Report - magicbath.co.in/css/blue-dv/clients/username.php

Report Overview

Submitted URL
magicbath.co.in/css/blue-dv/clients/username.php
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 15:39:58
Access
public
Website Title
Swisscom Login
Final URL
magicbath.co.in/css/blue-dv/clients/username.php
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
46

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
magicbath.co.in	unknown	2020-01-18	2020-02-23	2024-04-14	12 kB	1.1 MB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	magicbath.co.in/css/blue-dv/clients/username.php	Swisscom IT Services AG

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed
2024-04-19	medium	magicbath.co.in	Sinkholed

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	magicbath.co.in/css/blue-dv/clients/username/username.bundle-8961fe6fd577dfd66d12b626e64d7cff.js	2.8 kB	2023-03-26	2024-04-29
Pretty URL magicbath.co.in/css/blue-dv/clients/username/username.bundle-8961fe6fd577dfd66d12b626e64d7cff.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 14:36:03 Last Seen2024-04-29 19:04:01 Times Seen152 Hash 8961fe6fd577dfd66d12b626e64d7cff b6c8fcfb325c56ac786080cbeafefb8f24838657 1573208ffc6c2a4284750137888f470eb10838d7abf5bd2895dd8ac46642be93 Loading...

	magicbath.co.in/css/blue-dv/clients/username/7711.bundle.js	21 kB	2023-03-26	2024-04-29
Pretty URL magicbath.co.in/css/blue-dv/clients/username/7711.bundle.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 11:15:51 Last Seen2024-04-29 19:04:01 Times Seen190 Hash 67dee5ca5f1e887b8ed7f21e4a9c3932 086ea5852d22a82f9e2eb302223cc4aad88918b1 fd6609fc3a22db1dce8142ad9e9377f05b23376cef25f4010be64853dcae43bd Loading...

	magicbath.co.in/css/blue-dv/clients/username/7022.bundle.js	27 kB	2023-03-26	2024-04-29
Pretty URL magicbath.co.in/css/blue-dv/clients/username/7022.bundle.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 11:15:51 Last Seen2024-04-29 19:04:01 Times Seen168 Hash 1f279ceddc9d52875b308e86540612a9 5e8841cbc03419be2ad935bbc909e01364538203 a0db61f9fb9b3fb38ef71452d6f193677575e337fcfc06c63d86c741bef40aca Loading...

	magicbath.co.in/css/blue-dv/clients/username/2475.bundle.js	24 kB	2023-03-26	2024-04-29
Pretty URL magicbath.co.in/css/blue-dv/clients/username/2475.bundle.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 11:15:51 Last Seen2024-04-29 19:04:01 Times Seen190 Hash 44a3b4440c3283969ef120c4c2c17e4e 911f93fa1b71803d8627662d635bef88cecb6f8a 14ad0430c69b5fd31a519b3bb0ba5023c3f496f5de2bcfb75de8dd62866b02b1 Loading...

	magicbath.co.in/css/blue-dv/clients/username/commons.bundle-913907a5e0f9824203503b4e7fb8d96c.js	91 kB	2023-04-06	2024-04-20
Pretty URL magicbath.co.in/css/blue-dv/clients/username/commons.bundle-913907a5e0f9824203503b4e7fb8d96c.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-06 19:04:41 Last Seen2024-04-20 18:32:44 Times Seen9 Hash d80ef031a5eec9172d9c4cdda4b0855a 93f3f9a5eec12bbfb0842a7b349f8258ab7a6194 e7771143d046c9272c2eaafc0fea7cd69910206a79cc075b94ab9b130dc9ceaa Loading...

	magicbath.co.in/css/blue-dv/clients/username/login-layout.bundle-86802edb5402d853a443e918fd5a66ec.js	228 kB	2023-04-06	2024-04-20
Pretty URL magicbath.co.in/css/blue-dv/clients/username/login-layout.bundle-86802edb5402d853a443e918fd5a66ec.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-06 19:04:41 Last Seen2024-04-20 18:32:44 Times Seen10 Hash 6c00ddf2fbed12dc18b66e2f1907f788 1b14e2253ae5973f787e9ba8268f3869f510563e 08db9e1954b292db8ccf4b840bc6b8585a6102dcff4c97cb9be3c7044b5ef534 Loading...

	magicbath.co.in/css/blue-dv/clients/username/8097.bundle.js	72 kB	2023-03-26	2024-04-29
Pretty URL magicbath.co.in/css/blue-dv/clients/username/8097.bundle.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 11:15:51 Last Seen2024-04-29 19:04:01 Times Seen190 Hash eec183c0d4676057983ca9de767ca634 7ad7e104807c7cc6ce30c63a554306c8e606fa97 2eb80d73cbe7e42859ed9b72e37827b9957228cd154845d7242c495fb93b904c Loading...

	magicbath.co.in/css/blue-dv/clients/username/7913.bundle.js	24 kB	2023-03-26	2024-04-29
Pretty URL magicbath.co.in/css/blue-dv/clients/username/7913.bundle.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 14:36:03 Last Seen2024-04-29 19:04:01 Times Seen145 Hash f68308153c8286c410ccefea4b4c891b 864182e8b353e1d54638905600e40c686d325b29 c23a13a54634eccf8102ed5e50d9d85acbf00707e37143513ef8fc6162c9d5fb Loading...

	magicbath.co.in/css/blue-dv/clients/username/5353.bundle.js	83 kB	2023-04-06	2024-04-20
Pretty URL magicbath.co.in/css/blue-dv/clients/username/5353.bundle.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-06 19:04:41 Last Seen2024-04-20 18:32:44 Times Seen7 Hash 63ff7740f4097ec98b3acc1ec68d47fa ff1a81fe5e682bd9760bc3c140547d0855fdafd1 a52136216651b29b3fdccef8c9457fcc89769c0272e365f2426fe156713e720a Loading...

	magicbath.co.in/css/blue-dv/clients/username/9787.bundle.js	3.1 kB	2023-03-26	2024-04-29
Pretty URL magicbath.co.in/css/blue-dv/clients/username/9787.bundle.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 11:15:51 Last Seen2024-04-29 19:04:01 Times Seen157 Hash 6855214d017ad2070829728b7b4e8633 3ff8592f552c6e844b01e0b3d675854c66bc125b 47e98ee816885cdebb81012ce6092c8bbcb16eebcc75c1cc202d2a2b27b32ea4 Loading...

	magicbath.co.in/css/blue-dv/clients/username/8726.bundle.js	2.4 kB	2023-03-26	2024-04-29
Pretty URL magicbath.co.in/css/blue-dv/clients/username/8726.bundle.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 14:36:03 Last Seen2024-04-29 19:04:01 Times Seen143 Hash 89cd72ad1bea33e520b7006e0893c54a a136695734058bb5de236a6174baa5eeacdba22c 6d98fab1cc9c4df505bacab8926fbccb71a1c368cb0e852147c92d3cbb6a0206 Loading...

HTTP Transactions (22)

URL IP Response Size

magicbath.co.in/css/blue-dv/clients/username/commons-92e9ecfd95ce24e54a680b212d674595.css

188.114.96.1

200 OK

95 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/commons-92e9ecfd95ce24e54a680b212d674595.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
Unicode text, UTF-8 text, with very long lines (64292), with no line terminators
Size
95 kB (94681 bytes)
Hash
1adabe89e111880ad1f2a9da15b6153c
f4c74f0044dfe37a57370bc2fdb9430ceee67ce0
2343078d21ed64b82841d1d121860dc79e9f941bb8044c0e12995c939c88f91a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/commons-92e9ecfd95ce24e54a680b212d674595.css HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:35 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=374079
cache-control: public, max-age=604800
etag: W/"5b53f-66219bf2-280d42;br"
expires: Thu, 25 Apr 2024 22:17:35 GMT
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0BWQEKJlUX756i8Y4hNs1UUY6Q5zYJEnKrp80DHn6jq9u1r7DvaZi3wwTOBO1c1y0Ob87bCnq8nbf35zdTJNRXWHZ7ZoVQ%2FtIw%2Bvwk7nXQPlgEXqRkGpwzBVL%2FsNa1VEySU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfcf0be63568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/username.bundle-8961fe6fd577dfd66d12b626e64d7cff.js

188.114.96.1

200 OK

51 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/username.bundle-8961fe6fd577dfd66d12b626e64d7cff.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
JavaScript source, ASCII text, with very long lines (2785), with no line terminators
Size
51 kB (50999 bytes)
Hash
8961fe6fd577dfd66d12b626e64d7cff
b6c8fcfb325c56ac786080cbeafefb8f24838657
1573208ffc6c2a4284750137888f470eb10838d7abf5bd2895dd8ac46642be93

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/username.bundle-8961fe6fd577dfd66d12b626e64d7cff.js HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:34 GMT
content-type: application/x-javascript
cf-bgj: minify
cache-control: public, max-age=604800
etag: W/"ae1-66219bf2-280d4f;br"
expires: Thu, 25 Apr 2024 22:17:35 GMT
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ufaYpoPBRtyu6xtfL7i4jrPEuQdPDZfXVaGEAV49E%2BMMAV9pUnifEARnML2%2FgWjcJ6inBc0d1KnUfMKqbNYAkVXUMKex36T8qXcJdZA1OqzPrsNitdk%2BJU8%2Br5kPtip4Yg4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfcf0be75568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/TheSansB_600_-a54202ef3bf0e3da19bca052e636ca9c.woff2

188.114.96.1

200 OK

55 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/TheSansB_600_-a54202ef3bf0e3da19bca052e636ca9c.woff2
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
Web Open Font Format (Version 2), TrueType, length 55008, version 2.5570
Size
55 kB (55008 bytes)
Hash
a54202ef3bf0e3da19bca052e636ca9c
1be7b883513f1f2ae87b968e2303475493216873
5e39a8bb7dc50616b9f41997f90bbb8330be6eb35bb973995618c38a0e3c21f4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/TheSansB_600_-a54202ef3bf0e3da19bca052e636ca9c.woff2 HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username/commons-92e9ecfd95ce24e54a680b212d674595.css
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:35 GMT
content-type: font/woff2
content-length: 55008
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 22:17:36 GMT
etag: "d6e0-66219bf2-280d4c;;;"
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NLYGf9Cg3EWYGgiyhQO8W8gwoBV57YosnbwFy2J%2BFBiC3jsO6MaC8DumW%2F2nYB1N7JIJRxZv72oGTPk%2BpQdqGFCF74uw9koXq1lS8Xbco5XYbJxZ9JKldxT0yuFPMCOhaX4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876dfcfa181c568b-OSL
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/TheSansB_400_-4f0d59a18ca1c88dcfbbce6510b21da5.woff2

188.114.96.1

200 OK

51 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/TheSansB_400_-4f0d59a18ca1c88dcfbbce6510b21da5.woff2
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
Web Open Font Format (Version 2), TrueType, length 50708, version 2.13828
Size
51 kB (50708 bytes)
Hash
4f0d59a18ca1c88dcfbbce6510b21da5
a832475bfb2af15db4541eaba52618c26cee2cd8
f0cc4ee9dc83925f474ab0b5ed3a5395038c979e157d4bae8e67225f1b0922d8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/TheSansB_400_-4f0d59a18ca1c88dcfbbce6510b21da5.woff2 HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username/commons-92e9ecfd95ce24e54a680b212d674595.css
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:35 GMT
content-type: font/woff2
content-length: 50708
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 22:17:36 GMT
etag: "c614-66219bf2-280d4a;;;"
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PZBvvx8h6tKMGv9L0Q4iexthUx9fvw2oWW6m9vlD4PxKMfp5GtkZlW9yjRUnKg1VtSbsZjJg7hxjIwieAsrrqvk5Ot4QdQnpGQI5IchUVpIG16J%2FlYRcSgRh2l%2FScMmEVgA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876dfcfa1825568b-OSL
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username.php

188.114.96.1

200 OK

79 kB

URL User Request GET HTTP/2
magicbath.co.in/css/blue-dv/clients/username.php
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1048)
Size
79 kB (78898 bytes)
Hash
6615ace75b943bb5abbfa70a736b869d
701bb5a62521f8488145447305d2f4687646f8de
b6d383f3c166839c644af629dda8ec6bc5644fc67c28f7bd0095a92eb5806a75

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Swisscom IT Services AG
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username.php HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 15:39:33 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7osOOPf3PcVyKLNyE1CjH57fGkUSxCdovybURVB7tXPQwhHFhIsM81NzUcVwOWk09i7l45Xk3kSNtNVqOTVEG%2FOVwFX16AJr1vuunA8b8nLcAbt8lRbmiCOmjurPNRVzH%2FI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfce1bd705688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

magicbath.co.in/css/blue-dv/clients/username/TheSansB_500_-d7955bec1417e0168f42adfe7ceaf8b5.woff2

188.114.96.1

200 OK

52 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/TheSansB_500_-d7955bec1417e0168f42adfe7ceaf8b5.woff2
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
Web Open Font Format (Version 2), TrueType, length 52044, version 2.5570
Size
52 kB (52044 bytes)
Hash
d7955bec1417e0168f42adfe7ceaf8b5
f2cf5939bcacdefe7cbb920d7873d55b00772be0
6010e95e45ae8c7c0064724e1ea3ac9495ae55a6241633446db052364c06f5f3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/TheSansB_500_-d7955bec1417e0168f42adfe7ceaf8b5.woff2 HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username/commons-92e9ecfd95ce24e54a680b212d674595.css
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:36 GMT
content-type: font/woff2
content-length: 52044
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 22:17:36 GMT
etag: "cb4c-66219bf2-280d4b;;;"
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F7cHqEOWcjeyM1Oc%2BINlSCDjtra4ORrduv5BZ17OUTWvPoJ4WCSox1cW5g77vm84AhyHmgc8q2Z%2BcoGE3grsgYeuYDInaCsgZ%2Fjkxv7EZPUdRRHO4MmuKJjkV8ZuWnwgIw8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876dfcfa282e568b-OSL
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/8097.bundle.js

188.114.96.1

200 OK

19 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/8097.bundle.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
19 kB (19165 bytes)
Hash
eec183c0d4676057983ca9de767ca634
7ad7e104807c7cc6ce30c63a554306c8e606fa97
2eb80d73cbe7e42859ed9b72e37827b9957228cd154845d7242c495fb93b904c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/8097.bundle.js HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:36 GMT
content-type: application/x-javascript
cf-bgj: minify
cache-control: public, max-age=604800
etag: W/"117ee-66219bf2-280d3f;br"
expires: Thu, 25 Apr 2024 22:17:36 GMT
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RSFF94aziQX5ubom2E0ltB%2Fint60PbLENufYGLXEE5cktmWPHlh2oAB9Nzk8PJm%2FZaiAZT%2BUcOOhRZDOrhk%2FPsgsj9pFaYyND4LZ3DMXU3JcAo1rwWk7xxvJPqGYmvEZcvU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfcfb5958568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/swisscom-logo-lifeform-38be0de766af1aaa475f946c32b47944.svg

188.114.96.1

200 OK

10 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/swisscom-logo-lifeform-38be0de766af1aaa475f946c32b47944.svg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
SVG Scalable Vector Graphics image
Size
10 kB (10490 bytes)
Hash
38be0de766af1aaa475f946c32b47944
646ff2fae3c8080da7c067e6506f1a1193b9cfc8
330fddfd254cb42deebdac50ccbc6d9988d365378457fae29dc10b3c2edb43e4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/swisscom-logo-lifeform-38be0de766af1aaa475f946c32b47944.svg HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:34 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 22:17:35 GMT
etag: W/"1813-66219bf2-280d49;br"
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fT9E1mGmmFH%2BW83MEf0IH6w4UvgCM7TPD07O0xIEBMwVxyOwnO3Q7G5Wl4XjVJxWoGIQMgFL1t5KeuCr7krhCn8DgZi6DjQY7lCYnaVAdfdkelo0slIbA1rUsGW95fQNPtc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfcf0be6e568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/username-3da88c85e4e95d4c24ffe7f22a697e7a.css

188.114.96.1

200 OK

9.2 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/username-3da88c85e4e95d4c24ffe7f22a697e7a.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
ASCII text, with no line terminators
Size
9.2 kB (9187 bytes)
Hash
4b602c2c4a95a4bf0f0b2854a4e7b1e4
7c5fbecf898d0df702d61a0b59920a9d5e5da054
9b39711a8b2b7f7b11acc561d626a087afadc40c59d057a767f39fd87e92942f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/username-3da88c85e4e95d4c24ffe7f22a697e7a.css HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:34 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=209
cache-control: public, max-age=604800
etag: W/"d1-66219bf2-280d4e;gz"
expires: Thu, 25 Apr 2024 22:17:35 GMT
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u2T1DFvgvyoCtjXJtoMSEHnBQRn87e5l0VVLx4k8JiA%2FtwmiH5uAtf9ztzvmYLZpxf7r1pK%2BwkbkKgyfUE7BHkou8a2UK4kfPk9hQJg3LkQLSG6jLaIH%2BPpar8m30c0yP3U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfcf0be68568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/TheSansB_700_-7dac4ba6f5bfb4ba199e7fe3454a6780.woff2

188.114.96.1

200 OK

50 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/TheSansB_700_-7dac4ba6f5bfb4ba199e7fe3454a6780.woff2
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
Web Open Font Format (Version 2), TrueType, length 49592, version 2.5570
Size
50 kB (49592 bytes)
Hash
7dac4ba6f5bfb4ba199e7fe3454a6780
8df19c4658d5317868b1d8d3c302b19eea81677e
09525fb3b4747dfbceaa9401af3c089fae3aa045934b77ec444cfe62c0efd3da

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/TheSansB_700_-7dac4ba6f5bfb4ba199e7fe3454a6780.woff2 HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username/commons-92e9ecfd95ce24e54a680b212d674595.css
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:35 GMT
content-type: font/woff2
content-length: 49592
cache-control: public, max-age=604800
expires: Fri, 26 Apr 2024 08:01:46 GMT
etag: "c1b8-66219bf2-280d4d;;;"
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2g1Cpxr9NQzyti%2Fb7y0M31gf6cnm0locj5rK7t8PzsAzmKQELsAQv7CJkKe%2FOyWpEfWG95%2BPI7hrbomCIAZBIsK2PWQMbJ9TEHnhfXXwLAC2fbK%2Bvfmi2wQNpjBciEST5DI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876dfcfa1819568b-OSL
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/7022.bundle.js

188.114.96.1

200 OK

27 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/7022.bundle.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type

Size
27 kB (26779 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/7022.bundle.js HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:35 GMT
content-type: application/x-javascript
cf-bgj: minify
cache-control: public, max-age=604800
etag: W/"689b-66219bf2-280d3c;br"
expires: Thu, 25 Apr 2024 22:17:36 GMT
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=52rVBSrmuDInvFtHtijkKKMKpj1ByZ4iClrY42gUZBQTk34qd2WrhvCu3wI5RxOHQmLVWuhK3cSCaL%2FqXRLeRTlUc2UgFL8qX7PMEr8Vg45UoyBZIwwL%2F5XyzSwXZIHa4Jc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfcfb3934568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/7711.bundle.js

188.114.96.1

200 OK

21 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/7711.bundle.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
JavaScript source, ASCII text, with very long lines (20969), with no line terminators
Size
21 kB (20969 bytes)
Hash
67dee5ca5f1e887b8ed7f21e4a9c3932
086ea5852d22a82f9e2eb302223cc4aad88918b1
fd6609fc3a22db1dce8142ad9e9377f05b23376cef25f4010be64853dcae43bd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/7711.bundle.js HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:35 GMT
content-type: application/x-javascript
cf-bgj: minify
cache-control: public, max-age=604800
etag: W/"51e9-66219bf2-280d3d;br"
expires: Thu, 25 Apr 2024 22:17:36 GMT
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O9BjyN%2B3yXmjXpf%2FiU5dMtPTCda1CnzeplKpY8tS9xWwMOAFIbNaOgWNXdPCTq926%2Fgo%2FBrSZQGdc%2BZ8jbkU3MwK976CNlSxJAEkzTzFA0i03g82OqyynWGEvk9GGgmirZc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfcfb3936568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/sdx-icons-f03eecedd83c09fb648538ec25dc01ef.woff2

188.114.96.1

200 OK

76 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/sdx-icons-f03eecedd83c09fb648538ec25dc01ef.woff2
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
Web Open Font Format (Version 2), TrueType, length 75844, version 1.0
Size
76 kB (75844 bytes)
Hash
f03eecedd83c09fb648538ec25dc01ef
29bc7966a7672d83e10870afc674e2d2c77eaec5
8bfc2db20d1d140388014d43c7fa13c0f63fd62e299c1954a792d321d9bde310

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/sdx-icons-f03eecedd83c09fb648538ec25dc01ef.woff2 HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username/commons-92e9ecfd95ce24e54a680b212d674595.css
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:35 GMT
content-type: font/woff2
content-length: 75844
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 22:17:36 GMT
etag: "12844-66219bf2-280d48;;;"
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J580D%2FbPQgxHqnSIgcZKkI9uUdsCxwKE2ZVWP5HsS3gNv8hbdCkYLM3JlhOzfP4PJNACqRz5YszPgLkJlFEQHvz5vBkhtdoLUVdeRuivD%2BtdRPI%2FTeRYQEmmNByGPt9FrtY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876dfcfa282f568b-OSL
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/8726.bundle.js

188.114.96.1

200 OK

2.4 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/8726.bundle.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (2423), with no line terminators
Size
2.4 kB (2401 bytes)
Hash
cd6e1e85bbee7fd84b14f67d4b354b0c
327823e71250ac06670e4e02b73fb945016598ad
9510b905bdb14e9ef1e17de41d847548f6ef80dcd00b1f1a3be33dda09db8f9c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/8726.bundle.js HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:35 GMT
content-type: application/x-javascript
cf-bgj: minify
cache-control: public, max-age=604800
etag: W/"961-66219bf2-280d40;br"
expires: Thu, 25 Apr 2024 22:17:36 GMT
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P2eNbssOIw1UXRmTQakSHxmpGnIzyKzm3SG5mdwSsmQiFLBVUPNwKhTUMXuL4WrEfuHrkPnhr4eKE32nHWvFMlfYIREJo3XlsR%2Ff7zu0ayqdc8FUs%2BSlHIqWrUuo1Y2M88c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfcfb595a568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

magicbath.co.in/favicon.ico

188.114.96.1

200 OK

0 B

URL GET HTTP/3
magicbath.co.in/favicon.ico
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:37 GMT
content-type: image/vnd.microsoft.icon
content-length: 0
last-modified: Fri, 19 Apr 2024 14:00:51 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DxILYRT0EjOu6j6C6TjKX2subDodS4t6GTKpKEAxTc9Jh0A7QJxglJibtLcyBaHHxzkz5zly2wipirOcg%2BkDNqWdV12zE77PEoIoWjVd3tcyvM6hOnxDdKyU9Dm8UtHIzok%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876dfd022801568b-OSL
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/login-layout.bundle-86802edb5402d853a443e918fd5a66ec.js

188.114.96.1

200 OK

228 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/login-layout.bundle-86802edb5402d853a443e918fd5a66ec.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type

Size
228 kB (227742 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/login-layout.bundle-86802edb5402d853a443e918fd5a66ec.js HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:35 GMT
content-type: application/x-javascript
cf-bgj: minify
cf-polished: origSize=227746
cache-control: public, max-age=604800
etag: W/"379a2-66219bf2-280d46;br"
expires: Fri, 26 Apr 2024 04:14:51 GMT
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jl2yst3UxJeg9vArwHO9IixH0vehBTv5I%2F8gxjUR6taL5auamKQYutCrCO2r59Wye5c2L9teHgy88dnCsyEAlF5wjQPsfwyWDD07eKMKBVJk7AdSHYp0ZjPwwUiYDAzr3XM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfcf0be74568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/7913.bundle.js

188.114.96.1

200 OK

24 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/7913.bundle.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type

Size
24 kB (24308 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/7913.bundle.js HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:36 GMT
content-type: application/x-javascript
cf-bgj: minify
cache-control: public, max-age=604800
etag: W/"5ef4-66219bf2-280d3e;br"
expires: Thu, 25 Apr 2024 22:17:36 GMT
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nOmbNpgG2F0vODCALEwOnx6V%2B5PnUqp1H6nnIf4ecyTZ%2B83Vf1O2EjWJ1iJb0CPxGWYq0pAGcygeL50JqZ0MWH16zvogUMvxXgvoaISJGNFrHpO6roWi2grGXVjohmoMxwU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfcfb595c568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/9787.bundle.js

188.114.96.1

200 OK

3.1 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/9787.bundle.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (3167), with no line terminators
Size
3.1 kB (3143 bytes)
Hash
c44ab995d51a3a9f0e2d32c22fa1fe0f
b431a57ea7429ddcbcc8a0abd31627c6fe5f715c
c84f28932dd8eb706d498ff1cf2a4c1f3b2023f9c8e0c33029543a7ba1c2337e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/9787.bundle.js HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:36 GMT
content-type: application/x-javascript
cf-bgj: minify
cache-control: public, max-age=604800
etag: W/"c47-66219bf2-280d41;br"
expires: Thu, 25 Apr 2024 22:17:36 GMT
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Beh0Z2dluFLo3ScZBrVNG%2B6KGvyT3MmeFhp%2BhCtvHxIFgsDMRiK%2B7eZh2IN7ZUPb3aCoG6VdSxCt3ZMgDihBTydoABrHQTcJtib0Sd0dTZDfTbTZzsn%2Fvb1LcAKBSUI8Hxg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfd00deef568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/commons.bundle-913907a5e0f9824203503b4e7fb8d96c.js

188.114.96.1

200 OK

91 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/commons.bundle-913907a5e0f9824203503b4e7fb8d96c.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type

Size
91 kB (90607 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/commons.bundle-913907a5e0f9824203503b4e7fb8d96c.js HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:34 GMT
content-type: application/x-javascript
cf-bgj: minify
cf-polished: origSize=90610
cache-control: public, max-age=604800
etag: W/"161f2-66219bf2-280d43;br"
expires: Thu, 25 Apr 2024 22:17:35 GMT
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0L5fMa%2B%2FewZfocdvZMRL2bKJ%2FLS5Yah8TvHk3otEWUfPfb7AsAlFkhHZUpJXV4hcBeAtV14Zak11rjkoCkcB%2F%2BUy6XmZcUHZY1R1n%2F3L3VAFYLqHzc4nnxTJS8I%2Fn1WyaNw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfcf0be71568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/lifeform-spritesheet-db5b9234be03de8612bb31c38e09fcf7.png

188.114.96.1

200 OK

38 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/lifeform-spritesheet-db5b9234be03de8612bb31c38e09fcf7.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
PNG image data, 3600 x 40, 8-bit colormap, non-interlaced
Size
38 kB (38448 bytes)
Hash
db5b9234be03de8612bb31c38e09fcf7
025c237758f5f3a815dc1bed0919e93e508bff8f
f9adb57dca9cbd2514ed249714b613d65e78a81cadda2882679a9672c812d25e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/lifeform-spritesheet-db5b9234be03de8612bb31c38e09fcf7.png HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username/commons-92e9ecfd95ce24e54a680b212d674595.css
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:35 GMT
content-type: image/png
content-length: 38448
cache-control: public, max-age=604800
expires: Thu, 25 Apr 2024 22:17:36 GMT
etag: "9630-66219bf2-280d45;;;"
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R%2Fd16A2oLv6Um9JIU83KX8FN186CKZyx%2FvFxp0Sp7q7QkGG1e3SIuojaA0dnZxK1B0mMF8f6yEl4CAtFW4j0BOrym%2FbUV2H6AZOQyOobL3KSsXiah2AN5Ir0D3QJpIy4JtU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876dfcfa080f568b-OSL
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/2475.bundle.js

188.114.96.1

200 OK

24 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/2475.bundle.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type
JavaScript source, ASCII text, with very long lines (24108), with no line terminators
Size
24 kB (24108 bytes)
Hash
44a3b4440c3283969ef120c4c2c17e4e
911f93fa1b71803d8627662d635bef88cecb6f8a
14ad0430c69b5fd31a519b3bb0ba5023c3f496f5de2bcfb75de8dd62866b02b1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/2475.bundle.js HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:36 GMT
content-type: application/x-javascript
cf-bgj: minify
cache-control: public, max-age=604800
etag: W/"5e2c-66219bf2-280d39;br"
expires: Thu, 25 Apr 2024 22:17:36 GMT
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BVpedDOff1AAjBJMa6C6Abj%2Bt2bBzCkv%2BovWVuEDlcqhWfCNHvEGP5WVfaMVzDKRWetnWvYp3OqE7dw7m%2FpdkdhbTT%2BSfM3d9mbYE%2FeZfFRm8dagTEE%2B4JKWVdxhjx4EK%2FQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfcfb3938568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

magicbath.co.in/css/blue-dv/clients/username/5353.bundle.js

188.114.96.1

200 OK

83 kB

URL GET HTTP/3
magicbath.co.in/css/blue-dv/clients/username/5353.bundle.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://magicbath.co.in/css/blue-dv/clients/username.php
Certificate
IssuerGoogle Trust Services LLC
Subjectmagicbath.co.in
FingerprintFE:B7:AB:64:21:57:65:22:A6:B1:8E:08:12:EF:A9:88:76:1A:94:82
ValidityFri, 22 Mar 2024 02:24:31 GMT - Thu, 20 Jun 2024 02:24:30 GMT

File type

Size
83 kB (83408 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/blue-dv/clients/username/5353.bundle.js HTTP/1.1
Host: magicbath.co.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://magicbath.co.in/css/blue-dv/clients/username.php
Cookie: PHPSESSID=khfdl9s81ukf9fia4btml34ia4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:39:36 GMT
content-type: application/x-javascript
cf-bgj: minify
cf-polished: origSize=83411
cache-control: public, max-age=604800
etag: W/"145d3-66219bf2-280d3b;br"
expires: Thu, 25 Apr 2024 22:17:36 GMT
last-modified: Thu, 18 Apr 2024 22:17:22 GMT
vary: Accept-Encoding
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s150%2BN8RorSCSAUUHReCoxtDpGl%2FoQOpO66cR87IOWhJQF78Sv3dbCyd6pBJb2vZQ3j7g8aZBXZRknrNW9RCgRg7wLLQ3ppOWWq891FyMcF7UlmITpuap3qNFfQzZePxoNU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876dfcfb5962568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML