| bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t |  193.233.132.14 | 403 Forbidden | 12 kB |
URL User Request GET HTTP/1.1bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t IP193.233.132.14:443 ASN#216319 Chromis It Ltd
CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (717) Hashd30996ca82649d7779795ca6d06cb6e2 fecd4e1413cc8b48fd512b0f9ad4655c9fd176e0 e7b9f1c6a06b41fb4b9fc6b9dafbf9c78ea6b5f0caf1624df821e169ddbb4061
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx
Date: Tue, 16 Apr 2024 13:35:32 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
DDoS-protection: DDoS protection by https://t.me/stprotect
Pragma: no-cache
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/8.1.27
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Expires: 0, Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0, private, no-cache, max-age=0
Set-Cookie: xf_language_id=3; path=/; secure; HttpOnly
xf_language_set=1; path=/; secure; HttpOnly
xf_csrf=4cKTtGrtdDW1J-kY; path=/; secure
Content-Encoding: gzip
|
|
| bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t | 193.233.132.14 | 403 Forbidden | 162 B |
URL User Request GET HTTP/1.1bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t IP193.233.132.14:443 ASN#216319 Chromis It Ltd
CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
X-Frame-Options: SAMEORIGIN
|
|
| bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t | 193.233.132.14 | 403 Forbidden | 12 kB |
URL User Request GET HTTP/1.1bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t IP193.233.132.14:443 ASN#216319 Chromis It Ltd
CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (717) Hash7a05f8ac3ffb0b417f34949838607423 ec42599273f33b0393f112f7c2bd09d72f450179 e98fd9d71b27e101121b1d35d99d68acfa800554f783304d8dbbc1d3aa85a685
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
DDoS-protection: DDoS protection by https://t.me/stprotect
Pragma: no-cache
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/8.1.27
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Expires: 0, Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0, private, no-cache, max-age=0
Content-Encoding: gzip
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery.pjax/2.0.1/jquery.pjax.min.js |  104.17.24.14 | 200 OK | 3.0 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery.pjax/2.0.1/jquery.pjax.min.js IP104.17.24.14:443
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (8295) Hash17fbd50e03d8b8caa56dd3e01d098153 0ced78e5c97127948f5bfbfbb80c4fce5c0f671e f137b9b991574d6e5536c9183648c29da367191c1e5ece1c395be54d20440986
GET /ajax/libs/jquery.pjax/2.0.1/jquery.pjax.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 13:35:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 3005
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-2093"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 556363
expires: Sun, 06 Apr 2025 13:35:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5s9xwVphD0UfqV0mw5dmiHuFSUlyXelCOrG71MViepxuuKQnje5a6473qppeP%2BZNeB9hsVTMI6lZeM61ICi10LOKd7DJMhBJL88i3e7y6GWpRZcV73DdkAQqvmu%2B8DBiJeGcNuCl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87548f2a9d13b51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bhf.ee/js/xf/preamble.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 1.7 kB |
URL GET HTTP/1.1bhf.ee/js/xf/preamble.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (546) Hash57c077607d1b4ba5bfeac6740d6e9576 8ce714d869d8f3b46eb3a7c7689920e1a85b0808 c803ce6d437915781a624a97755010f88deffd73bcf1a8e40fe98fc2d0e1ca3d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/xf/preamble.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 15:52:32 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63920840-d33"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=50&l=3&d=1713225478&k=ea51f44bc366997dfd2a245e0006363c63dcffa0 | 193.233.132.14 | 200 OK | 50 kB |
URL GET HTTP/1.1bhf.ee/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=50&l=3&d=1713225478&k=ea51f44bc366997dfd2a245e0006363c63dcffa0 IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeASCII text, with very long lines (1994) Hashefd6aba09b3b3b2472e6d8bd7f2c6054 06a330ec95fca800aadbac7492f5daf69fdeb497 add2544ca8e0cf7c045db7e5c31e2ac499f3026aac31047986a146d4484b4e08
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less&s=50&l=3&d=1713225478&k=ea51f44bc366997dfd2a245e0006363c63dcffa0 HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
DDoS-protection: DDoS protection by https://t.me/stprotect
Pragma: no-cache
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/8.1.27
Expires: 0, Wed, 16 Apr 2025 13:35:33 GMT
Last-Modified: Mon, 15 Apr 2024 23:57:58 GMT
Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0, public, max-age=31536000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
|
|
| bhf.ee/js/vendor/vendor-compiled.js?_v=7db4285c | 193.233.132.14 | 200 OK | 13 kB |
URL GET HTTP/1.1bhf.ee/js/vendor/vendor-compiled.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (15906) Hashd2eb06a066c2b5c9afcf5e8a0b2e06cb acb83165d05afb464ad1953bfe253ff70f814add 3507ca14c84cbffccd872e634a84d93f50882c817e66ffdf2643a7ed884a205e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/vendor/vendor-compiled.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 15:52:32 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63920840-aab8"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/css.php?css=public%3Auix.less%2Cpublic%3Auix_material.less%2Cpublic%3Auix_pro.less%2Cpublic%3Auix_socialMedia.less%2Cpublic%3Aextra.less&s=50&l=3&d=1713225478&k=6ea9294d4ae14df3215ec5467fbc1a4a2b3c8ad1 | 193.233.132.14 | 200 OK | 18 kB |
URL GET HTTP/1.1bhf.ee/css.php?css=public%3Auix.less%2Cpublic%3Auix_material.less%2Cpublic%3Auix_pro.less%2Cpublic%3Auix_socialMedia.less%2Cpublic%3Aextra.less&s=50&l=3&d=1713225478&k=6ea9294d4ae14df3215ec5467fbc1a4a2b3c8ad1 IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeASCII text, with very long lines (65480) Hash16267267db976f583bf71974f5cbd7e3 09449fdd74c8fb6bb00dad73aa1e19c10ecc30d2 73639a30b63fc1596c0a943df551cda7ca82a30c9b2f9d2558ac73d19c4136b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css.php?css=public%3Auix.less%2Cpublic%3Auix_material.less%2Cpublic%3Auix_pro.less%2Cpublic%3Auix_socialMedia.less%2Cpublic%3Aextra.less&s=50&l=3&d=1713225478&k=6ea9294d4ae14df3215ec5467fbc1a4a2b3c8ad1 HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
DDoS-protection: DDoS protection by https://t.me/stprotect
Pragma: no-cache
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/8.1.27
Expires: 0, Wed, 16 Apr 2025 13:35:33 GMT
Last-Modified: Mon, 15 Apr 2024 23:57:58 GMT
Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0, public, max-age=31536000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN, SAMEORIGIN, SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
|
|
| bhf.ee/js/vendor/jquery/jquery-3.5.1.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 31 kB |
URL GET HTTP/1.1bhf.ee/js/vendor/jquery/jquery-3.5.1.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/vendor/jquery/jquery-3.5.1.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 15:52:32 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63920840-15d84"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/xf/core-compiled.js?_v=7db4285c | 193.233.132.14 | 200 OK | 61 kB |
URL GET HTTP/1.1bhf.ee/js/xf/core-compiled.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (604) Hash7a7b8e32c4cbf984d5a4f7704d8c38a3 60d44381cea4b880c7057c9757645da67b1268b0 24e884826b5cd569ce84c3359aa45f74b5f2fc4ea999ec5a351f2f654b024b18
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/xf/core-compiled.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 15:52:32 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63920840-3439d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/styles/uix_pro/fonts/icons/material-icons/css/materialdesignicons.min.css?d=1713225478 | 193.233.132.14 | 200 OK | 42 kB |
URL GET HTTP/1.1bhf.ee/styles/uix_pro/fonts/icons/material-icons/css/materialdesignicons.min.css?d=1713225478 IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash59535d3e04ecf2ff9bccb97a6737f8b1 574ff5ae6892cc57cad734ad6784cef268c3f4f8 1193e835baf1666d6e589dc3bfee84e7482c8a7536c35883d10cc11abd134604
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /styles/uix_pro/fonts/icons/material-icons/css/materialdesignicons.min.css?d=1713225478 HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-41c3a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/xf/login_signup.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 1.4 kB |
URL GET HTTP/1.1bhf.ee/js/xf/login_signup.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (526) Hash6bfeb424a62541c0ff82fc497c7f14e9 7014aac9c9a0a923a7ac2fe7492fede68f961abc 87c1485b49078a8cf6e2fe375ca6f1db87dd92619672fb6742a094d389ceaf5b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/xf/login_signup.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 15:52:32 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63920840-c92"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/xf/captcha.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 2.1 kB |
URL GET HTTP/1.1bhf.ee/js/xf/captcha.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (544) Hash6af499a4c1a5075280ad58a4978c7e76 2d5ae02b484ce467f5c93775d184bae5fad74712 30eba7671379cde90f5a18dc095299cd56886172dbf361ff9ca2c4360ac02288
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/xf/captcha.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 15:52:32 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63920840-2013"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/bs/pjax/core.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 752 B |
URL GET HTTP/1.1bhf.ee/js/bs/pjax/core.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeASCII text, with very long lines (515) Hash0573f8295d8a269caa25911bdfedf1d9 80f795b806c84d7538a2335d6262520cd723ae54 5aa7991889f5371a22e07cbf62c7351b80872d4ec8e1f2727fe5a13ac97c05c0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/bs/pjax/core.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 05 Jan 2023 11:09:16 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63b6afdc-6a3"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/themehouse/uix_pro/ripple.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 693 B |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/ripple.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (516) Hash83612a883cf4db6b1476a8061a328359 7771873aca7dcb9572e74fad57fcbd1b6be7b58e d4e14fe027197ebdbd6e9ab1f0d963379e4851fdbe85225acf84ef2f1f67558d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/ripple.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-58c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/themehouse/global/20210125.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 3.9 kB |
URL GET HTTP/1.1bhf.ee/js/themehouse/global/20210125.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
Hashd6052f30ed96aa63664df538b9742e3a c8701105cfd5d0252c79eb6868f6206df8bbf215 7e5c23918762997e2851f5ca38481431503c5a7036e19a128035804a935c0e4e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/global/20210125.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-2b29"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/vendor/hammer/hammer.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 7.3 kB |
URL GET HTTP/1.1bhf.ee/js/vendor/hammer/hammer.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (20581) Hash084aa824c6e6f64cf28551d070abe00c dabfade6656a1018d065b5f3673f4154aaf7a8ba 7953631f0e54794d2352a3cfa591c0914d73e14f90141058e3cf16bee7939bcf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/vendor/hammer/hammer.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Dec 2022 15:52:32 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"63920840-511d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/themehouse/uix_pro/indexRadius.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 3.5 kB |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/indexRadius.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (558) Hash0cd0c6c13f79bb3bf95c057b6ac8d3c3 1e91996a6dc5ccb302fa64e37fc86a7613270862 e286c0a2cbad0978d3cfe61a374b5f3133747eec2b088831fe223d5a75ea6193
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/indexRadius.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-2ca7"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/themehouse/uix_pro/vendor/parallax/parallax.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 2.3 kB |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/vendor/parallax/parallax.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (6681) Hashca13e0c8eee04011dfa63c97cbaf90e3 0fd0eaf4d0090febc9f1c04c223a1aa009b7f32d 261aaa72df6476ca604b9142d56d5ffdc04e91d0e858c577796854d7872ace86
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/vendor/parallax/parallax.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:34 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-1ad0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/styles/uix_pro/fonts/icons/material-icons/fonts/materialdesignicons-webfont.woff2?v=6.9.96 | 193.233.132.14 | 200 OK | 320 kB |
URL GET HTTP/1.1bhf.ee/styles/uix_pro/fonts/icons/material-icons/fonts/materialdesignicons-webfont.woff2?v=6.9.96 IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 319984, version 1.0 Size320 kB (319984 bytes) Hash4187121a4353440c2a865dbf1bc1901b 24d77a27ad03c38e046c91fcd48011f16c72429b 34845bb6344cdad5b3e15a37bcfee67bde497cdf5805d31c952c35a92b630e67
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /styles/uix_pro/fonts/icons/material-icons/fonts/materialdesignicons-webfont.woff2?v=6.9.96 HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
DNT: 1
Connection: keep-alive
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:33 GMT
Content-Type: application/octet-stream
Content-Length: 319984
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
ETag: "62ff72b8-4e1f0"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
|
|
| bhf.ee/js/foroagency/coloredusername/index.js?_v=7db4285c | 193.233.132.14 | 200 OK | 380 B |
URL GET HTTP/1.1bhf.ee/js/foroagency/coloredusername/index.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text Hash77206375e65dd27ddf91dabecda43472 cf24306a0f86570fedac4d240f13594beb0ccc7c b0e6169e39f5c8f93c0dae464faa49979fd869e935a0f9b8be0cb53f04349f57
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/foroagency/coloredusername/index.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:34 GMT
Content-Type: application/javascript; charset=utf8
Content-Length: 380
Connection: keep-alive
Last-Modified: Sat, 23 Feb 2019 13:13:36 GMT
ETag: "5c714700-17c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Accept-Ranges: bytes
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
|
|
| bhf.ee/js/themehouse/uix_pro/deferSidebarNav.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 1.3 kB |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/deferSidebarNav.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (535) Hash1781e1f0266596968a071a9611164cfc 977e87a47556686f0755c4ede9ecfdf90899f92d 1f8ce6cc6fb0781eb89a7fbc9eb474b7fd31ebd7bef1b4b1003e6cde033dcfb2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/deferSidebarNav.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:34 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-dc7"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/themehouse/uix_pro/vendor/hover-intent/jquery.hoverIntent.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 939 B |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/vendor/hover-intent/jquery.hoverIntent.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (1933) Hashdb954eadb8d5c1fb769afa7b26366379 a49f29d18742f94ec338d0056c6e348fec54a41a 844723d288a84c14a3f75ff2db1463fca5b4c4c710e3cc3a111624ed959665d9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/vendor/hover-intent/jquery.hoverIntent.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:34 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-8c4"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/themehouse/uix_pro/defer.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 4.0 kB |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/defer.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (546) Hash5e3dcee16c2dffada5b0edf9bf442453 a27c1db5a6c8bc143f68a00d7576e76b1c7ac93d 4ca5c394b025a327b799f80fb140f4702eac4838bbcbf6d19c1c3c27dcfa26a0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/defer.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:34 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-4625"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/themehouse/uix_pro/deferNodesCollapse.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 1.3 kB |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/deferNodesCollapse.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (516) Hash01221a899e514f88a101a0d4fdc14daf 4ee0658938475aa236119b55bca033180e2f98f2 0740cfa18f7a531068226a5942c41a8f0624789cd2cb46597a7ca0259752295a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/deferNodesCollapse.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:34 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-b62"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/js/themehouse/uix_pro/deferWidthToggle.min.js?_v=7db4285c | 193.233.132.14 | 200 OK | 1.1 kB |
URL GET HTTP/1.1bhf.ee/js/themehouse/uix_pro/deferWidthToggle.min.js?_v=7db4285c IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeJavaScript source, ASCII text, with very long lines (556) Hash45fbf09567ba8e5405354649fa0f895f 089bfccd89d2d2356f57a847c33c5e31aa94f82a 12a4495dcf4f799da379ec9caf3cfd5fbc675b6228d9ce5dc00eed49bfb5128c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/themehouse/uix_pro/deferWidthToggle.min.js?_v=7db4285c HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:34 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62ff72b8-94c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Encoding: gzip
|
|
| bhf.ee/xf_addon.js?n=7 | 193.233.132.14 | 200 OK | 1.8 kB |
IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeASCII text, with CRLF line terminators Hashe29f140523cecbb74196f18be1084a0b 191cd00eacfd7d9565261820d693ffc77a4c89e1 f1390669f22168bf052c1a16b934b791710729e7feed13a39a25842c8caa2f21
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /xf_addon.js?n=7 HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:34 GMT
Content-Type: application/javascript
Content-Length: 1835
Last-Modified: Sat, 04 Nov 2023 19:57:33 GMT
Connection: keep-alive
ETag: "6546a22d-72b"
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
|
|
| bhf.ee/data/assets/logo/android-chrome-192x192.png | 193.233.132.14 | 200 OK | 18 kB |
URL GET HTTP/1.1bhf.ee/data/assets/logo/android-chrome-192x192.png IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hasha3fe660b20af475c355744bf9937c6ba d08fa98202359fd2874e4a102fd3dba765b709c2 c83948caa4a95e61a69cae6417075ca074c1b14ffcb457c49a61c9b5797ee3b1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /data/assets/logo/android-chrome-192x192.png HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:34 GMT
Content-Type: image/png
Content-Length: 18069
Connection: keep-alive
Last-Modified: Wed, 17 Mar 2021 19:34:03 GMT
ETag: "605259ab-4695"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Accept-Ranges: bytes
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
|
|
| bhf.ee/data/assets/logo/favicon-32x32.png | 193.233.132.14 | 200 OK | 1.1 kB |
URL GET HTTP/1.1bhf.ee/data/assets/logo/favicon-32x32.png IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashe0c051ed771c678c9ea2c55c016c756d f1fecc7e02ab3be17434ea79ef183f5a03d841ff 85b187c91c5755a851f3a1668483c9c3624abda292a68051db483fc2fc0ca3ee
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /data/assets/logo/favicon-32x32.png HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:34 GMT
Content-Type: image/png
Content-Length: 1090
Connection: keep-alive
Last-Modified: Wed, 17 Mar 2021 19:33:54 GMT
ETag: "605259a2-442"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Accept-Ranges: bytes
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
|
|
| bhf.ee/styles/uix_pro/fonts/icons/material-icons/fonts/materialdesignicons-webfont.woff2?v=5.8.55 | 193.233.132.14 | 200 OK | 320 kB |
URL GET HTTP/1.1bhf.ee/styles/uix_pro/fonts/icons/material-icons/fonts/materialdesignicons-webfont.woff2?v=5.8.55 IP193.233.132.14:443 ASN#216319 Chromis It Ltd
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjectbhf.ee FingerprintE7:33:5E:AA:B8:7F:AD:E2:11:08:80:32:6A:F3:07:0F:18:02:C5:D7 ValiditySat, 03 Feb 2024 10:15:23 GMT - Fri, 03 May 2024 10:15:22 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 319984, version 1.0 Size320 kB (319984 bytes) Hash4187121a4353440c2a865dbf1bc1901b 24d77a27ad03c38e046c91fcd48011f16c72429b 34845bb6344cdad5b3e15a37bcfee67bde497cdf5805d31c952c35a92b630e67
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /styles/uix_pro/fonts/icons/material-icons/fonts/materialdesignicons-webfont.woff2?v=5.8.55 HTTP/1.1
Host: bhf.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/styles/uix_pro/fonts/icons/material-icons/css/materialdesignicons.min.css?d=1713225478
Cookie: xf_language_id=3; xf_language_set=1; xf_csrf=4cKTtGrtdDW1J-kY
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 16 Apr 2024 13:35:34 GMT
Content-Type: application/octet-stream
Content-Length: 319984
Connection: keep-alive
Last-Modified: Fri, 19 Aug 2022 11:23:36 GMT
ETag: "62ff72b8-4e1f0"
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Accept-Ranges: bytes
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
|
|
| newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html | 104.18.124.91 | | 239 kB |
URL newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html IP104.18.124.91:0
File typeHTML document, ASCII text, with very long lines (1165) Size239 kB (239122 bytes) Hash3d1f28caf6c2bab68e6f70fa0952e46b 626164a4b3ef5da55c2d6c2b6f89e271dd622767 e1308539d9ae9c8c04a21cabd5bc4ffba8436c143b32c4fcd6329beb38d25118
GET /captcha/v1/b1c589a/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 13:35:34 GMT
content-type: text/html
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 30 Apr 2024 13:35:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87548f304e8f56bd-OSL
content-encoding: br
|
|
| newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js | 104.18.124.91 | 200 OK | 387 kB |
URL GET HTTP/3newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js IP104.18.124.91:443
Requested byhttps://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=0pppbl32v8fm&host=bhf.ee&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=0a2d0999-a155-4888-8589-b7cd7aeddd3c&theme=dark&origin=https%3A%2F%2Fbhf.ee CertificateIssuerLet's Encrypt Subjecthcaptcha.com Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5 ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
Size387 kB (387091 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /captcha/v1/b1c589a/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 13:35:34 GMT
content-type: application/javascript
etag: W/"5a68efa2b964d5c167fde3b130af8e94"
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 30 Apr 2024 13:35:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87548f310fbd56bd-OSL
content-encoding: br
|
|
| newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js | 104.18.124.91 | 200 OK | 387 kB |
URL GET HTTP/3newassets.hcaptcha.com/captcha/v1/b1c589a/hcaptcha.js IP104.18.124.91:443
Requested byhttps://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=checkbox&id=0pppbl32v8fm&host=bhf.ee&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=0a2d0999-a155-4888-8589-b7cd7aeddd3c&theme=dark&origin=https%3A%2F%2Fbhf.ee CertificateIssuerLet's Encrypt Subjecthcaptcha.com Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5 ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
Size387 kB (387091 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /captcha/v1/b1c589a/hcaptcha.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 13:35:34 GMT
content-type: application/javascript
etag: W/"5a68efa2b964d5c167fde3b130af8e94"
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 30 Apr 2024 13:35:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87548f311fd456bd-OSL
content-encoding: br
|
|
| newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html | 104.18.124.91 | 200 OK | 1.7 kB |
URL GET HTTP/3newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html IP104.18.124.91:443
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjecthcaptcha.com Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5 ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File typeHTML document, ASCII text, with very long lines (1768), with no line terminators Hash825c2f21a9a22bd9911e6686ced37ded 74f703bdafeabb1aad6a04b073d1745298c111dc 0624e04628b8b0d5f77b594b9ef1408296a1774109a47d7c1ac402e1d2636350
GET /captcha/v1/b1c589a/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 13:35:34 GMT
content-type: text/html
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 30 Apr 2024 13:35:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87548f305e9956bd-OSL
content-encoding: br
|
|
| newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html | 104.18.124.91 | 200 OK | 1.7 kB |
URL GET HTTP/3newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html IP104.18.124.91:443
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjecthcaptcha.com Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5 ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File typeHTML document, ASCII text, with very long lines (1768), with no line terminators Hash825c2f21a9a22bd9911e6686ced37ded 74f703bdafeabb1aad6a04b073d1745298c111dc 0624e04628b8b0d5f77b594b9ef1408296a1774109a47d7c1ac402e1d2636350
GET /captcha/v1/b1c589a/static/hcaptcha.html HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 13:35:34 GMT
content-type: text/html
cache-control: public, max-age=1209600
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 30 Apr 2024 13:35:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87548f304e8f56bd-OSL
content-encoding: br
|
|
| api.hcaptcha.com/checksiteconfig?v=b1c589a&host=bhf.ee&sitekey=0a2d0999-a155-4888-8589-b7cd7aeddd3c&sc=1&swa=1&spst=0 | 104.18.124.91 | 200 OK | 718 B |
URL POST HTTP/3api.hcaptcha.com/checksiteconfig?v=b1c589a&host=bhf.ee&sitekey=0a2d0999-a155-4888-8589-b7cd7aeddd3c&sc=1&swa=1&spst=0 IP104.18.124.91:443
Requested byhttps://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=0pppbl32v8fm&host=bhf.ee&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=0a2d0999-a155-4888-8589-b7cd7aeddd3c&theme=dark&origin=https%3A%2F%2Fbhf.ee CertificateIssuerLet's Encrypt Subjecthcaptcha.com Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5 ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (734), with no line terminators Hashf01dd122b59c3d260c41f6d7ff475388 b6a545151d3e71139325da08ad19286565f95d7f d18f4be3150e443ba11df8cd25c8f38c986abc44c5d8864a420bb1a8b69fe83c
POST /checksiteconfig?v=b1c589a&host=bhf.ee&sitekey=0a2d0999-a155-4888-8589-b7cd7aeddd3c&sc=1&swa=1&spst=0 HTTP/1.1
Host: api.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://newassets.hcaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 200 OK
date: Tue, 16 Apr 2024 13:35:34 GMT
content-type: application/json
access-control-allow-origin: https://newassets.hcaptcha.com
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent
access-control-allow-methods: GET, HEAD, POST, OPTIONS
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87548f330b4756bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| newassets.hcaptcha.com/c/282d0ff/hsw.js | 104.18.124.91 | 200 OK | 528 kB |
URL GET HTTP/3newassets.hcaptcha.com/c/282d0ff/hsw.js IP104.18.124.91:443
Requested byhttps://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html#frame=challenge&id=0pppbl32v8fm&host=bhf.ee&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=0a2d0999-a155-4888-8589-b7cd7aeddd3c&theme=dark&origin=https%3A%2F%2Fbhf.ee CertificateIssuerLet's Encrypt Subjecthcaptcha.com Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5 ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
Size528 kB (527636 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/282d0ff/hsw.js HTTP/1.1
Host: newassets.hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newassets.hcaptcha.com/captcha/v1/b1c589a/static/hcaptcha.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 13:35:34 GMT
content-type: application/javascript
etag: W/"f593c8f46e9cb4a93e13a33ec29e7214"
cache-control: public, max-age=3024000
alt-svc: h3=":443"; ma=86400
vary: Origin, Accept-Encoding
cf-cache-status: HIT
expires: Tue, 21 May 2024 13:35:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87548f334b9c56bd-OSL
content-encoding: br
|
|
| hcaptcha.com/1/api.js?onload=XFHCaptchaCallback&render=explicit | 104.18.124.91 | 200 OK | 387 kB |
URL GET HTTP/2hcaptcha.com/1/api.js?onload=XFHCaptchaCallback&render=explicit IP104.18.124.91:443
Requested byhttps://bhf.ee/redirect?to=aHR0cHM6Ly92ay5jb20vd3JpdGU/ZW1haWw9YmlsbHkwODAzQDIxY24uY29t CertificateIssuerLet's Encrypt Subjecthcaptcha.com Fingerprint8F:BD:51:60:5C:FC:EA:F0:74:47:AB:AC:1B:84:1A:7E:3C:68:A7:E5 ValidityFri, 15 Mar 2024 00:09:38 GMT - Thu, 13 Jun 2024 00:09:37 GMT
Size387 kB (387091 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/api.js?onload=XFHCaptchaCallback&render=explicit HTTP/1.1
Host: hcaptcha.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bhf.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 13:35:34 GMT
content-type: application/javascript
cf-ray: 87548f2f5b285688-OSL
cf-cache-status: HIT
age: 0
cache-control: max-age=300
etag: W/"5a68efa2b964d5c167fde3b130af8e94"
expires: Tue, 30 Apr 2024 12:59:46 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
alt-svc: h3=":443"; ma=86400
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
|
|