Report - www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/

Report Overview

Submitted URL
www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
IP
46.105.204.15
ASN
#16276 OVH SAS
Submitted
2024-04-17 03:53:26
Access
public
Website Title
Secure Email Server :: For
Final URL
www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
22

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.handipadel.com	unknown	2013-02-19	2018-07-03	2024-03-28	5.0 kB	28 kB	46.105.204.15
favicon.ico	331833	unknown	No data	No data	374 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/	Webmail Providers

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	handipadel.com	Sinkholed
2024-04-17	medium	handipadel.com	Sinkholed
2024-04-17	medium	handipadel.com	Sinkholed
2024-04-17	medium	handipadel.com	Sinkholed
2024-04-17	medium	handipadel.com	Sinkholed
2024-04-17	medium	handipadel.com	Sinkholed
2024-04-17	medium	handipadel.com	Sinkholed
2024-04-17	medium	handipadel.com	Sinkholed
2024-04-17	medium	handipadel.com	Sinkholed
2024-04-17	medium	favicon.ico	Sinkholed

ThreatFox

No alerts detected

JavaScript (15)

	URL	Size	First Seen	Last Seen
	www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/jquery.min.js?s=1399644532	0 B	2023-03-07	2024-04-30
Pretty URL www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/jquery.min.js?s=1399644532 IP 46.105.204.15 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-30 02:38:59 Times Seen37202861 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/	3.1 kB	2023-03-07	2024-04-17
Pretty URL www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/ IP 46.105.204.15 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:38:53 Last Seen2024-04-17 05:53:33 Times Seen7 Hash 8affe72bd66469a9241aaec71c978faf 311818369870bdec57f82b381cba3b059282f0f9 05a1623ffd40aaa5edd30d79ec3172cffd6bc0940f8c3e5b4bc446ff536b60bb Loading...

	www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/	2.1 kB	2023-03-07	2024-04-17
Pretty URL www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/ IP 46.105.204.15 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:38:53 Last Seen2024-04-17 05:53:33 Times Seen8 Hash 6580bad0bb82fe78ef1397b4ebbd5a79 47e48e2ef7c7610ad3b70aa6a1ad3cff55202054 f4dae31bfb7eb6f1a2fbacc3c2b321d9901fb00bc2640ccf932516ceb559610b Loading...

	www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/	1.1 kB	2023-03-07	2024-04-17
Pretty URL www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/ IP 46.105.204.15 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:38:53 Last Seen2024-04-17 05:53:33 Times Seen7 Hash 4eed247f312211887faafa35e987e5f5 17484a6f19cf4d8812c9c8d640b4e257ed57484e 5fe677d0d2ca56779abbfc77aece5051af52b1a638e71d20bed4b60de869bd82 Loading...

	unknown	258 B	2023-08-22	2024-04-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-22 13:13:26 Last Seen2024-04-17 05:53:33 Times Seen6 Hash e93eae0f0aa74503869df2b14e39c3fc eac92b35ba9f635dd0016fda7e89e6ab50ef70dd 8611e39bf04314374f74302b16b4ffa0c03f5e1f5f3f9c0d7c3fe84e8ff2849f Loading...

	unknown	653 B	2023-08-22	2024-04-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-22 13:13:26 Last Seen2024-04-17 05:53:33 Times Seen6 Hash a61726689dc00b01b0c309826c0264d5 657b3cf2a29618205bd6ff50a54eee59cc814ba8 91761e8963f7abec4cc3888fb3ba478fe72e5c10208c997ffecae3b883662202 Loading...

	www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/	1.2 kB	2023-03-07	2024-04-17
Pretty URL www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/ IP 46.105.204.15 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:38:53 Last Seen2024-04-17 05:53:33 Times Seen8 Hash 65eae92c20961a75e22a4d13e6ef8c11 69031973967f807e18a27a8af926379579e957c6 9fe233a14e5e80130809130816e9cc5ae03b18269de0bec83755440d7a434fa2 Loading...

	www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/	4.9 kB	2023-03-07	2024-04-17
Pretty URL www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/ IP 46.105.204.15 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:38:53 Last Seen2024-04-17 05:53:33 Times Seen7 Hash b2e4c0887b47f6fcbbca72e0fc04f61a ca818901ad839d4733e5e9d8b9ab19e3430c140d 6940e2c8d2c73d5747dfe4279a6d8d53cbbec62f3c553c35ece5a80211d9e5b5 Loading...

	www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/	2.2 kB	2023-03-07	2024-04-17
Pretty URL www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/ IP 46.105.204.15 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:38:53 Last Seen2024-04-17 05:53:33 Times Seen7 Hash dc68a74337745022948354b1b222bb39 9a894e26a7a6009789616e6d7a0a78dc04333442 d556e218a7b2279dc6882e64051475c1a6d54de60c225d40cffbf7a38a5e8f5b Loading...

		Size	First Seen	Last Seen
	#1 Write - 9b15c30f955eac839eeef1c4c6a953a6	988 B	2023-03-07	2024-04-17
Pretty Observations First Seen2023-03-07 12:38:53 Last Seen2024-04-17 05:53:33 Times Seen8 Hash 9b15c30f955eac839eeef1c4c6a953a6 ae8385616fb8337e383d0ff0998adb8714ba8d5b 0fab2b60fea84a0d679c844056590de0acc713af94b8f9508f835bb6af689bd1 Loading...

	#2 Write - 260af90d65cfb3a478470fa59515d856	349 B	2023-03-07	2024-04-17
Pretty Observations First Seen2023-03-07 12:38:53 Last Seen2024-04-17 05:53:33 Times Seen7 Hash 260af90d65cfb3a478470fa59515d856 d6aaceb96f44ad6f92fcd246a07a0a1473195803 2d9eee374d42c6c6ec132a08d323489dfc8e2d50ea606a2611266d8b56b2ce11 Loading...

	#3 Write - b0c1d0551048aa9e315587eff6e2bc33	372 B	2023-03-07	2024-04-17
Pretty Observations First Seen2023-03-07 12:38:53 Last Seen2024-04-17 05:53:33 Times Seen8 Hash b0c1d0551048aa9e315587eff6e2bc33 34afe62afe7c4825cfeb89fa71c19f9b337c1462 d5fa39de4ab2a096602f4e468b5eb923c4d7e739869915495afd29c4c4e794f7 Loading...

	#4 Write - 513812a0c034c4a1202367f5d7c392a6	1.6 kB	2023-03-07	2024-04-17
Pretty Observations First Seen2023-03-07 12:38:53 Last Seen2024-04-17 05:53:33 Times Seen7 Hash 513812a0c034c4a1202367f5d7c392a6 2de5edc28ae00d1fbda703b508d8f0ecb0e349e6 2432905ca32fa550f3d2d73a3b5b6dc888b2dd8cb50549cd8373195f8137ac35 Loading...

	#5 Write - 8048c20ca175bd8bead0c13d1c410d26	715 B	2023-03-07	2024-04-17
Pretty Observations First Seen2023-03-07 12:38:53 Last Seen2024-04-17 05:53:33 Times Seen7 Hash 8048c20ca175bd8bead0c13d1c410d26 5021f6a88fc1f7029fd9095d69f016f6c4614e45 cea32cf7db8a8437cbd73b341ed057581ae901e2b7b4d42593b8b7cb7f6a6ba1 Loading...

	#6 Write - 411bc2a417e981654f27ea3d35f3b3eb	2.3 kB	2023-03-07	2024-04-17
Pretty Observations First Seen2023-03-07 12:38:53 Last Seen2024-04-17 05:53:33 Times Seen7 Hash 411bc2a417e981654f27ea3d35f3b3eb 37c672ee35c08e32b24e91c913f957c321b9a550 63253e139e81e07ca9e50487938dfe1dbd563041da5aad1fad2d24ea697528c1 Loading...

HTTP Transactions (10)

URL IP Response Size

www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/plugins/jqueryui/themes/larry/jquery-ui-1.9.2.custom.css?s=1399644532

46.105.204.15

200 OK

1 B

URL GET HTTP/2
www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/plugins/jqueryui/themes/larry/jquery-ui-1.9.2.custom.css?s=1399644532
IP
46.105.204.15:443
ASN
#16276 OVH SAS

Requested by
https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Certificate
IssuerLet's Encrypt
Subjectwww.padelachat.com
FingerprintA1:5B:2E:0F:88:97:C0:39:C7:A8:6F:E1:BA:DA:18:22:59:DB:D9:36
ValidityFri, 08 Mar 2024 18:05:24 GMT - Thu, 06 Jun 2024 18:05:23 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
9eecb7db59d16c80417c72d1e1f4fbf1
2d14ab97cc3dc294c51c0d6814f4ea45f4b4e312
41b805ea7ac014e23556e98bb374702a08344268f92489a02f0880849394a1e4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/plugins/jqueryui/themes/larry/jquery-ui-1.9.2.custom.css?s=1399644532 HTTP/1.1
Host: www.handipadel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 03:53:02 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: br
age: 0
x-cdn-cache: MISS
x-cdn-request-id: 588031828
x-cdn-pop: sbg
accept-ranges: bytes
content-length: 1
X-Firefox-Spdy: h2

www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/ui.js?s=1382384360

46.105.204.15

200 OK

1 B

URL GET HTTP/2
www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/ui.js?s=1382384360
IP
46.105.204.15:443
ASN
#16276 OVH SAS

Requested by
https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Certificate
IssuerLet's Encrypt
Subjectwww.padelachat.com
FingerprintA1:5B:2E:0F:88:97:C0:39:C7:A8:6F:E1:BA:DA:18:22:59:DB:D9:36
ValidityFri, 08 Mar 2024 18:05:24 GMT - Thu, 06 Jun 2024 18:05:23 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
9eecb7db59d16c80417c72d1e1f4fbf1
2d14ab97cc3dc294c51c0d6814f4ea45f4b4e312
41b805ea7ac014e23556e98bb374702a08344268f92489a02f0880849394a1e4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/ui.js?s=1382384360 HTTP/1.1
Host: www.handipadel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 03:53:02 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: br
age: 0
x-cdn-cache: MISS
x-cdn-request-id: 588031829
x-cdn-pop: sbg
accept-ranges: bytes
content-length: 1
X-Firefox-Spdy: h2

www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/jquery.min.js?s=1399644532

46.105.204.15

200 OK

1 B

URL GET HTTP/2
www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/jquery.min.js?s=1399644532
IP
46.105.204.15:443
ASN
#16276 OVH SAS

Requested by
https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Certificate
IssuerLet's Encrypt
Subjectwww.padelachat.com
FingerprintA1:5B:2E:0F:88:97:C0:39:C7:A8:6F:E1:BA:DA:18:22:59:DB:D9:36
ValidityFri, 08 Mar 2024 18:05:24 GMT - Thu, 06 Jun 2024 18:05:23 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
9eecb7db59d16c80417c72d1e1f4fbf1
2d14ab97cc3dc294c51c0d6814f4ea45f4b4e312
41b805ea7ac014e23556e98bb374702a08344268f92489a02f0880849394a1e4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/jquery.min.js?s=1399644532 HTTP/1.1
Host: www.handipadel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 03:53:02 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: br
age: 0
x-cdn-cache: MISS
x-cdn-request-id: 588031830
x-cdn-pop: sbg
accept-ranges: bytes
content-length: 1
X-Firefox-Spdy: h2

www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/app.min.js?s=1399644532

46.105.204.15

200 OK

1 B

URL GET HTTP/2
www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/app.min.js?s=1399644532
IP
46.105.204.15:443
ASN
#16276 OVH SAS

Requested by
https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Certificate
IssuerLet's Encrypt
Subjectwww.padelachat.com
FingerprintA1:5B:2E:0F:88:97:C0:39:C7:A8:6F:E1:BA:DA:18:22:59:DB:D9:36
ValidityFri, 08 Mar 2024 18:05:24 GMT - Thu, 06 Jun 2024 18:05:23 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
9eecb7db59d16c80417c72d1e1f4fbf1
2d14ab97cc3dc294c51c0d6814f4ea45f4b4e312
41b805ea7ac014e23556e98bb374702a08344268f92489a02f0880849394a1e4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/app.min.js?s=1399644532 HTTP/1.1
Host: www.handipadel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 03:53:02 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: br
age: 0
x-cdn-cache: MISS
x-cdn-request-id: 588031832
x-cdn-pop: sbg
accept-ranges: bytes
content-length: 1
X-Firefox-Spdy: h2

www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/common.min.js?s=1399644532

46.105.204.15

200 OK

1 B

URL GET HTTP/2
www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/common.min.js?s=1399644532
IP
46.105.204.15:443
ASN
#16276 OVH SAS

Requested by
https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Certificate
IssuerLet's Encrypt
Subjectwww.padelachat.com
FingerprintA1:5B:2E:0F:88:97:C0:39:C7:A8:6F:E1:BA:DA:18:22:59:DB:D9:36
ValidityFri, 08 Mar 2024 18:05:24 GMT - Thu, 06 Jun 2024 18:05:23 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
9eecb7db59d16c80417c72d1e1f4fbf1
2d14ab97cc3dc294c51c0d6814f4ea45f4b4e312
41b805ea7ac014e23556e98bb374702a08344268f92489a02f0880849394a1e4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/common.min.js?s=1399644532 HTTP/1.1
Host: www.handipadel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 03:53:02 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: br
age: 0
x-cdn-cache: MISS
x-cdn-request-id: 588031831
x-cdn-pop: sbg
accept-ranges: bytes
content-length: 1
X-Firefox-Spdy: h2

www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/jquery-ui-1.9.2.custom.min.js?s=1399644532

46.105.204.15

200 OK

1 B

URL GET HTTP/2
www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/jquery-ui-1.9.2.custom.min.js?s=1399644532
IP
46.105.204.15:443
ASN
#16276 OVH SAS

Requested by
https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Certificate
IssuerLet's Encrypt
Subjectwww.padelachat.com
FingerprintA1:5B:2E:0F:88:97:C0:39:C7:A8:6F:E1:BA:DA:18:22:59:DB:D9:36
ValidityFri, 08 Mar 2024 18:05:24 GMT - Thu, 06 Jun 2024 18:05:23 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
9eecb7db59d16c80417c72d1e1f4fbf1
2d14ab97cc3dc294c51c0d6814f4ea45f4b4e312
41b805ea7ac014e23556e98bb374702a08344268f92489a02f0880849394a1e4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/jquery-ui-1.9.2.custom.min.js?s=1399644532 HTTP/1.1
Host: www.handipadel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 03:53:02 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: br
age: 0
x-cdn-cache: MISS
x-cdn-request-id: 588031834
x-cdn-pop: sbg
accept-ranges: bytes
content-length: 1
X-Firefox-Spdy: h2

www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/

46.105.204.15

200 OK

24 kB

URL User Request GET HTTP/2
www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
IP
46.105.204.15:443
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subjectwww.padelachat.com
FingerprintA1:5B:2E:0F:88:97:C0:39:C7:A8:6F:E1:BA:DA:18:22:59:DB:D9:36
ValidityFri, 08 Mar 2024 18:05:24 GMT - Thu, 06 Jun 2024 18:05:23 GMT

File type
HTML document, ASCII text, with very long lines (6974), with CRLF line terminators
Size
24 kB (24206 bytes)
Hash
d295edcf500aeba25835d4b3fbdab418
bdbd3c0f8970faacda4dbbbe980f050cf09be7de
9e45556cdc585d472bc6e523235beb3b5048a18be769c7a16e49858160c9ca30

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Webmail Providers
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/ HTTP/1.1
Host: www.handipadel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 03:53:01 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: br
age: 0
x-cdn-cache: MISS
x-cdn-request-id: 588031826
x-cdn-pop: sbg
accept-ranges: bytes
X-Firefox-Spdy: h2

www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/styles.css?s=1387973879

46.105.204.15

200 OK

0 B

URL GET HTTP/2
www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/styles.css?s=1387973879
IP
46.105.204.15:443
ASN
#16276 OVH SAS

Requested by
https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Certificate
IssuerLet's Encrypt
Subjectwww.padelachat.com
FingerprintA1:5B:2E:0F:88:97:C0:39:C7:A8:6F:E1:BA:DA:18:22:59:DB:D9:36
ValidityFri, 08 Mar 2024 18:05:24 GMT - Thu, 06 Jun 2024 18:05:23 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/styles.css?s=1387973879 HTTP/1.1
Host: www.handipadel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 03:53:02 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: br
age: 0
x-cdn-cache: MISS
x-cdn-request-id: 588031827
x-cdn-pop: sbg
accept-ranges: bytes
X-Firefox-Spdy: h2

www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/jstz.min.js?s=1399644532

46.105.204.15

200 OK

0 B

URL GET HTTP/2
www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/jstz.min.js?s=1399644532
IP
46.105.204.15:443
ASN
#16276 OVH SAS

Requested by
https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Certificate
IssuerLet's Encrypt
Subjectwww.padelachat.com
FingerprintA1:5B:2E:0F:88:97:C0:39:C7:A8:6F:E1:BA:DA:18:22:59:DB:D9:36
ValidityFri, 08 Mar 2024 18:05:24 GMT - Thu, 06 Jun 2024 18:05:23 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/FILES/jstz.min.js?s=1399644532 HTTP/1.1
Host: www.handipadel.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 03:53:02 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: br
age: 0
x-cdn-cache: MISS
x-cdn-request-id: 588031833
x-cdn-pop: sbg
accept-ranges: bytes
X-Firefox-Spdy: h2

favicon.ico/

0.0.0.0

0 B

URL GET
favicon.ico/
IP
0.0.0.0:0
ASN
#0

Requested by
https://www.handipadel.com/wp-includes/js/jquery/uii/jss/img/secured/fold/crypt/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: favicon.ico
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (15)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by