| starkmaschinen.de/iokdjd/water/index.html/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de |  116.202.102.103 | 302 Moved Temporarily | 0 B |
URL User Request GET HTTP/1.1starkmaschinen.de/iokdjd/water/index.html/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de IP116.202.102.103:80 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /iokdjd/water/index.html/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de/de HTTP/1.1
Host: starkmaschinen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: PHPSESSID=skfbne3f6q66ae5fe9icroprjg; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: /de/
|
|
| | 116.202.102.103 | | 2.8 kB |
IP116.202.102.103:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, Unicode text, UTF-8 text Hashad6cad7abe92c172b2158718e22bcd32 2d558691e4bf2dfc839509b67449d1b62dfa49b3 e240135d2440b8beec743cac80eb8df1716c98a3b34b4bfa0f435309c31c8b2a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /de/ HTTP/1.1
Host: starkmaschinen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=skfbne3f6q66ae5fe9icroprjg
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Encoding: gzip
|
|
| starkmaschinen.de/css/parking_1.css?6.4 | 116.202.102.103 | 200 OK | 9.4 kB |
URL GET HTTP/1.1starkmaschinen.de/css/parking_1.css?6.4 IP116.202.102.103:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://starkmaschinen.de/de/
Hash88f745da5b65a94e34f9b0127fd945d9 2adb5daa6607fa95fc818ecb9143fbdb1d9a2ea7 cea78dd6a0169977242e7d80a3c2debaa9839c4893cd85e9100b0a3ad08aec51
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/parking_1.css?6.4 HTTP/1.1
Host: starkmaschinen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/de/
Cookie: PHPSESSID=skfbne3f6q66ae5fe9icroprjg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: text/css
Content-Length: 9350
Last-Modified: Fri, 30 Jul 2021 15:48:05 GMT
Connection: keep-alive
ETag: "61041f35-2486"
Accept-Ranges: bytes
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js |  104.17.24.14 | 200 OK | 6.6 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js IP104.17.24.14:443
Requested byhttp://starkmaschinen.de/de/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (20831) Hash56456db9d72a4b380ed3cb63095e6022 6dbce88aee15b42f29083df7a07513cf3b486ba0 66f3a07e1fa9b64a686b66381e4458dbc8abf3dbbff954720c4eec07b84411c2
GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://starkmaschinen.de
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:25:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 6646
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-520c"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 74361
expires: Wed, 16 Apr 2025 23:25:13 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GR7VWHIJBYeBed8MFz5IzujhmqznCCB8b4xfAxpQxE5zZg1TVrhyZIGzGlR9p1mQENnmHsRpABrcjuYpBHotAZi9m3eUGsm99SLp5RPxoSxfbtXP5Lnu3vW8ppBq%2FUZ1lsS3a1pY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87aa54af1f71b527-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.6.0.min.js |  151.101.130.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.min.js IP151.101.130.137:443
Requested byhttp://starkmaschinen.de/de/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://starkmaschinen.de
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 26 Apr 2024 23:25:13 GMT
age: 30094
x-served-by: cache-lga21931-LGA, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 3, 17463
x-timer: S1714173913.462035,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| starkmaschinen.de/js/basics.js.php | 116.202.102.103 | 200 OK | 1.1 kB |
URL GET HTTP/1.1starkmaschinen.de/js/basics.js.php IP116.202.102.103:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://starkmaschinen.de/de/
File typeJavaScript source, ASCII text Hash54cca552758d20edc2a788f126b67861 0e62d487f7a9b7e18bf342aee0f8d737b7a60eed ae6ae57dc845d20c1b808840cd5efdddb7a80e5196df64e86814506f2902ca32
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/basics.js.php HTTP/1.1
Host: starkmaschinen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/de/
Cookie: PHPSESSID=skfbne3f6q66ae5fe9icroprjg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: text/javascript, charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
|
|
| starkmaschinen.de/img/flags/gb.png | 116.202.102.103 | 200 OK | 599 B |
URL GET HTTP/1.1starkmaschinen.de/img/flags/gb.png IP116.202.102.103:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://starkmaschinen.de/de/
File typePNG image data, 16 x 11, 8-bit/color RGB, non-interlaced Hash0894999b108830afc0733ee7b6e08310 a98ec259c5e198fffb3116e4cf950e2d8b695880 5d72c5a8bef80fca6f99f476e15ec95ce2d5e5f65c6dab9ee8e56348be0d39fc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/flags/gb.png HTTP/1.1
Host: starkmaschinen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/de/
Cookie: PHPSESSID=skfbne3f6q66ae5fe9icroprjg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: image/png
Content-Length: 599
Last-Modified: Fri, 30 Jul 2021 15:48:05 GMT
Connection: keep-alive
ETag: "61041f35-257"
Accept-Ranges: bytes
|
|
| starkmaschinen.de/img/flags/de.png | 116.202.102.103 | 200 OK | 545 B |
URL GET HTTP/1.1starkmaschinen.de/img/flags/de.png IP116.202.102.103:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://starkmaschinen.de/de/
File typePNG image data, 16 x 11, 8-bit/color RGB, non-interlaced Hashddabae687ecae5edaaeb808d440543e6 1daf2d67ccaa5be01a330a231ac996a9d5575594 3323814006fe6739493d27057954941830b59eff37ebaac994310e17c522dd57
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/flags/de.png HTTP/1.1
Host: starkmaschinen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/de/
Cookie: PHPSESSID=skfbne3f6q66ae5fe9icroprjg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: image/png
Content-Length: 545
Last-Modified: Fri, 30 Jul 2021 15:48:05 GMT
Connection: keep-alive
ETag: "61041f35-221"
Accept-Ranges: bytes
|
|
| starkmaschinen.de/img/tpl1_quality.png | 116.202.102.103 | 200 OK | 23 kB |
URL GET HTTP/1.1starkmaschinen.de/img/tpl1_quality.png IP116.202.102.103:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://starkmaschinen.de/de/
File typePNG image data, 150 x 109, 8-bit/color RGB, non-interlaced Hashf8fa1ec06c70f897708aebcf2d3fb14b 692910efef0722ceb89708b67f8020057431d1cd 011f6e221ce67294044a42934d3161f0f8ee7211d59bff56ac79d42d19cfd901
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/tpl1_quality.png HTTP/1.1
Host: starkmaschinen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/de/
Cookie: PHPSESSID=skfbne3f6q66ae5fe9icroprjg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: image/png
Content-Length: 22726
Last-Modified: Fri, 30 Jul 2021 15:48:05 GMT
Connection: keep-alive
ETag: "61041f35-58c6"
Accept-Ranges: bytes
|
|
| starkmaschinen.de/img/tpl1_bg_btn.png | 116.202.102.103 | 200 OK | 1.0 kB |
URL GET HTTP/1.1starkmaschinen.de/img/tpl1_bg_btn.png IP116.202.102.103:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://starkmaschinen.de/de/
File typePNG image data, 2 x 36, 8-bit/color RGB, non-interlaced Hashb4774b22510a560b0959d2853fe2ecfb dc71608d2531bb9b33c10d6f0ac424a75f5d087b 7878f99e050ec22b75a3409cf4841220abb3bc2166b0e1b5b1b48210dcccab27
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/tpl1_bg_btn.png HTTP/1.1
Host: starkmaschinen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/css/parking_1.css?6.4
Cookie: PHPSESSID=skfbne3f6q66ae5fe9icroprjg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: image/png
Content-Length: 1023
Last-Modified: Fri, 30 Jul 2021 15:48:05 GMT
Connection: keep-alive
ETag: "61041f35-3ff"
Accept-Ranges: bytes
|
|
| starkmaschinen.de/img/tpl1_header_green.png | 116.202.102.103 | 200 OK | 3.2 kB |
URL GET HTTP/1.1starkmaschinen.de/img/tpl1_header_green.png IP116.202.102.103:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://starkmaschinen.de/de/
File typePNG image data, 891 x 68, 8-bit/color RGBA, non-interlaced Hashc269101df4ce19646a83f2b0d667ca44 5222899e2940463d345a385db0547b28be6b00dd 982f3ce777d2453e1d2a5f4732d739aabe67d456af55ffef2fa7807ffae96411
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/tpl1_header_green.png HTTP/1.1
Host: starkmaschinen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/css/parking_1.css?6.4
Cookie: PHPSESSID=skfbne3f6q66ae5fe9icroprjg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: image/png
Content-Length: 3210
Last-Modified: Fri, 30 Jul 2021 15:48:05 GMT
Connection: keep-alive
ETag: "61041f35-c8a"
Accept-Ranges: bytes
|
|
| starkmaschinen.de/img/tpl1_for_sale.png | 116.202.102.103 | 200 OK | 40 kB |
URL GET HTTP/1.1starkmaschinen.de/img/tpl1_for_sale.png IP116.202.102.103:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://starkmaschinen.de/de/
File typePNG image data, 284 x 223, 8-bit/color RGBA, non-interlaced Hash90fa533bc47de042468235368b89d1cb 303a0dd585177bbad95844eb014b341e2a2be448 776d85c5fcaef771761d88b840ab5d8b975a16f462557a1f38eb1423cbca7093
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/tpl1_for_sale.png HTTP/1.1
Host: starkmaschinen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/css/parking_1.css?6.4
Cookie: PHPSESSID=skfbne3f6q66ae5fe9icroprjg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: image/png
Content-Length: 40250
Last-Modified: Fri, 30 Jul 2021 15:48:05 GMT
Connection: keep-alive
ETag: "61041f35-9d3a"
Accept-Ranges: bytes
|
|
| starkmaschinen.de/img/tpl1_footer_domainname.de.png | 116.202.102.103 | 200 OK | 3.7 kB |
URL GET HTTP/1.1starkmaschinen.de/img/tpl1_footer_domainname.de.png IP116.202.102.103:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://starkmaschinen.de/de/
File typePNG image data, 178 x 20, 8-bit/color RGB, non-interlaced Hashde11db1b07f83db723ce530240abe543 c48d4b8a9eeeff15c1a748185ce3f4135a5160b3 9e52d126a178bcf23d3d4bcc910b152df0e07e95f24e1d59e10f68f07bdfea8e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/tpl1_footer_domainname.de.png HTTP/1.1
Host: starkmaschinen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/css/parking_1.css?6.4
Cookie: PHPSESSID=skfbne3f6q66ae5fe9icroprjg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: image/png
Content-Length: 3743
Last-Modified: Fri, 30 Jul 2021 15:48:05 GMT
Connection: keep-alive
ETag: "61041f35-e9f"
Accept-Ranges: bytes
|
|
| trade2.domainname.de/?setLang=de | 168.119.49.141 | 200 OK | 23 B |
URL GET HTTP/1.1trade2.domainname.de/?setLang=de IP168.119.49.141:443 ASN#24940 Hetzner Online GmbH
Requested byhttp://starkmaschinen.de/de/ CertificateIssuerLet's Encrypt Subjecttrade2.domainname.de Fingerprint71:4B:71:F1:03:59:1D:E4:26:C2:C7:9D:F7:F1:32:B3:BE:EE:0D:F8 ValidityMon, 04 Mar 2024 02:06:36 GMT - Sun, 02 Jun 2024 02:06:35 GMT
File typeHTML document, ASCII text, with no line terminators Hashb91a89c5afdb0989b1d158ce65f315bb 3bb4c720731d5d3a7e6650ffab50097809270a05 3684349d6125cfdbff4a74ca5a211bd5ad4a4e3cf3872798800a6b38a0f68214
GET /?setLang=de HTTP/1.1
Host: trade2.domainname.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.24
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=85g190ke1b1ip2jibeks39ambp; path=/
Lang=de
|
|
| trade2.domainname.de/?setLang=de | 168.119.49.141 | 200 OK | 23 B |
URL GET HTTP/1.1trade2.domainname.de/?setLang=de IP168.119.49.141:443 ASN#24940 Hetzner Online GmbH
Requested byhttp://starkmaschinen.de/de/ CertificateIssuerLet's Encrypt Subjecttrade2.domainname.de Fingerprint71:4B:71:F1:03:59:1D:E4:26:C2:C7:9D:F7:F1:32:B3:BE:EE:0D:F8 ValidityMon, 04 Mar 2024 02:06:36 GMT - Sun, 02 Jun 2024 02:06:35 GMT
File typeHTML document, ASCII text, with no line terminators Hashb91a89c5afdb0989b1d158ce65f315bb 3bb4c720731d5d3a7e6650ffab50097809270a05 3684349d6125cfdbff4a74ca5a211bd5ad4a4e3cf3872798800a6b38a0f68214
GET /?setLang=de HTTP/1.1
Host: trade2.domainname.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.24
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=k6t9b8pjh2d79vvoskn3nonar0; path=/
Lang=de
|
|
| starkmaschinen.de/favicon.ico | 116.202.102.103 | 302 Moved Temporarily | 0 B |
URL GET HTTP/1.1starkmaschinen.de/favicon.ico IP116.202.102.103:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://starkmaschinen.de/de/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: starkmaschinen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/de/
Cookie: PHPSESSID=skfbne3f6q66ae5fe9icroprjg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: /de/
|
|
| | 116.202.102.103 | | 2.8 kB |
IP116.202.102.103:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, Unicode text, UTF-8 text Hashc05aa79601dca434dc4e1dd3e58ecf18 d4e71308b618d2acfe857430c589c70b92640b38 39a02f407299a90ffaf3726058b54d2acc27a67d5e4f57f33ecf29e5fba21b7e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /de/ HTTP/1.1
Host: starkmaschinen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://starkmaschinen.de/de/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=skfbne3f6q66ae5fe9icroprjg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:25:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Encoding: gzip
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js | 104.18.11.207 | 200 OK | 26 kB |
URL GET HTTP/2stackpath.bootstrapcdn.com/bootstrap/4.3.1/js/bootstrap.min.js IP104.18.11.207:443
Requested byhttp://starkmaschinen.de/de/ CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (57791) Hashe1d98d47689e00f8ecbc5d9f61bdb42e 6778fed3cf095a318141a31f455c8f4663885bde 0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b
GET /bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://starkmaschinen.de
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:25:13 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"e1d98d47689e00f8ecbc5d9f61bdb42e"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-cachedat: 03/18/2024 12:53:16
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1078
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 8604ea02e44422794bbbc21c229bf853
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87aa54af2ea1569c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| starkmaschinen.de/js/_view.php?704374048.skfbne3f6q66ae5fe9icroprjg | 116.202.102.103 | 200 OK | 0 B |
URL GET HTTP/1.1starkmaschinen.de/js/_view.php?704374048.skfbne3f6q66ae5fe9icroprjg IP116.202.102.103:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://starkmaschinen.de/de/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/_view.php?704374048.skfbne3f6q66ae5fe9icroprjg HTTP/1.1
Host: starkmaschinen.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/de/
Cookie: PHPSESSID=skfbne3f6q66ae5fe9icroprjg
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 26 Apr 2024 23:25:18 GMT
Content-Type: text/javascript, charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css | 104.18.11.207 | 200 OK | 156 kB |
URL GET HTTP/2stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css IP104.18.11.207:443
Requested byhttp://starkmaschinen.de/de/ CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeASCII text, with very long lines (65324) Size156 kB (155758 bytes) Hasha15c2ac3234aa8f6064ef9c1f7383c37 6e10354828454898fda80f55f3decb347fd9ed21 60b19e5da6a9234ff9220668a5ec1125c157a268513256188ee80f2d2c8d8d36
GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://starkmaschinen.de
DNT: 1
Connection: keep-alive
Referer: http://starkmaschinen.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:25:13 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding, Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"a15c2ac3234aa8f6064ef9c1f7383c37"
last-modified: Mon, 25 Jan 2021 22:04:08 GMT
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 03/18/2024 12:00:10
cdn-edgestorageid: 1068
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: b95320dc7bdab64bf2f4435ab4b6e771
cdn-cache: HIT
content-encoding: br
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87aa54af0e8c569c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|