| GET domtrst455.com/favicon.ico |  172.67.219.126 | 403 Forbidden | 146 B |
URL GET domtrst455.com/favicon.ico IP172.67.219.126:80
Requested byhttp://domtrst455.com/files/sysinfo.bin
File typeHTML document, ASCII text, with CRLF line terminators Hash9fe3cb2b7313dc79bb477bc8fde184a7 4d7b3cb41e90618358d0ee066c45c76227a13747 32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: domtrst455.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://domtrst455.com/files/sysinfo.bin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 18 May 2025 00:53:02 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
cf-cache-status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PzHUzDvuEbw5F6dgKscPkjFLGZTXNTH7T%2FipyT43l31ZMKX3xdZOqAQMv8OpqLFlKlOCysZRkTJRtdDAMSUUcK7zgtoCe%2BwgzkmDhT9C9LT79WBv%2Bi2E4XjajrHOxLYO1g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 941760115e1556bb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=411&min_rtt=403&rtt_var=126&sent=4&recv=6&lost=0&retrans=0&sent_bytes=936&recv_bytes=786&delivery_rate=6227956&cwnd=251&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
| GET domtrst455.com/files/sysinfo.bin | 172.67.219.126 | 403 Forbidden | 146 B |
URL User Request GET domtrst455.com/files/sysinfo.bin IP172.67.219.126:443
CertificateIssuerGoogle Trust Services Subjectdomtrst455.com FingerprintB9:62:D9:0D:D3:19:F1:F4:7D:16:FF:34:E4:65:6C:24:60:92:81:90 ValidityThu, 08 May 2025 20:42:21 GMT - Wed, 06 Aug 2025 21:32:27 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash9fe3cb2b7313dc79bb477bc8fde184a7 4d7b3cb41e90618358d0ee066c45c76227a13747 32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /files/sysinfo.bin HTTP/1.1
Host: domtrst455.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sun, 18 May 2025 00:53:02 GMT
content-type: text/html
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: BYPASS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=0%2B4m9ugr2uge3igummUDc1xPKXmJNpu2VIWu1bNHMYOu0WUji7F8kzhpF1BsqUXrE1KNZwPON3dD9NML8XUE1xmPxjcZMnrgHObUWQ%3D%3D"}]}
content-encoding: br
cf-ray: 9417600e9ff70b69-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
| GET domtrst455.com/files/sysinfo.bin | 172.67.219.126 | 403 Forbidden | 146 B |
URL User Request GET domtrst455.com/files/sysinfo.bin IP172.67.219.126:80
File typeHTML document, ASCII text, with CRLF line terminators Hash9fe3cb2b7313dc79bb477bc8fde184a7 4d7b3cb41e90618358d0ee066c45c76227a13747 32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /files/sysinfo.bin HTTP/1.1
Host: domtrst455.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sun, 18 May 2025 00:53:02 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
cf-cache-status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fbq2jHshQKqKmPM%2F28zxeGQ2IYrKxTCNS2OXJMI59X4VvrXV6T6kvT1Mq2n5xZL%2FxT7aESQVlWRlhZk08j0pq2AJO7uQZpa43AuyLETHnmozUqBOeOV%2BhSUEJG6fJFHLfA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 941760103da556bb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=403&min_rtt=403&rtt_var=201&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=416&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|