Report - 185.30.32.228/admin/index.php

Report Overview

Visited public
2025-05-06 20:59:10
Tags
URL
185.30.32.228/admin/index.php
Finishing URL
s228.goserver.host/
IP / ASN
185.30.32.228
#48324 webgo GmbH
Title
webgo Webspace-Admin

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
webgo.de	395487	unknown	No data	No data	446 B	1.2 kB	89.44.8.138
s228.goserver.host	unknown	unknown	No data	No data	7.6 kB	549 kB	185.30.32.228
www.webgo.de	499280	unknown	No data	No data	450 B	163 B	89.44.8.138
185.30.32.228	unknown	unknown	No data	No data	910 B	3.6 kB	185.30.32.228

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-05-06	medium	185.30.32.228	Sinkholed
2025-05-06	medium	185.30.32.228	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	s228.goserver.host/templates/default_v4/js/ie10-viewport-bug-workaround.js	ScriptElement	419 B	2023-03-08	2025-05-10
Pretty URL s228.goserver.host/templates/default_v4/js/ie10-viewport-bug-workaround.js IP 185.30.32.228 ASN #48324 webgo GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 16:18 Last Seen2025-05-10 08:21 Times Seen45 Hash f47b4c8143d35993d96da8b16b971971 5d2dba2c76cbedcd4ce0d5cb7a32095021fc8173 bc4e8896f4565e8ffd5e560e07b27d1f18ced669b3b9b831c61bebd2c4ba0847 Loading...

	s228.goserver.host/templates/default_v4/js/jquery.min.js	ScriptElement	96 kB	2023-03-07	2025-05-14
Pretty URL s228.goserver.host/templates/default_v4/js/jquery.min.js IP 185.30.32.228 ASN #48324 webgo GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-14 17:09 Times Seen8511 Hash f03e5a3bf534f4a738bc350631fd05bd 37b1db88b57438f1072a8ebc7559c909c9d3a682 aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947 Loading...

	s228.goserver.host/templates/default_v4/js/bootstrap.min.js	ScriptElement	58 kB	2023-03-07	2025-05-14
Pretty URL s228.goserver.host/templates/default_v4/js/bootstrap.min.js IP 185.30.32.228 ASN #48324 webgo GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-14 23:05 Times Seen11700 Hash e1d98d47689e00f8ecbc5d9f61bdb42e 6778fed3cf095a318141a31f455c8f4663885bde 0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b Loading...

HTTP Transactions (18)

URL IP Response Size

webgo.de/assets/images/favicon.ico

89.44.8.138

404 Not Found

0 B

URL GET
webgo.de/assets/images/favicon.ico
IP
89.44.8.138:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.webgo.de
FingerprintA7:C1:90:B4:89:3E:F0:B0:05:51:47:61:B0:79:43:3D:16:A1:83:8A
ValidityFri, 08 Nov 2024 00:00:00 GMT - Sat, 08 Nov 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/images/favicon.ico HTTP/1.1
Host: webgo.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s228.goserver.host/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
cache-control: no-cache, private
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Tue, 06 May 2025 20:58:40 GMT
permissions-policy: interest-cohort=()
server: nginx
set-cookie: XSRF-TOKEN=eyJpdiI6InREaXJNL0hXWnNucFNjUjZXUlpXdFE9PSIsInZhbHVlIjoiQ0drcDNLbnIrcVJXVVBLQ3RhVklJWFY2em43eTk3b3ZoUTJPTENFbHJuc1hFdTR5WkYrcDZkV09VeEdFaERwTmhWZlhYMVdZQ3N3cGNrUlNEWEprRXFvMUVpSmNEWDNPRTdWT3ZaWldQL0VjWlVsSHVINFlQeC81WGw3NjYzdXUiLCJtYWMiOiI2YzMzYzcyZGIwY2JkMDZmZTgzNGQ3NWRhYzZlODMyOWExN2Y2OWYyZmM3MzhlN2NlYjQ5ZWUyMjgzZTMyOTMwIiwidGFnIjoiIn0%3D; expires=Tue, 06 May 2025 22:58:40 GMT; Max-Age=7200; path=/; secure; samesite=lax
webgode_session=eyJpdiI6IkpXYThjSFdIYXRabGZUM2hOZ1dhVEE9PSIsInZhbHVlIjoiUW0rK21BVlFwU2ZoOHM2RUd0RmJSM1lKMHJjMW9mWk1KSUFmdkR5Ykh6V0lJL21ORkVKOWQ5Y0lNQ3l2cld3b1FMNWNzVGNSeEZZQXp0Q3NQRXlFVHJiWU43TlBBWTBTQnA1OTNwYUltNnM0M1F0WUM3S1ZRd2NjMWYzdklsb1YiLCJtYWMiOiIxN2RhNGFkMDc0ZDYwYzg3MWFkOWFlODA5MWVjODQ1NTk3NGQyZmUxNDM5MjQzZmFkYWZlY2E1ZGE0NTlkZTEyIiwidGFnIjoiIn0%3D; expires=Tue, 06 May 2025 22:58:40 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
x-powered-by: Statamic
X-Firefox-Spdy: h2

s228.goserver.host/templates/default_v4/css/bootstrap-select.min.css

185.30.32.228

200 OK

11 kB

URL GET
s228.goserver.host/templates/default_v4/css/bootstrap-select.min.css
IP
185.30.32.228:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
ASCII text, with very long lines (10482), with CRLF line terminators
Size
11 kB (10722 bytes)
Hash
21cc5aea03e9cf9390576e65b1ef1026
b2ecef12ad9565e2e218141bb2ae19b46f47380f
133aae81227644c3f25d54f7a4d2069d9b5dc1d4957379fdac83f53121f15c84

HTTP Headers

GET /templates/default_v4/css/bootstrap-select.min.css HTTP/1.1
Host: s228.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s228.goserver.host/
Cookie: PHPSESSID=69fb38d43acab9a3e51904a66d32465f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 20:58:39 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Mon, 18 Nov 2019 09:03:21 GMT
etag: W/"29e2-5979b38218840"
content-encoding: gzip
X-Firefox-Spdy: h2

www.webgo.de/assets/images/favicon.ico

89.44.8.138

301 Moved Permanently

0 B

URL GET
www.webgo.de/assets/images/favicon.ico
IP
89.44.8.138:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.webgo.de
FingerprintA7:C1:90:B4:89:3E:F0:B0:05:51:47:61:B0:79:43:3D:16:A1:83:8A
ValidityFri, 08 Nov 2024 00:00:00 GMT - Sat, 08 Nov 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/images/favicon.ico HTTP/1.1
Host: www.webgo.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s228.goserver.host/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
location: https://webgo.de/assets/images/favicon.ico
content-length: 17
date: Tue, 06 May 2025 20:58:39 GMT
X-Firefox-Spdy: h2

s228.goserver.host/templates/default_v4/css/mesosadmin.css?v=2025030601

185.30.32.228

200 OK

18 kB

URL GET
s228.goserver.host/templates/default_v4/css/mesosadmin.css?v=2025030601
IP
185.30.32.228:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
ASCII text
Size
18 kB (18117 bytes)
Hash
33580d5818ba06e4ba388776bcf704b4
da0f451d7a274ddc797803febff3250aef6d1bc6
656a4f8ed2d49fb8854835e88b3a884d1e7838fc5b4b82a602cf9bf742797244

HTTP Headers

GET /templates/default_v4/css/mesosadmin.css?v=2025030601 HTTP/1.1
Host: s228.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s228.goserver.host/
Cookie: PHPSESSID=69fb38d43acab9a3e51904a66d32465f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 20:58:39 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 15 Feb 2025 11:06:59 GMT
etag: W/"46c5-62e2c4a39bac0"
content-encoding: gzip
X-Firefox-Spdy: h2

s228.goserver.host/templates/default_v4/css/login.css?v=20240924

185.30.32.228

200 OK

2.2 kB

URL GET
s228.goserver.host/templates/default_v4/css/login.css?v=20240924
IP
185.30.32.228:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
ASCII text
Size
2.2 kB (2183 bytes)
Hash
59ea3e750b2b4ed9085c710d89629bdf
228443cfbdda0864b1c449b30d739f2f7b007140
822def4722bb893cbae77bf78e58fd0742ddd0745c784a7d55f51205c9a53cab

HTTP Headers

GET /templates/default_v4/css/login.css?v=20240924 HTTP/1.1
Host: s228.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s228.goserver.host/
Cookie: PHPSESSID=69fb38d43acab9a3e51904a66d32465f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 20:58:39 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 25 Sep 2024 12:17:50 GMT
etag: W/"887-622f09c4c3780"
content-encoding: gzip
X-Firefox-Spdy: h2

s228.goserver.host/templates/default_v4/css/HhyJU5sn9vOmLxNkIwRSjTVNWLEJt7QV3A.ttf

185.30.32.228

200 OK

69 kB

URL GET
s228.goserver.host/templates/default_v4/css/HhyJU5sn9vOmLxNkIwRSjTVNWLEJt7QV3A.ttf
IP
185.30.32.228:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
TrueType Font data, 16 tables, 1st "GDEF", 12 names, Microsoft, language 0x409
Size
69 kB (69176 bytes)
Hash
197775f79fdd4d6d70f82e9688c0ea16
082276a19961ad0ff4d0aed2b2f553169d16686b
8413ed200700184d01c4efcafb77481086c6dc28184af182f7004d770eac5861

HTTP Headers

GET /templates/default_v4/css/HhyJU5sn9vOmLxNkIwRSjTVNWLEJt7QV3A.ttf HTTP/1.1
Host: s228.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s228.goserver.host/templates/default_v4/css/fonts.css?family=Dosis:wght@200;300;400;500;600;800&display=swap
Cookie: PHPSESSID=69fb38d43acab9a3e51904a66d32465f
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 20:58:39 GMT
content-type: font/ttf
content-length: 69176
last-modified: Thu, 24 Aug 2023 20:13:09 GMT
etag: "10e38-603b0db525f40"
accept-ranges: bytes
X-Firefox-Spdy: h2

185.30.32.228/admin/index.php

185.30.32.228

301 Moved Permanently

3.4 kB

URL User Request GET
185.30.32.228/admin/index.php
IP
185.30.32.228:80
ASN
#48324 webgo GmbH

File type

Size
3.4 kB (3381 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /admin/index.php HTTP/1.1
Host: 185.30.32.228
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 06 May 2025 20:58:38 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://s228.goserver.host

s228.goserver.host/templates/default_v4/css/bootstrap.min.css

185.30.32.228

200 OK

156 kB

URL GET
s228.goserver.host/templates/default_v4/css/bootstrap.min.css
IP
185.30.32.228:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
ASCII text, with very long lines (65324)
Size
156 kB (155764 bytes)
Hash
c13b6c38d6410f1935f15eab34ebcb5d
27588eaa30793e967c2443804205acabe00b0249
fee9f961702501cf90444cf1268920603d806f070402cf334f7c1ddf90bc523b

HTTP Headers

GET /templates/default_v4/css/bootstrap.min.css HTTP/1.1
Host: s228.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s228.goserver.host/
Cookie: PHPSESSID=69fb38d43acab9a3e51904a66d32465f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 20:58:39 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 31 Jan 2024 16:54:19 GMT
etag: W/"26074-61040bad904c0"
content-encoding: gzip
X-Firefox-Spdy: h2

s228.goserver.host/templates/default_v4/css/font-awesome.min.css

185.30.32.228

200 OK

31 kB

URL GET
s228.goserver.host/templates/default_v4/css/font-awesome.min.css
IP
185.30.32.228:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
ASCII text, with very long lines (30837)
Size
31 kB (31000 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /templates/default_v4/css/font-awesome.min.css HTTP/1.1
Host: s228.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s228.goserver.host/
Cookie: PHPSESSID=69fb38d43acab9a3e51904a66d32465f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 20:58:39 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Thu, 11 May 2017 06:42:26 GMT
etag: W/"7918-54f39e4541880"
content-encoding: gzip
X-Firefox-Spdy: h2

s228.goserver.host/templates/default_v4/js/bootstrap.min.js

185.30.32.228

200 OK

58 kB

URL GET
s228.goserver.host/templates/default_v4/js/bootstrap.min.js
IP
185.30.32.228:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (57791)
Size
58 kB (58072 bytes)
Hash
e1d98d47689e00f8ecbc5d9f61bdb42e
6778fed3cf095a318141a31f455c8f4663885bde
0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b

HTTP Headers

GET /templates/default_v4/js/bootstrap.min.js HTTP/1.1
Host: s228.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s228.goserver.host/
Cookie: PHPSESSID=69fb38d43acab9a3e51904a66d32465f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 20:58:39 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Thu, 11 Jul 2019 10:28:27 GMT
etag: W/"e2d8-58d65411a28c0"
content-encoding: gzip
X-Firefox-Spdy: h2

s228.goserver.host/templates/default_v4/css/fonts.css?family=Dosis:wght@200;300;400;500;600;800&display=swap

185.30.32.228

200 OK

1.2 kB

URL GET
s228.goserver.host/templates/default_v4/css/fonts.css?family=Dosis:wght@200;300;400;500;600;800&display=swap
IP
185.30.32.228:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
ASCII text
Size
1.2 kB (1200 bytes)
Hash
7122aca6ea6fc408b870508bdb483a37
b95627f425c79360578e32e3b93f473c40855462
50b6e408e75eb217415945f2f672cbdd0a804ed97f27c0678562d9cacd471dab

HTTP Headers

GET /templates/default_v4/css/fonts.css?family=Dosis:wght@200;300;400;500;600;800&display=swap HTTP/1.1
Host: s228.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s228.goserver.host/templates/default_v4/css/mesosadmin.css?v=2025030601
Cookie: PHPSESSID=69fb38d43acab9a3e51904a66d32465f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 20:58:39 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sun, 10 Sep 2023 06:07:22 GMT
etag: W/"4b0-604fb05ddfa80"
content-encoding: gzip
X-Firefox-Spdy: h2

s228.goserver.host/templates/default_v4/css/HhyJU5sn9vOmLxNkIwRSjTVNWLEJN7MV3A.ttf

185.30.32.228

200 OK

69 kB

URL GET
s228.goserver.host/templates/default_v4/css/HhyJU5sn9vOmLxNkIwRSjTVNWLEJN7MV3A.ttf
IP
185.30.32.228:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
TrueType Font data, 16 tables, 1st "GDEF", 10 names, Microsoft, language 0x409
Size
69 kB (69328 bytes)
Hash
0bb6fa7ea8f9394507c6ac77bb5bd62e
0158f5e150c6efd8897e1551bda2accc4bc679ab
17a1f6ec1ba7794ad2e9981922b893de21d8d397f707fabdb51a9fd6e55bd633

HTTP Headers

GET /templates/default_v4/css/HhyJU5sn9vOmLxNkIwRSjTVNWLEJN7MV3A.ttf HTTP/1.1
Host: s228.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s228.goserver.host/templates/default_v4/css/fonts.css?family=Dosis:wght@200;300;400;500;600;800&display=swap
Cookie: PHPSESSID=69fb38d43acab9a3e51904a66d32465f
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 20:58:39 GMT
content-type: font/ttf
content-length: 69328
last-modified: Thu, 24 Aug 2023 20:13:08 GMT
etag: "10ed0-603b0db431d00"
accept-ranges: bytes
X-Firefox-Spdy: h2

s228.goserver.host/

185.30.32.228

200 OK

3.4 kB

URL User Request GET
s228.goserver.host/
IP
185.30.32.228:443
ASN
#48324 webgo GmbH

Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.4 kB (3381 bytes)
Hash
2b2d342e2709ec2c4cbe675aeb7cccfe
17f0ddc54c4e1da131d5a7e98d7e1ad209f5c5ae
a267f13b195f1d93f964e0da293156275451850d418571d58297dbbf8ae2c488

HTTP Headers

GET / HTTP/1.1
Host: s228.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 20:58:38 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=69fb38d43acab9a3e51904a66d32465f; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

s228.goserver.host/templates/default_v4/js/ie10-viewport-bug-workaround.js

185.30.32.228

200 OK

419 B

URL GET
s228.goserver.host/templates/default_v4/js/ie10-viewport-bug-workaround.js
IP
185.30.32.228:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
419 B (419 bytes)
Hash
f47b4c8143d35993d96da8b16b971971
5d2dba2c76cbedcd4ce0d5cb7a32095021fc8173
bc4e8896f4565e8ffd5e560e07b27d1f18ced669b3b9b831c61bebd2c4ba0847

HTTP Headers

GET /templates/default_v4/js/ie10-viewport-bug-workaround.js HTTP/1.1
Host: s228.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s228.goserver.host/
Cookie: PHPSESSID=69fb38d43acab9a3e51904a66d32465f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 20:58:39 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Tue, 01 Dec 2015 17:28:36 GMT
etag: W/"1a3-525d97cd4b900"
content-encoding: gzip
X-Firefox-Spdy: h2

s228.goserver.host/images/logo.svg

185.30.32.228

200 OK

7.1 kB

URL GET
s228.goserver.host/images/logo.svg
IP
185.30.32.228:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
7.1 kB (7128 bytes)
Hash
3da9ce0097aa357f574b1d45e377c7b3
e51cd918ea294d28e7d17c2d9886fc790b448ff5
1a2ca93d4a7fa50d3ee1221c88a2a28923cba7cfa58812b12ae7f4383e081ebb

HTTP Headers

GET /images/logo.svg HTTP/1.1
Host: s228.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s228.goserver.host/
Cookie: PHPSESSID=69fb38d43acab9a3e51904a66d32465f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 20:58:39 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 22 Aug 2024 13:53:40 GMT
etag: W/"1bd8-62045fc6b8100"
content-encoding: gzip
X-Firefox-Spdy: h2

s228.goserver.host/templates/default_v4/js/jquery.min.js

185.30.32.228

200 OK

96 kB

URL GET
s228.goserver.host/templates/default_v4/js/jquery.min.js
IP
185.30.32.228:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32038)
Size
96 kB (95992 bytes)
Hash
f03e5a3bf534f4a738bc350631fd05bd
37b1db88b57438f1072a8ebc7559c909c9d3a682
aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947

HTTP Headers

GET /templates/default_v4/js/jquery.min.js HTTP/1.1
Host: s228.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s228.goserver.host/
Cookie: PHPSESSID=69fb38d43acab9a3e51904a66d32465f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 20:58:39 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Tue, 20 Dec 2016 18:17:03 GMT
etag: W/"176f8-5441b0b0165c0"
content-encoding: gzip
X-Firefox-Spdy: h2

185.30.32.228/admin/index.php

0.0.0.0

0 B

URL User Request GET
185.30.32.228/admin/index.php
IP
0.0.0.0:0
ASN
#0

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /admin/index.php HTTP/1.1
Host: 185.30.32.228
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

s228.goserver.host/templates/default_v4/css/bootstrap-theme.min.css

185.30.32.228

200 OK

23 kB

URL GET
s228.goserver.host/templates/default_v4/css/bootstrap-theme.min.css
IP
185.30.32.228:443
ASN
#48324 webgo GmbH

Requested by
https://s228.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
ASCII text, with very long lines (23192)
Size
23 kB (23409 bytes)
Hash
ab6b02efeaf178e0247b9504051472fb
8256575374f430476bdcd49de98c77990229ce31
653e073e97423adda5bc3917a241ee8497dd38a48f14bcde0098a4e54fd0fa5e

HTTP Headers

GET /templates/default_v4/css/bootstrap-theme.min.css HTTP/1.1
Host: s228.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s228.goserver.host/
Cookie: PHPSESSID=69fb38d43acab9a3e51904a66d32465f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 06 May 2025 20:58:39 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 28 Oct 2016 09:27:13 GMT
etag: W/"5b71-53fe976959e40"
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (18)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET