| 185.2.81.7/ |  185.2.81.7 | | 260 B |
IP185.2.81.7:0 ASN#49981 WorldStream B.V.
File typeHTML document, ASCII text Hashf3ba3595deb6a48e95398d8dc8f73714 cfeaa6b4c79155feb0abc6e43331130a6849d4bf 793f2053ee22f9358e476544dba3fd908288d531e6eb6d9f6b19b7a5dcf02cca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:23:59 GMT
Content-Type: text/html
Content-Length: 260
Connection: keep-alive
Last-Modified: Wed, 20 Sep 2023 18:31:22 GMT
ETag: "198-605ce950c5d8f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 185.2.81.7/favicon.ico | 185.2.81.7 | 404 Not Found | 231 B |
IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeHTML document, ASCII text Hash356a6ecbdee132baa7276448c82bc799 d2cd1aa3460ff237b2b3feee695efe11dfdf3d12 9fb2c8b99762cbf81e800e9524c72867d10dd64eebf355bc56330a0ab1201161
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:23:59 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|
| 185.2.81.7/stalker_portal/c/ | 185.2.81.7 | 200 OK | 2.4 kB |
URL User Request GET HTTP/1.1185.2.81.7/stalker_portal/c/ IP185.2.81.7:80 ASN#49981 WorldStream B.V.
File typeHTML document, ASCII text Hashbd118eb0e42502af87aac99a0de5e858 c90a3a6feade6f64ff912559534e018694333109 e859cd06a8871aa79b1eab9d02af3ee9ab6651deeec0d74732cf592e14cb4faa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/ HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://185.2.81.7/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: text/html
Content-Length: 2392
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
ETag: "1f75-5ee13e20f5c00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 185.2.81.7/stalker_portal/server/api/load_js.php | 185.2.81.7 | 200 OK | 471 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/server/api/load_js.php IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash144e625da8fa22f9fb478cecf9ba42ee 435fd06129dd83edc58d027f7b9ef5cf9b54d31a b676db828cb86fae2c0cab16a2539164ee6bc358988c376e8e805e58b2413b64
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/server/api/load_js.php HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 471
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 185.2.81.7/stalker_portal/c/version.js | 185.2.81.7 | 200 OK | 20 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/version.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash276cc64843a48cf0210181167fac495c 6a90245bf3731375a12c09ddc10c8b16a39fe885 cf51a700cb231cc92372fb079910285927ca288c99d6b225b5e1520bd9524725
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/version.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: application/javascript
Content-Length: 20
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-14"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/favicon.ico | 185.2.81.7 | 404 Not Found | 231 B |
IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeHTML document, ASCII text Hash356a6ecbdee132baa7276448c82bc799 d2cd1aa3460ff237b2b3feee695efe11dfdf3d12 9fb2c8b99762cbf81e800e9524c72867d10dd64eebf355bc56330a0ab1201161
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|
| 185.2.81.7/stalker_portal/c/global.js | 185.2.81.7 | 200 OK | 23 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/global.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, Unicode text, UTF-8 text Hash4933a4009181017a13e3429e7854628c 8eca6fc689db43d1ab9628f3c0bc8351957b4e4c 26c7a8be330f3c91bef54206d0463e8e3de787845c53f23b56e3c333df6b8465
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/global.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: application/javascript
Content-Length: 23357
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-5b3d"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/JsHttpRequest.js | 185.2.81.7 | 200 OK | 14 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/JsHttpRequest.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeASCII text, with very long lines (504) Hash350c05c406c63565cd4dbc5cccd1ef6a cdcf3437988446d67b6a3ab205402febc05a667a e0b67bd2354aa677667b204fcc7cebf623853aaa668d084ec0474968cae7ec04
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/JsHttpRequest.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: application/javascript
Content-Length: 14344
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-3808"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/keydown.keycodes.js | 185.2.81.7 | 200 OK | 1.5 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/keydown.keycodes.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash93e2e37637cc933e4684e39eff824bf2 26a9372fdd1c5361ffa99ed5159597fb5ea56296 514dfebcc491efdb9bf37d119b49dca9fbd217f1953f1b636fa5c29bcb92eb1f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/keydown.keycodes.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: application/javascript
Content-Length: 1533
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-5fd"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/keydown.observer.js | 185.2.81.7 | 200 OK | 3.2 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/keydown.observer.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashb2dc5ee4d990b17bec06cbdc4b71fbd1 fbbdb70d05fff731634c495813e14cd22e2fcf22 2fcc78016a40a0bd09908f5ab378d2452d8686bbff0c01859b2ad134b83be82a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/keydown.observer.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: application/javascript
Content-Length: 3238
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-ca6"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/watchdog.js | 185.2.81.7 | 200 OK | 12 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/watchdog.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hash6a12d00e0abe839c1e36f12aa80b9d01 b7cbbac77beeb0e4eedad0323b85e7298f1df95a e32840abbfc99657b29717d379f2ad9fa3ad2116a80257f4d5022cf4d3b3cce9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/watchdog.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: application/javascript
Content-Length: 11671
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-2d97"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/usbdisk.js | 185.2.81.7 | 200 OK | 5.2 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/usbdisk.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hashc4dcc3d8e18121e3319b31d93747e6c2 8dda83eaf679138fcba64106074987cbebfad952 5d90372a2f12b73bbb8b60a72d6e527a741d5bdd297f8271fadb7fa6b6ee699a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/usbdisk.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: application/javascript
Content-Length: 5218
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-1462"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/load_bar.js | 185.2.81.7 | 200 OK | 3.2 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/load_bar.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashcc4794522acdb245209eefc652b852ad 0772889adf85f44ea188afaa5590062c2ea92be6 1b62b22515583325512d1f7a0d8f5a42315feeeed1d27be5189d939eb5a5ab52
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/load_bar.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: application/javascript
Content-Length: 3202
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-c82"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/xpcom.common.js | 185.2.81.7 | 200 OK | 113 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/xpcom.common.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Size113 kB (112930 bytes) Hash8e61f45a79032bd0e5a9b56a59431767 d511b4f1f8252d8560f7879ca08a5b2fb673c520 65cda36ac41b9127341be831753b757c12da82d08dc2fb4e93de52d5afa10b5b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/xpcom.common.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: application/javascript
Content-Length: 112930
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-1b922"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/xpcom.webkit.js | 185.2.81.7 | 200 OK | 2.6 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/xpcom.webkit.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hash48df1d3befccb2219cf8b4d94d33047e e04ba17025f5be04019106d7bee7b0296338847f fb1440ff47dd435433e2f45bee61c9ae81903625a66c3ac7c4bb1d60bd3cdfba
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/xpcom.webkit.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: application/javascript
Content-Length: 2584
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-a18"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/blocking.js | 185.2.81.7 | 200 OK | 2.1 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/blocking.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hash24b9c9c72422501fd0792216ad7d205c a71bd32cc43ee5432595f743871a2b7c0b44241d 67f571ee2d7c3937c428c22f716e02e96bb3f7ed5ae6b572511a1382a15d3718
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/blocking.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: application/javascript
Content-Length: 2137
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-859"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/player.js | 185.2.81.7 | 200 OK | 202 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/player.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Size202 kB (201781 bytes) Hashbc96d0f53cbb89dc2c5097eef8b37308 b029d8a0b15e731522cfdbeac683d5517fda89b8 08a613d2a3352cb0970604390574fd92fcb5528b5c0cbb949112a1aa8471a8bd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/player.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: application/javascript
Content-Length: 201781
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-31435"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/load_bar_720.css | 185.2.81.7 | 200 OK | 756 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/load_bar_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash99e01075a8a9e3712352b5f7266a3add b27dd643d76308c27ec0a7e8b68cda59936d4fe8 bdf9990b8f4fb3a0b0d0e8430297dac9b752bc1edc901f0a058454ba007a5584
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/load_bar_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: text/css
Content-Length: 756
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-2f4"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/reset_720.css | 185.2.81.7 | 200 OK | 609 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/reset_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash705e3fe67a53795d2a87ea3807d69579 ec957d534c08959818bcddb640374fa7a81844ed 268bf2a74e207e48b90813725f09ffb3fd59cbef406c10f299e9a46bc1f94e99
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/reset_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: text/css
Content-Length: 609
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-261"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/reset.js | 185.2.81.7 | 200 OK | 14 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/reset.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeASCII text, with no line terminators Hash1ca000492515509a003bdf949b99092f e1f282188eb51136cb9894611552aa1d3d8d163e f3e6b70e6a2df3ad46e37d131105a94aaa82580d0f1d0cc971d6878dc2753afa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/reset.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: application/javascript
Content-Length: 14
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-e"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/blocking_720.css | 185.2.81.7 | 200 OK | 981 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/blocking_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashd7a0a43477efe2aaf02d87b3fc4f1d91 9a648284d5c185e718de609f957fe2e50a4e6925 18cc0d9b9c8fc93e1a6a203b70ee9fa989c43229036ddb4f55443ddf764def88
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/blocking_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:00 GMT
Content-Type: text/css
Content-Length: 981
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-3d5"
Expires: Fri, 24 May 2024 22:24:00 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/layer.modal_form_720.css | 185.2.81.7 | 200 OK | 3.5 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/layer.modal_form_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashf22692cf229ac2e4f5c3a46c5acc1097 4e4c81ceee22072d6698cb83ff9404e1dfd0dece 3b87b5c3ed8ada5b208dd667db5c969635fe7b61a693f6e0d6a9bdcdca9f65f8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/layer.modal_form_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 3472
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-d90"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/server/load.php?type=stb&action=get_types_list&JsHttpRequest=1-xml | 185.2.81.7 | 200 OK | 591 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/server/load.php?type=stb&action=get_types_list&JsHttpRequest=1-xml IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashfb8eb06a98d7052e0172de26b04049a1 6e49e08dd3db53394cbaa89aad5b015c6032302d 432dc06b4be0fc374907659dc60f7e2836c8688f065902e2a3caeff88fceca1b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/server/load.php?type=stb&action=get_types_list&JsHttpRequest=1-xml HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/json
Content-Length: 591
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
|
|
| 185.2.81.7/stalker_portal/server/load.php?type=stb&action=handshake&token=&prehash=0&JsHttpRequest=1-xml | 185.2.81.7 | 200 OK | 225 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/server/load.php?type=stb&action=handshake&token=&prehash=0&JsHttpRequest=1-xml IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashe33f2a3722424db63f096f62956ca53b 593a2b1467912d748f2595ba6a28786ca842cdf2 44eac6f7ed71c886805da5b24881b6fce2025c073bed4cddf936bfaea8985ccb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/server/load.php?type=stb&action=handshake&token=&prehash=0&JsHttpRequest=1-xml HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/json
Content-Length: 225
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
|
|
| 185.2.81.7/stalker_portal/c/layer.modal_form.js | 185.2.81.7 | 200 OK | 23 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/layer.modal_form.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hash8259052f20f5765b789114195bdd17e2 084fae4e35c8a4f5064093295b8d70c732ef7010 eb2e00f284d0ba8b34d8253d3e6e610d8533fe6c1376344eeb4ecc1c6456f839
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/layer.modal_form.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 22576
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-5830"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/server/load.php?type=stb&action=get_profile&hd=1&ver=&num_banks=undefined&sn=undefined&stb_type=&client_type=STB&image_version=undefined&video_out=&device_id=&device_id2=&signature=&auth_second_step=0&hw_version=undefined¬_valid_token=0&metrics=%7B%22mac%22%3A%22%22%2C%22model%22%3A%22%22%2C%22type%22%3A%22STB%22%2C%22uid%22%3A%22%22%2C%22random%22%3A%2236c51fbda632c0e9e73f672816588d28b15fa6a5%22%7D&hw_version_2=×tamp=1713997441&api_signature=0&prehash=0&JsHttpRequest=1-xml | 185.2.81.7 | 200 OK | 255 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/server/load.php?type=stb&action=get_profile&hd=1&ver=&num_banks=undefined&sn=undefined&stb_type=&client_type=STB&image_version=undefined&video_out=&device_id=&device_id2=&signature=&auth_second_step=0&hw_version=undefined¬_valid_token=0&metrics=%7B%22mac%22%3A%22%22%2C%22model%22%3A%22%22%2C%22type%22%3A%22STB%22%2C%22uid%22%3A%22%22%2C%22random%22%3A%2236c51fbda632c0e9e73f672816588d28b15fa6a5%22%7D&hw_version_2=×tamp=1713997441&api_signature=0&prehash=0&JsHttpRequest=1-xml IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash23712fcd970a9a587c049c19959702e0 57d03b1294dee04d0d364486788cbda6af19172a cc59a291f94f86de2d51106ac7dfff28f94e6b160c01a7489e1c1b092d7e051b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/server/load.php?type=stb&action=get_profile&hd=1&ver=&num_banks=undefined&sn=undefined&stb_type=&client_type=STB&image_version=undefined&video_out=&device_id=&device_id2=&signature=&auth_second_step=0&hw_version=undefined¬_valid_token=0&metrics=%7B%22mac%22%3A%22%22%2C%22model%22%3A%22%22%2C%22type%22%3A%22STB%22%2C%22uid%22%3A%22%22%2C%22random%22%3A%2236c51fbda632c0e9e73f672816588d28b15fa6a5%22%7D&hw_version_2=×tamp=1713997441&api_signature=0&prehash=0&JsHttpRequest=1-xml HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Authorization: Bearer 3853BDCA12F52C1A6D47159075A123E0
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/json
Content-Length: 255
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
|
|
| 185.2.81.7/stalker_portal/server/load.php?type=stb&action=get_localization&JsHttpRequest=1-xml | 185.2.81.7 | 200 OK | 16 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/server/load.php?type=stb&action=get_localization&JsHttpRequest=1-xml IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash05c0dfd62530841184d8fc1f6a9ef3d6 c3ab0f06d4ad3d5ed9c25609f7330bcdbf884767 ab23cfc5d2a62893dfc1232fd2d3cf5b815d085fdf87704af4e6c764863d570d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/server/load.php?type=stb&action=get_localization&JsHttpRequest=1-xml HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Authorization: Bearer 3853BDCA12F52C1A6D47159075A123E0
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
|
|
| 185.2.81.7/stalker_portal/server/load.php?type=stb&action=log&real_action=cut_off()¶m=&content_id=0&tmp_type=0&JsHttpRequest=1-xml | 185.2.81.7 | 200 OK | 117 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/server/load.php?type=stb&action=log&real_action=cut_off()¶m=&content_id=0&tmp_type=0&JsHttpRequest=1-xml IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash94c3d7916d2aa71039628a74fc8290e4 83be2ba4e0a2afd4d64e9f34989178ba5fb2f93f d470c5e0ebafd956afaa359884b3048cbb3caeb2f14bde51a018ed681b4f84b5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/server/load.php?type=stb&action=log&real_action=cut_off()¶m=&content_id=0&tmp_type=0&JsHttpRequest=1-xml HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Authorization: Bearer 3853BDCA12F52C1A6D47159075A123E0
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/json
Content-Length: 117
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
|
|
| 185.2.81.7/stalker_portal/server/load.php?type=stb&action=log&real_action=stop¶m=&content_id=0&tmp_type=0&JsHttpRequest=1-xml | 185.2.81.7 | 200 OK | 117 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/server/load.php?type=stb&action=log&real_action=stop¶m=&content_id=0&tmp_type=0&JsHttpRequest=1-xml IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash70bc847d94758268e52f910870a32295 fec8a4a9ec1d723867f686bd4c3e16ba7928379e 8fa0c10c8de4ca0685fad9d82e0bd1cb1054e929075854d4edb276a945deb8ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/server/load.php?type=stb&action=log&real_action=stop¶m=&content_id=0&tmp_type=0&JsHttpRequest=1-xml HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Authorization: Bearer 3853BDCA12F52C1A6D47159075A123E0
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/json
Content-Length: 117
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
|
|
| 185.2.81.7/stalker_portal/c/template/default/i_720/bg2.png | 185.2.81.7 | 200 OK | 127 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/i_720/bg2.png IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typePNG image data, 1280 x 720, 8-bit/color RGB, non-interlaced Size127 kB (126733 bytes) Hash7da2c8c7b03564e7aa5aa4b89a3cd51c b4fa316a404d86b62dc66e14d09271aa4c030deb 950a55cee47ccbe1d9b0bfdac1e265dc1e671a95d1299eaec52f864a299348fa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/i_720/bg2.png HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/template/default/blocking_720.css
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: image/png
Content-Length: 126733
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-1ef0d"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/server/load.php?type=stb&action=get_modules&JsHttpRequest=1-xml | 185.2.81.7 | 200 OK | 1.4 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/server/load.php?type=stb&action=get_modules&JsHttpRequest=1-xml IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashceb3185385a26153f5eab5e2ea2468e7 4f7e69ee9c7024bf16b6bc71bca9a9e8a08bc3d6 3b4da7c1e24723c9278bc70d06c025df3b90323e21eb3deb31824656e79e1d0c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/server/load.php?type=stb&action=get_modules&JsHttpRequest=1-xml HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Authorization: Bearer 3853BDCA12F52C1A6D47159075A123E0
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/json
Content-Length: 1420
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
|
|
| 185.2.81.7/stalker_portal/c/reset.js | 185.2.81.7 | 200 OK | 14 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/reset.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeASCII text, with no line terminators Hash1ca000492515509a003bdf949b99092f e1f282188eb51136cb9894611552aa1d3d8d163e f3e6b70e6a2df3ad46e37d131105a94aaa82580d0f1d0cc971d6878dc2753afa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/reset.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 14
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-e"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/context_menu_720.css | 185.2.81.7 | 200 OK | 2.9 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/context_menu_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashe7d8c474bc2a9094307bb4534e8f70f9 f86f8bc64756297f25bc5c1abe3271b5176e76fe b90ca575963ac1cd0dfa2e8237f97250b5c8b0ab0045bacbe0f15d023d0d21dd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/context_menu_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 2918
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-b66"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/context_menu.js | 185.2.81.7 | 200 OK | 13 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/context_menu.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash6da84fab0f6a7b666f9f93fafdc6da40 bcb5fedae038ffbdabbee7a6c51a0e17a1a2d28e 03f9dc96767db55d7237f9aa354ba11603cb347e861eadba30d3ebe08a1dc70b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/context_menu.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 13172
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-3374"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/main_menu_720.css | 185.2.81.7 | 200 OK | 2.9 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/main_menu_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashaa82b82eee0d01516390110c4411a9b3 adff12e15805c4b021826cdfa5248a7660a372f6 9e8e39684638ef44662807376227dd1371a652483e53e01e3c51eaa09d49fe60
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/main_menu_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 2932
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-b74"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/main_menu.js | 185.2.81.7 | 200 OK | 17 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/main_menu.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hash613c88059f0938f6cc0b0bd5b612d40f 9212e75cb444aa34a768e4d0ea74db69e33929e2 e9d7438962718d73e330affdff3299309df9f82136dbe51a5532cbc31c4f7bf4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/main_menu.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 17242
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-435a"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/alert_720.css | 185.2.81.7 | 200 OK | 2.1 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/alert_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash4b59d18fa72c26d9059fcd70962fba38 4bee42a1f014c6abf50f8d5d136b2fb339204b95 51a8734374fd054feb9b9a6679c76cc6f394f2094f41ca4d814719dfcb2adaa8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/alert_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 2077
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-81d"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/alert.js | 185.2.81.7 | 200 OK | 6.1 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/alert.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hash2226626cc33311f70f35a74d1aef2f5c 3294408ba9afeea9e01138a00ebdf569cffad946 cd0d56b513a20ce9610810b70c3cf69ae9bd17d3af34845b5665ed2346260c72
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/alert.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 6121
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-17e9"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/speedtest_720.css | 185.2.81.7 | 200 OK | 0 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/speedtest_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/speedtest_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 0
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-0"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/speedtest.js | 185.2.81.7 | 200 OK | 2.7 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/speedtest.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hash778226e53581b3eca56d08f86e8d250d 86a04766619761484a96f359c77dfddd54907f3b fbf48337b7a7bb45d5d098812f45a5648fbc138dce235965b2a5bc67c49988eb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/speedtest.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 2720
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-aa0"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/layer.base_720.css | 185.2.81.7 | 200 OK | 1.1 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/layer.base_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash889f3f1b3ae2408155e909cdb6cb3e33 fd77d1b0128f71d151d01e664a6637be56ee1217 a5c3dd333a2b67516f2c99e74c963a0cf086e9a528dd52a6ad04aad15b38b5d4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/layer.base_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 1113
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-459"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/layer.base.js | 185.2.81.7 | 200 OK | 8.0 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/layer.base.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hash0dcc176f28f1e3c619618175bdef39aa 1701339106b1e0296447f91484782169d94b8e32 7811227d56e16e912a051ffc4ef27a64fbaae950020a557f1b8a0f02c3809a00
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/layer.base.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 8024
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-1f58"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/layer.list_720.css | 185.2.81.7 | 200 OK | 14 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/layer.list_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeassembler source, ASCII text Hash228ef989434a5f5b8f1118e9d57e1c16 22f6028b229752c2273b60a6f5cd143a7f468e74 ecf02a7cdf4eacce1accb7e460ab3b7792992b55651141d6755779230759ad43
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/layer.list_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 14487
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-3897"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/layer.list.js | 185.2.81.7 | 200 OK | 14 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/layer.list.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash6d11df68a812bb772f4058b5076e1698 9b30d77c07681507dfbd193b3a1553a9611dd5f6 9bbc8db16bc55332ee819a2945a4605c35a3c9120f94f4e08ba5c7d8cd4185ef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/layer.list.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 13611
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-352b"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/layer.setting_720.css | 185.2.81.7 | 200 OK | 19 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/layer.setting_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash476499679d07e712b4b25e085e88a529 39bffa85f8172cbaf1c76e460dd3eb2f9337789a 0b7498b5e4f99b9ed35b13430a8acbe8053727ff0532d2a1e6353febc69aa8a7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/layer.setting_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 19
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-13"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/layer.setting.js | 185.2.81.7 | 200 OK | 8.5 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/layer.setting.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hashf80fb4075855ef96e18fe4e5af84bf94 899907613c04c90efc82a22aaf99db7c4789c332 e9a5cde45b93319a0064eb6f61cec6ae67143c5c366ef1c9061c5e884b20759b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/layer.setting.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 8492
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-212c"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/layer.simple_720.css | 185.2.81.7 | 200 OK | 319 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/layer.simple_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash9af88d2acbfb9662e7429adca7be399a 28f6c1d27afcaa524f28d3a97c1cfe24dea53004 5214aebd784a3cc334f81d9c1d9f8ca0c5f22cb9dc6883502ba9204bdeaef584
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/layer.simple_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 319
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-13f"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/layer.simple.js | 185.2.81.7 | 200 OK | 1.2 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/layer.simple.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hasha7e4e07a89e1b115b4c26ee26d8271f5 da07dca068cecbca87025df7fd25ffcfe15bb124 29896d7ee652c9977f6c33d4f43a1dc32c11fe6a15797703f932c56589b49c63
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/layer.simple.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 1245
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-4dd"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/layer.input_720.css | 185.2.81.7 | 200 OK | 5.0 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/layer.input_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash76917a16b272c554daaefe875ec4fcb3 33acbba61d3d77708106656acda805b8cbf5b4ec db7cdb790d35bde47be157ae11a753de8b38c720b88525a847c744be8c557500
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/layer.input_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 5033
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-13a9"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/layer.input.js | 185.2.81.7 | 200 OK | 18 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/layer.input.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hash168674ad105f0dc4202c0b14186c505c 15dabbe617b2194ab3bd4304bf89c6d6ad8a4267 c6b8287ae32f23c4f10637c9c34bd7c66217b0c001ef438c90ea8058337a7940
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/layer.input.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 17471
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-443f"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/layer.sidebar_720.css | 185.2.81.7 | 200 OK | 1.8 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/layer.sidebar_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash6113e9d0ad282e97cde796c7d8d6b9da f9d1427b026168fe63fd3c1367d16e2760fd21be 4486f5bbbd7e5ba079bba8b2d03200383fed56f86930cf8a70bf8f98b45afee2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/layer.sidebar_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 1802
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-70a"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/layer.sidebar.js | 185.2.81.7 | 200 OK | 9.0 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/layer.sidebar.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash7e22205065bbc92336f60f6e122d2155 fe6e64a73adb16a9338d94755378ac4cb1f8446f 261c49b31f1ae71e43968dd27173d588582e1f13f1a2f1c27e6b1481b4b01d56
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/layer.sidebar.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 8954
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-22fa"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/layer.search_box_720.css | 185.2.81.7 | 200 OK | 1.3 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/layer.search_box_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash1dbeb27eb7ad0e837dab2939de40ab16 b4607d7a61311f8e6228fc830398afb0d5aa4893 f6bf137f52a7aa17771dae6524cb1bd6625710bb8097435fe77b0692c1b47e77
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/layer.search_box_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 1287
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-507"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/layer.search_box.js | 185.2.81.7 | 200 OK | 32 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/layer.search_box.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash02a22bc05390db8aef1c12574da17b56 fc190b25c469e1b31c88ae37963c4d8e8251089f eaaa1e6521ea33a7b9cfc2fe6b2a5fdc6403b77c5d45912c9a279a690516f4ce
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/layer.search_box.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 32247
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-7df7"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/layer.bottom_menu_720.css | 185.2.81.7 | 200 OK | 997 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/layer.bottom_menu_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hasha20849f8126c667751e86716f9f426a4 e482e759a98f5c61a6b09c86b433d40a8693ca27 c5e36b2e853fe1f3a5d1d9f8930d9f26d649a599db747dd5ca96d5c7a13bc371
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/layer.bottom_menu_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 997
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-3e5"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/layer.bottom_menu.js | 185.2.81.7 | 200 OK | 7.0 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/layer.bottom_menu.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hash7e707ac74e12f8d6db9ac5cc119da5d1 fc256c2cf8a10c7be739d9f71d88ab62e007320a 076510d04cc2abebba1312656d751c5d840567798fd72d146f79406facbdd602
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/layer.bottom_menu.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 6990
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-1b4e"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/layer.scrollbar_720.css | 185.2.81.7 | 200 OK | 479 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/layer.scrollbar_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash138f1e1bed5db6dcb1e0166e7527bd60 d4faa1bc81f1e3bf73d1c494927a29c8ba80ecc8 62ec9ec48bf4f77bc81208d83afd1c940f7dedfb9f1d89dcfa9ba11444608a74
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/layer.scrollbar_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 479
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-1df"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/layer.scrollbar.js | 185.2.81.7 | 200 OK | 2.0 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/layer.scrollbar.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashd7743576738f9cfef1d4db07a7f20519 9cbbf65ebe9a232b176a9da0eb1c903614279ec9 4b78068739b1b9888459e0d408c9ea74ef6c9ce365f7203895a2aa69d61cf677
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/layer.scrollbar.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 1999
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-7cf"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/layer.vclub_info_720.css | 185.2.81.7 | 200 OK | 1.1 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/layer.vclub_info_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash029196072e345ab758813e79c47b9a8d 4246678b9743c458b529a802ff02bf08dc42df9d 90d97ba32e9854aec6f2bb22e16027a8d504fe647f20c572bef4b6b6301b4da3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/layer.vclub_info_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 1114
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-45a"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/layer.vclub_info.js | 185.2.81.7 | 200 OK | 7.2 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/layer.vclub_info.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hashe91f34736eff31ba81078165406fca69 7075cffab8602dccf6c6bbc386a3b94478e55927 17977d287d393aeb3d715d121edff151b485a18f9103b71dddb1a93818369e51
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/layer.vclub_info.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 7164
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-1bfc"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/image.viewer_720.css | 185.2.81.7 | 200 OK | 506 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/image.viewer_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashe6b58a4739ffbb162b0afd7a199c9e3b 79b8595252d9aeb6814eb3bfbb93e756a936c34b a98adcd290bd1635e2752e09c5ca971d8715c5f5b7bb9bf36a6fc7ffa3c22fa2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/image.viewer_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 506
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-1fa"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/image.viewer.js | 185.2.81.7 | 200 OK | 3.8 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/image.viewer.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hash7e4abb9b260b1345a4d28a7adf0e61bd 014a871b87c6ef21e3246bb3e6f1907e8473e557 45b56daee6bdb525c4cf29e43ea512b7b19668783a12c6b92bd75fb4b36677e8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/image.viewer.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 3803
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-edb"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/password_input_720.css | 185.2.81.7 | 200 OK | 837 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/password_input_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashe69f33fcf1bbd4de64e29fcfbf04f1b4 f8a994535d23e89a01a3773cc366057f050bd3e7 34c217cb75a7e3e6c32a3b34ef3e729919507d8dfd2ba47b35a5681c082ea3d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/password_input_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 837
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-345"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/password_input.js | 185.2.81.7 | 200 OK | 4.4 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/password_input.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hash87dfa0dfc33a2d6f9d17e9666f975b3d 7912e497166359aef052742f189146629987ff27 7941725def48b516049b4a97a84b944f33c8a7fb4c2e7dea9d48cb0a88eab60b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/password_input.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 4398
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-112e"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/series_switch_720.css | 185.2.81.7 | 200 OK | 947 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/series_switch_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash7e8878e23a026cfa2100e5efb6be8c00 9158cf63bf37ab435e82a4704aa635bf81bbe189 cd38be21701b203b002f61889246a48655d641f9e48d93203641aaba6e8175d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/series_switch_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 947
Last-Modified: Tue, 22 Nov 2022 19:07:30 GMT
Connection: keep-alive
ETag: "637d1df2-3b3"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/series_switch.js | 185.2.81.7 | 200 OK | 3.9 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/series_switch.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashfe1c862dc37574aad931f942f8a4b1e1 6c55ed8c4f74518fde533cac942e945f3fd8d035 6ad63093b9b465cf81e5ad677a573c4a6187930969620e3d457812512c2dcb9e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/series_switch.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 3878
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-f26"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/duration_input_720.css | 185.2.81.7 | 200 OK | 653 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/duration_input_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash22eabbbd128af004824a3a31ad699291 020f89ba22ebc60ac58ce5573a21ce5052ccba0f 3925d504ae309b711c7320bf2fbaf0407bc8685852dbbaac1072326d238abf9b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/duration_input_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 653
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-28d"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/duration_input.js | 185.2.81.7 | 200 OK | 2.9 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/duration_input.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hash4a2f3a9388e0d957eee2a9c084261da1 3e331b6e4f213162ff842a1f27a199a29619d28c a7a661a823601ee2f87e532de60bd0adaf256acf32a5157b8e543f5044d79000
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/duration_input.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 2859
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-b2b"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/account_720.css | 185.2.81.7 | 200 OK | 467 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/account_720.css IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
Hashc1e3c0a3b0dd7a7df159383ec14347d1 75c7acd0351f96115674173bde061a62fa29df21 e8a1b38f6609a8c1ddc2307abf77fe5d82d51fa515a99cb51bbd42177be68a18
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/account_720.css HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/css
Content-Length: 467
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-1d3"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/account.js | 185.2.81.7 | 200 OK | 19 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/account.js IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeJavaScript source, ASCII text Hash53f95b11bc7a4af0ccc79063c225f33d f4e7218e03f49b4fa7881092dec1c5bc42e232e7 2082bcc4a1c98c073f680621c722e03c01344f8475c8ebf9312c5fcb7d599ebb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/account.js HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: application/javascript
Content-Length: 18866
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-49b2"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/i_720/25alfa_20.png | 185.2.81.7 | 200 OK | 146 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/i_720/25alfa_20.png IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typePNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced Hashdbe969d9009bfb364cc6e0e4c1780efc ebb9e853d4816e1f2f85d110bce162084de6e514 b9a18b6079bb9bf95feb1c528ba23cb93a9b4a600315289dc0af8af77732d08f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/i_720/25alfa_20.png HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/template/default/layer.simple_720.css
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: image/png
Content-Length: 146
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-92"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/i_720/mb_scroll_bg.png | 185.2.81.7 | 200 OK | 983 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/i_720/mb_scroll_bg.png IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typePNG image data, 22 x 500, 8-bit/color RGBA, non-interlaced Hash51b4625bca6929f6165b88cb73e23c1d 98f7514d3ca617220131b9aa71354af94ec2ef1f 935b5637831fc00e439d2a048b4ba45f28b9e7cde4c822971c51c81346906876
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/i_720/mb_scroll_bg.png HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/template/default/layer.scrollbar_720.css
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: image/png
Content-Length: 983
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-3d7"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/i_720/mb_scroll.png | 185.2.81.7 | 200 OK | 392 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/i_720/mb_scroll.png IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typePNG image data, 10 x 30, 8-bit/color RGBA, non-interlaced Hash7b3b6a5c755d4bb2160f59bd9e733e5b 3272099300d903bc38d95d40b019b089fc7affb6 1da665c4571b65ee35057a4350c506da0e60efd85eff70a7a7023aadc2bf41f7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/i_720/mb_scroll.png HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/template/default/layer.scrollbar_720.css
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: image/png
Content-Length: 392
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-188"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/server/load.php?type=account_info&action=get_main_info&JsHttpRequest=1-xml | 185.2.81.7 | 200 OK | 41 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/server/load.php?type=account_info&action=get_main_info&JsHttpRequest=1-xml IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeASCII text, with no line terminators Hashd1c12db107523b2ea9563b20afff063f 8f4f97bd8f11754f4bf25b154f274910b8f811a2 f022fa218ae2e503f391883a7e3c7f98a25e8c3e555ebaf887ec2706dd3a3232
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/server/load.php?type=account_info&action=get_main_info&JsHttpRequest=1-xml HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Authorization: Bearer 3853BDCA12F52C1A6D47159075A123E0
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
|
|
| 185.2.81.7/stalker_portal/server/load.php?type=account_info&action=get_payment_info&JsHttpRequest=1-xml | 185.2.81.7 | 200 OK | 41 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/server/load.php?type=account_info&action=get_payment_info&JsHttpRequest=1-xml IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeASCII text, with no line terminators Hashd1c12db107523b2ea9563b20afff063f 8f4f97bd8f11754f4bf25b154f274910b8f811a2 f022fa218ae2e503f391883a7e3c7f98a25e8c3e555ebaf887ec2706dd3a3232
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/server/load.php?type=account_info&action=get_payment_info&JsHttpRequest=1-xml HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Authorization: Bearer 3853BDCA12F52C1A6D47159075A123E0
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
|
|
| 185.2.81.7/stalker_portal/c/template/default/i_720/footer_bg.png | 185.2.81.7 | 200 OK | 3.3 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/i_720/footer_bg.png IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typePNG image data, 1280 x 46, 8-bit colormap, non-interlaced Hashe168963bd7ebf8fcd4722fc89dbcf50f 29a89cdf5a836939285b4aaa515f24253f143f29 08b3aaf2a6ab39a1be00bf1ca20f6c5a936533d76b59bdb7c57530735d2b27c4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/i_720/footer_bg.png HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/template/default/layer.list_720.css
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: image/png
Content-Length: 3277
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-ccd"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/server/load.php?type=account_info&action=get_agreement_info&JsHttpRequest=1-xml | 185.2.81.7 | 200 OK | 41 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/server/load.php?type=account_info&action=get_agreement_info&JsHttpRequest=1-xml IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeASCII text, with no line terminators Hashd1c12db107523b2ea9563b20afff063f 8f4f97bd8f11754f4bf25b154f274910b8f811a2 f022fa218ae2e503f391883a7e3c7f98a25e8c3e555ebaf887ec2706dd3a3232
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/server/load.php?type=account_info&action=get_agreement_info&JsHttpRequest=1-xml HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Authorization: Bearer 3853BDCA12F52C1A6D47159075A123E0
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
|
|
| 185.2.81.7/stalker_portal/c/template/default/i_720/footer_btn.png | 185.2.81.7 | 200 OK | 3.3 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/i_720/footer_btn.png IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typePNG image data, 120 x 30, 8-bit/color RGB, non-interlaced Hash74c26232f3681aaa285fb3512ad517de 9e1d3e8bf6c5487a6776ef3f99369a62d1bf3560 14b06025e8906c20830ef2fcdb0fa3b241cfe7eec22734e2ff5232596b1f1e9f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/i_720/footer_btn.png HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/template/default/layer.list_720.css
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: image/png
Content-Length: 3287
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-cd7"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/server/load.php?type=account_info&action=get_terms_info&JsHttpRequest=1-xml | 185.2.81.7 | 200 OK | 41 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/server/load.php?type=account_info&action=get_terms_info&JsHttpRequest=1-xml IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typeASCII text, with no line terminators Hashd1c12db107523b2ea9563b20afff063f 8f4f97bd8f11754f4bf25b154f274910b8f811a2 f022fa218ae2e503f391883a7e3c7f98a25e8c3e555ebaf887ec2706dd3a3232
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/server/load.php?type=account_info&action=get_terms_info&JsHttpRequest=1-xml HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Authorization: Bearer 3853BDCA12F52C1A6D47159075A123E0
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
Content-Encoding: gzip
|
|
| 185.2.81.7/stalker_portal/c/template/default/i_720/footer_bg2.png | 185.2.81.7 | 200 OK | 779 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/i_720/footer_bg2.png IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typePNG image data, 14 x 46, 8-bit/color RGB, non-interlaced Hash0662a377b43ad8b2103e08fa44d5afec 1cb7c4a1157d74924bba32d962290be43586a849 9689fa8fc3e4f354af41f3a122a229bfbb289e4ace94a945d5231ea58183d4b2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/i_720/footer_bg2.png HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/template/default/layer.base_720.css
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: image/png
Content-Length: 779
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-30b"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/i_720/ears.png | 185.2.81.7 | 200 OK | 1.2 kB |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/i_720/ears.png IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typePNG image data, 120 x 530, 8-bit/color RGBA, non-interlaced Hash391245456dd33e6a844ac89bf1c963d2 ea4f2f1a811680ae1654226a1945a3a80d301fb9 39aa2881a45a197dc74b730a18ce817871dd85e0d5e2cf9eacbd4be6b0a25f45
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/i_720/ears.png HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/template/default/layer.list_720.css
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: image/png
Content-Length: 1237
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-4d5"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|
| 185.2.81.7/stalker_portal/c/template/default/i_720/ears_arrow_l.png | 185.2.81.7 | 200 OK | 280 B |
URL GET HTTP/1.1185.2.81.7/stalker_portal/c/template/default/i_720/ears_arrow_l.png IP185.2.81.7:80 ASN#49981 WorldStream B.V.
Requested byhttp://185.2.81.7/stalker_portal/c/
File typePNG image data, 15 x 18, 8-bit/color RGBA, non-interlaced Hash85e60b425c736a7865342eeee636ab57 1b5c7ac0f8718a6e74b6ca981f8359d8c9e8971d e007f153cb30cc21cd02a4759b451d872e9653c296d592ebd219b70126df8879
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stalker_portal/c/template/default/i_720/ears_arrow_l.png HTTP/1.1
Host: 185.2.81.7
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://185.2.81.7/stalker_portal/c/template/default/layer.list_720.css
Cookie: mac=; stb_lang=undefined; timezone=undefined; adid=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 24 Apr 2024 22:24:01 GMT
Content-Type: image/png
Content-Length: 280
Last-Modified: Tue, 22 Nov 2022 19:07:28 GMT
Connection: keep-alive
ETag: "637d1df0-118"
Expires: Fri, 24 May 2024 22:24:01 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
|