| 185.212.130.54/az/web/admin.php |  185.212.130.54 | 500 Internal Server Error | 169 B |
URL User Request GET HTTP/2185.212.130.54/az/web/admin.php IP185.212.130.54:443
CertificateIssuerLet's Encrypt Subjectpaywyx.com FingerprintF6:3E:4C:03:13:F1:41:35:92:0A:B6:9E:85:63:16:15:2D:A3:31:9A ValidityMon, 25 Mar 2024 16:26:23 GMT - Sun, 23 Jun 2024 16:26:22 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0f952b73d3f5586637ea9a5a789d48f4 b29aff4ffa1d4decd77db5160f920e1c6417e5e9 69d11528ee32902d0c47ed215877f0610399536f755db03ed02a77ecedd74751
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /az/web/admin.php HTTP/1.1
Host: 185.212.130.54
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.1
Date: Thu, 18 Apr 2024 02:17:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://185.212.130.54:443/az/web/admin.php
|
| 185.212.130.54/az/web/admin.php | 185.212.130.54 | 500 Internal Server Error | 13 kB |
URL User Request GET HTTP/2185.212.130.54/az/web/admin.php IP185.212.130.54:443
CertificateIssuerLet's Encrypt Subjectpaywyx.com FingerprintF6:3E:4C:03:13:F1:41:35:92:0A:B6:9E:85:63:16:15:2D:A3:31:9A ValidityMon, 25 Mar 2024 16:26:23 GMT - Sun, 23 Jun 2024 16:26:22 GMT
Hash48d2e3f3caf7469e687767cd844c2afe 91a04b41261367b2a649926c92310c2b0dfdce45 9a6f6f2449057e1f9abbb4d95affc9d3bd428a969c94855b8ad34bf5d4c1298a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /az/web/admin.php HTTP/1.1
Host: 185.212.130.54
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 500 Internal Server Error
server: nginx/1.20.1
date: Thu, 18 Apr 2024 02:17:02 GMT
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|
| 185.212.130.54/favicon.ico | 185.212.130.54 | 500 Internal Server Error | 533 B |
URL GET HTTP/2185.212.130.54/favicon.ico IP185.212.130.54:443
Requested byhttps://185.212.130.54/az/web/admin.php CertificateIssuerLet's Encrypt Subjectpaywyx.com FingerprintF6:3E:4C:03:13:F1:41:35:92:0A:B6:9E:85:63:16:15:2D:A3:31:9A ValidityMon, 25 Mar 2024 16:26:23 GMT - Sun, 23 Jun 2024 16:26:22 GMT
File typeHTML document, ASCII text, with very long lines (549), with no line terminators Hashe91af06ef172fedc3bc7b00d54bfccc5 ef3535740e5114586e4248a36a567f5c7680c133 1f83b7e95b34719ad0e5869c46857b4fd12c72fdd76ee064644c60a24ceb4608
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 185.212.130.54
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://185.212.130.54/az/web/admin.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 500 Internal Server Error
server: nginx/1.20.1
date: Thu, 18 Apr 2024 02:17:03 GMT
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
|