| |  97.74.191.163 | 200 OK | 230 B |
URL User Request GET HTTP/2IP97.74.191.163:443 ASN#398101 GO-DADDY-COM-LLC
CertificateIssuercPanel, Inc. Subject7secondsonly.com Fingerprint62:05:A1:F7:CC:86:A1:98:10:4E:0B:96:29:AC:CE:77:03:24:9B:50 ValidityThu, 11 Feb 2021 00:00:00 GMT - Wed, 12 May 2021 23:59:59 GMT
File typeHTML document, ASCII text Hash2983d044007d982313055e46723536ed adc912e6ee7534465af7319e679e34b264c1fe18 54c6a726d869423ac4926ebf128ba8a3719b7d89c90f945126cf28d0928a4e48
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 97.74.191.163
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 26 Apr 2024 18:00:35 GMT
Server: Apache
Location: https://97.74.191.163/
Content-Length: 230
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| | 97.74.191.163 | 200 OK | 5.5 kB |
URL User Request GET HTTP/2IP97.74.191.163:443 ASN#398101 GO-DADDY-COM-LLC
CertificateIssuercPanel, Inc. Subject7secondsonly.com Fingerprint62:05:A1:F7:CC:86:A1:98:10:4E:0B:96:29:AC:CE:77:03:24:9B:50 ValidityThu, 11 Feb 2021 00:00:00 GMT - Wed, 12 May 2021 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (7396) Hash86243c0af6614a9b162cd091d01546a4 61a0668751180bbc815875bc5693c601c4834c87 090f0c597802177a7ebd26f9492e26de2d0195f08b3d919cba3dc082b38cda2d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 97.74.191.163
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/7.3.33
vary: Accept-Encoding
content-encoding: br
content-length: 5462
content-type: text/html; charset=UTF-8
date: Fri, 26 Apr 2024 18:00:37 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| l.top4top.io/p_2331qbu2i4.jpg |  135.181.63.70 | 200 OK | 297 kB |
URL GET HTTP/2l.top4top.io/p_2331qbu2i4.jpg IP135.181.63.70:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subject*.top4top.co Fingerprint8E:68:31:71:67:48:80:97:18:D7:75:1F:EF:2C:6E:F5:43:2B:3E:B2 ValidityMon, 01 Apr 2024 00:05:12 GMT - Sun, 30 Jun 2024 00:05:11 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x1280, components 3 Size297 kB (296834 bytes) Hash34bf3deae9a7d590f5a98001b6912cc5 48d32ceaa7532e11d38836ca17f0d11bb5bdee74 6c9f84e23c42ccf8f085d96d561c3891f808a980c8f4f41bbab35d3beda9349b
GET /p_2331qbu2i4.jpg HTTP/1.1
Host: l.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://97.74.191.163/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 18:00:37 GMT
content-type: image/jpeg
content-length: 296834
set-cookie: klj_40d147_downloads=rryun; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Sat, 27 Apr 2024 17:37:17 GMT
last-modified: Fri, 20 May 2022 09:26:09 GMT
content-disposition: inline; filename="20220520_162116.jpg"
etag: "62875eb1-48782"
expires: Fri, 26 Apr 2024 20:00:37 GMT
cache-control: max-age=7200
x-file-id: x46654511x
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| b.top4top.io/m_2289neu8u6.mp3 | 135.181.63.70 | 200 OK | 3.3 MB |
URL GET HTTP/2b.top4top.io/m_2289neu8u6.mp3 IP135.181.63.70:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subject*.top4top.co Fingerprint8E:68:31:71:67:48:80:97:18:D7:75:1F:EF:2C:6E:F5:43:2B:3E:B2 ValidityMon, 01 Apr 2024 00:05:12 GMT - Sun, 30 Jun 2024 00:05:11 GMT
File typeAudio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo Size3.3 MB (3337208 bytes) Hash62499e29d0095cd1d84d9af6afd57601 aaeb09ab3b2595ab464c390d069e592c5b26a7e7 eaa97426b0fb89ba63981704e97d6c8045aa250ef02aaee98cb572a3c1711d61
GET /m_2289neu8u6.mp3 HTTP/1.1
Host: b.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://97.74.191.163/
Sec-Fetch-Dest: embed
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 18:00:37 GMT
content-type: audio/mpeg
content-length: 3337208
set-cookie: klj_40d147_downloads=r973d; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Sat, 27 Apr 2024 17:37:17 GMT
last-modified: Fri, 08 Apr 2022 17:30:12 GMT
content-disposition: inline; filename="AUD-20220406-WA1727.mp3"
etag: "62507124-32ebf8"
expires: Fri, 26 Apr 2024 20:00:37 GMT
cache-control: max-age=7200
x-file-id: x45778729x
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 97.74.191.163/favicon.ico | 97.74.191.163 | 200 OK | 5.5 kB |
URL GET HTTP/297.74.191.163/favicon.ico IP97.74.191.163:443 ASN#398101 GO-DADDY-COM-LLC
CertificateIssuercPanel, Inc. Subject7secondsonly.com Fingerprint62:05:A1:F7:CC:86:A1:98:10:4E:0B:96:29:AC:CE:77:03:24:9B:50 ValidityThu, 11 Feb 2021 00:00:00 GMT - Wed, 12 May 2021 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (7396) Hash86243c0af6614a9b162cd091d01546a4 61a0668751180bbc815875bc5693c601c4834c87 090f0c597802177a7ebd26f9492e26de2d0195f08b3d919cba3dc082b38cda2d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 97.74.191.163
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://97.74.191.163/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.3.33
vary: Accept-Encoding
content-encoding: br
content-length: 5462
content-type: text/html; charset=UTF-8
date: Fri, 26 Apr 2024 18:00:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| g.top4top.io/m_1668716ub0.mp3 | 65.21.235.194 | 206 Partial Content | 82 kB |
URL GET HTTP/2g.top4top.io/m_1668716ub0.mp3 IP65.21.235.194:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subject*.top4top.co Fingerprint8E:68:31:71:67:48:80:97:18:D7:75:1F:EF:2C:6E:F5:43:2B:3E:B2 ValidityMon, 01 Apr 2024 00:05:12 GMT - Sun, 30 Jun 2024 00:05:11 GMT
File typeAudio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, Stereo Hash0c2b121474092ad199efa088fb16baf6 c28173475d828d7278a7206010f10845b1ae0f69 27b278bc85aa64f5caca0d605a866ab87dfb23e776d1161b9a16cd0a1fc8128d
GET /m_1668716ub0.mp3 HTTP/1.1
Host: g.top4top.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://97.74.191.163/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
server: nginx
date: Fri, 26 Apr 2024 18:00:38 GMT
content-type: audio/mpeg
content-length: 4267709
set-cookie: klj_40d147_downloads=k01l6; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Sat, 27 Apr 2024 17:37:18 GMT
last-modified: Sun, 26 Jul 2020 18:58:07 GMT
content-disposition: inline; filename="KORUPSI%20Rapper%20Diss%20Pemerintah.mp3"
etag: "5f1dd23f-411ebd"
expires: Fri, 26 Apr 2024 20:00:38 GMT
cache-control: max-age=7200
x-file-id: x33594378x
content-range: bytes 0-4267708/4267709
X-Firefox-Spdy: h2
|
|