ocsp.sectigo.com/
104.18.14.101 471 B IP 104.18.14.101:0
Hash 65daac8f8a27ce2abf8538a21a2cd28e
25497b41ee8a50254be3fe8f5792d7fca49d978c
4c9fcc67ef28c7e696737cb8b552939b5d14a02100e1589c1db9209bf5e0ab8d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Aug 2023 15:31:27 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 18 Aug 2023 02:57:32 GMT
Expires: Fri, 25 Aug 2023 02:57:31 GMT
Etag: "25497b41ee8a50254be3fe8f5792d7fca49d978c"
Cache-Control: max-age=558964,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7f8b342d597bb517-OSL
108.179.193.5 0 B IP 108.179.193.5:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 108.179.193.5
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Fri, 18 Aug 2023 15:31:27 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: /404.html
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
108.179.193.5 836 B IP 108.179.193.5:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 11a0bbc52834cf74da795d5815b7dc63
5d401cf953df570210427a92d27e00ddf403f4b7
c989a169a129121f006c8fcbf90ab305d9005d516ce72cc44b4949167eed39d5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /404.html HTTP/1.1
Host: 108.179.193.5
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Aug 2023 15:31:28 GMT
Server: Apache
Last-Modified: Thu, 25 Aug 2022 10:26:47 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 836
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html
108.179.193.5/cgi-sys/css/bootstrap.min.css
108.179.193.5200 OK 3.7 kB URL GET HTTP/1.1 108.179.193.5/cgi-sys/css/bootstrap.min.css
IP 108.179.193.5:80
Requested by http://108.179.193.5/404.html
File type ASCII text, with very long lines (12719)
Hash 9504ee7168635b0b4f0520c3244eb6c3
c15a4ae461f40307ad714517f547419d580de08b
b08a2fa2b897efa1b9d4ea531eb28b1f9f216eadd299cb115a1121e266a4480b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cgi-sys/css/bootstrap.min.css HTTP/1.1
Host: 108.179.193.5
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://108.179.193.5/404.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Aug 2023 15:31:28 GMT
Server: Apache
Last-Modified: Thu, 25 Aug 2022 10:27:57 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3716
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/css
108.179.193.5/cgi-sys/css/fonts.css
108.179.193.5200 OK 365 B URL GET HTTP/1.1 108.179.193.5/cgi-sys/css/fonts.css
IP 108.179.193.5:80
Requested by http://108.179.193.5/404.html
File type ASCII text, with CRLF line terminators
Hash 2c4c002437d96e6ee9b619f4a79a5cf3
753903ef091072ffc850ce6fd6df100f262cd58f
dccdb14ac87583eb8ed86fe6aa4e0d2053d83484883f58e804a0fcb57301fdcc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cgi-sys/css/fonts.css HTTP/1.1
Host: 108.179.193.5
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://108.179.193.5/404.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Aug 2023 15:31:28 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 25 Aug 2022 10:26:50 GMT
Accept-Ranges: none
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 365
Keep-Alive: timeout=5, max=75
Content-Type: text/css
108.179.193.5/cgi-sys/css/custom_404.css
108.179.193.5200 OK 352 B URL GET HTTP/1.1 108.179.193.5/cgi-sys/css/custom_404.css
IP 108.179.193.5:80
Requested by http://108.179.193.5/404.html
File type ASCII text, with CRLF line terminators
Hash f6f783cdf4a0e94da66ca60af0d9da33
14e952352704e632315fd2fd6b8b3d896603af63
32f0b6ccf8a5c85f6782d4a14797ad8671c384658735170551032d7a22d64046
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cgi-sys/css/custom_404.css HTTP/1.1
Host: 108.179.193.5
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://108.179.193.5/404.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Aug 2023 15:31:28 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 25 Aug 2022 10:26:49 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 352
Keep-Alive: timeout=5, max=75
Content-Type: text/css
108.179.193.5/cgi-sys/images/illustration-404.svg
108.179.193.5200 OK 5.8 kB URL GET HTTP/1.1 108.179.193.5/cgi-sys/images/illustration-404.svg
IP 108.179.193.5:80
Requested by http://108.179.193.5/404.html
File type SVG Scalable Vector Graphics image\012- , Unicode text, UTF-8 text, with very long lines (764), with CRLF line terminators
Hash fd3da2a2a2b6ceccff4ce43513194d54
9b7c2318929d9cdb2823241bcbe7b4850855c6ba
49452f0e40a878f7b9a0ed87721f95843fbd953a2d373ccac53c911f51c929b3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cgi-sys/images/illustration-404.svg HTTP/1.1
Host: 108.179.193.5
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://108.179.193.5/404.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Aug 2023 15:31:28 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 25 Aug 2022 10:28:03 GMT
Accept-Ranges: bytes
Content-Length: 5824
Keep-Alive: timeout=5, max=75
Content-Type: image/svg+xml
108.179.193.5/cgi-sys/images/logo-hostgator.svg
108.179.193.5200 OK 15 kB URL GET HTTP/1.1 108.179.193.5/cgi-sys/images/logo-hostgator.svg
IP 108.179.193.5:80
Requested by http://108.179.193.5/404.html
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (760), with CRLF line terminators
Hash 59da425465b56df899f5926d5221164e
095c713cd16c0490f8b72700e8d2a1a2f57c86cf
75b33be75a492ae62981cc7b7a36803c1ef4ea5dcdc6db43c11071b200c7f78e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cgi-sys/images/logo-hostgator.svg HTTP/1.1
Host: 108.179.193.5
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://108.179.193.5/404.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Aug 2023 15:31:28 GMT
Server: Apache
Last-Modified: Thu, 25 Aug 2022 10:26:49 GMT
Accept-Ranges: bytes
Content-Length: 14640
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/svg+xml
108.179.193.5/cgi-sys/fonts/GalanoGrotesqueAlt-Medium.woff2
108.179.193.5200 OK 27 kB URL GET HTTP/1.1 108.179.193.5/cgi-sys/fonts/GalanoGrotesqueAlt-Medium.woff2
IP 108.179.193.5:80
Requested by http://108.179.193.5/404.html
File type Web Open Font Format (Version 2), TrueType, length 27368, version 1.0\012- data
Hash 8acdaee03c81ab825b3df5bd0826bc00
eaf0cbdf1b59c48ef90ac7cb43d1b9b6819d40c9
6e8bea61f443e6e81c3d7226a42d5c7f3d1dce19910ab5de3d5b9eebd040b7cd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cgi-sys/fonts/GalanoGrotesqueAlt-Medium.woff2 HTTP/1.1
Host: 108.179.193.5
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://108.179.193.5/cgi-sys/css/fonts.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Aug 2023 15:31:28 GMT
Server: Apache
Last-Modified: Thu, 25 Aug 2022 10:26:49 GMT
Accept-Ranges: bytes
Content-Length: 27368
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: font/woff2
108.179.193.5/cgi-sys/fonts/GalanoGrotesqueAlt-Light.woff2
108.179.193.5200 OK 31 kB URL GET HTTP/1.1 108.179.193.5/cgi-sys/fonts/GalanoGrotesqueAlt-Light.woff2
IP 108.179.193.5:80
Requested by http://108.179.193.5/404.html
File type Web Open Font Format (Version 2), TrueType, length 30888, version 1.0\012- data
Hash c2680acf06d857827dbb29c177fdb0c9
9d028ee819c79fc3188fd48f3a160016859e8c0d
86e810bb90886562664f37698ab2b243e5ccba698711bf51305e13d81ac4575f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cgi-sys/fonts/GalanoGrotesqueAlt-Light.woff2 HTTP/1.1
Host: 108.179.193.5
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://108.179.193.5/cgi-sys/css/fonts.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Aug 2023 15:31:28 GMT
Server: Apache
Last-Modified: Thu, 25 Aug 2022 10:26:49 GMT
Accept-Ranges: bytes
Content-Length: 30888
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: font/woff2
108.179.193.5/cgi-sys/fonts/GalanoGrotesqueAlt-Bold.woff2
108.179.193.5200 OK 28 kB URL GET HTTP/1.1 108.179.193.5/cgi-sys/fonts/GalanoGrotesqueAlt-Bold.woff2
IP 108.179.193.5:80
Requested by http://108.179.193.5/404.html
File type Web Open Font Format (Version 2), TrueType, length 27612, version 1.0\012- data
Hash 74939834b92fc726d8e25109a9afd32b
79264c33f1eebec313790666d0284169b1bbaf5b
895d3b706f2544a11b0b10a78bd36909ed1dddf5099ef83dc91c32b106162a79
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cgi-sys/fonts/GalanoGrotesqueAlt-Bold.woff2 HTTP/1.1
Host: 108.179.193.5
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://108.179.193.5/cgi-sys/css/fonts.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Aug 2023 15:31:28 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 25 Aug 2022 10:26:48 GMT
Accept-Ranges: bytes
Content-Length: 27612
Keep-Alive: timeout=5, max=75
Content-Type: font/woff2
108.179.193.5/cgi-sys/images/favicons/favicon-192.png
108.179.193.5200 OK 14 kB URL GET HTTP/1.1 108.179.193.5/cgi-sys/images/favicons/favicon-192.png
IP 108.179.193.5:80
Requested by http://108.179.193.5/404.html
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 323ada1289a0383c78c6323acb5f638e
c56bc9bbdb7703d1e12391541f5cc2b7f4e8fe91
a164aebd78636713c3bdcdad88615379c1870c186a3154a03faa5491ed12e4e4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cgi-sys/images/favicons/favicon-192.png HTTP/1.1
Host: 108.179.193.5
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://108.179.193.5/404.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Aug 2023 15:31:29 GMT
Server: Apache
Last-Modified: Thu, 25 Aug 2022 10:28:14 GMT
Accept-Ranges: bytes
Content-Length: 14149
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: image/png
108.179.193.5/cgi-sys/images/favicons/favicon.ico
108.179.193.5200 OK 4.3 kB URL GET HTTP/1.1 108.179.193.5/cgi-sys/images/favicons/favicon.ico
IP 108.179.193.5:80
Requested by http://108.179.193.5/404.html
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash d724ddae3271176126aad16bbc5aaca9
ff0d2d31b791605ea2b67094481a43739bde0edb
de4aad931c0ed44af44f37eb040af231e9e45c462ae32d174b962eeca0b92c01
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cgi-sys/images/favicons/favicon.ico HTTP/1.1
Host: 108.179.193.5
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://108.179.193.5/404.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Aug 2023 15:31:29 GMT
Server: Apache
Last-Modified: Thu, 25 Aug 2022 10:28:14 GMT
Accept-Ranges: bytes
Content-Length: 4286
Cache-Control: max-age=604800
Expires: Fri, 25 Aug 2023 15:31:29 GMT
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/x-icon