URL User Request GET HTTP/1.1IP 94.136.40.51:80
ASN#20738 Host Europe GmbH
File typeHTML document, ASCII text Hash142887e9e720be102f1b5a003a019f07 231c9399d2b7ec11eb0fdb5e0c48566750a54402 936c994bd5d441a2efe775b10f3d8015968ae70ff876e8e965597881b5cfdbef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 94.136.40.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 12:52:39 GMT
Content-Type: text/html
Last-Modified: Thu, 23 May 2019 16:27:49 GMT
Transfer-Encoding: chunked
Content-Encoding: gzip
|
| 94.136.40.51/style/stylesheet.css | 94.136.40.51 | 200 OK | 333 B |
URL GET HTTP/1.194.136.40.51/style/stylesheet.css IP94.136.40.51:80 ASN#20738 Host Europe GmbH
Hash29d854195f3fd85e4e76bddee5a57572 44bc38da323063a88b5f703e8f71b6361193021c 5ca78f038a6280e9c8408450dbdd5a3fec89e4198b0958eba6c516670497543a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /style/stylesheet.css HTTP/1.1
Host: 94.136.40.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.136.40.51/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 12:52:20 GMT
Content-Type: text/css
Last-Modified: Thu, 13 Jul 2017 10:57:29 GMT
Transfer-Encoding: chunked
Content-Encoding: gzip
|
| 94.136.40.51/favicon-32x32.png | 94.136.40.51 | 404 Not Found | 483 B |
URL GET HTTP/1.194.136.40.51/favicon-32x32.png IP94.136.40.51:80 ASN#20738 Host Europe GmbH
File typeHTML document, ASCII text Hash142887e9e720be102f1b5a003a019f07 231c9399d2b7ec11eb0fdb5e0c48566750a54402 936c994bd5d441a2efe775b10f3d8015968ae70ff876e8e965597881b5cfdbef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon-32x32.png HTTP/1.1
Host: 94.136.40.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.136.40.51/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 26 Apr 2024 12:52:40 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Content-Encoding: gzip
|
| 94.136.40.51/images/background.jpg | 94.136.40.51 | 200 OK | 509 kB |
URL GET HTTP/1.194.136.40.51/images/background.jpg IP94.136.40.51:80 ASN#20738 Host Europe GmbH
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2015.5 (Macintosh), datetime=2017:06:09 09:50:00], baseline, precision 8, 1440x1080, components 3 Size509 kB (509139 bytes) Hashd599e778bad29cd5ded5ff37cefbb381 ce2a9cb25393273690ec6bad1143e75ad02b44ca 637466997aa593b255f5bf7c9c4cab6ca9c2850b0890b2991a5e5e7eaaa44756
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/background.jpg HTTP/1.1
Host: 94.136.40.51
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.136.40.51/style/stylesheet.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 12:52:20 GMT
Content-Type: image/jpeg
Content-Length: 509139
Last-Modified: Thu, 13 Jul 2017 10:57:29 GMT
Accept-Ranges: bytes
|
| www.123-reg-new-domain.co.uk/iframe.html |  0.0.0.0 | | 0 B |
URL GET www.123-reg-new-domain.co.uk/iframe.html IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /iframe.html HTTP/1.1
Host: www.123-reg-new-domain.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://94.136.40.51/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|