| m.exactag.com/ai.aspx?tc=d96NUMBERbc40b07205bbd26a23a8d2e6b6b4f9&url=http:developerztech.com/egbyjn/35848//bWtlbGxlckBvcC1mLm9yZw== |  213.202.235.8 | | 0 B |
URL m.exactag.com/ai.aspx?tc=d96NUMBERbc40b07205bbd26a23a8d2e6b6b4f9&url=http:developerztech.com/egbyjn/35848//bWtlbGxlckBvcC1mLm9yZw== IP213.202.235.8:0 ASN#24961 myLoc managed IT AG
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ai.aspx?tc=d96NUMBERbc40b07205bbd26a23a8d2e6b6b4f9&url=http:developerztech.com/egbyjn/35848//bWtlbGxlckBvcC1mLm9yZw== HTTP/1.1
Host: m.exactag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Type: text/html; charset=iso-8859-1
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Di, 16 Apr 2024 11:58:40 GMT
Location: http:developerztech.com/egbyjn/35848//bWtlbGxlckBvcC1mLm9yZw==
P3P: policyref="https://m.exactag.com/w3c/p3p.xml", CP="NOI NID STP STA CUR OUR"
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: *
X-ET-Code: 20
X-ET-Camp: 0
X-ET-Monitoring: 1
Accept-CH: sec-ch-ua-platform-version,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua-model,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-wow64
Strict-Transport-Security: max-age=31536000
Date: Tue, 16 Apr 2024 11:58:40 GMT
Connection: close
Content-Length: 0
cross-origin-resource-policy: cross-origin
X-Xss-Protection: 0
X-Content-Type-Options: nosniff
|
| developerztech.com/egbyjn/35848//bWtlbGxlckBvcC1mLm9yZw== |  208.109.16.214 | | 272 B |
URL developerztech.com/egbyjn/35848//bWtlbGxlckBvcC1mLm9yZw== IP208.109.16.214:0 ASN#398101 GO-DADDY-COM-LLC
File typeHTML document, ASCII text Hash59bae40e6e959e2385d04e7772531173 2632007263212baada406fef4dd275267f57b7f7 8a5cad90cf61613831ad8c4ce557c261908ef22b8000d7262d112ae3692b3956
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /egbyjn/35848//bWtlbGxlckBvcC1mLm9yZw== HTTP/1.1
Host: developerztech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 16 Apr 2024 11:58:41 GMT
Server: Apache
Location: https://developerztech.com/egbyjn/35848/bWtlbGxlckBvcC1mLm9yZw==
Content-Length: 272
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
| developerztech.com/egbyjn/35848/bWtlbGxlckBvcC1mLm9yZw== | 208.109.16.214 | 200 OK | 272 B |
URL User Request GET HTTP/2developerztech.com/egbyjn/35848/bWtlbGxlckBvcC1mLm9yZw== IP208.109.16.214:443 ASN#398101 GO-DADDY-COM-LLC
CertificateIssuerGoDaddy.com, Inc. Subjectdeveloperztech.com FingerprintF6:33:5F:14:4B:AE:8D:71:E2:E8:5A:68:08:F6:EC:35:B0:46:87:60 ValidityTue, 11 Apr 2023 17:06:58 GMT - Thu, 11 Apr 2024 17:06:58 GMT
File typeHTML document, ASCII text Hash59bae40e6e959e2385d04e7772531173 2632007263212baada406fef4dd275267f57b7f7 8a5cad90cf61613831ad8c4ce557c261908ef22b8000d7262d112ae3692b3956
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /egbyjn/35848/bWtlbGxlckBvcC1mLm9yZw== HTTP/1.1
Host: developerztech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 16 Apr 2024 11:58:41 GMT
Server: Apache
Location: https://developerztech.com/egbyjn/35848/bWtlbGxlckBvcC1mLm9yZw==
Content-Length: 272
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
| developerztech.com/egbyjn/35848/bWtlbGxlckBvcC1mLm9yZw== | 208.109.16.214 | 200 OK | 1 B |
URL User Request GET HTTP/2developerztech.com/egbyjn/35848/bWtlbGxlckBvcC1mLm9yZw== IP208.109.16.214:443 ASN#398101 GO-DADDY-COM-LLC
CertificateIssuerGoDaddy.com, Inc. Subjectdeveloperztech.com FingerprintF6:33:5F:14:4B:AE:8D:71:E2:E8:5A:68:08:F6:EC:35:B0:46:87:60 ValidityTue, 11 Apr 2023 17:06:58 GMT - Thu, 11 Apr 2024 17:06:58 GMT
File typevery short file (no magic) Hasheccbc87e4b5ce2fe28308fd9f2a7baf3 77de68daecd823babbb58edb1c8e14d7106e83bb 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /egbyjn/35848/bWtlbGxlckBvcC1mLm9yZw== HTTP/1.1
Host: developerztech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/8.2.16
vary: Accept-Encoding
content-encoding: br
content-length: 1
content-type: text/html; charset=UTF-8
date: Tue, 16 Apr 2024 11:58:43 GMT
server: Apache
X-Firefox-Spdy: h2
|
| developerztech.com/favicon.ico | 208.109.16.214 | 200 OK | 1 B |
URL GET HTTP/2developerztech.com/favicon.ico IP208.109.16.214:443 ASN#398101 GO-DADDY-COM-LLC
Requested byhttps://developerztech.com/egbyjn/35848/bWtlbGxlckBvcC1mLm9yZw== CertificateIssuerGoDaddy.com, Inc. Subjectdeveloperztech.com FingerprintF6:33:5F:14:4B:AE:8D:71:E2:E8:5A:68:08:F6:EC:35:B0:46:87:60 ValidityTue, 11 Apr 2023 17:06:58 GMT - Thu, 11 Apr 2024 17:06:58 GMT
File typevery short file (no magic) Hasheccbc87e4b5ce2fe28308fd9f2a7baf3 77de68daecd823babbb58edb1c8e14d7106e83bb 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: developerztech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://developerztech.com/egbyjn/35848/bWtlbGxlckBvcC1mLm9yZw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/8.2.16
vary: Accept-Encoding
content-encoding: br
content-length: 1
content-type: text/html; charset=UTF-8
date: Tue, 16 Apr 2024 11:58:44 GMT
server: Apache
X-Firefox-Spdy: h2
|