Report - havs.david-jones-opt.com.ua/jwa2/7qj2/

Report Overview

Visited public
2024-05-27 11:05:31
Tags
URL
havs.david-jones-opt.com.ua/jwa2/7qj2/
Finishing URL
bnvix.newsone.lt/29x0m/kf851/
IP / ASN
188.114.97.1
#13335 CLOUDFLARENET
Title
bnvix.newsone.lt | 502: Bad gateway

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
t5q7sly93.david-jones-opt.com.ua	unknown	unknown	No data	No data	1.5 kB	10 kB	188.114.96.1
bnvix.newsone.lt	unknown	unknown	No data	No data	3.8 kB	25 kB	188.114.97.1
havs.david-jones-opt.com.ua	unknown	unknown	No data	No data	494 B	7.1 kB	188.114.96.1
4rwci2j9.newsone.lt	unknown	unknown	No data	No data	494 B	7.1 kB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-27 11:05:24	high	117.204.206.6	Client IP	ET POLICY Executable and linking format (ELF) file download

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	bnvix.newsone.lt/29x0m/kf851/	ScriptElement	393 B	2023-04-05	2025-03-02
Pretty URL bnvix.newsone.lt/29x0m/kf851/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 04:39 Last Seen2025-03-02 06:13 Times Seen143291 Hash 34ad0a116707d3b794129a6720af92d7 424de9dbb8bc774e2a2d4ade100d90f5ac0ecbf4 d011a9449a990f2086894be870adc6fbb53595dc593b410a83e45e40bfbc7262 Loading...

HTTP Transactions (13)

	URL	IP	Response	Size
	t5q7sly93.david-jones-opt.com.ua/jar7upkmy/c65b3t12p/	188.114.96.1	301 Moved Permanently	6.4 kB
URL User Request GET HTTP/1.1 t5q7sly93.david-jones-opt.com.ua/jar7upkmy/c65b3t12p/ IP 188.114.96.1:80 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (394) Size 6.4 kB (6428 bytes) Hash d75883cebce4547a682b39cb5beca3d8 1aa06a9cc9f523f16b120b2a2527fcf99a2c86c5 198a32bb03885bb60ab6a25c2d9b93f08e0529f53b61ffec9b90f65f67385d50 HTTP Headers GET /jar7upkmy/c65b3t12p/ HTTP/1.1 Host: t5q7sly93.david-jones-opt.com.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 502 Bad Gateway date: Mon, 27 May 2024 11:05:08 GMT content-type: text/html; charset=UTF-8 content-length: 6428 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2BC2wOG6TzTnS2JlaYMs1VgiB6JFOmqRdWP0jW7rXlpB%2B%2Fn8ZgQF0gSg%2FIwGtshNMxe3yuh%2Bb4rnOcfM6TR3UDApF87SQjMwxPT5WfjRRc82dFdaYxPV0SEg8t44dDbn4CXvGQXeZv%2BdOACKbG%2BTHWPpew%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} x-frame-options: SAMEORIGIN referrer-policy: same-origin cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT server: cloudflare cf-ray: 88a58732588bb4ed-OSL alt-svc: h3=":443"; ma=86400

	t5q7sly93.david-jones-opt.com.ua/jar7upkmy/c65b3t12p/	188.114.97.1	301 Moved Permanently	167 B
URL User Request GET HTTP/1.1 t5q7sly93.david-jones-opt.com.ua/jar7upkmy/c65b3t12p/ IP 188.114.97.1:80 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with CRLF line terminators Size 167 B (167 bytes) Hash 0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f HTTP Headers `GET /jar7upkmy/c65b3t12p/ HTTP/1.1 Host: t5q7sly93.david-jones-opt.com.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 301 Moved Permanently Date: Mon, 27 May 2024 11:05:08 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Mon, 27 May 2024 12:05:08 GMT Location: https://t5q7sly93.david-jones-opt.com.ua/jar7upkmy/c65b3t12p/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nN%2BLXFpW9aUdAsyTRG3Yq5xl0u6gjlJzLpT%2B7WWgHsK4a1CW%2FIbBsa0rU%2FV6imfHjar69UENFtSne7%2B8afqnUSGA3GVYc%2FnBK3Da1pw1PyC%2BBc8FqAi512sgUPGomaxVJUqsGnfvLbRZu0uXIk8qhyKniA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 88a58733bb460b51-OSL alt-svc: h2=":443"; ma=60

	bnvix.newsone.lt/29x0m/kf851/	188.114.97.1	502 Bad Gateway	6.3 kB
URL User Request GET HTTP/3 bnvix.newsone.lt/29x0m/kf851/ IP 188.114.97.1:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subjectnewsone.lt Fingerprint55:BF:E1:C4:2A:FC:49:BB:78:E7:E5:02:C2:90:5E:E1:D8:69:75:EC ValidityFri, 10 May 2024 07:07:28 GMT - Thu, 08 Aug 2024 07:07:27 GMT File type HTML document, ASCII text, with very long lines (394) Size 6.3 kB (6332 bytes) Hash 448da7750b52e08fa3135200eed74ebe de4540bd35c536d50c9c97bff9901879d459c607 6f18c17885758949341fb15d4fc4c3e4d7aef1f24fdc91e3eb8afd5848d5bd84 HTTP Headers `GET /29x0m/kf851/ HTTP/1.1 Host: bnvix.newsone.lt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 502 Bad Gateway date: Mon, 27 May 2024 11:05:11 GMT content-type: text/html; charset=UTF-8 content-length: 6332 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F4TFLMkIaH0%2BYjxZ6ZkpsBr%2FQ2ivv5MmRT0qcegRdZ4UUnfvxDvH4rHDzjnGktR4ZJnU6StUg44kudq6fN7fqXMfqDEKqxqcv%2BuWH8T21fFqedBjoqj5hO2%2Bv6Dwr9XJPCAn"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} x-frame-options: SAMEORIGIN referrer-policy: same-origin cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT server: cloudflare cf-ray: 88a587389b25b52d-OSL alt-svc: h3=":443"; ma=86400

	bnvix.newsone.lt/cdn-cgi/images/cf-icon-browser.png	188.114.97.1	200 OK	484 B
URL GET HTTP/3 bnvix.newsone.lt/cdn-cgi/images/cf-icon-browser.png IP 188.114.97.1:443 ASN #13335 CLOUDFLARENET Requested by https://bnvix.newsone.lt/29x0m/kf851/ Certificate IssuerLet's Encrypt Subjectnewsone.lt Fingerprint55:BF:E1:C4:2A:FC:49:BB:78:E7:E5:02:C2:90:5E:E1:D8:69:75:EC ValidityFri, 10 May 2024 07:07:28 GMT - Thu, 08 Aug 2024 07:07:27 GMT File type PNG image data, 100 x 80, 8-bit colormap, non-interlaced Size 484 B (484 bytes) Hash 59caf3c7eb63af78f12db37f41433779 8024e688e78e910ae1ea3bc25be7a7ab65444b02 78a7d8b29cabf16831417dba1b9bbe36fae0d060a35a495e8f10e9663b3c9e65 HTTP Headers `GET /cdn-cgi/images/cf-icon-browser.png HTTP/1.1 Host: bnvix.newsone.lt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bnvix.newsone.lt/cdn-cgi/styles/main.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK date: Mon, 27 May 2024 11:05:11 GMT content-type: image/png content-length: 484 last-modified: Wed, 22 May 2024 09:02:18 GMT etag: "664db49a-1e4" server: cloudflare cf-ray: 88a587473a86b52d-OSL x-frame-options: DENY x-content-type-options: nosniff vary: Accept-Encoding expires: Mon, 27 May 2024 13:05:11 GMT cache-control: max-age=7200, public accept-ranges: bytes`

	bnvix.newsone.lt/cdn-cgi/images/cf-icon-ok.png	188.114.97.1	200 OK	946 B
URL GET HTTP/3 bnvix.newsone.lt/cdn-cgi/images/cf-icon-ok.png IP 188.114.97.1:443 ASN #13335 CLOUDFLARENET Requested by https://bnvix.newsone.lt/29x0m/kf851/ Certificate IssuerLet's Encrypt Subjectnewsone.lt Fingerprint55:BF:E1:C4:2A:FC:49:BB:78:E7:E5:02:C2:90:5E:E1:D8:69:75:EC ValidityFri, 10 May 2024 07:07:28 GMT - Thu, 08 Aug 2024 07:07:27 GMT File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced Size 946 B (946 bytes) Hash dfaf0fbb758c874be231335db178381d 8f2597eb7ba4c89892aac0559816db3f5280b23e ed732380ee3ff0f2d841784da213c8c05d2b5ae187a5217b419d21cae5cedb1b HTTP Headers `GET /cdn-cgi/images/cf-icon-ok.png HTTP/1.1 Host: bnvix.newsone.lt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bnvix.newsone.lt/cdn-cgi/styles/main.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK date: Mon, 27 May 2024 11:05:11 GMT content-type: image/png content-length: 946 last-modified: Wed, 22 May 2024 09:02:18 GMT etag: "664db49a-3b2" server: cloudflare cf-ray: 88a587473a8db52d-OSL x-frame-options: DENY x-content-type-options: nosniff vary: Accept-Encoding expires: Mon, 27 May 2024 13:05:11 GMT cache-control: max-age=7200, public accept-ranges: bytes`

	t5q7sly93.david-jones-opt.com.ua/jar7upkmy/c65b3t12p/	188.114.96.1	301 Moved Permanently	1.5 kB
URL User Request GET HTTP/1.1 t5q7sly93.david-jones-opt.com.ua/jar7upkmy/c65b3t12p/ IP 188.114.96.1:80 ASN #13335 CLOUDFLARENET File type PNG image data, 152 x 77, 8-bit colormap, non-interlaced Size 1.5 kB (1484 bytes) Hash 3ec81e5e3a4de9fec46ce9e6999b9e27 8f03b6857ab8d31feb65f97b1ae6b678efdc2ddd 3a223426c67a0a33ff57af68a57fb589fea36af2a6e8f9dae7798c77471e0e58 HTTP Headers GET /jar7upkmy/c65b3t12p/ HTTP/1.1 Host: t5q7sly93.david-jones-opt.com.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 301 Moved Permanently date: Mon, 27 May 2024 11:05:09 GMT content-type: text/html; charset=UTF-8 location: https://bnvix.newsone.lt/29x0m/kf851/ cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CiqxIO3dSh006E%2FjBPLx1oocoQdxrG17SM%2ByD7lU2y43qA21xnkkaxNzlw62JDdCIL%2Feg3yF3Vc0sfUlR2b4czAyjOPEraImaI20p%2FOXkpLM5VKBd0CqfIzkVBDAoEOI%2BPGiCna5HyAj5kZAC7oyLkKxJQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 88a58733da21b4ed-OSL alt-svc: h3=":443"; ma=86400

	bnvix.newsone.lt/cdn-cgi/images/cf-icon-server.png	188.114.97.1	200 OK	1.4 kB
URL GET HTTP/3 bnvix.newsone.lt/cdn-cgi/images/cf-icon-server.png IP 188.114.97.1:443 ASN #13335 CLOUDFLARENET Requested by https://bnvix.newsone.lt/29x0m/kf851/ Certificate IssuerLet's Encrypt Subjectnewsone.lt Fingerprint55:BF:E1:C4:2A:FC:49:BB:78:E7:E5:02:C2:90:5E:E1:D8:69:75:EC ValidityFri, 10 May 2024 07:07:28 GMT - Thu, 08 Aug 2024 07:07:27 GMT File type PNG image data, 95 x 75, 8-bit colormap, non-interlaced Size 1.4 kB (1384 bytes) Hash 2c11e67182601007f577f8bf2c72fee8 01dc915d4745f00632021c05d3eef634747a9c3d 41553a537f85839927155af093b7bfa1987215f474ed038714609cc48812ea3b HTTP Headers `GET /cdn-cgi/images/cf-icon-server.png HTTP/1.1 Host: bnvix.newsone.lt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bnvix.newsone.lt/cdn-cgi/styles/main.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK date: Mon, 27 May 2024 11:05:11 GMT content-type: image/png content-length: 1384 last-modified: Wed, 22 May 2024 09:02:18 GMT etag: "664db49a-568" server: cloudflare cf-ray: 88a587474a95b52d-OSL x-frame-options: DENY x-content-type-options: nosniff vary: Accept-Encoding expires: Mon, 27 May 2024 13:05:11 GMT cache-control: max-age=7200, public accept-ranges: bytes`

	bnvix.newsone.lt/cdn-cgi/images/cf-icon-error.png	188.114.97.1	200 OK	854 B
URL GET HTTP/3 bnvix.newsone.lt/cdn-cgi/images/cf-icon-error.png IP 188.114.97.1:443 ASN #13335 CLOUDFLARENET Requested by https://bnvix.newsone.lt/29x0m/kf851/ Certificate IssuerLet's Encrypt Subjectnewsone.lt Fingerprint55:BF:E1:C4:2A:FC:49:BB:78:E7:E5:02:C2:90:5E:E1:D8:69:75:EC ValidityFri, 10 May 2024 07:07:28 GMT - Thu, 08 Aug 2024 07:07:27 GMT File type PNG image data, 48 x 48, 8-bit colormap, non-interlaced Size 854 B (854 bytes) Hash e5577f04b6d92590410e26bd2292933b 16946b2c99d98a57f83eac170ce94b012b7d1a7b 67f70597a183fbca7fac55d609fbaac5c34bb4d4d32a0530bbbbb42591f2de2f HTTP Headers `GET /cdn-cgi/images/cf-icon-error.png HTTP/1.1 Host: bnvix.newsone.lt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bnvix.newsone.lt/cdn-cgi/styles/main.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK date: Mon, 27 May 2024 11:05:11 GMT content-type: image/png content-length: 854 last-modified: Wed, 22 May 2024 09:02:18 GMT etag: "664db49a-356" server: cloudflare cf-ray: 88a587474a9db52d-OSL x-frame-options: DENY x-content-type-options: nosniff vary: Accept-Encoding expires: Mon, 27 May 2024 13:05:11 GMT cache-control: max-age=7200, public accept-ranges: bytes`

	bnvix.newsone.lt/cdn-cgi/styles/main.css	188.114.97.1	200 OK	9.3 kB
URL GET HTTP/3 bnvix.newsone.lt/cdn-cgi/styles/main.css IP 188.114.97.1:443 ASN #13335 CLOUDFLARENET Requested by https://bnvix.newsone.lt/29x0m/kf851/ Certificate IssuerLet's Encrypt Subjectnewsone.lt Fingerprint55:BF:E1:C4:2A:FC:49:BB:78:E7:E5:02:C2:90:5E:E1:D8:69:75:EC ValidityFri, 10 May 2024 07:07:28 GMT - Thu, 08 Aug 2024 07:07:27 GMT File type gzip compressed data, from Unix Size 9.3 kB (9315 bytes) Hash 77623b735e77dfe85ebe094e886f3dd2 da1f6f9d6aa9bdfb282ebfca41a938e5028b5f1b 485ecbe814c8b33457326662c21b9231889ec943cd471af37245c8c43e383b76 HTTP Headers `GET /cdn-cgi/styles/main.css HTTP/1.1 Host: bnvix.newsone.lt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://bnvix.newsone.lt/29x0m/kf851/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK date: Mon, 27 May 2024 11:05:11 GMT content-type: text/css last-modified: Wed, 22 May 2024 09:02:18 GMT etag: W/"664db49a-1f4d" server: cloudflare cf-ray: 88a587471a70b52d-OSL x-frame-options: DENY x-content-type-options: nosniff vary: Accept-Encoding expires: Mon, 27 May 2024 13:05:11 GMT cache-control: max-age=7200, public content-encoding: gzip`

	bnvix.newsone.lt/cdn-cgi/images/cf-icon-cloud.png	188.114.97.1	200 OK	1.5 kB
URL GET HTTP/3 bnvix.newsone.lt/cdn-cgi/images/cf-icon-cloud.png IP 188.114.97.1:443 ASN #13335 CLOUDFLARENET Requested by https://bnvix.newsone.lt/29x0m/kf851/ Certificate IssuerLet's Encrypt Subjectnewsone.lt Fingerprint55:BF:E1:C4:2A:FC:49:BB:78:E7:E5:02:C2:90:5E:E1:D8:69:75:EC ValidityFri, 10 May 2024 07:07:28 GMT - Thu, 08 Aug 2024 07:07:27 GMT File type PNG image data, 152 x 77, 8-bit colormap, non-interlaced Size 1.5 kB (1484 bytes) Hash 3ec81e5e3a4de9fec46ce9e6999b9e27 8f03b6857ab8d31feb65f97b1ae6b678efdc2ddd 3a223426c67a0a33ff57af68a57fb589fea36af2a6e8f9dae7798c77471e0e58 HTTP Headers `GET /cdn-cgi/images/cf-icon-cloud.png HTTP/1.1 Host: bnvix.newsone.lt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://bnvix.newsone.lt/cdn-cgi/styles/main.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/3 200 OK date: Mon, 27 May 2024 11:05:11 GMT content-type: image/png content-length: 1484 last-modified: Wed, 22 May 2024 09:02:18 GMT etag: "664db49a-5cc" server: cloudflare cf-ray: 88a587473a8eb52d-OSL x-frame-options: DENY x-content-type-options: nosniff vary: Accept-Encoding expires: Mon, 27 May 2024 13:05:11 GMT cache-control: max-age=7200, public accept-ranges: bytes`

	havs.david-jones-opt.com.ua/jwa2/7qj2/	188.114.96.1	301 Moved Permanently	6.4 kB
URL User Request GET HTTP/2 havs.david-jones-opt.com.ua/jwa2/7qj2/ IP 188.114.96.1:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services LLC Subjectdavid-jones-opt.com.ua Fingerprint88:E6:5E:B5:34:F8:36:01:97:A6:D0:63:88:25:01:76:54:2F:04:99 ValidityFri, 17 May 2024 15:13:15 GMT - Thu, 15 Aug 2024 15:13:14 GMT File type Size 6.4 kB (6428 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /jwa2/7qj2/ HTTP/1.1 Host: havs.david-jones-opt.com.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 301 Moved Permanently date: Mon, 27 May 2024 11:05:07 GMT content-type: text/html; charset=UTF-8 location: https://4rwci2j9.newsone.lt/48kwr7o3/3rbnhd9f/ cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=06De%2FSm0AlhZDJ7H27vPUC%2Bih2m0N0YIzVTCMMZnSGITWDoma9TOMHBn%2FzZDO5%2FLuz0JZqdnI2z7hRqubuH0nE191QNKAR%2BCFZ2NXLd7PxQ8N0acD22cZ5pKoC3wgP7tHx876Tan22scHO2563k%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 88a587291ee60b02-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	bnvix.newsone.lt/favicon.ico	188.114.97.1	200 OK	318 B
URL GET HTTP/3 bnvix.newsone.lt/favicon.ico IP 188.114.97.1:443 ASN #13335 CLOUDFLARENET Requested by https://bnvix.newsone.lt/29x0m/kf851/ Certificate IssuerLet's Encrypt Subjectnewsone.lt Fingerprint55:BF:E1:C4:2A:FC:49:BB:78:E7:E5:02:C2:90:5E:E1:D8:69:75:EC ValidityFri, 10 May 2024 07:07:28 GMT - Thu, 08 Aug 2024 07:07:27 GMT File type MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel Size 318 B (318 bytes) Hash 370f423b0387f78346245ee3603b75ce 01cb39d761bb013f96696f5b700262cd5be1e26c 10eebee737bd4b89aeb3c097cc9562892b72e6b0aa122d830b614ff8dd144a30 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: bnvix.newsone.lt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://bnvix.newsone.lt/29x0m/kf851/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Mon, 27 May 2024 11:05:16 GMT content-type: image/x-icon last-modified: Sat, 22 Jul 2023 09:03:37 GMT etag: W/"64bb9b69-13e" cache-control: max-age=14400 cf-cache-status: MISS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1ENBx8hYq%2FF0sp%2FWz0ugzoDDQYRCfjjrQ57ycWBtUx0%2Firr8AzftTe2xFQf%2B9fRbMJBbzqNOwe8p1Qe9xP6MeO38%2BVA9GOiuzYAf46Jz7wWfDm2QrMKmDQ68xJLo5TdBwxT%2B"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 88a587477ab8b52d-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	4rwci2j9.newsone.lt/48kwr7o3/3rbnhd9f/	188.114.97.1	301 Moved Permanently	6.4 kB
URL User Request GET HTTP/2 4rwci2j9.newsone.lt/48kwr7o3/3rbnhd9f/ IP 188.114.97.1:443 ASN #13335 CLOUDFLARENET Certificate IssuerLet's Encrypt Subjectnewsone.lt Fingerprint55:BF:E1:C4:2A:FC:49:BB:78:E7:E5:02:C2:90:5E:E1:D8:69:75:EC ValidityFri, 10 May 2024 07:07:28 GMT - Thu, 08 Aug 2024 07:07:27 GMT File type Size 6.4 kB (6428 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /48kwr7o3/3rbnhd9f/ HTTP/1.1 Host: 4rwci2j9.newsone.lt User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 301 Moved Permanently date: Mon, 27 May 2024 11:05:08 GMT content-type: text/html; charset=UTF-8 location: https://t5q7sly93.david-jones-opt.com.ua/jar7upkmy/c65b3t12p/ cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JZFu8IcLjKbZuy5mf9h%2FUHzZ2qZuzetfQRU1QEAA9GAsSTziulgRN%2FAce%2Ffw6rVAuBxvcEpopV%2B9Cwmg8PetiW0m355hyTcQATmu0PyDkjilj49F2gyCHjfgfaGFLO%2BiAf5%2Fi1DF"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 88a5872ccdcf56bb-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (13)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/3

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN