| noruxwu.top:8080/get.php?username...4&type=m3u |  104.21.89.12 | 401 Unauthorized | 0 B |
URL User Request GET HTTP/1.1noruxwu.top:8080/get.php?username...4&type=m3u IP104.21.89.12:8080
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /get.php?username...4&type=m3u HTTP/1.1
Host: noruxwu.top:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 401 Unauthorized
Date: Sat, 04 Jan 2025 15:35:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xK%2F%2B%2BvE99amy5z%2FVscHH8stHBJYXmgFDJTjoPWbnP0GtwpaWRFvHxteURItKOLJ8URwGNzf4JQWyBkgj4r7ChvxC0WfSiCTsSl6d3llLpqWojKLCnlf6IMjwgILpTV%2BkcB5j"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8fcc4c538c8656c1-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=455&min_rtt=455&rtt_var=227&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=418&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
| noruxwu.top:8080/favicon.ico | 104.21.89.12 | 200 OK | 665 B |
URL GET HTTP/1.1noruxwu.top:8080/favicon.ico IP104.21.89.12:8080
Requested byhttp://noruxwu.top:8080/get.php?username...4&type=m3u
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hasha978a00ea065f40b025c1e2f1c23147d 3acd0b0d9449b4a6cd6676175d869a4e2e3dc2ba 8d50d74fe1959aa376178584d0de37ee4ebbbe9f5c3131b4fdd117942f7f20fb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: noruxwu.top:8080
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://noruxwu.top:8080/get.php?username...4&type=m3u
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Jan 2025 15:35:23 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 19 Sep 2022 17:56:20 GMT
ETag: W/"6328ad44-47e"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Af1peUwVCD%2BCUQ56f%2FbIK1%2BfRqzxPYuLDbs9sz8mhMVJ4XY%2FYmS9QNPvg4X4ZMbTCs4hMTDyMkWUer42GrYUc4eVSOK82m1Q%2BibXuoDA7cV61Xsc13mNWcU7f8JKQb6HZ4sw"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8fcc4c55ff1456c1-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=796&min_rtt=455&rtt_var=853&sent=3&recv=5&lost=0&retrans=0&sent_bytes=796&recv_bytes=792&delivery_rate=454631&cwnd=250&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|