Report - auto-johanek.pl/authorize.php/

Report Overview

Visited public
2023-12-01 18:42:16
Tags
URL
auto-johanek.pl/authorize.php/
Finishing URL
auto-johanek.pl/authorize.php/
IP / ASN
188.114.97.1
#13335 CLOUDFLARENET
Title
Facebook - zaloguj się lub zarejestruj

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-12-01 08:02:13	486 B	18 kB	142.250.74.106
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-12-01 05:09:17	474 B	6.6 kB	104.17.24.14
cdn.jsdelivr.net	439	2012-05-16	2012-09-30 02:15:09	2023-12-01 05:10:14	493 B	27 kB	151.101.1.229
auto-johanek.pl	unknown	unknown	No data	No data	3.3 kB	41 kB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-12-01	medium	auto-johanek.pl	Sinkholed
2023-12-01	medium	auto-johanek.pl	Sinkholed
2023-12-01	medium	auto-johanek.pl	Sinkholed
2023-12-01	medium	auto-johanek.pl	Sinkholed
2023-12-01	medium	auto-johanek.pl	Sinkholed
2023-12-01	medium	auto-johanek.pl	Sinkholed
2023-12-01	medium	auto-johanek.pl	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	auto-johanek.pl/authorize.php/	ScriptElement	0 B	0001-01-01	2025-05-09
Pretty URL auto-johanek.pl/authorize.php/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-09 10:30 Times Seen4635334 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (10)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css

104.17.24.14

200 OK

5.6 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auto-johanek.pl/authorize.php/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (30837)
Size
5.6 kB (5631 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto-johanek.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 01 Dec 2023 18:41:58 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 485306
expires: Wed, 20 Nov 2024 18:41:58 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kY1mVgbUtV4VNCLksrkuVdr4pvk158S5K4esmaUMLbRE9jVpCpMtv8dMyyKDDiRbvKpcp9YkNq99El2QNzR91cO93%2F3sH8K7l7aShPERZAK6zYh9cbVAtPeuRI%2Fzn10RvC3pxtqh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82ed77a63bb80b45-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css

151.101.1.229

200 OK

26 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://auto-johanek.pl/authorize.php/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
Unicode text, UTF-8 text, with very long lines (65306)
Size
26 kB (26333 bytes)
Hash
94994c66fec8c3468b269dc0cc242151
ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad
62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab

HTTP Headers

GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auto-johanek.pl
DNT: 1
Connection: keep-alive
Referer: https://auto-johanek.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0"
content-encoding: br
accept-ranges: bytes
date: Fri, 01 Dec 2023 18:41:58 GMT
age: 16952508
x-served-by: cache-fra-eddf8230037-FRA, cache-bma1650-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26333
X-Firefox-Spdy: h2

auto-johanek.pl/apple-touch-icon.png

188.114.96.1

200 OK

9.4 kB

URL GET HTTP/3
auto-johanek.pl/apple-touch-icon.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auto-johanek.pl/authorize.php/
Certificate
IssuerGoogle Trust Services LLC
Subjectauto-johanek.pl
Fingerprint6A:AB:A5:CA:E7:B6:14:1F:B5:2D:BF:80:B3:39:BA:3B:DE:ED:D4:B5
ValidityFri, 01 Dec 2023 12:24:31 GMT - Thu, 29 Feb 2024 12:24:30 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size
9.4 kB (9405 bytes)
Hash
46fdc9fe95ddfe2841c264f5980f0713
0906572b21fbc6e78488f2d896fcb131d9ec3faa
d7b8b2d258301afb544f09e0b8078c8b44f96d65dde6a57ab48d2aba2943306d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /apple-touch-icon.png HTTP/1.1
Host: auto-johanek.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto-johanek.pl/authorize.php/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:59 GMT
content-type: image/png
content-length: 9405
last-modified: Sat, 05 Nov 2022 22:21:28 GMT
etag: "24bd-5ecc09c8e4a00"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c7W9vk5zcEqIatPoLdS8ExZk0GriEQT1tELMkU2xrtAkQQV5v8IaXzrclsyI99WdCxs9erjjuUHhlRf8Ds00OMg7XZREORRMwyrEbFZGvoQfXPexI17gsI2WGa2o3n4dzGQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed77a86c3eb523-OSL
alt-svc: h3=":443"; ma=86400

auto-johanek.pl/authorize.php/img/logo-fb.png

188.114.96.1

200 OK

5.4 kB

URL GET HTTP/3
auto-johanek.pl/authorize.php/img/logo-fb.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auto-johanek.pl/authorize.php/
Certificate
IssuerGoogle Trust Services LLC
Subjectauto-johanek.pl
Fingerprint6A:AB:A5:CA:E7:B6:14:1F:B5:2D:BF:80:B3:39:BA:3B:DE:ED:D4:B5
ValidityFri, 01 Dec 2023 12:24:31 GMT - Thu, 29 Feb 2024 12:24:30 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5685), with no line terminators
Size
5.4 kB (5371 bytes)
Hash
ae7503f40b68e51129e5f96fc5ab1d3a
d688fe57a5387768a1dc0ec729c2e13c6e446e90
90d883c21bdea816f42ab2c7eb4d5f1904d45774af50a284d5ec33edcc275a9b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /authorize.php/img/logo-fb.png HTTP/1.1
Host: auto-johanek.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto-johanek.pl/authorize.php/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:58 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
last-modified: Fri, 01 Dec 2023 18:41:58 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bil4Z5MVMCk5jDzfsiTFLTVE5mI3FuogQCIB2PbCtAM5zPSV8i87fX5gKOKlTqai%2F%2Buoid18B2Ldjw7mflsw2OT2FVsKxLQSCSAVp6V6TWblgWrEXj%2FN%2FVga0YXSadqgtoA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed77a78b22b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

auto-johanek.pl/favicon-16x16.png

188.114.96.1

404 Not Found

277 B

URL GET HTTP/3
auto-johanek.pl/favicon-16x16.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auto-johanek.pl/authorize.php/
Certificate
IssuerGoogle Trust Services LLC
Subjectauto-johanek.pl
Fingerprint6A:AB:A5:CA:E7:B6:14:1F:B5:2D:BF:80:B3:39:BA:3B:DE:ED:D4:B5
ValidityFri, 01 Dec 2023 12:24:31 GMT - Thu, 29 Feb 2024 12:24:30 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size
277 B (277 bytes)
Hash
6ec60e938fa9efb80f9b6078842ada93
a4215f5f16545b2617ea0196087af6fe7613b1b2
313415b683abfeea9a302042e894306a3a471f51831492d3860d720b181111b5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon-16x16.png HTTP/1.1
Host: auto-johanek.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto-johanek.pl/authorize.php/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Fri, 01 Dec 2023 18:41:59 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4DG%2Fi6Bzu%2FkcnBGycdGNRQO3bCeRlPao9gLN3%2BawOfUjYvrUbcpNnWe5mXTUhCzqxPg9%2FPgv%2Fj40uDFPgpyPDX8DXB19xTW%2FsH9uj6z5Ku%2BsKwlW3JJmo%2BGIzFiNrw0%2FdBk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed77a86c3fb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

auto-johanek.pl/authorize.php/mobile.css

188.114.96.1

200 OK

5.4 kB

URL GET HTTP/3
auto-johanek.pl/authorize.php/mobile.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auto-johanek.pl/authorize.php/
Certificate
IssuerGoogle Trust Services LLC
Subjectauto-johanek.pl
Fingerprint6A:AB:A5:CA:E7:B6:14:1F:B5:2D:BF:80:B3:39:BA:3B:DE:ED:D4:B5
ValidityFri, 01 Dec 2023 12:24:31 GMT - Thu, 29 Feb 2024 12:24:30 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5685), with no line terminators
Size
5.4 kB (5371 bytes)
Hash
ae7503f40b68e51129e5f96fc5ab1d3a
d688fe57a5387768a1dc0ec729c2e13c6e446e90
90d883c21bdea816f42ab2c7eb4d5f1904d45774af50a284d5ec33edcc275a9b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /authorize.php/mobile.css HTTP/1.1
Host: auto-johanek.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto-johanek.pl/authorize.php/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:58 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Fri, 01 Dec 2023 18:41:58 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gX1vD7%2BdBX8CmwEzxI%2B93vbdaqpaMrHJ2RyjaQbLgsnOBK2pjMIp8T%2BFvnMTxuulhqtxDNQI0ecE7BYIOM9IJBRvrEPjxBcDiaAdbgQmcMhrDi7lRzqhsAmKpc%2FIF0GtyOA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed77a6290bb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

auto-johanek.pl/authorize.php/img/logo-fb.png

188.114.96.1

200 OK

5.4 kB

URL GET HTTP/3
auto-johanek.pl/authorize.php/img/logo-fb.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auto-johanek.pl/authorize.php/
Certificate
IssuerGoogle Trust Services LLC
Subjectauto-johanek.pl
Fingerprint6A:AB:A5:CA:E7:B6:14:1F:B5:2D:BF:80:B3:39:BA:3B:DE:ED:D4:B5
ValidityFri, 01 Dec 2023 12:24:31 GMT - Thu, 29 Feb 2024 12:24:30 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5685), with no line terminators
Size
5.4 kB (5371 bytes)
Hash
ae7503f40b68e51129e5f96fc5ab1d3a
d688fe57a5387768a1dc0ec729c2e13c6e446e90
90d883c21bdea816f42ab2c7eb4d5f1904d45774af50a284d5ec33edcc275a9b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /authorize.php/img/logo-fb.png HTTP/1.1
Host: auto-johanek.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto-johanek.pl/authorize.php/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:58 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Fri, 01 Dec 2023 18:41:58 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T9FrNHZZSxK%2FpxCAP7q05A%2BfdWhklolq0DTF7roY0JT%2B0IW8dOHsYbvsEBgqWEA8oxn0H0R2%2FX%2FrnRjnqFACXV1wb8TAygK8FjtNPs3ES2%2BYtgApOxOEegWd0LbjzG9HO1c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed77a6290cb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

auto-johanek.pl/authorize.php/

188.114.96.1

200 OK

5.4 kB

URL User Request GET HTTP/2
auto-johanek.pl/authorize.php/
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectauto-johanek.pl
Fingerprint6A:AB:A5:CA:E7:B6:14:1F:B5:2D:BF:80:B3:39:BA:3B:DE:ED:D4:B5
ValidityFri, 01 Dec 2023 12:24:31 GMT - Thu, 29 Feb 2024 12:24:30 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5685), with no line terminators
Size
5.4 kB (5371 bytes)
Hash
ae7503f40b68e51129e5f96fc5ab1d3a
d688fe57a5387768a1dc0ec729c2e13c6e446e90
90d883c21bdea816f42ab2c7eb4d5f1904d45774af50a284d5ec33edcc275a9b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /authorize.php/ HTTP/1.1
Host: auto-johanek.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 01 Dec 2023 18:41:58 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YFQa1Of5TSdLyjNDEFpPt%2Fdp07LMcqmOw0VocEmzxPseA2kfFYO9xkcK9Tw7xvDAN%2Fo3r%2BRmxKHMsViUj5iIoyuLLWa6h%2Fivz9RJ4xvmxqA%2Fk9g6AZFOfZkSioT512G1Jtw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed77a3ceb31bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;500;600;700;800&display=swap

142.250.74.106

200 OK

18 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;500;600;700;800&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://auto-johanek.pl/authorize.php/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text
Size
18 kB (17568 bytes)
Hash
65b6a348d17e61e1d0b231ec63dcdc00
1540990ffe1f5d41a8a04db962950cb09d985798
170d329a585de03caa379e0e068e08b529ba2d693608db4166c3996328185c06

HTTP Headers

GET /css2?family=Open+Sans:wght@300;400;500;600;700;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto-johanek.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 18:41:58 GMT
date: Fri, 01 Dec 2023 18:41:58 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

auto-johanek.pl/authorize.php/style.css

188.114.96.1

200 OK

5.4 kB

URL GET HTTP/3
auto-johanek.pl/authorize.php/style.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auto-johanek.pl/authorize.php/
Certificate
IssuerGoogle Trust Services LLC
Subjectauto-johanek.pl
Fingerprint6A:AB:A5:CA:E7:B6:14:1F:B5:2D:BF:80:B3:39:BA:3B:DE:ED:D4:B5
ValidityFri, 01 Dec 2023 12:24:31 GMT - Thu, 29 Feb 2024 12:24:30 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5685), with no line terminators
Size
5.4 kB (5371 bytes)
Hash
ae7503f40b68e51129e5f96fc5ab1d3a
d688fe57a5387768a1dc0ec729c2e13c6e446e90
90d883c21bdea816f42ab2c7eb4d5f1904d45774af50a284d5ec33edcc275a9b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /authorize.php/style.css HTTP/1.1
Host: auto-johanek.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auto-johanek.pl/authorize.php/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 01 Dec 2023 18:41:58 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Fri, 01 Dec 2023 18:41:58 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Radm7QgEpCZWfyYqct2IwcehMORnjQ7xfZ037cXeT8t%2B%2FIiDWdfZwRgZuggrq7zFe10%2B59J0x7Wc6OGzCryVqi94izYvzflsVrHY2%2BUPVgUqAZICNB0M%2FgGIqYR0s2E%2BYiA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed77a62909b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (10)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3