IP 66.135.6.147:0
File typeHTML document, ASCII text, with CRLF line terminators Hash0f952b73d3f5586637ea9a5a789d48f4 b29aff4ffa1d4decd77db5160f920e1c6417e5e9 69d11528ee32902d0c47ed215877f0610399536f755db03ed02a77ecedd74751
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: receipt.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.1
Date: Fri, 26 Apr 2024 03:10:20 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://www.receipt.zip//
|
URL User Request GET HTTP/1.1IP66.135.6.147:443
CertificateIssuerLet's Encrypt Subjectreceipt.zip Fingerprint4D:29:41:16:10:83:81:FC:AE:4A:47:A2:21:67:49:85:4D:5E:7B:67 ValidityMon, 15 May 2023 19:18:40 GMT - Sun, 13 Aug 2023 19:18:39 GMT
Hash31ebdfce8b77ac49d7f5506dd1495830 0c1bc52c50016933679b0980ccff3680e5831162 c01a4cfa25cb895cdd0bb25181ba9c1622e93895a6de6f533a7299f70d6b0cfb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET // HTTP/1.1
Host: www.receipt.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 26 Apr 2024 03:10:22 GMT
Content-Type: text/html
Content-Length: 3
Last-Modified: Mon, 15 May 2023 20:06:39 GMT
Connection: keep-alive
ETag: "646290cf-3"
Accept-Ranges: bytes
|
| www.receipt.zip/favicon.ico | 66.135.6.147 | 200 OK | 3 B |
URL GET HTTP/1.1www.receipt.zip/favicon.ico IP66.135.6.147:443
Requested byhttps://www.receipt.zip// CertificateIssuerLet's Encrypt Subjectreceipt.zip Fingerprint4D:29:41:16:10:83:81:FC:AE:4A:47:A2:21:67:49:85:4D:5E:7B:67 ValidityMon, 15 May 2023 19:18:40 GMT - Sun, 13 Aug 2023 19:18:39 GMT
Hash31ebdfce8b77ac49d7f5506dd1495830 0c1bc52c50016933679b0980ccff3680e5831162 c01a4cfa25cb895cdd0bb25181ba9c1622e93895a6de6f533a7299f70d6b0cfb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: www.receipt.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.receipt.zip//
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 26 Apr 2024 03:10:22 GMT
Content-Type: text/html
Content-Length: 3
Last-Modified: Mon, 15 May 2023 20:06:39 GMT
Connection: keep-alive
ETag: "646290cf-3"
Accept-Ranges: bytes
|