URL User Request GET HTTP/2IP 18.194.183.120:443
CertificateIssuerAmazon Subjectbs.serving-sys.com Fingerprint9D:FE:ED:55:F8:37:C7:FF:1E:4D:7B:F2:9D:24:12:F7:9D:97:54:1B ValidityFri, 09 Feb 2024 00:00:00 GMT - Sun, 09 Mar 2025 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash4aa7a432bb447f094408f1bd6229c605 1965c4952cc8c082a6307ed67061a57aab6632fa 34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 18.194.183.120
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Fri, 19 Apr 2024 22:18:04 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://18.194.183.120:443/
|
URL User Request GET HTTP/2IP18.194.183.120:443
CertificateIssuerAmazon Subjectbs.serving-sys.com Fingerprint9D:FE:ED:55:F8:37:C7:FF:1E:4D:7B:F2:9D:24:12:F7:9D:97:54:1B ValidityFri, 09 Feb 2024 00:00:00 GMT - Sun, 09 Mar 2025 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash1c878e6e2efa3b96b5d1fd786f6bcf37 1d6d05d3f26115265d7f6aeffa56c1b17beaf857 2915fb32cb86b197faeef0326bf40820314e599b8f050999f628558f3ac199ef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 18.194.183.120
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 22:18:05 GMT
content-type: text/html
content-length: 1051
last-modified: Mon, 18 Mar 2024 12:46:44 GMT
accept-ranges: bytes
etag: "c689ff543279da1:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="NOI DEVa OUR BUS UNI"
X-Firefox-Spdy: h2
|
| advertising.amazon.com/favicon.ico |  104.110.17.123 | 200 OK | 4.4 kB |
URL GET HTTP/2advertising.amazon.com/favicon.ico IP104.110.17.123:443
CertificateIssuerAmazon Subjectadvertising.amazon.com FingerprintDE:15:BD:06:2B:BE:33:FC:92:3A:96:CE:85:EF:D9:5C:81:B6:0E:BC ValidityFri, 15 Dec 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typePNG image data, 48 x 48, 8-bit colormap, non-interlaced Hash82b5648e6048d11ea2c7fe9d2a2f5565 0b54e861f821589f8fbbd2c798ede162f27315e7 69f21a4fc213fc54a44ff675efad2496d9f2bf1b51ec62684fb68b3b77d4846a
GET /favicon.ico HTTP/1.1
Host: advertising.amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://18.194.183.120/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Server
content-type: image/vnd.microsoft.icon
content-length: 4350
x-amz-rid: NTMP4QG0A18FFRE2WZTB
x-amz-request-id: 81BW2VE0VQKKXMBZ
last-modified: Tue, 02 Nov 2021 19:41:04 GMT
etag: "82b5648e6048d11ea2c7fe9d2a2f5565"
x-amz-version-id: egYk31oOmePDBIsOa1arlvr48d133yWA
accept-ranges: bytes
vary: Content-Type,Accept-Encoding,User-Agent
strict-transport-security: max-age=47474747; includeSubDomains; preload
date: Fri, 19 Apr 2024 22:18:06 GMT
x-amzn-cdn-id: ak-2a48545
x-cache: NotCacheable from child
X-Firefox-Spdy: h2
|