| commerzweb.ns01.info/ |  45.142.107.218 | 302 Found | 0 B |
IP45.142.107.218:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ETPRO INFO DYNAMIC_DNS HTTP Request to a *.ns01.info Domain |
GET / HTTP/1.1
Host: commerzweb.ns01.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Wed, 22 Jan 2025 14:00:43 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Set-Cookie: PHPSESSID=ung9ntgbvpsjsoov0aeb2g48c0; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: login.php
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| GET commerzweb.ns01.info/login.php | 45.142.107.218 | 200 OK | 2.6 kB |
URL User Request GET commerzweb.ns01.info/login.php IP45.142.107.218:0
File typeHTML document, ASCII text Hasha62721fee39d60454e1c24849c0bfb00 5d05dae7647eeed0e88480e141f7c0312336a6f9 d3af0f21187d4a40353f1e655537b669f90632529eb0dee40b2ca90ac1635e8f
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ETPRO INFO DYNAMIC_DNS HTTP Request to a *.ns01.info Domain | | suricata | medium | ETPRO INFO DYNAMIC_DNS HTTP Request to a *.ns01.info Domain |
GET /login.php HTTP/1.1
Host: commerzweb.ns01.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Jan 2025 14:00:43 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Set-Cookie: PHPSESSID=nblf5mbg2pjo628967kh8834ui; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 2557
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| GET commerzweb.ns01.info/login.php | 45.142.107.218 | 200 OK | 2.6 kB |
URL User Request GET commerzweb.ns01.info/login.php IP45.142.107.218:0
File typeHTML document, ASCII text Hasha62721fee39d60454e1c24849c0bfb00 5d05dae7647eeed0e88480e141f7c0312336a6f9 d3af0f21187d4a40353f1e655537b669f90632529eb0dee40b2ca90ac1635e8f
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ETPRO INFO DYNAMIC_DNS HTTP Request to a *.ns01.info Domain | | suricata | medium | ETPRO INFO DYNAMIC_DNS HTTP Request to a *.ns01.info Domain |
GET /login.php HTTP/1.1
Host: commerzweb.ns01.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Jan 2025 14:00:44 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
X-Powered-By: PHP/8.2.12
Set-Cookie: PHPSESSID=ipog8f2l6lkdgfip62feefm347; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 2557
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| GET commerzweb.ns01.info/css/sidebar.css | 45.142.107.218 | 200 OK | 1.8 kB |
URL GET HTTP/1.1commerzweb.ns01.info/css/sidebar.css IP45.142.107.218:80
Requested byhttp://commerzweb.ns01.info/login.php
File typeASCII text, with CRLF line terminators Hash5bf108ac922e112750a0003821214270 981994f97b77e1bdaac47ff1421671e66abb46b6 6dea12e331bbd95cdbe3c15943be3c489d0e11ad3706b29be1719a9c4ef4e4cb
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ETPRO INFO DYNAMIC_DNS HTTP Request to a *.ns01.info Domain |
GET /css/sidebar.css HTTP/1.1
Host: commerzweb.ns01.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://commerzweb.ns01.info/login.php
Cookie: PHPSESSID=ipog8f2l6lkdgfip62feefm347
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Jan 2025 14:00:44 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Wed, 04 Dec 2024 18:56:38 GMT
ETag: "700-628765768c580"
Accept-Ranges: bytes
Content-Length: 1792
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| GET commerzweb.ns01.info/css/login-style.css?ts=%3C?=time()?%3E | 45.142.107.218 | 200 OK | 2.8 kB |
URL GET HTTP/1.1commerzweb.ns01.info/css/login-style.css?ts=%3C?=time()?%3E IP45.142.107.218:80
Requested byhttp://commerzweb.ns01.info/login.php
File typeASCII text, with CRLF line terminators Hash40d8281588b38ab3346bfd8596d5e112 e6c12266d9a700ef2b6ffa6110c4e214d487f682 ea3ff313bea53c082765a8e90c93efab01972047d9a4bfd966c12a378589e95c
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - DynDNS domain |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ETPRO INFO DYNAMIC_DNS HTTP Request to a *.ns01.info Domain |
GET /css/login-style.css?ts=%3C?=time()?%3E HTTP/1.1
Host: commerzweb.ns01.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://commerzweb.ns01.info/login.php
Cookie: PHPSESSID=ipog8f2l6lkdgfip62feefm347
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Jan 2025 14:00:44 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Wed, 04 Dec 2024 19:08:26 GMT
ETag: "ace-62876819bfe80"
Accept-Ranges: bytes
Content-Length: 2766
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| GET code.jquery.com/jquery-3.6.0.min.js |  151.101.2.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.6.0.min.js IP151.101.2.137:443
Requested byhttp://commerzweb.ns01.info/login.php CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://commerzweb.ns01.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 22 Jan 2025 14:00:44 GMT
age: 1307978
x-served-by: cache-lga21931-LGA, cache-hel1410020-HEL
x-cache: HIT, HIT
x-cache-hits: 71, 427831
x-timer: S1737554444.342033,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2
|
|
| GET unpkg.com/@phosphor-icons/web@2.1.1/src/thin/style.css |  104.17.247.203 | 200 OK | 39 kB |
URL GET HTTP/2unpkg.com/@phosphor-icons/web@2.1.1/src/thin/style.css IP104.17.247.203:443
Requested byhttp://commerzweb.ns01.info/login.php CertificateIssuerGoogle Trust Services Subjectunpkg.com FingerprintE4:F4:EA:7C:7F:E7:57:82:8B:55:44:32:FA:B8:5A:DB:88:CE:1D:D5 ValidityMon, 20 Jan 2025 17:18:45 GMT - Sun, 20 Apr 2025 18:18:43 GMT
Hash8da44bea4949cc1139a518660885c864 23eace9bee8d4bd6ba795b88615a789962df919b 41e0eae512457cbef8f0106108fbfb995952c24b3e600dca38516990b441c2af
GET /@phosphor-icons/web@2.1.1/src/thin/style.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://commerzweb.ns01.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Jan 2025 14:00:44 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "14f3d-I+rOm+6NS9a6eVuIYVp4mWLfkZs"
via: 1.1 fly.io
fly-request-id: 01JFEB2YZMT7GJH3W2GD2RCTSA-arn
cf-cache-status: HIT
age: 2980003
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 9060126f0eb4b521-OSL
X-Firefox-Spdy: h2
|
|
| GET unpkg.com/@phosphor-icons/web@2.1.1/src/bold/style.css | 104.17.247.203 | 200 OK | 86 kB |
URL GET HTTP/2unpkg.com/@phosphor-icons/web@2.1.1/src/bold/style.css IP104.17.247.203:443
Requested byhttp://commerzweb.ns01.info/login.php CertificateIssuerGoogle Trust Services Subjectunpkg.com FingerprintE4:F4:EA:7C:7F:E7:57:82:8B:55:44:32:FA:B8:5A:DB:88:CE:1D:D5 ValidityMon, 20 Jan 2025 17:18:45 GMT - Sun, 20 Apr 2025 18:18:43 GMT
Hashdebe807490c196adde15ebeb37781fba 3701767a353d9270181cbc294b822cce5f47d50e c8a32df67f8bd57f70c6371e15ec232df25ddeba3eb9060d7aaa68101a6ce240
GET /@phosphor-icons/web@2.1.1/src/bold/style.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://commerzweb.ns01.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 22 Jan 2025 14:00:44 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "14f3d-NwF2ejU9knAYHLwpS4Iszl9H1Q4"
via: 1.1 fly.io
fly-request-id: 01JHPCRV4FH0Z34NVR2G7KK1R3-arn
cf-cache-status: HIT
age: 562297
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 9060126f1ec3b521-OSL
X-Firefox-Spdy: h2
|
|
| GET unpkg.com/@phosphor-icons/web@2.1.1/src/duotone/style.css | 104.17.247.203 | 200 OK | 232 kB |
URL GET HTTP/2unpkg.com/@phosphor-icons/web@2.1.1/src/duotone/style.css IP104.17.247.203:443
Requested byhttp://commerzweb.ns01.info/login.php CertificateIssuerGoogle Trust Services Subjectunpkg.com FingerprintE4:F4:EA:7C:7F:E7:57:82:8B:55:44:32:FA:B8:5A:DB:88:CE:1D:D5 ValidityMon, 20 Jan 2025 17:18:45 GMT - Sun, 20 Apr 2025 18:18:43 GMT
Size232 kB (231484 bytes) Hash713bc6f267fdd326c6579d5ff1e1343d a929631f2b12dc83dd638c39506c12f22936f025 fc6d37f7f0f7ffdcdf714c54181fdd27911969e4737d3151b972d4b806e5ae5d
GET /@phosphor-icons/web@2.1.1/src/duotone/style.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://commerzweb.ns01.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 22 Jan 2025 14:00:44 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "3883c-qSljHysS3IPdY4w5UGwS8ik28CU"
via: 1.1 fly.io
fly-request-id: 01JFEPN8TK2QYQFR3WSYJD4RZA-arn
cf-cache-status: HIT
age: 551781
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 9060126f1ec7b521-OSL
X-Firefox-Spdy: h2
|
|
| GET unpkg.com/@phosphor-icons/web@2.1.1 | 104.17.247.203 | 302 Found | 364 B |
URL GET HTTP/2unpkg.com/@phosphor-icons/web@2.1.1 IP104.17.247.203:443
Requested byhttp://commerzweb.ns01.info/login.php CertificateIssuerGoogle Trust Services Subjectunpkg.com FingerprintE4:F4:EA:7C:7F:E7:57:82:8B:55:44:32:FA:B8:5A:DB:88:CE:1D:D5 ValidityMon, 20 Jan 2025 17:18:45 GMT - Sun, 20 Apr 2025 18:18:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /@phosphor-icons/web@2.1.1 HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://commerzweb.ns01.info/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 22 Jan 2025 14:00:44 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
location: /@phosphor-icons/web@2.1.1/src/index.js
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01JHS3KF0F33E443K5Z89QJW03-arn
cf-cache-status: HIT
age: 471271
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 9060126e5de0b521-OSL
X-Firefox-Spdy: h2
|
|
| GET unpkg.com/@phosphor-icons/web@2.1.1/src/regular/style.css | 104.17.247.203 | 200 OK | 78 kB |
URL GET HTTP/2unpkg.com/@phosphor-icons/web@2.1.1/src/regular/style.css IP104.17.247.203:443
Requested byhttp://commerzweb.ns01.info/login.php CertificateIssuerGoogle Trust Services Subjectunpkg.com FingerprintE4:F4:EA:7C:7F:E7:57:82:8B:55:44:32:FA:B8:5A:DB:88:CE:1D:D5 ValidityMon, 20 Jan 2025 17:18:45 GMT - Sun, 20 Apr 2025 18:18:43 GMT
File typetroff or preprocessor input, ASCII text Hash7fe7108986e8596a197c607b2d989d89 9feab57e5c948507134250af34e342e753fc029d 873761b8711147dc516b6102936e9ad005f3a3015349efcde1a496f0326f1051
GET /@phosphor-icons/web@2.1.1/src/regular/style.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://commerzweb.ns01.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 22 Jan 2025 14:00:44 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "13133-n+q1flyUhQcTQlCvNONC51P8Ap0"
via: 1.1 fly.io
fly-request-id: 01JFEW6ZY4FM2T3FWKKBAAHRH2-arn
cf-cache-status: HIT
age: 371290
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 9060126f0eb3b521-OSL
X-Firefox-Spdy: h2
|
|
| GET unpkg.com/@phosphor-icons/web@2.1.1/src/light/style.css | 104.17.247.203 | 200 OK | 87 kB |
URL GET HTTP/2unpkg.com/@phosphor-icons/web@2.1.1/src/light/style.css IP104.17.247.203:443
Requested byhttp://commerzweb.ns01.info/login.php CertificateIssuerGoogle Trust Services Subjectunpkg.com FingerprintE4:F4:EA:7C:7F:E7:57:82:8B:55:44:32:FA:B8:5A:DB:88:CE:1D:D5 ValidityMon, 20 Jan 2025 17:18:45 GMT - Sun, 20 Apr 2025 18:18:43 GMT
Hashd0c00e94901712da925ed893abcf1908 2a36dc2a0a022e6b03855703b2c5380836771e6b f2e59699faaeee27da9edb86dd18f5ed3bd5113db3e4e388fdd23afcaf308865
GET /@phosphor-icons/web@2.1.1/src/light/style.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://commerzweb.ns01.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 22 Jan 2025 14:00:44 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "1553f-KjbcKgoCLmsDhVcDssU4CDZ3Hms"
via: 1.1 fly.io
fly-request-id: 01JFP5B2ADPCPVDG8KNVSYKPR4-arn
cf-cache-status: HIT
age: 287617
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 9060126f0eb7b521-OSL
X-Firefox-Spdy: h2
|
|
| GET unpkg.com/@phosphor-icons/web | 104.17.247.203 | 302 Found | 364 B |
URL GET HTTP/2unpkg.com/@phosphor-icons/web IP104.17.247.203:443
Requested byhttp://commerzweb.ns01.info/login.php CertificateIssuerGoogle Trust Services Subjectunpkg.com FingerprintE4:F4:EA:7C:7F:E7:57:82:8B:55:44:32:FA:B8:5A:DB:88:CE:1D:D5 ValidityMon, 20 Jan 2025 17:18:45 GMT - Sun, 20 Apr 2025 18:18:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /@phosphor-icons/web HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://commerzweb.ns01.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 22 Jan 2025 14:00:44 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /@phosphor-icons/web@2.1.1
vary: Accept, Accept-Encoding
content-encoding: br
via: 1.1 fly.io
fly-request-id: 01JJ74JK3QGC98XJK18SH346PJ-arn
cf-cache-status: HIT
age: 486
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 9060126d2cb7b521-OSL
X-Firefox-Spdy: h2
|
|
| GET unpkg.com/@phosphor-icons/web@2.1.1/src/index.js | 104.17.247.203 | 200 OK | 364 B |
URL GET HTTP/2unpkg.com/@phosphor-icons/web@2.1.1/src/index.js IP104.17.247.203:443
Requested byhttp://commerzweb.ns01.info/login.php CertificateIssuerGoogle Trust Services Subjectunpkg.com FingerprintE4:F4:EA:7C:7F:E7:57:82:8B:55:44:32:FA:B8:5A:DB:88:CE:1D:D5 ValidityMon, 20 Jan 2025 17:18:45 GMT - Sun, 20 Apr 2025 18:18:43 GMT
File typeASCII text, with very long lines (408), with no line terminators Hashc666bd5140d68ff5f8a966ef43f9d63f c9cec83316e86e71a7b7a4e1d021cbba031ea0b5 e0f445df60abd6e7e95d75f3cdd9a09c6aec760304e00a7c98cb0278cd17847e
GET /@phosphor-icons/web@2.1.1/src/index.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://commerzweb.ns01.info/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 22 Jan 2025 14:00:44 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "16c-tw0bgN6nDvp3wXgiDzTo4D/8bDc"
via: 1.1 fly.io
fly-request-id: 01JFBQRQ4TM01PWS9S53AMP3XC-arn
cf-cache-status: HIT
age: 370079
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 9060126e6e00b521-OSL
X-Firefox-Spdy: h2
|
|
| GET 45.142.107.218/cdn/logo-transp.png | 45.142.107.218 | 200 OK | 23 kB |
URL GET HTTP/1.145.142.107.218/cdn/logo-transp.png IP45.142.107.218:80
Requested byhttp://commerzweb.ns01.info/login.php
File typePNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced Hashe815d6ad4abe7053ecc3a864bc225b19 cdbf8045a65ca183c13900cc9878c12aa04f9866 8f22bd71dde71c1d9878e8238ac3c74c4f4483e3db8cd78778dd81106b0d3709
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn/logo-transp.png HTTP/1.1
Host: 45.142.107.218
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://commerzweb.ns01.info/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Jan 2025 14:00:44 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Fri, 29 Nov 2024 13:08:39 GMT
ETag: "5a29-6280ce5b7a3c0"
Accept-Ranges: bytes
Content-Length: 23081
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
|
|
| GET unpkg.com/@phosphor-icons/web@2.1.1/src/fill/style.css | 104.17.247.203 | 200 OK | 86 kB |
URL GET HTTP/2unpkg.com/@phosphor-icons/web@2.1.1/src/fill/style.css IP104.17.247.203:443
Requested byhttp://commerzweb.ns01.info/login.php CertificateIssuerGoogle Trust Services Subjectunpkg.com FingerprintE4:F4:EA:7C:7F:E7:57:82:8B:55:44:32:FA:B8:5A:DB:88:CE:1D:D5 ValidityMon, 20 Jan 2025 17:18:45 GMT - Sun, 20 Apr 2025 18:18:43 GMT
Hashf0561d4b928f3521c1a3a66507052039 afb44a713f4dc526e2bffda0535da7bfcfcb44a9 555980683a582c1910a954648b4ae38f58d76e797f02bfdc2c5e817901e6d4fc
GET /@phosphor-icons/web@2.1.1/src/fill/style.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://commerzweb.ns01.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 22 Jan 2025 14:00:44 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "14f3d-r7RKcT9NxSbiv/2gU12nv8/LRKk"
via: 1.1 fly.io
fly-request-id: 01JFEFQFMPXAPTZT56M2CPTYKJ-arn
cf-cache-status: HIT
age: 452643
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 9060126f1ec6b521-OSL
X-Firefox-Spdy: h2
|
|