Report - www.ampeloenos.com/SX3uY2lRM/2014_11rechnung

Report Overview

Submitted URL
www.ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
IP
34.175.150.211
ASN
#15169 GOOGLE
Submitted
2023-06-09 08:44:08
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ampeloenos.com	unknown	2007-08-22	2014-08-04	2023-05-16	5.1 kB	618 kB	34.175.150.211
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-06-08	333 B	699 B	142.250.74.131
www.googletagmanager.com	75	2011-11-11	2013-05-22	2023-06-08	876 B	141 kB	142.250.74.168
www.ampeloenos.com	unknown	2007-08-22	2016-03-19	2023-04-30	516 B	591 B	34.175.150.211

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-06-09 08:43:51	high	Client IP	34.175.150.211	ET MALWARE rechnung zip file download

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip	2.2 kB	2023-06-09	2023-06-09
Pretty URL ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip IP 34.175.150.211 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-09 10:44:10 Last Seen2023-06-09 10:44:10 Times Seen1 Hash 90c29769a7827f65a80ab56b8b295890 ade76cd1b5762ad774eedf6e40d195852e0edbab a661bcc78946da3ea8e28de1f276997ddc0f49bdabd79a8c3ad7e58cddd67b05 Loading...

	ampeloenos.com/wp-content/themes/twentytwenty/assets/js/index.js?ver=2.1	26 kB	2023-03-07	2024-04-18
Pretty URL ampeloenos.com/wp-content/themes/twentytwenty/assets/js/index.js?ver=2.1 IP 34.175.150.211 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:25:30 Last Seen2024-04-18 13:26:11 Times Seen906 Hash e8fde5fa3fac2c06011808f4b4fe4eff 9c792c9f7308e3d9f42781ed581d8c9a63f99135 6a9c7d809cf7886b0418e90771e5cb9b0d04c7fa4da523ca397698c3a4b4de86 Loading...

	ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip	97 B	2023-03-07	2024-04-18
Pretty URL ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip IP 34.175.150.211 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:02 Last Seen2024-04-18 15:46:39 Times Seen1699 Hash 382baaa0b6a4b709817aa3d9a76cf798 790e0412f8e01e83192ce7117731d4e07be8890b d8dd9e4bee02cb49c521217c4f44067b3dfa7d425f698fa8e90056c535188877 Loading...

	www.googletagmanager.com/gtag/js?id=G-KZHVN1817Q&l=dataLayer&cx=c	210 kB	2023-06-09	2023-06-09
Pretty URL www.googletagmanager.com/gtag/js?id=G-KZHVN1817Q&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-09 10:44:10 Last Seen2023-06-09 10:44:10 Times Seen2 Hash 30dd45e09f31031f4ea8952a62362d38 6b3d6b3cf03528be8a3934072b94dc6055fe0908 9bbae8e574f311552a2376ccee83fa75edf4636661f7766267d4cab0a74f4eb4 Loading...

	ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip	181 B	2023-06-09	2023-06-09
Pretty URL ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip IP 34.175.150.211 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-06-09 10:44:10 Last Seen2023-06-09 10:44:10 Times Seen1 Hash 1a79ee3e438498416a5abb3fc3e8f6ba a2ba83db1f1830b8db73123f808b86ed7db6197d ac0131c72211c4cfbb51a473f35711c2797d488b7f2735b1ac904be8ad59c84c Loading...

	ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip	329 B	2023-03-07	2024-04-18
Pretty URL ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip IP 34.175.150.211 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:02:02 Last Seen2024-04-18 15:44:46 Times Seen3710 Hash 03d6d38af8c34d50a7d4f77919f3f6c7 90e18129a2b50addce02c98c923534d242233216 9f7a87d73cf34cd5d76d600a5ce326ac1ce32a021067b1bb50587fa488b13444 Loading...

	www.googletagmanager.com/gtag/js?id=UA-799574-8	178 kB	2023-06-09	2023-06-09
Pretty URL www.googletagmanager.com/gtag/js?id=UA-799574-8 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-09 10:44:10 Last Seen2023-06-09 10:44:10 Times Seen2 Hash 91ca5bb47065129df5381db1209b0649 cddd0c21449b8453534803e4e3cfc9528f8eab75 ad4676b03c42e3aa41d334ecfb645fe10c23c676eb2e3b8c8611cf7e60d882d2 Loading...

	ampeloenos.com/SX3uY2lRM/sandbox%20eval%20code	147 B	2023-04-11	2024-04-19
Pretty URL ampeloenos.com/SX3uY2lRM/sandbox%20eval%20code IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-04-19 23:26:46 Times Seen340998 Hash 92b651082ce234f66bb544e678befda3 14c21c55ddce43b6f677caadf51d4ab98c6a3df8 25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded Loading...

	www.google-analytics.com/analytics.js	4.7 kB	2023-04-11	2024-04-19
Pretty URL www.google-analytics.com/analytics.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 21:07:53 Last Seen2024-04-19 23:26:47 Times Seen340503 Hash f24128d0c9cba7be2916c693427a3483 1b6397d496ea896ebc2018b01b995cee4f166029 58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8 Loading...

HTTP Transactions (14)

URL IP Response Size

www.ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip

34.175.150.211

301 Moved Permanently

0 B

URL User Request GET HTTP/2
www.ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
IP
34.175.150.211:443
ASN
#15169 GOOGLE

Certificate
IssuerLet's Encrypt
Subjectampeloenos.com
Fingerprint6D:F7:EA:47:44:45:B1:CD:F3:74:5A:86:EE:C0:7C:D8:79:6F:09:A0
ValiditySun, 30 Apr 2023 16:04:52 GMT - Sat, 29 Jul 2023 16:04:51 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /SX3uY2lRM/2014_11rechnung_K4768955881.zip HTTP/1.1
Host: www.ampeloenos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 09 Jun 2023 08:43:51 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-cache-enabled: True
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-redirect-by: WordPress
x-httpd-modphp: 1
host-header: 6b7412fb82ca5edfd0917e3957f05d89
x-proxy-cache: MISS
x-proxy-cache-info: 0301 NC:000000 UP:SKIP_CACHE_NO_CACHE
X-Firefox-Spdy: h2

ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip

34.175.150.211

404 Not Found

162 B

URL User Request GET HTTP/2
ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
IP
34.175.150.211:443
ASN
#15169 GOOGLE

Certificate
IssuerLet's Encrypt
Subjectampeloenos.com
Fingerprint6D:F7:EA:47:44:45:B1:CD:F3:74:5A:86:EE:C0:7C:D8:79:6F:09:A0
ValiditySun, 30 Apr 2023 16:04:52 GMT - Sat, 29 Jul 2023 16:04:51 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

NIDS	Severity	Alert
suricata	high	ET MALWARE rechnung zip file download

HTTP Headers

GET /SX3uY2lRM/2014_11rechnung_K4768955881.zip HTTP/1.1
Host: ampeloenos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 09 Jun 2023 08:43:51 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Host-Header: 8441280b0c35cbc1147f8ba998a563a7
X-HTTPS-Enforce: 1
X-Proxy-Cache-Info: DT:1

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
fc8e1ec54c50413f6e09e63a85414e7c
929ef6a2a5150200fe2bacfc03245b53be30e46f
9441071bcc600b4efd8d0e6f03237f7cccb737b30125bd1095051a5acdf23ec6

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Jun 2023 08:43:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.googletagmanager.com/gtag/js?id=UA-799574-8

142.250.74.168

200 OK

65 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=UA-799574-8
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint73:BF:B0:D4:62:48:8E:EF:09:5F:00:57:95:98:82:16:BB:07:35:0C
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT

File type
ASCII text, with very long lines (4372)
Size
65 kB (64622 bytes)
Hash
91ca5bb47065129df5381db1209b0649
cddd0c21449b8453534803e4e3cfc9528f8eab75
ad4676b03c42e3aa41d334ecfb645fe10c23c676eb2e3b8c8611cf7e60d882d2

HTTP Headers

GET /gtag/js?id=UA-799574-8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ampeloenos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 Jun 2023 08:43:52 GMT
expires: Fri, 09 Jun 2023 08:43:52 GMT
cache-control: private, max-age=900
last-modified: Fri, 09 Jun 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 64622
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ampeloenos.com/wp-content/uploads/2020/03/Logo.jpg

34.175.150.211

200 OK

31 kB

URL GET HTTP/2
ampeloenos.com/wp-content/uploads/2020/03/Logo.jpg
IP
34.175.150.211:443
ASN
#15169 GOOGLE

Requested by
https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Certificate
IssuerLet's Encrypt
Subjectampeloenos.com
Fingerprint6D:F7:EA:47:44:45:B1:CD:F3:74:5A:86:EE:C0:7C:D8:79:6F:09:A0
ValiditySun, 30 Apr 2023 16:04:52 GMT - Sat, 29 Jul 2023 16:04:51 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.0 (Macintosh), datetime=2020:03:06 17:35:55], baseline, precision 8, 582x101, components 3\012- data
Size
31 kB (31152 bytes)
Hash
c1fbb22517351976de8e9c8c5e43414a
961790e2121e3e7d26bc9675b79edcd55f07acb2
2d412adde713e502baf1fbd5578319c03b7841071694771b798f1b69191337de

HTTP Headers

GET /wp-content/uploads/2020/03/Logo.jpg HTTP/1.1
Host: ampeloenos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 08:43:52 GMT
content-type: image/jpeg
content-length: 31152
last-modified: Sat, 31 Dec 2022 18:12:02 GMT
etag: "63b07b72-79b0"
expires: Sat, 08 Jun 2024 08:43:52 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2

ampeloenos.com/wp-content/themes/twentytwenty/style.css?ver=2.1

34.175.150.211

200 OK

22 kB

URL GET HTTP/2
ampeloenos.com/wp-content/themes/twentytwenty/style.css?ver=2.1
IP
34.175.150.211:443
ASN
#15169 GOOGLE

Requested by
https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Certificate
IssuerLet's Encrypt
Subjectampeloenos.com
Fingerprint6D:F7:EA:47:44:45:B1:CD:F3:74:5A:86:EE:C0:7C:D8:79:6F:09:A0
ValiditySun, 30 Apr 2023 16:04:52 GMT - Sat, 29 Jul 2023 16:04:51 GMT

File type
Unicode text, UTF-8 text, with very long lines (2955)
Size
22 kB (21495 bytes)
Hash
f76414515057b9e323f6c4fa2b85ac8a
9bcf2048a88487d4085e3c7a25585904c607b4f8
22312f28ccf2006064c8910b9661d8ce672ca1bdaefc3029e475507421c8112f

HTTP Headers

GET /wp-content/themes/twentytwenty/style.css?ver=2.1 HTTP/1.1
Host: ampeloenos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 08:43:52 GMT
content-type: text/css
last-modified: Sat, 31 Dec 2022 18:11:26 GMT
vary: Accept-Encoding
etag: W/"63b07b4e-1da5d"
expires: Sat, 08 Jun 2024 08:43:52 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-KZHVN1817Q&l=dataLayer&cx=c

142.250.74.168

200 OK

75 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/js?id=G-KZHVN1817Q&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint73:BF:B0:D4:62:48:8E:EF:09:5F:00:57:95:98:82:16:BB:07:35:0C
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT

File type
ASCII text, with very long lines (4372)
Size
75 kB (75438 bytes)
Hash
30dd45e09f31031f4ea8952a62362d38
6b3d6b3cf03528be8a3934072b94dc6055fe0908
9bbae8e574f311552a2376ccee83fa75edf4636661f7766267d4cab0a74f4eb4

HTTP Headers

GET /gtag/js?id=G-KZHVN1817Q&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ampeloenos.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 Jun 2023 08:43:52 GMT
expires: Fri, 09 Jun 2023 08:43:52 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75438
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ampeloenos.com/wp-content/themes/twentytwenty/assets/js/index.js?ver=2.1

34.175.150.211

200 OK

230 kB

URL GET HTTP/2
ampeloenos.com/wp-content/themes/twentytwenty/assets/js/index.js?ver=2.1
IP
34.175.150.211:443
ASN
#15169 GOOGLE

Requested by
https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Certificate
IssuerLet's Encrypt
Subjectampeloenos.com
Fingerprint6D:F7:EA:47:44:45:B1:CD:F3:74:5A:86:EE:C0:7C:D8:79:6F:09:A0
ValiditySun, 30 Apr 2023 16:04:52 GMT - Sat, 29 Jul 2023 16:04:51 GMT

File type
ASCII text
Size
230 kB (230517 bytes)
Hash
e8fde5fa3fac2c06011808f4b4fe4eff
9c792c9f7308e3d9f42781ed581d8c9a63f99135
6a9c7d809cf7886b0418e90771e5cb9b0d04c7fa4da523ca397698c3a4b4de86

HTTP Headers

GET /wp-content/themes/twentytwenty/assets/js/index.js?ver=2.1 HTTP/1.1
Host: ampeloenos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 08:43:52 GMT
content-type: application/javascript
last-modified: Sat, 31 Dec 2022 18:11:26 GMT
vary: Accept-Encoding
etag: W/"63b07b4e-65ff"
expires: Sat, 08 Jun 2024 08:43:52 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2

ampeloenos.com/wp-content/themes/twentytwenty/print.css?ver=2.1

34.175.150.211

200 OK

894 B

URL GET HTTP/2
ampeloenos.com/wp-content/themes/twentytwenty/print.css?ver=2.1
IP
34.175.150.211:443
ASN
#15169 GOOGLE

Requested by
https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Certificate
IssuerLet's Encrypt
Subjectampeloenos.com
Fingerprint6D:F7:EA:47:44:45:B1:CD:F3:74:5A:86:EE:C0:7C:D8:79:6F:09:A0
ValiditySun, 30 Apr 2023 16:04:52 GMT - Sat, 29 Jul 2023 16:04:51 GMT

File type
ASCII text
Size
894 B (894 bytes)
Hash
a5bf76d89698e8a80718572e6d63b694
412adabd76165ae4b3de9516054743d43b20372c
3a6e534ba6c925e8646018b5b7133e0e42fa33c8d67bd104e7b0f2521bcdf595

HTTP Headers

GET /wp-content/themes/twentytwenty/print.css?ver=2.1 HTTP/1.1
Host: ampeloenos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 08:43:52 GMT
content-type: text/css
last-modified: Sat, 31 Dec 2022 18:11:26 GMT
vary: Accept-Encoding
etag: W/"63b07b4e-a8e"
expires: Sat, 08 Jun 2024 08:43:52 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2

ampeloenos.com/wp-includes/images/w-logo-blue-white-bg.png

34.175.150.211

200 OK

4.1 kB

URL GET HTTP/2
ampeloenos.com/wp-includes/images/w-logo-blue-white-bg.png
IP
34.175.150.211:443
ASN
#15169 GOOGLE

Requested by
https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Certificate
IssuerLet's Encrypt
Subjectampeloenos.com
Fingerprint6D:F7:EA:47:44:45:B1:CD:F3:74:5A:86:EE:C0:7C:D8:79:6F:09:A0
ValiditySun, 30 Apr 2023 16:04:52 GMT - Sat, 29 Jul 2023 16:04:51 GMT

File type
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Size
4.1 kB (4119 bytes)
Hash
000bf649cc8f6bf27cfb04d1bcdcd3c7
d73d2f6d74ec6cdcbae07955592962e77d8ae814
6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0

HTTP Headers

GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: ampeloenos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
DNT: 1
Connection: keep-alive
Cookie: _ga_KZHVN1817Q=GS1.1.1686300231.1.0.1686300231.0.0.0; _ga=GA1.1.25455725.1686300232
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 08:43:52 GMT
content-type: image/png
content-length: 4119
last-modified: Sat, 31 Dec 2022 18:12:24 GMT
etag: "63b07b88-1017"
expires: Sat, 08 Jun 2024 08:43:52 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2

ampeloenos.com/wp-content/themes/twentytwenty/assets/fonts/inter/Inter-upright-var.woff2

34.175.150.211

200 OK

224 kB

URL GET HTTP/2
ampeloenos.com/wp-content/themes/twentytwenty/assets/fonts/inter/Inter-upright-var.woff2
IP
34.175.150.211:443
ASN
#15169 GOOGLE

Requested by
https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Certificate
IssuerLet's Encrypt
Subjectampeloenos.com
Fingerprint6D:F7:EA:47:44:45:B1:CD:F3:74:5A:86:EE:C0:7C:D8:79:6F:09:A0
ValiditySun, 30 Apr 2023 16:04:52 GMT - Sat, 29 Jul 2023 16:04:51 GMT

File type
Web Open Font Format (Version 2), TrueType, length 223892, version 1.0\012- data
Size
224 kB (223892 bytes)
Hash
2f136faf2d0ef6368898d1a515ab707c
81dbe45ccd7fae3a0a298c5c166b4317c985f538
e03c2df7ef439d2708bbc168a21c0a00da63e5664d286120c994c39644addd03

HTTP Headers

GET /wp-content/themes/twentytwenty/assets/fonts/inter/Inter-upright-var.woff2 HTTP/1.1
Host: ampeloenos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ampeloenos.com/wp-content/themes/twentytwenty/style.css?ver=2.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 08:43:52 GMT
content-type: font/woff2
content-length: 223892
last-modified: Sat, 31 Dec 2022 18:11:26 GMT
etag: "63b07b4e-36a94"
expires: Sat, 08 Jun 2024 08:43:52 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2

ampeloenos.com/favicon.ico

34.175.150.211

302 Found

4.1 kB

URL GET HTTP/2
ampeloenos.com/favicon.ico
IP
34.175.150.211:443
ASN
#15169 GOOGLE

Requested by
https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Certificate
IssuerLet's Encrypt
Subjectampeloenos.com
Fingerprint6D:F7:EA:47:44:45:B1:CD:F3:74:5A:86:EE:C0:7C:D8:79:6F:09:A0
ValiditySun, 30 Apr 2023 16:04:52 GMT - Sat, 29 Jul 2023 16:04:51 GMT

File type

Size
4.1 kB (4119 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ampeloenos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Fri, 09 Jun 2023 08:43:52 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://ampeloenos.com/wp-includes/images/w-logo-blue-white-bg.png
x-cache-enabled: True
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
link: <https://ampeloenos.com/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
x-httpd-modphp: 1
host-header: 6b7412fb82ca5edfd0917e3957f05d89
x-proxy-cache: MISS
x-proxy-cache-info: 0302 NC:000000 UP:
X-Firefox-Spdy: h2

ampeloenos.com/wp-includes/css/classic-themes.min.css?ver=6.2.2

34.175.150.211

200 OK

291 B

URL GET HTTP/2
ampeloenos.com/wp-includes/css/classic-themes.min.css?ver=6.2.2
IP
34.175.150.211:443
ASN
#15169 GOOGLE

Requested by
https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Certificate
IssuerLet's Encrypt
Subjectampeloenos.com
Fingerprint6D:F7:EA:47:44:45:B1:CD:F3:74:5A:86:EE:C0:7C:D8:79:6F:09:A0
ValiditySun, 30 Apr 2023 16:04:52 GMT - Sat, 29 Jul 2023 16:04:51 GMT

File type
ASCII text, with no line terminators
Size
291 B (291 bytes)
Hash
2485a0fab337da61deb41cc4aa994c1b
af1a1d4c6b7c287dc881dd4f46b6b547ac5a5353
7e0bdafc01d81aed845a69d0a32120145155f75aca4c603d8952de7ecc5c6410

HTTP Headers

GET /wp-includes/css/classic-themes.min.css?ver=6.2.2 HTTP/1.1
Host: ampeloenos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 08:43:52 GMT
content-type: text/css
last-modified: Sat, 01 Apr 2023 19:22:03 GMT
vary: Accept-Encoding
etag: W/"6428845b-123"
expires: Sat, 08 Jun 2024 08:43:52 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2

ampeloenos.com/wp-includes/css/dist/block-library/style.min.css?ver=6.2.2

34.175.150.211

200 OK

98 kB

URL GET HTTP/2
ampeloenos.com/wp-includes/css/dist/block-library/style.min.css?ver=6.2.2
IP
34.175.150.211:443
ASN
#15169 GOOGLE

Requested by
https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Certificate
IssuerLet's Encrypt
Subjectampeloenos.com
Fingerprint6D:F7:EA:47:44:45:B1:CD:F3:74:5A:86:EE:C0:7C:D8:79:6F:09:A0
ValiditySun, 30 Apr 2023 16:04:52 GMT - Sat, 29 Jul 2023 16:04:51 GMT

File type

Size
98 kB (97517 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-includes/css/dist/block-library/style.min.css?ver=6.2.2 HTTP/1.1
Host: ampeloenos.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ampeloenos.com/SX3uY2lRM/2014_11rechnung_K4768955881.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 08:43:52 GMT
content-type: text/css
last-modified: Sat, 01 Apr 2023 19:22:03 GMT
vary: Accept-Encoding
etag: W/"6428845b-17ced"
expires: Sat, 08 Jun 2024 08:43:52 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML