IP 34.120.237.76:80
ASN#396982 GOOGLE-CLOUD-PLATFORM
Hash1aa93d6dd9f30e1b9236fd11932f1b7e a2685b104b877ba3b61bd17e38a8a8af86039a08 cc0489ee1f68b1180e08a97b158b9b3f720d4c108a770d0fe07e9d2c85458a72
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 217.196.101.116
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-length: 8520
x-amzn-requestid: cc8acee7-ee40-40d1-a3ff-924903501a76
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WuAxjEltIAMEZ_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6628ae70-20b4a8de1e9c045435e87530;Parent=21acd41ef61e0043;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Wed, 24 Apr 2024 07:02:08 GMT
x-amz-cf-pop: HIO50-C1, SEA900-P2
x-cache: Miss from cloudfront
x-amz-cf-id: qPIFfKnwmu5Z5crxc4G9gV7dDinskqxjk5RWyI_zU8TWqzbKKNq9rg==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 0d07c64d85b9f0560eabd0b323a4bf58.cloudfront.net (CloudFront), 1.1 google
date: Wed, 24 Apr 2024 07:07:21 GMT
age: 81880
etag: "60a918537546450c82a19c08ca4cc9af31dcd660"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
| 217.196.101.116/favicon.ico |  217.196.101.116 | | 76 B |
URL GET 217.196.101.116/favicon.ico IP217.196.101.116:80 ASN#52000 MIRhosting B.V.
File typeASCII text, with CRLF line terminators Hashee370243e56740bcf4065fd92db56e62 75b6e3c7a0830179c5d89387299b9a831501ecfb 391b8c7e3978cadb02ad4f55a584551bc82b97d93a3921b2f8013977664565d7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 217.196.101.116
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://217.196.101.116/
Pragma: no-cache
Cache-Control: no-cache
|