e7d40eba2ddc75979fc26284854a29c36d08cb
Analyzer Verdict Alert quad9 Sinkholed
GET /cgi-sys/images/404top_w.jpg HTTP/1.1
Host: 192.185.180.229
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://192.185.180.229/404.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 05:31:52 GMT
Server: Apache
Last-Modified: Sat, 01 Oct 2022 06:42:14 GMT
Accept-Ranges: bytes
Content-Length: 4335
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: image/jpeg
192.185.180.229/cgi-sys/images/404mid.gif
192.185.180.229200 OK 120 B URL GET HTTP/1.1 192.185.180.229/cgi-sys/images/404mid.gif
IP 192.185.180.229:80
ASN #46606 UNIFIEDLAYER-AS-1
Requested by http://192.185.180.229/404.html
File type GIF image data, version 89a, 868 x 4\012- data
Hash dc8055f43fbb4a4b6dfb298ec35188f2
1ffc540743de1cdb929d9d1218978005141e8d9d
b857737891b84293b3df526b48ce3d54fdcc5789c250eadff9dd38e3c2c68caf
Analyzer Verdict Alert quad9 Sinkholed
GET /cgi-sys/images/404mid.gif HTTP/1.1
Host: 192.185.180.229
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://192.185.180.229/404.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 05:31:52 GMT
Server: Apache
Last-Modified: Fri, 30 Sep 2022 11:45:42 GMT
Accept-Ranges: bytes
Content-Length: 120
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/gif
192.185.180.229/cgi-sys/images/404bottom.gif
192.185.180.229200 OK 537 B URL GET HTTP/1.1 192.185.180.229/cgi-sys/images/404bottom.gif
IP 192.185.180.229:80
ASN #46606 UNIFIEDLAYER-AS-1
Requested by http://192.185.180.229/404.html
File type GIF image data, version 89a, 868 x 14\012- data
Hash 54eb288427acf79ed320efd4916fe0b7
67ba813ff74d52035d70fcda58b57563f01fb829
70e4a5f9f7d98c1564b17ecc69196fed4f74fe5afb2c61b4fb7045dd3309dc4f
Analyzer Verdict Alert quad9 Sinkholed
GET /cgi-sys/images/404bottom.gif HTTP/1.1
Host: 192.185.180.229
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://192.185.180.229/404.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 05:31:52 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 30 Sep 2022 11:44:43 GMT
Accept-Ranges: bytes
Content-Length: 537
Keep-Alive: timeout=5, max=75
Content-Type: image/gif
192.185.180.229/favicon.ico
192.185.180.229302 Found 0 B URL GET HTTP/1.1 192.185.180.229/favicon.ico
IP 192.185.180.229:80
ASN #46606 UNIFIEDLAYER-AS-1
Requested by http://192.185.180.229/404.html
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: 192.185.180.229
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://192.185.180.229/404.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 01 Jun 2023 05:31:53 GMT
Server: Apache
Location: /404.html
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
192.185.180.229/404.html
192.185.180.229200 OK 4.7 kB IP 192.185.180.229:80
ASN #46606 UNIFIEDLAYER-AS-1
Requested by http://192.185.180.229/404.html
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (358)
Hash a8063bd37d3c8fb3176a6bf140558a4d
e32cf4b407db3d3773ded13ff64b70fdbad7735f
bccb23d41c2cc69cf0c7d22c4314ca8181a513c6999b73e45307792830f4e482
Analyzer Verdict Alert quad9 Sinkholed
GET /404.html HTTP/1.1
Host: 192.185.180.229
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://192.185.180.229/404.html
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 05:31:53 GMT
Server: Apache
Last-Modified: Fri, 30 Sep 2022 11:42:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 4677
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/html