| seminarserver.com/ |  204.11.56.48 | | 0 B |
IP204.11.56.48:0 ASN#40034 CONFLUENCE-NETWORK-INC
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: seminarserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 18 Apr 2024 08:08:28 GMT
Server: Apache
Location: http://ww5.seminarserver.com
Content-Length: 0
Keep-Alive: timeout=5, max=123
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| ww5.seminarserver.com/ |  76.223.26.96 | | 7.1 kB |
IP76.223.26.96:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (8374) Hash08ef8ac97337d2c706fafbdd7b854d82 676fe94297ecea8968bcff18f0b791c429992cfd f3fb787adf17844a15c7f35bcd686bc53ed41ee0a5e7618cb9753ee065e933e7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: ww5.seminarserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 08:08:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket003
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_c9OF3VS5ToxzWNFZIcCCP+G229hpnNg+SFs+8SzJ1zUDox1UKhSn3uMZ+GeMNXwRCLoPucJMy4GOmqDu4JXb9Q==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: seminarserver.com
X-Subdomain: ww5
Content-Encoding: gzip
|
|
| seminarserver.com/css/1905USmw.dctN; | 204.11.56.48 | | 43 kB |
URL User Request GET seminarserver.com/css/1905USmw.dctN; IP204.11.56.48:0 ASN#40034 CONFLUENCE-NETWORK-INC
File typeHTML document, Unicode text, UTF-8 text, with very long lines (10761), with CRLF, LF line terminators Hash72e5a032cd99983013587bb1caba636c 491dc103df7dcc36752a5f5f6a987ed6e9139c3e d7963f7356e39b291e46ae478c63bb949de16bccfa716af6b3db205076f60631
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/1905USmw.dctN; HTTP/1.1
Host: seminarserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 08:08:30 GMT
Server: Apache
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_FNu4iKCZB9xMly6bctveHPL6OmVAbr7vPuxJnnx2ovjZ4Sszb+fwx5VhpD9A4xk4Et+47l36VV94gvQoHeXA1g==
Keep-Alive: timeout=5, max=126
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| seminarserver.com/px.js?ch=1 | 204.11.56.48 | 200 OK | 346 B |
URL GET HTTP/1.1seminarserver.com/px.js?ch=1 IP204.11.56.48:80 ASN#40034 CONFLUENCE-NETWORK-INC
Requested byhttp://seminarserver.com/css/1905USmw.dctN;
File typeASCII text, with very long lines (346), with no line terminators Hashf84f931c0dd37448e03f0dabf4e4ca9f 9c2c50edcf576453ccc07bf65668bd23c76e8663 5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /px.js?ch=1 HTTP/1.1
Host: seminarserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/css/1905USmw.dctN;
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 08:08:31 GMT
Server: Apache
Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT
ETag: "15a-5b952a63b81f1"
Accept-Ranges: bytes
Content-Length: 346
Keep-Alive: timeout=5, max=128
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| seminarserver.com/px.js?ch=2 | 204.11.56.48 | 200 OK | 346 B |
URL GET HTTP/1.1seminarserver.com/px.js?ch=2 IP204.11.56.48:80 ASN#40034 CONFLUENCE-NETWORK-INC
Requested byhttp://seminarserver.com/css/1905USmw.dctN;
File typeASCII text, with very long lines (346), with no line terminators Hashf84f931c0dd37448e03f0dabf4e4ca9f 9c2c50edcf576453ccc07bf65668bd23c76e8663 5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /px.js?ch=2 HTTP/1.1
Host: seminarserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/css/1905USmw.dctN;
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 08:08:31 GMT
Server: Apache
Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT
ETag: "15a-5b952a63b81f1"
Accept-Ranges: bytes
Content-Length: 346
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| i2.cdn-image.com/__media__/js/min.js?v2.3 | 208.91.196.253 | 200 OK | 8.4 kB |
URL GET HTTP/1.1i2.cdn-image.com/__media__/js/min.js?v2.3 IP208.91.196.253:80 ASN#40034 CONFLUENCE-NETWORK-INC
Requested byhttp://seminarserver.com/css/1905USmw.dctN;
File typeJavaScript source, ASCII text, with very long lines (8349), with CRLF line terminators Hashc16c3a4c0fad29106f34d00e89f6886e 6e11811ab8a98bb295b0916cdee68b302c33403d 097786d677a859b7bc87e285377b083b76d66a2fc2832a16bcd50b0e99df77ff
GET /__media__/js/min.js?v2.3 HTTP/1.1
Host: i2.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 08:08:32 GMT
Content-Type: application/javascript
Content-Length: 8435
Last-Modified: Thu, 06 Apr 2023 06:50:17 GMT
Connection: keep-alive
ETag: "642e6ba9-20f3"
Expires: Thu, 02 May 2024 08:08:32 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes
|
|
| cdn.consentmanager.net/delivery/recall/logos/68884 |  185.76.9.15 | 200 OK | 1.7 kB |
URL GET HTTP/2cdn.consentmanager.net/delivery/recall/logos/68884 IP185.76.9.15:443 ASN#60068 Datacamp Limited
Requested byhttp://seminarserver.com/css/1905USmw.dctN; CertificateIssuerLet's Encrypt Subject1376624012.rsc.cdn77.org FingerprintAF:BA:C5:36:2A:F9:83:4F:32:1A:8F:95:51:86:52:81:8F:51:7D:B8 ValiditySun, 14 Apr 2024 19:25:23 GMT - Sat, 13 Jul 2024 19:25:22 GMT
File typegzip compressed data, from Unix Hash036f1abc3ba9a9a6aa50e47fcbbdd720 371723f4e05fe1e06c5ba582331f4059d8066017 b9b117832c6af385a4caf13d905381e0c6db965778152be95879cfaa488c435e
GET /delivery/recall/logos/68884 HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 08:08:32 GMT
content-type: image/svg+xml
vary: Accept-Encoding
expires: Thu, 18 Apr 2024 13:41:07 GMT
cache-control: public, max-age=86400
edge-control: public, max-age=86400, max-age=2592000
x-77-nzt: EwwBuUwJDQH3iwMBAAwBuUwKDAHXAgAAAAwBisclwQH3AAAAAA
x-77-nzt-ray: c0a4cc284c95c8e000d52066ee1d6e15
x-accel-expires: @1713447667
x-accel-date: 1713361269
x-77-cache: HIT
x-77-age: 66445
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 66443
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| cdn.consentmanager.net/delivery/js/cmp_en.min.js | 185.76.9.15 | 200 OK | 93 kB |
URL GET HTTP/2cdn.consentmanager.net/delivery/js/cmp_en.min.js IP185.76.9.15:443 ASN#60068 Datacamp Limited
Requested byhttp://seminarserver.com/css/1905USmw.dctN; CertificateIssuerLet's Encrypt Subject1376624012.rsc.cdn77.org FingerprintAF:BA:C5:36:2A:F9:83:4F:32:1A:8F:95:51:86:52:81:8F:51:7D:B8 ValiditySun, 14 Apr 2024 19:25:23 GMT - Sat, 13 Jul 2024 19:25:22 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash49923f5f4da49aca437020f89c3b6cf4 2597190ebfa60ef4f4e31310c95002b45890064c 9378cd3033f2af3b9f3c08a0a9ef5954b7f6975c2ba300ffef54945ce783cdd7
GET /delivery/js/cmp_en.min.js HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 08:08:32 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 17 Apr 2024 15:05:51 GMT
etag: W/"68ebb-6164c30b8b1c0"
cache-control: max-age=86400
expires: Thu, 18 Apr 2024 15:08:19 GMT
edge-control: max-age=86400
x-77-nzt: EwwBuUwJDQH3He8AAAgBuUwKDAFhCAGKxyXBAWE
x-77-nzt-ray: c0a4cc284c95c8e000d5206668720303
x-77-cache: HIT
content-encoding: gzip
server: CDN77-Turbo
x-accel-expires: @1713452899
x-accel-date: 1713366499
x-cache: HIT
x-age: 61213
x-77-pop: stockholmSE
x-77-age: 61213
X-Firefox-Spdy: h2
|
|
| a.delivery.consentmanager.net/delivery/info/?id=68884&did=2&cfdid=2&t=cv&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&o=1713427712411&l=EN&lv=96961&d=2&ct=14&e=&e2=&e3=&i=&sv=19&dv=33& |  87.230.98.78 | 200 OK | 43 B |
URL GET HTTP/2a.delivery.consentmanager.net/delivery/info/?id=68884&did=2&cfdid=2&t=cv&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&o=1713427712411&l=EN&lv=96961&d=2&ct=14&e=&e2=&e3=&i=&sv=19&dv=33& IP87.230.98.78:443 ASN#61157 PlusServer GmbH
Requested byhttp://seminarserver.com/css/1905USmw.dctN; CertificateIssuerLet's Encrypt Subjecta.delivery.consentmanager.net Fingerprint69:B9:38:2C:D2:98:EE:BC:2E:9B:83:33:E4:2F:BC:73:04:51:C8:79 ValidityThu, 14 Mar 2024 00:37:17 GMT - Wed, 12 Jun 2024 00:37:16 GMT
File typeGIF image data, version 89a, 1 x 1 Hash6f81c41597d3f5a336f458822cc0c32a 8cd77a54b38f1fb376b45af2eaab8f5982523b8d 5704a2e9f2f7ce43a79f9b407f1aedcfd50223cbe8bd2f71ff8c5c819e469cbc
GET /delivery/info/?id=68884&did=2&cfdid=2&t=cv&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&o=1713427712411&l=EN&lv=96961&d=2&ct=14&e=&e2=&e3=&i=&sv=19&dv=33& HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 08:08:32 GMT
cache-control: no-store, no-cache, must-revalidate
edge-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: no-cache
access-control-allow-origin: *
x-xss-protection: 0
last-modified: Thu, 18 Apr 2024 08:08:32 GMT
content-length: 43
content-type: image/gif
X-Firefox-Spdy: h2
|
|
| i2.cdn-image.com/__media__/pics/29590/bg1.png | 208.91.196.253 | 200 OK | 18 kB |
URL GET HTTP/1.1i2.cdn-image.com/__media__/pics/29590/bg1.png IP208.91.196.253:80 ASN#40034 CONFLUENCE-NETWORK-INC
Requested byhttp://seminarserver.com/css/1905USmw.dctN;
File typePNG image data, 1730 x 988, 4-bit colormap, non-interlaced Hash825ccd29ac102fcadaf92b2343d5917b 24472e766cfac5b82a73b219796556a0a3702bd6 0878fb2875c0ad852de8fb3e8f443afdf3064890f1443b3feccc274382f913cd
GET /__media__/pics/29590/bg1.png HTTP/1.1
Host: i2.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 08:08:32 GMT
Content-Type: image/png
Content-Length: 17986
Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT
Connection: keep-alive
ETag: "6380b223-4642"
Expires: Thu, 02 May 2024 08:08:32 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes
|
|
| a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&&l=en&o=1713427712040 | 87.230.98.78 | 200 OK | 3.9 kB |
URL GET HTTP/2a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&&l=en&o=1713427712040 IP87.230.98.78:443 ASN#61157 PlusServer GmbH
Requested byhttp://seminarserver.com/css/1905USmw.dctN; CertificateIssuerLet's Encrypt Subjecta.delivery.consentmanager.net Fingerprint69:B9:38:2C:D2:98:EE:BC:2E:9B:83:33:E4:2F:BC:73:04:51:C8:79 ValidityThu, 14 Mar 2024 00:37:17 GMT - Wed, 12 Jun 2024 00:37:16 GMT
File typegzip compressed data, max speed, from Unix Hash53482de047e72b9cead0687026fa3c50 723d3b0e0dcee2b6bb35bf397b200f8cfe422bde 6873695dbddd8306ea7d68fb9ab9c05af1d5871d9a4343c4c1dda641c04fe7a8
GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&&l=en&o=1713427712040 HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 08:08:32 GMT
cache-control: no-store, no-cache, must-revalidate
edge-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: no-cache
access-control-allow-origin: *
x-xss-protection: 0
last-modified: Thu, 18 Apr 2024 08:08:32 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff | 208.91.196.253 | 200 OK | 17 kB |
URL GET HTTP/1.1i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff IP208.91.196.253:80 ASN#40034 CONFLUENCE-NETWORK-INC
Requested byhttp://seminarserver.com/css/1905USmw.dctN;
File typeWeb Open Font Format, TrueType, length 17264, version 2.1 Hasha43b107861b42ce1335e41e43d4e4d00 99bdb1cec4a68ebe29249c46fefefb6880d009e5 a6542dc92d71eb412bac89d8fb06c70f15be74a64b1b4ef1633288b78f4f2ff2
GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1
Host: i2.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://seminarserver.com
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 08:08:32 GMT
Content-Type: application/font-woff
Content-Length: 17264
Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT
Connection: keep-alive
ETag: "600809b7-4370"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff | 208.91.196.253 | 200 OK | 17 kB |
URL GET HTTP/1.1i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff IP208.91.196.253:80 ASN#40034 CONFLUENCE-NETWORK-INC
Requested byhttp://seminarserver.com/css/1905USmw.dctN;
File typeWeb Open Font Format, TrueType, length 17312, version 2.1 Hashbebe201d813feaad85a3e66607d0da3a 28b049502afa8e9db5340c1a92400591b39870e8 58bb75322beb862803b0d156e1a1d01fb1e7fde82ee93c929b08bf5aea9fc55b
GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1
Host: i2.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://seminarserver.com
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 08:08:32 GMT
Content-Type: application/font-woff
Content-Length: 17312
Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT
Connection: keep-alive
ETag: "600809b7-43a0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| seminarserver.com/favicon.ico | 204.11.56.48 | 404 Not Found | 10 B |
URL GET HTTP/1.1seminarserver.com/favicon.ico IP204.11.56.48:80 ASN#40034 CONFLUENCE-NETWORK-INC
Requested byhttp://seminarserver.com/css/1905USmw.dctN;
File typeASCII text, with no line terminators Hash6608dd3e21ca3beabd4bdfa625a0b221 e926d0f8694a4bc4013308afaca7af51e4c9fd9f c75eb01138771bfb2a5517aeae882356733782767c4560cc9601c34d2591ca75
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: seminarserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/css/1905USmw.dctN;
Cookie: __cmpcc=1; __cmpconsentx68884=CP9Q9kAP9Q9kAAfN0CENAwEgAAAAAAAAAAigAAAAAAAA; __cmpcccx68884=aBP9SFIEAAADgAXACCAE0ALwDiQIOAqIADWzstn1bhY
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 08:08:32 GMT
Server: Apache
Content-Length: 10
Keep-Alive: timeout=5, max=111
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| a.delivery.consentmanager.net/delivery/info/?id=68884&did=2&cfdid=26539&t=pv.d_ncs.d_ancs.d_bncs.cf.cfx&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&o=1713427712409&l=EN&lv=96961&d=2&ct=14&e=&e2=&e3=&i=&sv=19&dv=33& | 87.230.98.78 | 200 OK | 43 B |
URL GET HTTP/2a.delivery.consentmanager.net/delivery/info/?id=68884&did=2&cfdid=26539&t=pv.d_ncs.d_ancs.d_bncs.cf.cfx&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&o=1713427712409&l=EN&lv=96961&d=2&ct=14&e=&e2=&e3=&i=&sv=19&dv=33& IP87.230.98.78:443 ASN#61157 PlusServer GmbH
Requested byhttp://seminarserver.com/css/1905USmw.dctN; CertificateIssuerLet's Encrypt Subjecta.delivery.consentmanager.net Fingerprint69:B9:38:2C:D2:98:EE:BC:2E:9B:83:33:E4:2F:BC:73:04:51:C8:79 ValidityThu, 14 Mar 2024 00:37:17 GMT - Wed, 12 Jun 2024 00:37:16 GMT
File typeGIF image data, version 89a, 1 x 1 Hash6f81c41597d3f5a336f458822cc0c32a 8cd77a54b38f1fb376b45af2eaab8f5982523b8d 5704a2e9f2f7ce43a79f9b407f1aedcfd50223cbe8bd2f71ff8c5c819e469cbc
GET /delivery/info/?id=68884&did=2&cfdid=26539&t=pv.d_ncs.d_ancs.d_bncs.cf.cfx&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&o=1713427712409&l=EN&lv=96961&d=2&ct=14&e=&e2=&e3=&i=&sv=19&dv=33& HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 08:08:32 GMT
cache-control: no-store, no-cache, must-revalidate
edge-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: no-cache
access-control-allow-origin: *
x-xss-protection: 0
last-modified: Thu, 18 Apr 2024 08:08:32 GMT
content-length: 43
content-type: image/gif
X-Firefox-Spdy: h2
|
|
| a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2&__cmpfcc=1&id=68884&o=1713427712&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&&l=en&odw=0&dlt=1&l=en | 87.230.98.78 | 200 OK | 5.4 kB |
URL GET HTTP/2a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2&__cmpfcc=1&id=68884&o=1713427712&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&&l=en&odw=0&dlt=1&l=en IP87.230.98.78:443 ASN#61157 PlusServer GmbH
Requested byhttp://seminarserver.com/css/1905USmw.dctN; CertificateIssuerLet's Encrypt Subjecta.delivery.consentmanager.net Fingerprint69:B9:38:2C:D2:98:EE:BC:2E:9B:83:33:E4:2F:BC:73:04:51:C8:79 ValidityThu, 14 Mar 2024 00:37:17 GMT - Wed, 12 Jun 2024 00:37:16 GMT
File typeASCII text, with very long lines (5910), with no line terminators Hashd8a490621d64129dc1b4a0e017450381 8ec0c0cb0dcb77163438d09a66b4108f90ec98c5 71c99c52ddae0f889218c7fd43093cabc2b69756abfcec11ad675ac982446b72
GET /delivery/cmp.php?__cmpcc=2&__cmpfcc=1&id=68884&o=1713427712&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&&l=en&odw=0&dlt=1&l=en HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 08:08:32 GMT
cache-control: no-store, no-cache, must-revalidate
edge-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: no-cache
access-control-allow-origin: *
x-xss-protection: 0
last-modified: Thu, 18 Apr 2024 08:08:32 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| seminarserver.com/sk-logabpstatus.php?a=Vm9XVldjK05TS09KWFZjNktFaFVsdDVHTnc2eWxTNmhjZ3hSbXEwTTU4MmhSWS9wcllWcVMyTWxEc3lGWWVhb2VSaE1jd3dwZlRMdTFCaXE5b0RhZmhQQXlpMnRmMHJleHVQc1IrbTBuZEx5NnRuRk1DdE13aktqRFJhc1VJUVQ=&b=true | 204.11.56.48 | 200 OK | 0 B |
URL GET HTTP/1.1seminarserver.com/sk-logabpstatus.php?a=Vm9XVldjK05TS09KWFZjNktFaFVsdDVHTnc2eWxTNmhjZ3hSbXEwTTU4MmhSWS9wcllWcVMyTWxEc3lGWWVhb2VSaE1jd3dwZlRMdTFCaXE5b0RhZmhQQXlpMnRmMHJleHVQc1IrbTBuZEx5NnRuRk1DdE13aktqRFJhc1VJUVQ=&b=true IP204.11.56.48:80 ASN#40034 CONFLUENCE-NETWORK-INC
Requested byhttp://seminarserver.com/css/1905USmw.dctN;
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sk-logabpstatus.php?a=Vm9XVldjK05TS09KWFZjNktFaFVsdDVHTnc2eWxTNmhjZ3hSbXEwTTU4MmhSWS9wcllWcVMyTWxEc3lGWWVhb2VSaE1jd3dwZlRMdTFCaXE5b0RhZmhQQXlpMnRmMHJleHVQc1IrbTBuZEx5NnRuRk1DdE13aktqRFJhc1VJUVQ=&b=true HTTP/1.1
Host: seminarserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/css/1905USmw.dctN;
Cookie: __cmpcc=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 08:08:32 GMT
Server: Apache
Content-Length: 0
Keep-Alive: timeout=5, max=123
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| i2.cdn-image.com/__media__/pics/28905/arrrow.png | 208.91.196.253 | 200 OK | 283 B |
URL GET HTTP/1.1i2.cdn-image.com/__media__/pics/28905/arrrow.png IP208.91.196.253:80 ASN#40034 CONFLUENCE-NETWORK-INC
Requested byhttp://seminarserver.com/css/1905USmw.dctN;
File typePNG image data, 17 x 27, 8-bit colormap, non-interlaced Hash80d42c82a6c37da90210fd60a2f36128 554ba7c84d2a27ecf3b1f29d03e62101936b54d8 a1626e2d9160a0890a0a8d6e3af9e7095d68a24f9fb5ac8a166000c9a2581e10
GET /__media__/pics/28905/arrrow.png HTTP/1.1
Host: i2.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 08:08:32 GMT
Content-Type: image/png
Content-Length: 283
Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT
Connection: keep-alive
ETag: "61d45d4b-11b"
Expires: Thu, 02 May 2024 08:08:32 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes
|
|
| cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9HRFBSLmxfZW4uZF8zMzY2NC54XzMzLnYucC50XzMzNjY0Lnh0XzMz.js | 185.76.9.15 | 200 OK | 108 kB |
URL GET HTTP/2cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9HRFBSLmxfZW4uZF8zMzY2NC54XzMzLnYucC50XzMzNjY0Lnh0XzMz.js IP185.76.9.15:443 ASN#60068 Datacamp Limited
Requested byhttp://seminarserver.com/css/1905USmw.dctN; CertificateIssuerLet's Encrypt Subject1376624012.rsc.cdn77.org FingerprintAF:BA:C5:36:2A:F9:83:4F:32:1A:8F:95:51:86:52:81:8F:51:7D:B8 ValiditySun, 14 Apr 2024 19:25:23 GMT - Sat, 13 Jul 2024 19:25:22 GMT
File typeASCII text, with very long lines (28179) Size108 kB (108301 bytes) Hashdaa828b02122662e3bfbc304beb0b39a 99447a42367d3145381d5b52b414c645a213eb2b fae634afaa27a701f3b24203e207407758b25acc21c6f9f53e7dae2bdcb5b416
GET /delivery/customdata/bV8xLndfNjg4ODQucl9HRFBSLmxfZW4uZF8zMzY2NC54XzMzLnYucC50XzMzNjY0Lnh0XzMz.js HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 08:08:32 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
x-xss-protection: 0
expires: Thu, 18 Apr 2024 08:37:23 GMT
cache-control: public, max-age=1800
edge-control: public, max-age=1800
last-modified: Thu, 18 Apr 2024 08:07:23 GMT
x-77-nzt: EwwBuUwJDQH3IgAAAAwBuUwKAQH3IwAAAAwBJRPCLgGzCQcAAA
x-77-nzt-ray: c0a4cc284c95c8e000d520662f6ff112
x-accel-expires: @1713429443
x-accel-date: 1713427678
x-77-cache: HIT
x-77-age: 1870
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 34
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| cdn.consentmanager.net/delivery/flags-rect/en.svg | 185.76.9.15 | 200 OK | 31 kB |
URL GET HTTP/2cdn.consentmanager.net/delivery/flags-rect/en.svg IP185.76.9.15:443 ASN#60068 Datacamp Limited
Requested byhttp://seminarserver.com/css/1905USmw.dctN; CertificateIssuerLet's Encrypt Subject1376624012.rsc.cdn77.org FingerprintAF:BA:C5:36:2A:F9:83:4F:32:1A:8F:95:51:86:52:81:8F:51:7D:B8 ValiditySun, 14 Apr 2024 19:25:23 GMT - Sat, 13 Jul 2024 19:25:22 GMT
File typeSVG Scalable Vector Graphics image Hashbd6a0ea3787e858b72d71dac1438fedd d59ba1a15ada77c2bc7a8edaa117f20893b3ee03 467dc751e1a67b8c2211ea6b0d5a8e77774f7e17bd542f8811c31f03d4d39907
GET /delivery/flags-rect/en.svg HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 08:08:32 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Fri, 15 Jul 2022 22:22:41 GMT
etag: W/"78f6-5e3df74d6ce40"
cache-control: max-age=31536000
expires: Sat, 15 Feb 2025 13:39:56 GMT
edge-control: max-age=2592000
x-77-nzt: EwwBuUwJDQH3dWZRAAwBuUwKDAH33AgAAAwBJRPCNAH3AwAAAA
x-77-nzt-ray: c0a4cc284c95c8e000d52066cbe23d17
x-accel-expires: @1739626796
x-accel-date: 1708093067
x-77-cache: HIT
x-77-age: 5336916
content-encoding: gzip
server: CDN77-Turbo
x-cache: HIT
x-age: 5334645
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1713427712&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&&l=en&odw=0&dlt=1&l=en | 87.230.98.78 | 200 OK | 1.0 kB |
URL GET HTTP/2a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1713427712&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&&l=en&odw=0&dlt=1&l=en IP87.230.98.78:443 ASN#61157 PlusServer GmbH
Requested byhttp://seminarserver.com/css/1905USmw.dctN; CertificateIssuerLet's Encrypt Subjecta.delivery.consentmanager.net Fingerprint69:B9:38:2C:D2:98:EE:BC:2E:9B:83:33:E4:2F:BC:73:04:51:C8:79 ValidityThu, 14 Mar 2024 00:37:17 GMT - Wed, 12 Jun 2024 00:37:16 GMT
File typeASCII text, with very long lines (1070), with no line terminators Hashdbbb84ec0f2b34963516d42c68ac7deb e4acd8600aa6becdc2a1b874c60183da26640de1 94e7fadb9893b58e4fef149625d99a88d07c91b1fe663ca8831d707e3a3d7c4e
GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1713427712&h=http%3A%2F%2Fseminarserver.com%2Fcss%2F1905USmw.dctN%3B&&l=en&odw=0&dlt=1&l=en HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://seminarserver.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 08:08:32 GMT
cache-control: no-store, no-cache, must-revalidate
edge-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: no-cache
access-control-allow-origin: *
x-xss-protection: 0
last-modified: Thu, 18 Apr 2024 08:08:32 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|