| vmpokladne.sk/pn/assets/logo.png |  37.9.175.187 | 200 OK | 6.0 kB |
URL GET HTTP/2vmpokladne.sk/pn/assets/logo.png IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typePNG image data, 282 x 48, 8-bit/color RGBA, non-interlaced Hash6e226e7594d94bf6e63992d2cf423e7a ebebc7930a0bb1631152007ce7935a75d40e6a1f 6e2341a524af81d8b9362e829287bede024d49eb00f2983f39ef3e8675614ac6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/logo.png HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: image/png
content-length: 6036
last-modified: Sun, 10 Mar 2024 10:42:54 GMT
etag: "1794-6134c16636a1f"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/translate_24dp.png | 37.9.175.187 | 200 OK | 846 B |
URL GET HTTP/2vmpokladne.sk/pn/assets/translate_24dp.png IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced Hashe9cd262114358f26b7608b56905185dc 6dbde0a96deaab2b529723ce26c62043cf9180ab 5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/translate_24dp.png HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: image/png
content-length: 846
last-modified: Sun, 10 Mar 2024 10:42:53 GMT
etag: "34e-6134c16580fdf"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/stats | 37.9.175.187 | 200 OK | 101 B |
URL GET HTTP/2vmpokladne.sk/pn/assets/stats IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typeASCII text, with no line terminators Hash357f185058068abe232e6ccfadf6e6bd 235de443f209bbe260abc2d507236c7a1bc545b1 12f64ad6ca5e7436e96ffce9665a3fc82692b3ad10dbb94c3475ebe021b0c1b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/stats HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-length: 101
last-modified: Sun, 10 Mar 2024 10:42:53 GMT
etag: "65-6134c1659f43f"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/statistics | 37.9.175.187 | 200 OK | 936 B |
URL GET HTTP/2vmpokladne.sk/pn/assets/statistics IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typeJavaScript source, ASCII text, with very long lines (384), with CRLF line terminators Hash658c6d46287df98b0ae80396a88de2f7 76d13917847258dfade08b8a05a2e5d19aa15a9f a5a9fd261ee1951a592b70f2b9ef1c8ce7d772778d1e91deae0321f219c59585
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/statistics HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-length: 936
last-modified: Sun, 10 Mar 2024 10:42:54 GMT
etag: "3a8-6134c1664353f"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/Initializer.js.t%EF%BF%BDl%EF%BF%BDchargement | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/assets/Initializer.js.t%EF%BF%BDl%EF%BF%BDchargement IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/Initializer.js.t%EF%BF%BDl%EF%BF%BDchargement HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/SiteIntegrationLazyMain.cfg.t%EF%BF%BDl%EF%BF%BDchargement | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/assets/SiteIntegrationLazyMain.cfg.t%EF%BF%BDl%EF%BF%BDchargement IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/SiteIntegrationLazyMain.cfg.t%EF%BF%BDl%EF%BF%BDchargement HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/unblu.interceptor.min.js.t%EF%BF%BDl%EF%BF%BDchargement | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/assets/unblu.interceptor.min.js.t%EF%BF%BDl%EF%BF%BDchargement IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/unblu.interceptor.min.js.t%EF%BF%BDl%EF%BF%BDchargement HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/pfunblulegacy.js.t%EF%BF%BDl%EF%BF%BDchargement | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/assets/pfunblulegacy.js.t%EF%BF%BDl%EF%BF%BDchargement IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/pfunblulegacy.js.t%EF%BF%BDl%EF%BF%BDchargement HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/unblu.integration.component.min.js.t%EF%BF%BDl%EF%BF%BDchargement | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/assets/unblu.integration.component.min.js.t%EF%BF%BDl%EF%BF%BDchargement IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/unblu.integration.component.min.js.t%EF%BF%BDl%EF%BF%BDchargement HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/SiteIntegrationLazyMain.js.t%EF%BF%BDl%EF%BF%BDchargement | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/assets/SiteIntegrationLazyMain.js.t%EF%BF%BDl%EF%BF%BDchargement IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/SiteIntegrationLazyMain.js.t%EF%BF%BDl%EF%BF%BDchargement HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/all.hv.min.js.t%EF%BF%BDl%EF%BF%BDchargement | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/assets/all.hv.min.js.t%EF%BF%BDl%EF%BF%BDchargement IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/all.hv.min.js.t%EF%BF%BDl%EF%BF%BDchargement HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/all.ef.min.js.t%EF%BF%BDl%EF%BF%BDchargement | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/assets/all.ef.min.js.t%EF%BF%BDl%EF%BF%BDchargement IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/all.ef.min.js.t%EF%BF%BDl%EF%BF%BDchargement HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/index.php?redirection=login | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/index.php?redirection=login IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/index.php?redirection=login HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: clients/login.php?verification#_
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/index.php?redirection=login | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/index.php?redirection=login IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/index.php?redirection=login HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: clients/login.php?verification#_
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/index.php?redirection=login | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/index.php?redirection=login IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/index.php?redirection=login HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: clients/login.php?verification#_
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/index.php?redirection=login | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/index.php?redirection=login IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/index.php?redirection=login HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: clients/login.php?verification#_
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/index.php?redirection=login | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/index.php?redirection=login IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/index.php?redirection=login HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: clients/login.php?verification#_
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/index.php?redirection=login | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/index.php?redirection=login IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/index.php?redirection=login HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: clients/login.php?verification#_
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/translateelement.css | 37.9.175.187 | 200 OK | 3.4 kB |
URL GET HTTP/2vmpokladne.sk/pn/assets/translateelement.css IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typeASCII text, with very long lines (18670) Hash15ab5dfc566a9a19f6e89a72b7819e43 064aac1e8bc5a26c5986e40659bc328157ec3b53 5d0a6e3bc914db376bf187c380750b197c317e1bf40fab9ad959ad5facd8f9ed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/translateelement.css HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sun, 10 Mar 2024 10:42:54 GMT
etag: W/"4924-6134c166761bf"
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/index.php?redirection=login | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/index.php?redirection=login IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/index.php?redirection=login HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: clients/login.php?verification#_
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/img/icons--sprite.png | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/img/icons--sprite.png IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/img/icons--sprite.png HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | | 6.6 kB |
URL vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:0 ASN#51013 WebSupport s.r.o.
CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (539) Hash063282c7f5eeba08ff7f61da57684b94 c1daa407e7bbe639d9f6456b3d7f44b4c75af160 41b7ad3307d6c805401b2f55ac7082e1b3693a14c97152f2ed13f583c09cfb6a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | | 6.6 kB |
URL vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:0 ASN#51013 WebSupport s.r.o.
CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (539) Hash063282c7f5eeba08ff7f61da57684b94 c1daa407e7bbe639d9f6456b3d7f44b4c75af160 41b7ad3307d6c805401b2f55ac7082e1b3693a14c97152f2ed13f583c09cfb6a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | | 6.6 kB |
URL vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:0 ASN#51013 WebSupport s.r.o.
CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (539) Hash063282c7f5eeba08ff7f61da57684b94 c1daa407e7bbe639d9f6456b3d7f44b4c75af160 41b7ad3307d6c805401b2f55ac7082e1b3693a14c97152f2ed13f583c09cfb6a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/index.php?redirection=login | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/index.php?redirection=login IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/index.php?redirection=login HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: clients/login.php?verification#_
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | | 6.6 kB |
URL vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:0 ASN#51013 WebSupport s.r.o.
CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (539) Hash063282c7f5eeba08ff7f61da57684b94 c1daa407e7bbe639d9f6456b3d7f44b4c75af160 41b7ad3307d6c805401b2f55ac7082e1b3693a14c97152f2ed13f583c09cfb6a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/all.hv.mobile.min.css | 37.9.175.187 | 200 OK | 74 kB |
URL GET HTTP/2vmpokladne.sk/pn/assets/all.hv.mobile.min.css IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash9a0caf0e0fd888c5b10b5d4088115f71 da61771c68be7ddee07d9299c94a902e105c69ef d26d39f8fcf4298de312d27daee1ea3813365903bbceb4865b30dbe32439343d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/all.hv.mobile.min.css HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sun, 10 Mar 2024 10:42:53 GMT
etag: W/"98c33-6134c1656f69e"
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/img/index.php?redirection=login | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/img/index.php?redirection=login IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/img/index.php?redirection=login HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/index.php?redirection=login | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/index.php?redirection=login IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/index.php?redirection=login HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: clients/login.php?verification#_
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/fonts/frutiger-light.ttf | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/fonts/frutiger-light.ttf IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/fonts/frutiger-light.ttf HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | | 6.6 kB |
URL vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:0 ASN#51013 WebSupport s.r.o.
CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (539) Hash063282c7f5eeba08ff7f61da57684b94 c1daa407e7bbe639d9f6456b3d7f44b4c75af160 41b7ad3307d6c805401b2f55ac7082e1b3693a14c97152f2ed13f583c09cfb6a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
DNT: 1
Connection: keep-alive
Cookie: EF003=29942; PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/index.php?redirection=login | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/index.php?redirection=login IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/index.php?redirection=login HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: clients/login.php?verification#_
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/index.php?redirection=login | 37.9.175.187 | 302 Found | 0 B |
URL GET HTTP/2vmpokladne.sk/pn/index.php?redirection=login IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/index.php?redirection=login HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: clients/login.php?verification#_
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | | 7.1 kB |
URL vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:0 ASN#51013 WebSupport s.r.o.
CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (539) Hash063282c7f5eeba08ff7f61da57684b94 c1daa407e7bbe639d9f6456b3d7f44b4c75af160 41b7ad3307d6c805401b2f55ac7082e1b3693a14c97152f2ed13f583c09cfb6a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
DNT: 1
Connection: keep-alive
Cookie: EF003=29942; PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | | 22 kB |
URL vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:0 ASN#51013 WebSupport s.r.o.
CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (539) Hash063282c7f5eeba08ff7f61da57684b94 c1daa407e7bbe639d9f6456b3d7f44b4c75af160 41b7ad3307d6c805401b2f55ac7082e1b3693a14c97152f2ed13f583c09cfb6a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
DNT: 1
Connection: keep-alive
Cookie: EF003=29942; PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | | 7.1 kB |
URL vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:0 ASN#51013 WebSupport s.r.o.
CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (539) Hash063282c7f5eeba08ff7f61da57684b94 c1daa407e7bbe639d9f6456b3d7f44b4c75af160 41b7ad3307d6c805401b2f55ac7082e1b3693a14c97152f2ed13f583c09cfb6a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | 200 OK | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | 200 OK | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
DNT: 1
Connection: keep-alive
Cookie: EF003=29942; PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/fonts/frutiger-light.woff | 37.9.175.187 | 302 Found | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/fonts/frutiger-light.woff IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/fonts/frutiger-light.woff HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | 200 OK | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
DNT: 1
Connection: keep-alive
Cookie: EF003=29942; PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | 200 OK | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
DNT: 1
Connection: keep-alive
Cookie: EF003=29942; PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/fonts/frutiger-bold.woff | 37.9.175.187 | 302 Found | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/fonts/frutiger-bold.woff IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/fonts/frutiger-bold.woff HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/fonts/frutiger-bold.ttf | 37.9.175.187 | 302 Found | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/fonts/frutiger-bold.ttf IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/fonts/frutiger-bold.ttf HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/img/images/input-border-left.png | 37.9.175.187 | 302 Found | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/img/images/input-border-left.png IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/img/images/input-border-left.png HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: ../index.php?redirection=login
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/images/branding/product/2x/translate_24dp.png |  142.250.74.35 | 200 OK | 1.8 kB |
URL GET HTTP/2www.gstatic.com/images/branding/product/2x/translate_24dp.png IP142.250.74.35:443
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced Hashc69c796362406f9e11c7f4bf5bb628da e489ce95ab56208090868882113d7416abf46775 4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 16:59:09 GMT
expires: Tue, 15 Apr 2025 16:59:09 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
vary: Origin
age: 84888
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | 200 OK | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | 200 OK | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | 200 OK | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | 200 OK | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
DNT: 1
Connection: keep-alive
Cookie: EF003=29942; PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/favicon.ico | 37.9.175.187 | 200 OK | 1.2 kB |
URL GET HTTP/2vmpokladne.sk/pn/assets/favicon.ico IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hashaa63be4c83d02c2115138aeab48cdab4 babd89e05fcf1f2cf463f516c8f6580648d4addc 1037dbafc26b2dc30e270d7bf9cf0321a1e01a7f7507743af92d2427ea9bc4de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/favicon.ico HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: image/x-icon
vary: Accept-Encoding
last-modified: Sun, 10 Mar 2024 10:42:53 GMT
etag: W/"47e-6134c1652ef5e"
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | 200 OK | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | 200 OK | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php | 37.9.175.187 | 200 OK | 31 kB |
URL User Request GET HTTP/2vmpokladne.sk/pn/clients/login.php IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524; path=/
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | 200 OK | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | 200 OK | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/clients/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | 200 OK | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
DNT: 1
Connection: keep-alive
Cookie: EF003=29942; PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/clients/login.php?verification | 37.9.175.187 | 200 OK | 31 kB |
URL GET HTTP/2vmpokladne.sk/pn/clients/login.php?verification IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/clients/login.php?verification HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vmpokladne.sk/pn/assets/all.hv.min.css
DNT: 1
Connection: keep-alive
Cookie: EF003=29942; PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:57 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: br
X-Firefox-Spdy: h2
|
|
| vmpokladne.sk/pn/assets/all.hv.min.css | 37.9.175.187 | 200 OK | 600 kB |
URL GET HTTP/2vmpokladne.sk/pn/assets/all.hv.min.css IP37.9.175.187:443 ASN#51013 WebSupport s.r.o.
Requested byhttps://vmpokladne.sk/pn/clients/login.php CertificateIssuerLet's Encrypt Subjectvmpokladne.sk Fingerprint87:9E:9C:29:AB:57:74:21:DC:16:36:9F:39:BE:D0:FB:67:1B:FF:72 ValiditySun, 24 Mar 2024 09:24:36 GMT - Sat, 22 Jun 2024 09:24:35 GMT
Size600 kB (600456 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pn/assets/all.hv.min.css HTTP/1.1
Host: vmpokladne.sk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vmpokladne.sk/pn/clients/login.php
Cookie: PHPSESSID=b862629bc31dc341e7cdc565a8dbc524
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 16 Apr 2024 16:33:56 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sun, 10 Mar 2024 10:42:53 GMT
etag: W/"92988-6134c16510afe"
content-encoding: br
X-Firefox-Spdy: h2
|
|