| www.myhealthmeter.com/app/eligible_employee.php?url=//banjiroi.com/b/%23s://www.myhealthmeter.com/ahc/welcome-appc&campaign_id=367///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b | 65.1.33.239 | | 0 B |
URL www.myhealthmeter.com/app/eligible_employee.php?url=//banjiroi.com/b/%23s://www.myhealthmeter.com/ahc/welcome-appc&campaign_id=367///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b IP 65.1.33.239:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /app/eligible_employee.php?url=//banjiroi.com/b/%23s://www.myhealthmeter.com/ahc/welcome-appc&campaign_id=367///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b///banjiroi.com/b//banjiroi.com/b//banjiroi.com/b///banjiroi.com/b///banjiroi.com/b HTTP/1.1
Host: www.myhealthmeter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Date: Sun, 10 Dec 2023 10:44:55 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains
Set-Cookie: companySlug=myhealthmeter; expires=Mon, 11-Dec-2023 10:44:55 GMT; Max-Age=86400; path=/; secure; HttpOnly
ai.myhealthmeter.com=io; expires=Mon, 11-Dec-2023 10:44:55 GMT; Max-Age=86400; path=/; secure; HttpOnly
PHPSESSID=pc26rbpjc4bemum7ffmgd6rlmg; expires=Mon, 11-Dec-2023 10:44:55 GMT; Max-Age=86400; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: //banjiroi.com/b/#s://www.myhealthmeter.com/ahc/welcome-appc
X-FRAME-OPTIONS: SAMEORIGIN
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| banjiroi.com/b/ | 193.143.1.143 | | 2 B |
IP 193.143.1.143:0
File typeASCII text, with no line terminators Hashc20ad4d76fe97759aa27a0c99bff6710 7b52009b64fd0a2a49e6d8a939753077792b0554 6b51d431df5d7f141cbececcf79edf3dd861c3b4069f0b11661a3eefacbba918
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /b/ HTTP/1.1
Host: banjiroi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 10 Dec 2023 10:44:55 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
X-Powered-By: PHP/5.6.40
Content-Length: 2
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
|
|
| banjiroi.com/favicon.ico | 193.143.1.143 | | 209 B |
IP 193.143.1.143:0
File typeHTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text Hash18ffb59b61525f781cf9251045be575d bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: banjiroi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://banjiroi.com/b/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 10 Dec 2023 10:44:55 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
Content-Length: 209
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml IP 35.244.181.201:0
File typeXML 1.0 document text
- XML document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-01-19-16-42-22.chain; p384ecdsa=GrvM-GqLAM96XAqiJ5S6Fcnd_CDh21LnTV-ISTjMC-0EqOOsWkkxBYtFLJNSJmnZMW0u231cQ93iy-LGZRJIVZd-n09J2bHx_zMZGhVPZbqRQE1YQzwau4jsus1ZeuR8
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Sun, 10 Dec 2023 10:44:41 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 33
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip | 62.115.252.115 | | 512 kB |
URL ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip IP 62.115.252.115:0
ASN#1299 Telia Company AB
File typeZip archive data, at least v2.0 to extract, compression method=deflate
- data Size512 kB (511815 bytes) Hash152eda253e242e18443ef3282495bc7c ff0fa85565f21ec4931baad4573b4c0bd08c4019 8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48
GET /openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Last-Modified: Thu, 16 Nov 2023 07:38:15 GMT
ETag: 152eda253e242e18443ef3282495bc7c
Content-Length: 511815
Accept-Ranges: bytes
X-Timestamp: 1700120294.87662
Content-Type: application/zip
X-Trans-Id: tx15b69f172b404fa58b2bb-006555fb11dfw1
Cache-Control: public, max-age=173766
Expires: Tue, 12 Dec 2023 11:01:20 GMT
Date: Sun, 10 Dec 2023 10:45:14 GMT
Connection: keep-alive
|
|
| | 193.143.1.143 | 200 OK | 2 B |
URL User Request GET HTTP/1.1IP 193.143.1.143:443
CertificateIssuerLet's Encrypt Subjectbanjiroi.com Fingerprint23:C4:A0:89:E9:DB:81:54:A1:74:B6:70:E3:AD:92:27:F5:AD:80:F1 ValidityWed, 06 Dec 2023 05:45:18 GMT - Tue, 05 Mar 2024 05:45:17 GMT
File typeASCII text, with no line terminators Hashc20ad4d76fe97759aa27a0c99bff6710 7b52009b64fd0a2a49e6d8a939753077792b0554 6b51d431df5d7f141cbececcf79edf3dd861c3b4069f0b11661a3eefacbba918
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /b/ HTTP/1.1
Host: banjiroi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 10 Dec 2023 10:44:55 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
X-Powered-By: PHP/5.6.40
Content-Length: 2
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
|
|