| |  192.185.111.227 | 301 Moved Permanently | 0 B |
URL User Request GET HTTP/2IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 17 Apr 2024 01:35:54 GMT
server: nginx/1.23.4
content-type: text/html; charset=UTF-8
content-length: 0
vary: Accept-Encoding,Cookie
x-redirect-by: WordPress
location: https://www.ekcdst.org/
x-server-cache: false
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/upme/css/font-awesome.min.css?ver=6.4.2 | 192.185.111.227 | 200 OK | 5.1 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/upme/css/font-awesome.min.css?ver=6.4.2 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (25891) Hash1ab6e87c74a203e10f52619675060b0c 1a875d9398ac017181bfda9400efae00de6afaa5 76369944f3fe9a20e1eb2e4c46ac51d9ce78d3c34c01c2bff8a837cbe1b8d401
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/upme/css/font-awesome.min.css?ver=6.4.2 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 14 Sep 2018 00:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5130
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/upme/css/upme-responsive.css?ver=6.4.2 | 192.185.111.227 | 200 OK | 1.8 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/upme/css/upme-responsive.css?ver=6.4.2 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
Hash31173a2a0e571fd2be1b4dac77c9b372 0d055e355f3150b7230b05c483c28697b0812281 5a44346f644baa00d54ff1af270823ed61e17d4a9e0f7a1ca7064fb401cf8ef1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/upme/css/upme-responsive.css?ver=6.4.2 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 14 Sep 2018 00:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1805
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 | 192.185.111.227 | 200 OK | 239 B |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
Hash73d29ecb3ae4eb2b78712fab3a46d32d 05ea352ab14ccf04386a4c7d112ad4fec944d551 c2711e9edc60964dcb5aada1bfa59c2d68d3d9dc1baf4a5ee058b4c1bd32c3eb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:55 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 239
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/themes/hello-elementor/style.min.css?ver=3.0.0 | 192.185.111.227 | 200 OK | 2.2 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/themes/hello-elementor/style.min.css?ver=3.0.0 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (5756), with no line terminators Hash5be56bc9e617084e1cbb84c994912fc3 a3adca593d4ec4afb41e32d073405610ae37eef7 3c3c0ebe37e4fd4187131a0a8d039064a9014215c4b83199d909e7e0b2d7f450
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/hello-elementor/style.min.css?ver=3.0.0 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 01 Jan 2024 00:41:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2208
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/themes/hello-elementor/theme.min.css?ver=3.0.0 | 192.185.111.227 | 200 OK | 1.4 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/themes/hello-elementor/theme.min.css?ver=3.0.0 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeUnicode text, UTF-8 text, with very long lines (5127), with no line terminators Hash08fae0e9f8ce7e1cc244d6957a0fc71c 958fbf4f8b318e39612dd25eefae43c006769883 30c2e510f9fac929eeab0ea915d80904a4e72b22eb8612dd8c83c7dfb71862e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/hello-elementor/theme.min.css?ver=3.0.0 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 01 Jan 2024 00:41:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1402
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/upme/css/upme.css?ver=6.4.2 | 192.185.111.227 | 200 OK | 8.8 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/upme/css/upme.css?ver=6.4.2 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
Hash8b1940620c89b4f8457638885f7dc70c 1c272b92873296bd87f6477f594171d875a4ce5e b3e7cf133ba9f2593807ea15f5a634fb3ad0e14caa85314de0bb12ab74f780cc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/upme/css/upme.css?ver=6.4.2 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 14 Sep 2018 00:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8831
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/themes/hello-elementor/header-footer.min.css?ver=3.0.0 | 192.185.111.227 | 200 OK | 1.8 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/themes/hello-elementor/header-footer.min.css?ver=3.0.0 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeUnicode text, UTF-8 text, with very long lines (7323), with no line terminators Hash4f6608672aae4899d264369dd0c580d9 c4b0007b7f9377cd9d7c6b8106dffedaa03d1610 97a09cb2af7d4406f6163874dad15c607d571749611d00890d47143495a0a617
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/hello-elementor/header-footer.min.css?ver=3.0.0 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 01 Jan 2024 00:41:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1813
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/upme/styles/default.css?ver=6.4.2 | 192.185.111.227 | 200 OK | 6.5 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/upme/styles/default.css?ver=6.4.2 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (379) Hash253129da7d319e53470183f1d59895dd 61849e90e36ce1660d787f0d6a24a16a0a5df858 958835c149b15fcc9897ef318c5dc3ad482ba8c3813315f38296167fb39fe8a3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/upme/styles/default.css?ver=6.4.2 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 14 Sep 2018 00:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6488
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.21.0 | 192.185.111.227 | 200 OK | 4.1 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.21.0 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (19442) Hash56435e46abd5f7a20dd5b8590fbdc083 fab2a319dc679ed90d62af44f9e37625a0562958 8631189ca38e73206e52ed06e8f0f3b2e839b9facc236b9519b9fd8d7f8d63e2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.21.0 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4055
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6 | 192.185.111.227 | 200 OK | 3.2 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (12876), with no line terminators Hashbcad7781b3e74db2565b8424c45232cd 41b0d94434ef667897c06e1184b703064ffceda1 d622534d53d3ac1095af275f0b30274fcd835785577df2dde6d9398e6f7a2c8f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3188
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/uploads/elementor/css/post-6.css?ver=1705004416 | 192.185.111.227 | 200 OK | 1.1 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/uploads/elementor/css/post-6.css?ver=1705004416 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (5651), with no line terminators Hash032fcf9f8ef0862414ccd951db73dcec f30e67b95216927454b88d706d77b7413e2acf3c 0ebdc78c223827f3f7a4f2964a0442137b29f82a0ee8c2405d858a2a39a8cf67
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/elementor/css/post-6.css?ver=1705004416 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 11 Jan 2024 20:20:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1126
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.6.3 | 192.185.111.227 | 200 OK | 2.4 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.6.3 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text, with very long lines (5082) Hash6ba3e956a8d8cbb51a95d0c9154e2838 28a1b8540476fdb768772ed53b484e132fe65a6d 336f0594aef4e649d9a414a0351377f31931cb51e5f1d197c9d933118d0ad58f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.6.3 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 01:48:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2426
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.15.1 | 192.185.111.227 | 200 OK | 2.3 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.15.1 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text, with very long lines (4918) Hashe2d9aa59d80eab9f76e0d8b686a4dde8 cc2982c70c45f1ff9b3ac9d37afb994e2b6c67f3 6053effccf1119fd69f147df99f3a9c0d23698ebd1aec6d7c61b366865f44f71
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.15.1 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2315
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/upme/js/upme-fitvids.js?ver=6.4.2 | 192.185.111.227 | 200 OK | 1.3 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/upme/js/upme-fitvids.js?ver=6.4.2 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text Hash5ad9eff31d09ec7c407604f793d25510 7771d0e50dc9d1baa96e1295154d89eeba08d118 0247eba181a002ae0b37238e35419e8b76927d70e985c229282e8d983fa54e52
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/upme/js/upme-fitvids.js?ver=6.4.2 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 14 Sep 2018 00:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1271
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/uploads/2015/04/ekcdst-text.png | 192.185.111.227 | 200 OK | 9.4 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/uploads/2015/04/ekcdst-text.png IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typePNG image data, 368 x 109, 8-bit/color RGBA, non-interlaced Hash25314e00f5020eaebd68ea0e9d60f483 f717eca4956e97a879671e0a7bc62ed75d4ca188 f336aa4bb45e6d1591e60dca66c466ede447ef8c6f20219297532bff24d917e7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2015/04/ekcdst-text.png HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 22 Apr 2015 18:40:27 GMT
accept-ranges: bytes
content-length: 9362
content-type: image/png
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/uploads/elementor/css/post-3302.css?ver=1708997066 | 192.185.111.227 | 200 OK | 3.9 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/uploads/elementor/css/post-3302.css?ver=1708997066 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (6017) Hash0e072644ae3930a29c83ec0fde3d97c6 0148c77d0ee65daeb96024ce1ce89037df0db756 14d734df5327b2751eaf404f24ba701a8b02469ed94354528af404a2c781cdda
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/elementor/css/post-3302.css?ver=1708997066 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 27 Feb 2024 01:24:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3851
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/uploads/2024/01/DSQ.png | 192.185.111.227 | 200 OK | 14 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/uploads/2024/01/DSQ.png IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typePNG image data, 249 x 110, 8-bit/color RGBA, non-interlaced Hash148d13e91fe87090a831d8919726cd81 a66456ff2c4522fc1638655ef30a862d3a0cbc80 5db35a416e859bf4f6adb68babbcac55c23fc603734e252d7fe1919b73867d2a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/01/DSQ.png HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jan 2024 01:50:50 GMT
accept-ranges: bytes
content-length: 14181
content-type: image/png
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/uploads/2015/04/header-bg2-e1705970702189.png | 192.185.111.227 | 200 OK | 33 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/uploads/2015/04/header-bg2-e1705970702189.png IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typePNG image data, 179 x 241, 8-bit/color RGBA, non-interlaced Hash839f837f225cd67c7112c0770e3a4fe7 6598240bdfefc79807735a54491839c0b3c91707 da7ec4d24dae45e576aa25c55e63e2d3bcf70ee2ca3b90c05ced3185ed927fc3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2015/04/header-bg2-e1705970702189.png HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 23 Jan 2024 00:45:02 GMT
accept-ranges: bytes
content-length: 33105
content-type: image/png
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/uploads/2024/01/EKC-eboard-headshots-4-1024x1024.jpg | 192.185.111.227 | 200 OK | 210 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/uploads/2024/01/EKC-eboard-headshots-4-1024x1024.jpg IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=Canon, model=Canon EOS 5D Mark III, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 11.5 (Macintosh), datetime=2023:06:04 12:26:55], baseline, precision 8, 1024x1024, components 3 Size210 kB (209875 bytes) Hasha8c07f438a5032ef047426412edf9133 beae55911e62687ac24f7ddd510691e3f71e2e94 9594d8dfb850d36868bc4937b0436ab8a9f7152c6af5b8a8721bc47fa42acc21
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/01/EKC-eboard-headshots-4-1024x1024.jpg HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 02 Jan 2024 03:56:21 GMT
accept-ranges: bytes
content-length: 209875
content-type: image/jpeg
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/upme/admin/js/tinymce_language_strings.js?ver=6.4.2 | 192.185.111.227 | 200 OK | 31 B |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/upme/admin/js/tinymce_language_strings.js?ver=6.4.2 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with no line terminators Hashd9d153c74cf4f67fdda1d338cfab26bd f2129d9fed1c82e58f48df37a31a27ae69b8b014 c9bd065f6226a01d0f747110b78417fa7e3b31bf048083c3e22ebdc917f44bb6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/upme/admin/js/tinymce_language_strings.js?ver=6.4.2 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 14 Sep 2018 00:57:48 GMT
accept-ranges: bytes
content-length: 31
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/uploads/elementor/css/post-3311.css?ver=1708995878 | 192.185.111.227 | 200 OK | 1.2 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/uploads/elementor/css/post-3311.css?ver=1708995878 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (5953), with no line terminators Hash8ae639cc86be3fa3db0c33d37f6f4aaa ac738ef02cd635faab6d9e2b2596e7fbcdd9cb49 78088a1bf9762c85bf78926d81e87e9054cf60657b38789e44a1c5d4263bf118
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/elementor/css/post-3311.css?ver=1708995878 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 27 Feb 2024 01:04:38 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1150
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| | 192.185.111.227 | 200 OK | 23 kB |
URL User Request GET HTTP/2IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (9462) Hash29cb7dfaf8bf790fe4ac08655666a57a 11c62e8b72a569de7c32e8a886a8af512787e3f1 e4773d7e8d1b356daf0620a5ad408ac63b100f1875de54ed9c7d41bcadd7e2fb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 17 Apr 2024 01:35:55 GMT
server: nginx/1.23.4
content-type: text/html; charset=UTF-8
vary: Accept-Encoding,Cookie
cache-control: max-age=3, must-revalidate
content-encoding: gzip
x-server-cache: false
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 192.185.111.227 | 200 OK | 5.4 kB |
URL GET HTTP/2www.ekcdst.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 09 Jun 2023 05:49:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5422
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 | 192.185.111.227 | 200 OK | 2.7 kB |
URL GET HTTP/2www.ekcdst.org/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text, with very long lines (6625), with no line terminators Hashfd7ef2e4737acd74fd0dcdc3b515e304 0d792b33f12a48ee8aaaf2560a63a5682470645b 1d52e1ac7d3bc25a8b0ffc257153f9dd50249f96fe9a4df5e0d771241a69062c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Sep 2023 19:30:24 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2746
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.15.1 | 192.185.111.227 | 200 OK | 3.0 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.15.1 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (10019) Hash4601ba55044413706c2022cb6c1c3d05 5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.15.1 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2997
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 | 192.185.111.227 | 200 OK | 13 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (57726) Hasheeb705d0bdccfd645d3bbd46dd1fbab3 066def290f42ed8c00860e573cc880bd46e9ced4 d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12577
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 | 192.185.111.227 | 200 OK | 9.6 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text, with very long lines (25115) Hash046405de007ff73e52d17dab2af75258 887cfb8a9de27005875f6e1c1d1ead43bd0865c8 533e264cc615ee4601da8d2c1dee4a8987319e53d4d7162272f067fbbf250020
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 01:48:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9638
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.15.1 | 192.185.111.227 | 200 OK | 13 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.15.1 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (59158) Hash74bab4578692993514e7f882cc15c218 b6293bcfd851f963edbe859498570c4c0c7eaae4 d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.15.1 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12862
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.6.3 | 192.185.111.227 | 200 OK | 7.3 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.6.3 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text, with very long lines (20343) Hash2683e92e51f943dbb51efc776a2985d9 bce7fb457d9d11e4118feaf1f78927968fe52ce4 aee5a4d79ecdb3eda402d9f6eecd559491bd6087b3483be8b6b7df9d242e4f0b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.6.3 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 01:48:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7270
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/uploads/elementor/css/global.css?ver=1704166353 | 192.185.111.227 | 200 OK | 4.0 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/uploads/elementor/css/global.css?ver=1704166353 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (14692) Hash1a2232179a49279422374040b2490a1c f9e0c1d66372998f078f195ba597479fae66a250 73bb16d91c22da6203031bbb8abb319d861bc294248fc7c149aefdf67c3e70ab
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/elementor/css/global.css?ver=1704166353 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 02 Jan 2024 03:32:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3967
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 | 192.185.111.227 | 200 OK | 308 B |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (489) Hash144e43c3b3d8ea5b278c062c202c92f2 3c037057a419245849747b4762d09d88cab66fc1 9cd63b8cea25045c14623c538d26752518a58c0c682795ce6ad3078976c65a37
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 308
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.15.1 | 192.185.111.227 | 200 OK | 4.4 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.15.1 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (26516) Hashc55205bce667f5d812354fd1353e7389 f22de0af271eba636a022c873c94fbcd81b4c89a c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.15.1 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4436
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/uploads/elementor/css/post-2402.css?ver=1706500076 | 192.185.111.227 | 200 OK | 879 B |
URL GET HTTP/2www.ekcdst.org/wp-content/uploads/elementor/css/post-2402.css?ver=1706500076 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeASCII text, with very long lines (4159), with no line terminators Hasheb2864bfa5808cb63ae26182eb692011 e14496cbcd9f81b70a484f76ee2ef2da0bafcd32 9e4bb929d9a5faf6915009f3f139a0df506b47571ab99e40b3b968d9d74354ef
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/elementor/css/post-2402.css?ver=1706500076 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jan 2024 03:47:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 879
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 192.185.111.227 | 200 OK | 8.3 kB |
URL GET HTTP/2www.ekcdst.org/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (8189) Hashc4e68a0f3463c0bd3c39eab38815e881 0ce58644e9f3c5063a11453ff287c5ec096465a7 ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 02 Feb 2023 16:36:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8343
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/upme/js/upme-custom.js?ver=6.4.2 | 192.185.111.227 | 200 OK | 8.0 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/upme/js/upme-custom.js?ver=6.4.2 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text Hashc2c6447ef343d9083dc2b0eaacc819bc e0790d00eee08500afe071838417625d5cd313b4 589319d45a39a61ffdd99296eda4859c2e9a431bf9055b912c2bf722901b6a21
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/upme/js/upme-custom.js?ver=6.4.2 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 14 Sep 2018 00:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8014
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 192.185.111.227 | 200 OK | 3.7 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text, with very long lines (12198), with no line terminators Hash3819c3569da71daec283a75483735f7e ecd40a5cc6f0b76200c454ca880210dc301cfab8 214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3747
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1 | 192.185.111.227 | 200 OK | 1.6 kB |
URL GET HTTP/2www.ekcdst.org/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text, with very long lines (4592) Hash7bd48eb3bd568033e96caf0fb62e6690 b38066999294b99d92d95db5f38bc15707eb1f22 7868467c94a5aa0b3f11ef542f45287967f9627b3b5acdc86e47f8f77a126596
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 21 Sep 2023 13:26:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1619
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.6.3 | 192.185.111.227 | 200 OK | 7.0 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.6.3 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text, with very long lines (24170) Hash85e3fb3664546f32c38aa4b20475e013 aa6c7be561a552dfe153b4f923d4aff49bc659ca 7d8ab71bccbe7b5ecca42d11f7ecfbcbdf6e84b51a81dd1642b10060a6252915
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.6.3 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 01:48:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6978
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-includes/js/dist/i18n.min.js?ver=7701b0c3857f914212ef | 192.185.111.227 | 200 OK | 4.0 kB |
URL GET HTTP/2www.ekcdst.org/wp-includes/js/dist/i18n.min.js?ver=7701b0c3857f914212ef IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
Hashc2c4e2a562e06e1cb22293a5b920aca6 a7b5a369ac4883f1ee7fa701b238d20238b675ca 698e93fe491cc7bbf07a470579a33dbd0db53c19142b7be41ebfd39a23aef11f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/i18n.min.js?ver=7701b0c3857f914212ef HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 21 Sep 2023 13:26:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3951
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 | 192.185.111.227 | 200 OK | 3.0 kB |
URL GET HTTP/2www.ekcdst.org/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text, with very long lines (8171), with no line terminators Hashdda652db133fddb9b80a05c6d1b5c540 60c8514c57a5db2980c4b046b0dd479bd427357b c1a9a3e223bad631dff12d33b5499eb145cb08d8621c20d9d73870e78d97afe4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Jan 2023 11:16:33 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2977
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.15.1 | 192.185.111.227 | 200 OK | 16 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.15.1 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text, with very long lines (40706) Hash5cf6c58776b688d899a6b604cae86974 d448173c28c7224eb4a509a6bb9d7a85fe69e099 ee9d08057cb7914b636130937016085461ed58d5b93ed7243c030f6e13528502
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.15.1 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16464
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans%3A400italic%2C700italic%2C400%2C700&subset=latin%2Clatin-ext&ver=6.4.2 | 142.250.74.170 | 200 OK | 2.3 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Open+Sans%3A400italic%2C700italic%2C400%2C700&subset=latin%2Clatin-ext&ver=6.4.2 IP142.250.74.170:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Hash11539e2019419f41bd72364ca7e32ec6 af43947566a9d8cd57431105b7c9862c438eada3 79498e06a729f12bbd4ce983ce0ffb547466a70d8063433413f8740d9858c62b
GET /css?family=Open+Sans%3A400italic%2C700italic%2C400%2C700&subset=latin%2Clatin-ext&ver=6.4.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 17 Apr 2024 01:35:55 GMT
date: Wed, 17 Apr 2024 01:35:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/marcellus/v13/wEO_EBrOk8hQLDvIAF81VvoK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/marcellus/v13/wEO_EBrOk8hQLDvIAF81VvoK.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 14552, version 1.0 Hashd8d78c8d074b3e3ee4232d269932f9a2 10f9e448571b8095b380bb2ea019cfc68fb27a9b 8a539799d12e3a144273288055490f57e1eee84da7a9145f085bc522e80719c3
GET /s/marcellus/v13/wEO_EBrOk8hQLDvIAF81VvoK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ekcdst.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:26:34 GMT
expires: Fri, 11 Apr 2025 17:26:34 GMT
cache-control: public, max-age=31536000
age: 461362
last-modified: Tue, 26 Apr 2022 16:36:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ekcdst.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 02:35:00 GMT
expires: Fri, 11 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 514856
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CAlex+Brush%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CBebas+Neue%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CMarcellus%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.4.2 | 142.250.74.170 | 200 OK | 20 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CAlex+Brush%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CBebas+Neue%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CMarcellus%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.4.2 IP142.250.74.170:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Hashc42fd08237fe8635f4da07f92f18c84a bc5113cfd9252dd3f7a67e036139622944f86b2e ac3c5de3c71e8c30433aaf1621830cdda8cf977e6270efe90367614b4ce1ad8e
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CAlex+Brush%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CBebas+Neue%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CMarcellus%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.4.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 17 Apr 2024 01:35:55 GMT
date: Wed, 17 Apr 2024 01:35:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 192.185.111.227 | 200 OK | 242 kB |
URL GET HTTP/2www.ekcdst.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typegzip compressed data, from Unix Size242 kB (241663 bytes) Hashc5559ce52388a8317b4c8010fa6cef8c cc05227268abed3a6ab70ab6e6ec833ef404ba17 205cc6be8984142e42fcb16a7839fb70d5a4ebc144a90374e0b76dd5dd4e0a7d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Aug 2023 17:14:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/uploads/2024/01/EKC-BG_Gray2.jpg | 192.185.111.227 | 200 OK | 21 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/uploads/2024/01/EKC-BG_Gray2.jpg IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJPEG image data, progressive, precision 8, 1657x335, components 3 Hash3e49aef36148ecfcc7dc5b63ca3ce569 9607c8369664262661d4c75f42cd12b35982a220 1e61c159f295ae612bac34eb1556d335533fac71e2819101faa03e49648a0dee
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/01/EKC-BG_Gray2.jpg HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/wp-content/uploads/elementor/css/post-3302.css?ver=1708997066
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 29 Jan 2024 02:57:05 GMT
accept-ranges: bytes
content-length: 20709
content-type: image/jpeg
date: Wed, 17 Apr 2024 01:35:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.6.3 | 192.185.111.227 | 200 OK | 68 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.6.3 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typegzip compressed data, from Unix Hash83d03074f588a2963cecc61d6d0e1d2c 1ccbca1db43aba23b5eef7eeedd6bcf70e128756 a8e79ecce02651170d1411c17f0f7247dd522e9ef0daf85de974f4b473c9e40c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.6.3 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 01:48:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 | 192.185.111.227 | 200 OK | 77 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 76764, version 331.-31261 Hashf7307680c7fe85959f3ecf122493ea7d fce0da592a3e536d6d5df5b50cb513398d8c5161 43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
content-length: 76764
content-type: font/woff2
date: Wed, 17 Apr 2024 01:35:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ekcdst.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 16:27:38 GMT
expires: Wed, 16 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 32898
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2 | 216.58.207.227 | 200 OK | 17 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 17032, version 1.0 Hash05a47f9e469d408c629f931cd33ff8b2 823f21f7b1d456db889c3afea393f0d2b9581c38 6be97ca17228a69c406231d89c003194c3dfba7401eaa9fe9e9ed0ef1c18dc38
GET /s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ekcdst.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17032
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 21:52:10 GMT
expires: Tue, 15 Apr 2025 21:52:10 GMT
cache-control: public, max-age=31536000
age: 99826
last-modified: Wed, 11 May 2022 19:24:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/alexbrush/v22/SZc83FzrJKuqFbwMKk6EhUXz7Q.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/alexbrush/v22/SZc83FzrJKuqFbwMKk6EhUXz7Q.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33240, version 1.0 Hashc74971d917b68d60dd2aad8155a9eca4 7a036feb54f0d3622b40ac5adf551658888d6ef9 c3db864ab51fc6f0cc76843b6eed5b8b572f15709a398a51b35c9a3e935b315f
GET /s/alexbrush/v22/SZc83FzrJKuqFbwMKk6EhUXz7Q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ekcdst.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 03:07:41 GMT
expires: Fri, 11 Apr 2025 03:07:41 GMT
cache-control: public, max-age=31536000
age: 512895
last-modified: Tue, 02 May 2023 15:25:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 | 216.58.207.227 | 200 OK | 14 kB |
URL GET HTTP/2fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 13820, version 1.0 Hash2dd698f2699a5ef991625825011bff90 523ff9357131751e57dd78cb92b218a49a130d1d 02f5dfc0c21e92f3c724260f035833e627513a1b91230cc490a1ea756c95e5e5
GET /s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ekcdst.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13820
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 02:33:32 GMT
expires: Fri, 11 Apr 2025 02:33:32 GMT
cache-control: public, max-age=31536000
age: 514944
last-modified: Thu, 24 Aug 2023 21:28:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor-pro/assets/js/nav-menu.3de49ba5ef86f9a22ff5.bundle.min.js | 192.185.111.227 | 200 OK | 1.4 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor-pro/assets/js/nav-menu.3de49ba5ef86f9a22ff5.bundle.min.js IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text, with very long lines (3262) Hashc04c6d9f050c390e54d88d2b15c4556f 8fffd2da7762f347021be68049bb7e8b546affb6 52a8e40b2da795e825faaef6220a0e6dc83da49682eccc1440c3dbc46aeee903
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor-pro/assets/js/nav-menu.3de49ba5ef86f9a22ff5.bundle.min.js HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 04 Mar 2022 01:48:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1408
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js | 192.185.111.227 | 200 OK | 672 B |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text, with very long lines (1320) Hashb82588d3c2cff4b29b61ee7d7228560c 0273772dce23bf8af95df2c38f5a1272dbfd4bc1 7af6a729ee73836335f9e31562528c3c342967b78ceb162f1e4c6a138f184601
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 672
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/favicon.ico | 192.185.111.227 | 302 Found | 0 B |
URL GET HTTP/2www.ekcdst.org/favicon.ico IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Wed, 17 Apr 2024 01:35:56 GMT
server: nginx/1.23.4
content-type: text/html; charset=UTF-8
content-length: 0
vary: Accept-Encoding,Cookie
link: <https://www.ekcdst.org/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
location: https://www.ekcdst.org/wp-includes/images/w-logo-blue-white-bg.png
x-server-cache: false
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.21.0 | 192.185.111.227 | 200 OK | 94 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.21.0 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 94320, version 1.0 Hash528ad796b1de9fe355489211f02f1e46 e6b151de71ac57292f6bd95394abf6ca6cb392f7 24f190f48754ad5156b04df5cf84dfddc2128f9bdd6e9576c54ac4761426fef5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.21.0 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.21.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
content-length: 94320
content-type: font/woff2
date: Wed, 17 Apr 2024 01:35:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-includes/images/w-logo-blue-white-bg.png | 192.185.111.227 | 200 OK | 4.1 kB |
URL GET HTTP/2www.ekcdst.org/wp-includes/images/w-logo-blue-white-bg.png IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typePNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced Hash000bf649cc8f6bf27cfb04d1bcdcd3c7 d73d2f6d74ec6cdcbae07955592962e77d8ae814 6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ekcdst.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 16 Nov 2021 00:04:01 GMT
accept-ranges: bytes
content-length: 4119
content-type: image/png
date: Wed, 17 Apr 2024 01:35:57 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.ekcdst.org
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 01:54:31 GMT
expires: Wed, 16 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 85285
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets//mask-shapes/circle.svg | 192.185.111.227 | 200 OK | 128 B |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets//mask-shapes/circle.svg IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeSVG Scalable Vector Graphics image Hashe674ddcca34799807f3bb0c0095080f7 4bae99ba6a39d5324d009f626fd40a3c4d29a465 072ba738ef63278a7e583c5f9fa7844aaa14e6bae79d9a8973e3eceb78ffb3e9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets//mask-shapes/circle.svg HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/wp-content/uploads/elementor/css/post-6.css?ver=1705004416
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
content-length: 128
content-type: image/svg+xml
date: Wed, 17 Apr 2024 01:35:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 | 192.185.111.227 | 200 OK | 115 kB |
URL GET HTTP/2www.ekcdst.org/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
Size115 kB (115127 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 26 Sep 2023 14:23:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/uploads/2024/01/EKC-BG2.jpg | 192.185.111.227 | 200 OK | 203 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/uploads/2024/01/EKC-BG2.jpg IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJPEG image data, progressive, precision 8, 1920x551, components 3 Size203 kB (203314 bytes) Hash91fb1639015773938a64a3c175235bb7 64477373567e43bc49e58715076b23eca8bdef80 7fa722b36c5296ccefdfcbfb29c6fe5639e675308b48e025431f98e173ad22a6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/01/EKC-BG2.jpg HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/wp-content/uploads/elementor/css/post-6.css?ver=1705004416
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Mon, 01 Jan 2024 20:40:59 GMT
accept-ranges: bytes
content-length: 203314
content-type: image/jpeg
date: Wed, 17 Apr 2024 01:35:56 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.15.1 | 192.185.111.227 | 200 OK | 164 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.15.1 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
Size164 kB (163698 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.15.1 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.15.1 | 192.185.111.227 | 200 OK | 56 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.15.1 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.15.1 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-includes/css/dist/block-library/style.min.css?ver=6.4.2 | 192.185.111.227 | 200 OK | 110 kB |
URL GET HTTP/2www.ekcdst.org/wp-includes/css/dist/block-library/style.min.css?ver=6.4.2 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
Size110 kB (110035 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Outlook | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.2 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Sun, 05 Nov 2023 19:40:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.ekcdst.org/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.15.1 | 192.185.111.227 | 200 OK | 15 kB |
URL GET HTTP/2www.ekcdst.org/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.15.1 IP192.185.111.227:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.ekcdst.org Fingerprint10:41:8A:6B:15:3F:9D:83:28:71:82:EA:C9:EA:F7:3B:9A:94:F1:1F ValidityWed, 20 Mar 2024 19:51:54 GMT - Tue, 18 Jun 2024 19:51:53 GMT
File typeJavaScript source, ASCII text, with very long lines (14869) Hash7a5dea0a705cc2f4cd87dbaaa6666bc6 678bc6f750f13adb29bbc158eb0d9cd813b736fa 97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.15.1 HTTP/1.1
Host: www.ekcdst.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ekcdst.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Sat, 05 Aug 2023 04:20:34 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4359
content-type: application/javascript
date: Wed, 17 Apr 2024 01:35:55 GMT
server: Apache
X-Firefox-Spdy: h2
|
|