| bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M |  193.233.132.14 | 403 Forbidden | 12 kB |
URL User Request GET HTTP/1.1bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M IP193.233.132.14:443 ASN#216319 Chromis It Ltd
CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (717) Hashb36b3b0ad33038d1830758654b65e0d3 aa7dfca1da84c16d7dc7d6e308cd228b4408cfe8 62e335097a2462376c8726823c34e7dee80719ad14ea0abe12f3a23a7691374e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx
Date: Tue, 23 Apr 2024 19:50:15 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
DDoS-protection: DDoS protection by https://t.me/stprotect
Pragma: no-cache
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/8.1.27
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Expires: 0, Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0, private, no-cache, max-age=0
Set-Cookie: xf_language_id=3; path=/; secure; HttpOnly
xf_language_set=1; path=/; secure; HttpOnly
xf_csrf=ZcPxXYLvqTRWGUYL; path=/; secure
Content-Encoding: gzip
|
|
| bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M | 193.233.132.14 | 403 Forbidden | 162 B |
URL User Request GET HTTP/1.1bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M IP193.233.132.14:443 ASN#216319 Chromis It Ltd
CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 23 Apr 2024 19:50:15 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
X-Frame-Options: SAMEORIGIN
|
|
| bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M | 193.233.132.14 | 403 Forbidden | 12 kB |
URL User Request GET HTTP/1.1bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M IP193.233.132.14:443 ASN#216319 Chromis It Ltd
CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (717) Hashb0bb94b6765431278520cf6a85872e1c 0f19c951ffa940e4004dc5757c9119f05a4a058a 8b4952655c542487014c185e9120c40102b69e1e00610da642a6c059850fd98a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
DDoS-protection: DDoS protection by https://t.me/stprotect
Pragma: no-cache
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/8.1.27
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Expires: 0, Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0, private, no-cache, max-age=0
Content-Encoding: gzip
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery.pjax/2.0.1/jquery.pjax.min.js |  104.17.24.14 | 200 OK | 3.0 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery.pjax/2.0.1/jquery.pjax.min.js IP104.17.24.14:443
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (8295) Hash17fbd50e03d8b8caa56dd3e01d098153 0ced78e5c97127948f5bfbfbb80c4fce5c0f671e f137b9b991574d6e5536c9183648c29da367191c1e5ece1c395be54d20440986
GET /ajax/libs/jquery.pjax/2.0.1/jquery.pjax.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 19:50:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 3005
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-2093"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1183646
expires: Sun, 13 Apr 2025 19:50:16 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZUnGGY95kBeHYIGowouBOeqjXUSZm7mgaCq2bNpbePZeOJvX6zPTS2N6hErEsGnXxPP3RH8%2BfKmaPbMv6jlvqwDERoBuEfst3BnyMUOhNEhXCYEYtTdcTK%2B6SH2o8aqDyWLT1c9Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879061afe85cb523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bhf.ee/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=50&l=3&d=1713828006&k=ea51f44bc366997dfd2a245e0006363c63dcffa0 | 193.233.132.14 | 200 OK | 50 kB |
URL GET HTTP/1.1bhf.ee/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=50&l=3&d=1713828006&k=ea51f44bc366997dfd2a245e0006363c63dcffa0 IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeASCII text, with very long lines (1994) Hashefd6aba09b3b3b2472e6d8bd7f2c6054 06a330ec95fca800aadbac7492f5daf69fdeb497 add2544ca8e0cf7c045db7e5c31e2ac499f3026aac31047986a146d4484b4e08
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=50&l=3&d=1713828006&k=ea51f44bc366997dfd2a245e0006363c63dcffa0 HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
DDoS-protection: DDoS protection by https://t.me/stprotect
Pragma: no-cache
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/8.1.27
Expires: 0, Wed, 23 Apr 2025 19:50:16 GMT
Last-Modified: Mon, 22 Apr 2024 23:20:06 GMT
Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0, public, max-age=31536000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
|
|
| bhf.ee/js/xf/preamble.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 1.7 kB |
URL GET HTTP/1.1bhf.ee/js/xf/preamble.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (546) Hash57c077607d1b4ba5bfeac6740d6e9576 8ce714d869d8f3b46eb3a7c7689920e1a85b0808 c803ce6d437915781a624a97755010f88deffd73bcf1a8e40fe98fc2d0e1ca3d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/xf/preamble.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 15:52:32 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63920840-d33"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/vendor/vendor-compiled.js?_v=889af6be | 193.233.132.14 | 200 OK | 13 kB |
URL GET HTTP/1.1bhf.ee/js/vendor/vendor-compiled.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (15906) Hashd2eb06a066c2b5c9afcf5e8a0b2e06cb acb83165d05afb464ad1953bfe253ff70f814add 3507ca14c84cbffccd872e634a84d93f50882c817e66ffdf2643a7ed884a205e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/vendor/vendor-compiled.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 15:52:32 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63920840-aab8"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/css.php?css=public%3Auix.less%2Cpublic%3Auix_material.less%2Cpublic%3Auix_pro.less%2Cpublic%3Auix_socialMedia.less%2Cpublic%3Aextra.less&s=50&l=3&d=1713828006&k=6ea9294d4ae14df3215ec5467fbc1a4a2b3c8ad1 | 193.233.132.14 | 200 OK | 18 kB |
URL GET HTTP/1.1bhf.ee/css.php?css=public%3Auix.less%2Cpublic%3Auix_material.less%2Cpublic%3Auix_pro.less%2Cpublic%3Auix_socialMedia.less%2Cpublic%3Aextra.less&s=50&l=3&d=1713828006&k=6ea9294d4ae14df3215ec5467fbc1a4a2b3c8ad1 IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeASCII text, with very long lines (65480) Hash16267267db976f583bf71974f5cbd7e3 09449fdd74c8fb6bb00dad73aa1e19c10ecc30d2 73639a30b63fc1596c0a943df551cda7ca82a30c9b2f9d2558ac73d19c4136b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css.php?css=public%3Auix.less%2Cpublic%3Auix_material.less%2Cpublic%3Auix_pro.less%2Cpublic%3Auix_socialMedia.less%2Cpublic%3Aextra.less&s=50&l=3&d=1713828006&k=6ea9294d4ae14df3215ec5467fbc1a4a2b3c8ad1 HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
DDoS-protection: DDoS protection by https://t.me/stprotect
Pragma: no-cache
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/8.1.27
Expires: 0, Wed, 23 Apr 2025 19:50:16 GMT
Last-Modified: Mon, 22 Apr 2024 23:20:06 GMT
Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0, public, max-age=31536000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
|
|
| bhf.ee/js/xf/login_signup.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 1.4 kB |
URL GET HTTP/1.1bhf.ee/js/xf/login_signup.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (526) Hash6bfeb424a62541c0ff82fc497c7f14e9 7014aac9c9a0a923a7ac2fe7492fede68f961abc 87c1485b49078a8cf6e2fe375ca6f1db87dd92619672fb6742a094d389ceaf5b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/xf/login_signup.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 15:52:32 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63920840-c92"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/vendor/jquery/jquery-3.5.1.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 31 kB |
URL GET HTTP/1.1bhf.ee/js/vendor/jquery/jquery-3.5.1.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/vendor/jquery/jquery-3.5.1.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 15:52:32 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63920840-15d84"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/styles/uix_pro/fonts/icons/material-icons/css/materialdesignicons.min.css?d=1713828006 | 193.233.132.14 | 200 OK | 42 kB |
URL GET HTTP/1.1bhf.ee/styles/uix_pro/fonts/icons/material-icons/css/materialdesignicons.min.css?d=1713828006 IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash59535d3e04ecf2ff9bccb97a6737f8b1 574ff5ae6892cc57cad734ad6784cef268c3f4f8 1193e835baf1666d6e589dc3bfee84e7482c8a7536c35883d10cc11abd134604
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /styles/uix_pro/fonts/icons/material-icons/css/materialdesignicons.min.css?d=1713828006 HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-41c3a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/xf/captcha.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 2.1 kB |
URL GET HTTP/1.1bhf.ee/js/xf/captcha.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (544) Hash6af499a4c1a5075280ad58a4978c7e76 2d5ae02b484ce467f5c93775d184bae5fad74712 30eba7671379cde90f5a18dc095299cd56886172dbf361ff9ca2c4360ac02288
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/xf/captcha.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 15:52:32 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63920840-2013"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/bs/pjax/core.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 752 B |
URL GET HTTP/1.1bhf.ee/js/bs/pjax/core.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeASCII text, with very long lines (515) Hash0573f8295d8a269caa25911bdfedf1d9 80f795b806c84d7538a2335d6262520cd723ae54 5aa7991889f5371a22e07cbf62c7351b80872d4ec8e1f2727fe5a13ac97c05c0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/bs/pjax/core.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 05 Jan 2023 11:09:16 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63b6afdc-6a3"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/themehouse/uix_pro/ripple.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 693 B |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/ripple.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (516) Hash83612a883cf4db6b1476a8061a328359 7771873aca7dcb9572e74fad57fcbd1b6be7b58e d4e14fe027197ebdbd6e9ab1f0d963379e4851fdbe85225acf84ef2f1f67558d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/ripple.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-58c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/themehouse/global/20210125.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 3.9 kB |
URL GET HTTP/1.1bhf.ee/js/themehouse/global/20210125.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
Hashd6052f30ed96aa63664df538b9742e3a c8701105cfd5d0252c79eb6868f6206df8bbf215 7e5c23918762997e2851f5ca38481431503c5a7036e19a128035804a935c0e4e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/global/20210125.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-2b29"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/themehouse/uix_pro/indexRadius.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 3.5 kB |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/indexRadius.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (558) Hash0cd0c6c13f79bb3bf95c057b6ac8d3c3 1e91996a6dc5ccb302fa64e37fc86a7613270862 e286c0a2cbad0978d3cfe61a374b5f3133747eec2b088831fe223d5a75ea6193
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/indexRadius.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-2ca7"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/xf/core-compiled.js?_v=889af6be | 193.233.132.14 | 200 OK | 61 kB |
URL GET HTTP/1.1bhf.ee/js/xf/core-compiled.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (604) Hash7a7b8e32c4cbf984d5a4f7704d8c38a3 60d44381cea4b880c7057c9757645da67b1268b0 24e884826b5cd569ce84c3359aa45f74b5f2fc4ea999ec5a351f2f654b024b18
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/xf/core-compiled.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 15:52:32 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63920840-3439d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/vendor/hammer/hammer.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 7.3 kB |
URL GET HTTP/1.1bhf.ee/js/vendor/hammer/hammer.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (20581) Hash084aa824c6e6f64cf28551d070abe00c dabfade6656a1018d065b5f3673f4154aaf7a8ba 7953631f0e54794d2352a3cfa591c0914d73e14f90141058e3cf16bee7939bcf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/vendor/hammer/hammer.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 15:52:32 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63920840-511d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/themehouse/uix_pro/vendor/parallax/parallax.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 2.3 kB |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/vendor/parallax/parallax.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (6681) Hashca13e0c8eee04011dfa63c97cbaf90e3 0fd0eaf4d0090febc9f1c04c223a1aa009b7f32d 261aaa72df6476ca604b9142d56d5ffdc04e91d0e858c577796854d7872ace86
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/vendor/parallax/parallax.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-1ad0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/styles/uix_pro/fonts/icons/material-icons/fonts/materialdesignicons-webfont.woff2?v=6.9.96 | 193.233.132.14 | 200 OK | 320 kB |
URL GET HTTP/1.1bhf.ee/styles/uix_pro/fonts/icons/material-icons/fonts/materialdesignicons-webfont.woff2?v=6.9.96 IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 319984, version 1.0 Size320 kB (319984 bytes) Hash4187121a4353440c2a865dbf1bc1901b 24d77a27ad03c38e046c91fcd48011f16c72429b 34845bb6344cdad5b3e15a37bcfee67bde497cdf5805d31c952c35a92b630e67
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /styles/uix_pro/fonts/icons/material-icons/fonts/materialdesignicons-webfont.woff2?v=6.9.96 HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
DNT: 1
Connection: keep-alive
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/octet-stream
Content-Length: 319984
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
ETag: "62ff72b8-4e1f0"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
|
|
| bhf.ee/js/themehouse/uix_pro/vendor/hover-intent/jquery.hoverIntent.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 939 B |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/vendor/hover-intent/jquery.hoverIntent.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (1933) Hashdb954eadb8d5c1fb769afa7b26366379 a49f29d18742f94ec338d0056c6e348fec54a41a 844723d288a84c14a3f75ff2db1463fca5b4c4c710e3cc3a111624ed959665d9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/vendor/hover-intent/jquery.hoverIntent.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-8c4"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/themehouse/uix_pro/deferSidebarNav.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 1.3 kB |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/deferSidebarNav.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (535) Hash1781e1f0266596968a071a9611164cfc 977e87a47556686f0755c4ede9ecfdf90899f92d 1f8ce6cc6fb0781eb89a7fbc9eb474b7fd31ebd7bef1b4b1003e6cde033dcfb2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/deferSidebarNav.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-dc7"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/foroagency/coloredusername/index.js?_v=889af6be | 193.233.132.14 | 200 OK | 380 B |
URL GET HTTP/1.1bhf.ee/js/foroagency/coloredusername/index.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text Hash77206375e65dd27ddf91dabecda43472 cf24306a0f86570fedac4d240f13594beb0ccc7c b0e6169e39f5c8f93c0dae464faa49979fd869e935a0f9b8be0cb53f04349f57
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/foroagency/coloredusername/index.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Content-Length: 380
Connection: keep-alive
Last-Modified: Sat, 23 Feb 2019 13:13:36 GMT
ETag: "5c714700-17c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Accept-Ranges: bytes
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
|
|
| bhf.ee/js/themehouse/uix_pro/defer.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 4.0 kB |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/defer.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (546) Hash5e3dcee16c2dffada5b0edf9bf442453 a27c1db5a6c8bc143f68a00d7576e76b1c7ac93d 4ca5c394b025a327b799f80fb140f4702eac4838bbcbf6d19c1c3c27dcfa26a0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/defer.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-4625"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/themehouse/uix_pro/deferNodesCollapse.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 1.3 kB |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/deferNodesCollapse.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (516) Hash01221a899e514f88a101a0d4fdc14daf 4ee0658938475aa236119b55bca033180e2f98f2 0740cfa18f7a531068226a5942c41a8f0624789cd2cb46597a7ca0259752295a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/deferNodesCollapse.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-b62"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/xf_addon.js?n=7 | 193.233.132.14 | 200 OK | 1.8 kB |
IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeASCII text, with CRLF line terminators Hashe29f140523cecbb74196f18be1084a0b 191cd00eacfd7d9565261820d693ffc77a4c89e1 f1390669f22168bf052c1a16b934b791710729e7feed13a39a25842c8caa2f21
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /xf_addon.js?n=7 HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript
Content-Length: 1835
Last-Modified: Sat, 04 Nov 2023 19:57:33 GMT
Connection: keep-alive
ETag: "6546a22d-72b"
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
|
|
| bhf.ee/js/themehouse/uix_pro/deferWidthToggle.min.js?_v=889af6be | 193.233.132.14 | 200 OK | 1.1 kB |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/deferWidthToggle.min.js?_v=889af6be IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (556) Hash45fbf09567ba8e5405354649fa0f895f 089bfccd89d2d2356f57a847c33c5e31aa94f82a 12a4495dcf4f799da379ec9caf3cfd5fbc675b6228d9ce5dc00eed49bfb5128c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/deferWidthToggle.min.js?_v=889af6be HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-94c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/styles/uix_pro/fonts/icons/material-icons/fonts/materialdesignicons-webfont.woff2?v=5.8.55 | 193.233.132.14 | 200 OK | 320 kB |
URL GET HTTP/1.1bhf.ee/styles/uix_pro/fonts/icons/material-icons/fonts/materialdesignicons-webfont.woff2?v=5.8.55 IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 319984, version 1.0 Size320 kB (319984 bytes) Hash4187121a4353440c2a865dbf1bc1901b 24d77a27ad03c38e046c91fcd48011f16c72429b 34845bb6344cdad5b3e15a37bcfee67bde497cdf5805d31c952c35a92b630e67
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /styles/uix_pro/fonts/icons/material-icons/fonts/materialdesignicons-webfont.woff2?v=5.8.55 HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/styles/uix_pro/fonts/icons/material-icons/css/materialdesignicons.min.css?d=1713828006
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:16 GMT
Content-Type: application/octet-stream
Content-Length: 319984
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
ETag: "62ff72b8-4e1f0"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
|
|
| bhf.ee/data/assets/logo/favicon-32x32.png | 193.233.132.14 | 200 OK | 1.1 kB |
URL GET HTTP/1.1bhf.ee/data/assets/logo/favicon-32x32.png IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashe0c051ed771c678c9ea2c55c016c756d f1fecc7e02ab3be17434ea79ef183f5a03d841ff 85b187c91c5755a851f3a1668483c9c3624abda292a68051db483fc2fc0ca3ee
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /data/assets/logo/favicon-32x32.png HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:17 GMT
Content-Type: image/png
Content-Length: 1090
Connection: keep-alive
Last-Modified: Wed, 17 Mar 2021 19:33:54 GMT
ETag: "605259a2-442"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Accept-Ranges: bytes
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
|
|
| bhf.ee/data/assets/logo/android-chrome-192x192.png | 193.233.132.14 | 200 OK | 18 kB |
URL GET HTTP/1.1bhf.ee/data/assets/logo/android-chrome-192x192.png IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hasha3fe660b20af475c355744bf9937c6ba d08fa98202359fd2874e4a102fd3dba765b709c2 c83948caa4a95e61a69cae6417075ca074c1b14ffcb457c49a61c9b5797ee3b1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /data/assets/logo/android-chrome-192x192.png HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=ZcPxXYLvqTRWGUYL
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 23 Apr 2024 19:50:17 GMT
Content-Type: image/png
Content-Length: 18069
Connection: keep-alive
Last-Modified: Wed, 17 Mar 2021 19:34:03 GMT
ETag: "605259ab-4695"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Accept-Ranges: bytes
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
|
|
| newassets.hcaptcha.com/c/e78a38c/hsw.js | 104.18.124.91 | 200 OK | 234 kB |
URL GET HTTP/3newassets.hcaptcha.com/c/e78a38c/hsw.js IP104.18.124.91:443
Requested byhttps://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=05juzxq9r58v&host=bhf.ee&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=0a2d0999-a155-4888-8589-b7cd7aeddd3c&theme=dark&origin=https%3A%2F%2Fbhf.ee CertificateIssuerLet's Encrypt Subjecthcaptcha.com Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5 ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size234 kB (233953 bytes) Hash4342b00f906eea1d05b94293d52aa8b3 ba41f9126678214599e77d71d64bdbde14cf65e6 a2a6e347030a794ca08af4a84555d466ffeb098d7c09abe76851f5be84a5da08
GET /c/e78a38c/hsw.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 19:50:17 GMT
content-type: application/javascript
etag: W/"4342b00f906eea1d05b94293d52aa8b3"
cache-control: public, max-age=3024000
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 28 May 2024 19:50:17 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879061b87d61568e-OSL
content-encoding: br
|
|
| newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js | 104.18.124.91 | 200 OK | 387 kB |
URL GET HTTP/3newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js IP104.18.124.91:443
Requested byhttps://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=checkbox&id=05juzxq9r58v&host=bhf.ee&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=0a2d0999-a155-4888-8589-b7cd7aeddd3c&theme=dark&origin=https%3A%2F%2Fbhf.ee CertificateIssuerLet's Encrypt Subjecthcaptcha.com Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5 ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
Size387 kB (387091 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /captcha/v1/b1c589a/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 19:50:17 GMT
content-type: application/javascript
etag: W/"5a68efa2b964d5c167fde3b130af8e94"
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 07 May 2024 19:50:17 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879061b67b27568e-OSL
content-encoding: br
|
|
| api2.hcaptcha.com/checksiteconfig?v=b1c589a&host=bhf.ee&sitekey=0a2d0999-a155-4888-8589-b7cd7aeddd3c&sc=1&swa=1&spst=0 | 104.18.124.91 | 200 OK | 718 B |
URL POST HTTP/3api2.hcaptcha.com/checksiteconfig?v=b1c589a&host=bhf.ee&sitekey=0a2d0999-a155-4888-8589-b7cd7aeddd3c&sc=1&swa=1&spst=0 IP104.18.124.91:443
Requested byhttps://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=05juzxq9r58v&host=bhf.ee&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=0a2d0999-a155-4888-8589-b7cd7aeddd3c&theme=dark&origin=https%3A%2F%2Fbhf.ee CertificateIssuerLet's Encrypt Subjecthcaptcha.com Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5 ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (734), with no line terminators Hash152e02354ce8e62d31eeee77cdf8dd1f d7d8fe82ac41b796ed7586114555bd317fbc78de 43dcba0d6416ecbaa7b7a26f211340add1d2f0931e465d96deabd9f089b9dc01
POST /checksiteconfig?v=b1c589a&host=bhf.ee&sitekey=0a2d0999-a155-4888-8589-b7cd7aeddd3c&sc=1&swa=1&spst=0 HTTP/1.1
Host: api2.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://newassets.hcaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 200 OK
date: Tue, 23 Apr 2024 19:50:17 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent
access-control-allow-methods: GET, HEAD, POST, OPTIONS
access-control-allow-origin: https://newassets.hcaptcha.com
vary: Origin, Accept-Encoding
cf-cache-status: DYNAMIC
set-cookie: __cflb=0H28vk2VKwPbLoawFj9mU2fhedYxxWRCjcmM6HgwNzH; SameSite=None; Secure; path=/; expires=Tue, 23-Apr-24 20:20:17 GMT; HttpOnly
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879061b82cf5568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hcaptcha.com/1/api.js?onload=XFHCaptchaCallback&render=explicit | 104.18.124.91 | 200 OK | 387 kB |
URL GET HTTP/2hcaptcha.com/1/api.js?onload=XFHCaptchaCallback&render=explicit IP104.18.124.91:443
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjecthcaptcha.com Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5 ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
Size387 kB (387091 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/api.js?onload=XFHCaptchaCallback&render=explicit HTTP/1.1
Host: hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 19:50:17 GMT
content-type: application/javascript
cf-ray: 879061b4afc556cb-OSL
cf-cache-status: HIT
age: 0
cache-control: max-age=300
etag: W/"5a68efa2b964d5c167fde3b130af8e94"
expires: Tue, 07 May 2024 14:11:51 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
alt-svc: h3=":443"; ma=86400
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
|
|
| newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js | 104.18.124.91 | 200 OK | 387 kB |
URL GET HTTP/3newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js IP104.18.124.91:443
Requested byhttps://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=05juzxq9r58v&host=bhf.ee&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=0a2d0999-a155-4888-8589-b7cd7aeddd3c&theme=dark&origin=https%3A%2F%2Fbhf.ee CertificateIssuerLet's Encrypt Subjecthcaptcha.com Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5 ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
Size387 kB (387091 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /captcha/v1/b1c589a/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 19:50:17 GMT
content-type: application/javascript
etag: W/"5a68efa2b964d5c167fde3b130af8e94"
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 07 May 2024 19:50:17 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879061b68b45568e-OSL
content-encoding: br
|
|
| newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html | 104.18.124.91 | 200 OK | 1.7 kB |
URL GET HTTP/3newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html IP104.18.124.91:443
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjecthcaptcha.com Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5 ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File typeHTML document, ASCII text, with very long lines (1768), with no line terminators Hash825c2f21a9a22bd9911e6686ced37ded 74f703bdafeabb1aad6a04b073d1745298c111dc 0624e04628b8b0d5f77b594b9ef1408296a1774109a47d7c1ac402e1d2636350
GET /captcha/v1/b1c589a/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 19:50:17 GMT
content-type: text/html
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 07 May 2024 19:50:17 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879061b5faac568e-OSL
content-encoding: br
|
|
| newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html | 104.18.124.91 | 200 OK | 1.7 kB |
URL GET HTTP/3newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html IP104.18.124.91:443
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vdGVhbV9yY3M CertificateIssuerLet's Encrypt Subjecthcaptcha.com Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5 ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File typeHTML document, ASCII text, with very long lines (1768), with no line terminators Hash825c2f21a9a22bd9911e6686ced37ded 74f703bdafeabb1aad6a04b073d1745298c111dc 0624e04628b8b0d5f77b594b9ef1408296a1774109a47d7c1ac402e1d2636350
GET /captcha/v1/b1c589a/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 19:50:17 GMT
content-type: text/html
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 07 May 2024 19:50:17 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 879061b5faab568e-OSL
content-encoding: br
|
|