| |  159.69.145.28 | | 0 B |
IP159.69.145.28:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Wed, 29 May 2024 07:40:57 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
X-Powered-By: PHP/7.2.24
Location: /index.html
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| 159.69.145.28/index.html | 159.69.145.28 | 200 OK | 18 kB |
IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeHTML document, Unicode text, UTF-8 text, with very long lines (388), with CRLF line terminators Hash680ed9dee429739a418174eb3d3d706c db1a6a811606d8a8b22aade4699e3c27fc9005fe ce1428bd973efadebee4a837e33754e45dc7f9dc6b597d02bcb02e48d590aa14
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /index.html HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Mon, 14 Oct 2019 08:21:03 GMT
ETag: "4603-594da8c6899c0"
Accept-Ranges: bytes
Content-Length: 17923
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| 159.69.145.28/css/responsive.css | 159.69.145.28 | 200 OK | 5.3 kB |
URL GET HTTP/1.1159.69.145.28/css/responsive.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeassembler source, ASCII text, with CRLF line terminators Hash829ccc44fc2674d3d26d3711a57374bc fa91e452df1fb4ea7fd7c303f88fa466685b4cbe 36ccb4f5c5cb1c8f4a832351898912a30f9c005f40081e59ab9bfc86d3ba98a5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/responsive.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Fri, 06 Sep 2019 11:28:10 GMT
ETag: "1493-591e0bb9ec680"
Accept-Ranges: bytes
Content-Length: 5267
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.5/jquery.fancybox.min.css |  104.17.24.14 | 200 OK | 955 B |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.5/jquery.fancybox.min.css IP104.17.24.14:443
Requested byhttp://159.69.145.28/index.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (3885), with no line terminators Hashd7b336b9735d553126c374715bd6dd41 bae79ef61b23b0a9e20ebad9a701de5bfa9f6fd1 6a5ed4bb4bb22800c5f3d7057a35cbdd8bb49686d8df119a8452122aa7b40b80
GET /ajax/libs/fancybox/2.1.5/jquery.fancybox.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 May 2024 07:40:58 GMT
content-type: text/css; charset=utf-8
content-length: 955
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e58-f2d"
last-modified: Mon, 04 May 2020 16:10:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1153008
expires: Mon, 19 May 2025 07:40:58 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e%2BUeca7yrNxdRuE%2BGdyYodKqpcyFZAmHIKmXh6o4BEdIsczUC4mPZ6nejs%2BKL%2Bqjb44YPrzYWMUtpdgQJnerrHlyx5f6Nh5rcGuG6z5PrDPoWykYoAfbX7lkE0Ksw9rgM9RmO4OQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 88b4d6e15945569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.5/jquery.fancybox.min.js | 104.17.24.14 | 200 OK | 7.6 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/fancybox/2.1.5/jquery.fancybox.min.js IP104.17.24.14:443
Requested byhttp://159.69.145.28/index.html CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (22994), with no line terminators Hash23a45699a99d0e0670481c912fbccf69 1e618c9201c7888df9e50b8d93a30783238a988e ac7b17cdd4eb6d085c3bbd06b7f0ceffd485bcef80900ff3ab2edd08efe230b5
GET /ajax/libs/fancybox/2.1.5/jquery.fancybox.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 May 2024 07:40:58 GMT
content-type: application/javascript; charset=utf-8
content-length: 7584
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e58-59d2"
last-modified: Mon, 04 May 2020 16:10:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 995397
expires: Mon, 19 May 2025 07:40:58 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2ByZUa0xR8k0ffoDvG7p7r1AM7B6s7K7BaMj%2Fdb3CnBWAZnKklvhSgLTFzNxFR8EppETaYHAcl%2BXDWJi%2F9YFKoIq2mD%2FYp8y%2BFYdALsEfvIW2q7nb7t4FQeArDuXSE9OYaOHm3Wnn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 88b4d6e15948569a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 159.69.145.28/css/jquery.mCustomScrollbar.min.css | 159.69.145.28 | 200 OK | 43 kB |
URL GET HTTP/1.1159.69.145.28/css/jquery.mCustomScrollbar.min.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeASCII text, with very long lines (42839), with no line terminators Hashf59e3f4c0087b4d8ddc27bdd9c9ab92b fac9b521062feb5250c04d62128a8c3ddb312632 247184981eb6f698a94e431a83d68c6b0df623cce57b6e29dc5a6c11e23aa195
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/jquery.mCustomScrollbar.min.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Tue, 30 Apr 2019 22:59:44 GMT
ETag: "a757-587c75b539800"
Accept-Ranges: bytes
Content-Length: 42839
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 159.69.145.28/css/style.css | 159.69.145.28 | 200 OK | 15 kB |
URL GET HTTP/1.1159.69.145.28/css/style.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeassembler source, ASCII text, with CRLF line terminators Hashc713c40e2fcc1807b06b42332c9bc769 2e026776e54f3efb2cd845d07a8ad8a2a0e5029c 79378e062eefd7a1b2bee7419834d36f98977ba8487fc2a9e776923f0e680d30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/style.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Fri, 06 Sep 2019 11:28:11 GMT
ETag: "3b59-591e0bbae08c0"
Accept-Ranges: bytes
Content-Length: 15193
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 159.69.145.28/js/popper.min.js | 159.69.145.28 | 200 OK | 19 kB |
URL GET HTTP/1.1159.69.145.28/js/popper.min.js IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeJavaScript source, ASCII text, with very long lines (19013) Hashccc533cf501d3f124323b95318c6bbb8 947b7849caa627e6f13941ce7d358fbe74cf3b68 6527e14ac1690f2e8b1fe033fe68d7673b27015a2affab7fe064aa39bb0f7d85
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/popper.min.js HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 27 Jun 2019 21:37:26 GMT
ETag: "4af6-58c54f7cb7180"
Accept-Ranges: bytes
Content-Length: 19190
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 159.69.145.28/css/bootstrap.min.css | 159.69.145.28 | 200 OK | 140 kB |
URL GET HTTP/1.1159.69.145.28/css/bootstrap.min.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeASCII text, with very long lines (65324) Size140 kB (140421 bytes) Hashfee68c0f2f583161134a1fcb5950501d 8e52dd818562db0ba0764bba172cb91ce248d8b0 34959e43e6ecf368807a84f92ad9aa6e2dcd5f0c5c1e57da55e8f3248d9d9255
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/bootstrap.min.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Sun, 30 Jun 2019 19:38:46 GMT
ETag: "22485-58c8fa8eefd80"
Accept-Ranges: bytes
Content-Length: 140421
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| 159.69.145.28/js/jquery-3.0.0.min.js | 159.69.145.28 | 200 OK | 11 kB |
URL GET HTTP/1.1159.69.145.28/js/jquery-3.0.0.min.js IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeJavaScript source, ASCII text Hash68c83ed206a2b972d61a89dfb6d250d0 1d310c0931fd748d904facfead4deaf7ad5739d1 263eb1915970b23889768338a7e7c82a23908b944100e50443183905636de4ff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery-3.0.0.min.js HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 27 Jun 2019 21:37:50 GMT
ETag: "2c3c-58c54f939a780"
Accept-Ranges: bytes
Content-Length: 11324
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 159.69.145.28/js/jquery.min.js | 159.69.145.28 | 200 OK | 87 kB |
URL GET HTTP/1.1159.69.145.28/js/jquery.min.js IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeJavaScript source, ASCII text, with very long lines (65290) Hashcbde2a48700724f03cee8c63d5911fbb c867c50e43b7f62a4238b84e9f7fd2fffc0c6da5 c90c190b73facc126891f2f132ec481e9d65f0eb550e34610e244adfaec23492
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.min.js HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 27 Jun 2019 21:37:48 GMT
ETag: "15430-58c54f91b2300"
Accept-Ranges: bytes
Content-Length: 87088
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 159.69.145.28/js/bootstrap.bundle.min.js | 159.69.145.28 | 200 OK | 71 kB |
URL GET HTTP/1.1159.69.145.28/js/bootstrap.bundle.min.js IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeJavaScript source, ASCII text, with very long lines (65297) Hash62e633210885066c625c46081cc2b339 8709e629eeefeb122c09d1d5f902854845a0b496 efcad26419c1257989e551ae58bf2692e9ef872f7883df51c39ddbb2c8c74949
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/bootstrap.bundle.min.js HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Tue, 30 Apr 2019 23:11:32 GMT
ETag: "11498-587c78586d100"
Accept-Ranges: bytes
Content-Length: 70808
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 159.69.145.28/js/custom.js | 159.69.145.28 | 200 OK | 9.2 kB |
URL GET HTTP/1.1159.69.145.28/js/custom.js IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeJavaScript source, ASCII text, with CRLF line terminators Hash54cb00bea418d4e8195b0d95fb759e45 8564f68a5177febe60cadb866ba035dc40f56449 fb1eaa19d8f9124a05c74cb0ace72e34dcbf3da6fe57b4c5bb07a895d5cc27b8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/custom.js HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Tue, 17 Dec 2019 11:08:31 GMT
ETag: "2400-599e45928e9c0"
Accept-Ranges: bytes
Content-Length: 9216
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 159.69.145.28/images/loading.gif | 159.69.145.28 | 200 OK | 36 kB |
URL GET HTTP/1.1159.69.145.28/images/loading.gif IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeGIF image data, version 89a, 498 x 498 Hash556e9ff845b7dd0c62dcdbbb00babb4b c7359ebc8f832b145abe7b62edb9f0d7bc6dd7ed f5e268852fdbbafbf00b7135099e5e6ec041be4be023f864aebf6c291176e91b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/loading.gif HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 27 Jun 2019 21:25:56 GMT
ETag: "8aab-58c54ceaae100"
Accept-Ranges: bytes
Content-Length: 35499
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/gif
|
|
| 159.69.145.28/images/logo.png | 159.69.145.28 | 200 OK | 1.7 kB |
URL GET HTTP/1.1159.69.145.28/images/logo.png IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typePNG image data, 81 x 30, 8-bit/color RGBA, non-interlaced Hash7956cd48e8b11aa7d897b60b92645557 137e0da513c9672bb8495795faeff0b585bb6e69 8241703ff3b8f9b43d5134de0a0587d4e7f985dd56246ec82f78df4607c4fd79
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/logo.png HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Mon, 14 Oct 2019 08:26:47 GMT
ETag: "6d3-594daa0e99fc0"
Accept-Ranges: bytes
Content-Length: 1747
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
|
|
| 159.69.145.28/js/jquery.mCustomScrollbar.concat.min.js | 159.69.145.28 | 200 OK | 46 kB |
URL GET HTTP/1.1159.69.145.28/js/jquery.mCustomScrollbar.concat.min.js IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeJavaScript source, ASCII text, with very long lines (32001) Hash42a368e95b4a38989c8984c672d29ec0 70b2b29b138b9ddcdcbb58bd5d825f780eadcdfa fd8027b53a97cbd5782e85c5908e563c39776703ff9279f50658e630927b4167
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.mCustomScrollbar.concat.min.js HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 27 Jun 2019 21:37:50 GMT
ETag: "b1a7-58c54f939a780"
Accept-Ranges: bytes
Content-Length: 45479
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 159.69.145.28/images/work_img3.jpg | 159.69.145.28 | 200 OK | 34 kB |
URL GET HTTP/1.1159.69.145.28/images/work_img3.jpg IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 373x284, components 3 Hash08cca0519e49bcbb336ea654c8ce218a 0d0464f9ffc57a198aa9734044c0544c43b9f3d8 12cbc702758c187ab795c685dbda471fe4e43edc26521cebe908a0269d209f00
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/work_img3.jpg HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 05 Sep 2019 15:07:35 GMT
ETag: "832e-591cfae795bc0"
Accept-Ranges: bytes
Content-Length: 33582
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| 159.69.145.28/images/work_img1.jpg | 159.69.145.28 | 200 OK | 17 kB |
URL GET HTTP/1.1159.69.145.28/images/work_img1.jpg IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 373x284, components 3 Hashbe3ca343d1339a61eb09d6eb546ba3eb 0db7b0b79fbdce0a2a299a1844b81bb50fc3c1ba 4c6d09c336b3766c22be91b1d56d5a0acdd7defa6dcfca2621041909b5fc9872
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/work_img1.jpg HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 05 Sep 2019 15:06:18 GMT
ETag: "40b0-591cfa9e26e80"
Accept-Ranges: bytes
Content-Length: 16560
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| 159.69.145.28/images/work_img2.jpg | 159.69.145.28 | 200 OK | 42 kB |
URL GET HTTP/1.1159.69.145.28/images/work_img2.jpg IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 373x284, components 3 Hashe52ac7c0266a52b24158b08ffd66ec55 f27342882dbaec1452792231724772d900b3b42f a23616c3af81bce776fb3fe71c97eadd0a4030bd91fc404cf202a8758d991cad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/work_img2.jpg HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 05 Sep 2019 15:06:46 GMT
ETag: "a367-591cfab8dad80"
Accept-Ranges: bytes
Content-Length: 41831
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| 159.69.145.28/images/te1.png | 159.69.145.28 | 200 OK | 1.6 kB |
URL GET HTTP/1.1159.69.145.28/images/te1.png IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typePNG image data, 26 x 24, 8-bit/color RGBA, non-interlaced Hash85f3f7748b1e1ad43c0da207c6d49591 b0d58c1c15f0738adc3d67ab70699862ffcd81dd d1d1266d8a97b4b5dbc5a6536b9978d27e4a352f566e5903b546cc8974a09463
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/te1.png HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Wed, 04 Sep 2019 11:08:05 GMT
ETag: "649-591b8381d2f40"
Accept-Ranges: bytes
Content-Length: 1609
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
|
|
| 159.69.145.28/images/tests.png | 159.69.145.28 | 200 OK | 52 kB |
URL GET HTTP/1.1159.69.145.28/images/tests.png IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typePNG image data, 201 x 201, 8-bit/color RGBA, non-interlaced Hashef317f482555d106f5f98db068d0d894 26a52d67aff6a098bb3b74425a745d5941054304 1029554d0405f407c22af01cf61af6968ed322a1e5f64724eaef1e606761621a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/tests.png HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 05 Sep 2019 15:31:23 GMT
ETag: "cd45-591d00396e8c0"
Accept-Ranges: bytes
Content-Length: 52549
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
|
|
| 159.69.145.28/images/about.png | 159.69.145.28 | 200 OK | 441 kB |
URL GET HTTP/1.1159.69.145.28/images/about.png IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typePNG image data, 900 x 529, 8-bit/color RGBA, non-interlaced Size441 kB (440598 bytes) Hash74a91842cb450b17406f9dc258875125 1782f092fdbda7db5d3e9daf3949649775275a19 f42a7ddd0592c7dfd9461565f1ef0414bce8d73f402a4247142e471095e11ea5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/about.png HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 05 Sep 2019 15:30:49 GMT
ETag: "6b916-591d001901c40"
Accept-Ranges: bytes
Content-Length: 440598
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
|
|
| 159.69.145.28/images/te2.png | 159.69.145.28 | 200 OK | 1.7 kB |
URL GET HTTP/1.1159.69.145.28/images/te2.png IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typePNG image data, 26 x 24, 8-bit/color RGBA, non-interlaced Hash342f975e4d2621d125b4f87b52fb789d a388ea0862eb34c4a18f546ad154467ae13399b9 42ac092ba19c22319ba2a076b1910bfd2836bc07f88e87b550c581d0c23fe81a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/te2.png HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Wed, 04 Sep 2019 11:08:24 GMT
ETag: "674-591b8393f1a00"
Accept-Ranges: bytes
Content-Length: 1652
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
|
|
| 159.69.145.28/js/plugin.js | 159.69.145.28 | 200 OK | 919 kB |
URL GET HTTP/1.1159.69.145.28/js/plugin.js IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeJavaScript source, ASCII text, with very long lines (32000), with CRLF line terminators Size919 kB (918708 bytes) Hash1627446b73ab91f2df237b4fb989a9cf 392dca8a67c0804b18b90ee6171e9ef015f8e5da 0a403468ff0fb786bebdddc7625da883b09f9f8e83ba5475ad3ea729241447eb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/plugin.js HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 27 Jun 2019 21:37:44 GMT
ETag: "e04b4-58c54f8de1a00"
Accept-Ranges: bytes
Content-Length: 918708
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 159.69.145.28/images/pc.png | 159.69.145.28 | 200 OK | 351 kB |
URL GET HTTP/1.1159.69.145.28/images/pc.png IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typePNG image data, 1060 x 574, 8-bit/color RGBA, non-interlaced Size351 kB (351241 bytes) Hash5ceffb9eadc73a5ed1297b57f1a4b16b 645d64fcde6831e724db205967bbb1b619732fd4 7d48bee88d66783d22dcac2b264ba659b5891fdb09eb7dedb183680945257aea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/pc.png HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:58 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Fri, 06 Sep 2019 09:21:36 GMT
ETag: "55c09-591def6fb8800"
Accept-Ranges: bytes
Content-Length: 351241
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
|
|
| 159.69.145.28/css/font-awesome.min.css | 159.69.145.28 | 200 OK | 31 kB |
URL GET HTTP/1.1159.69.145.28/css/font-awesome.min.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/font-awesome.min.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 27 Jun 2019 21:40:34 GMT
ETag: "7918-58c5503001880"
Accept-Ranges: bytes
Content-Length: 31000
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
|
|
| 159.69.145.28/css/meanmenu.css | 159.69.145.28 | 200 OK | 3.8 kB |
URL GET HTTP/1.1159.69.145.28/css/meanmenu.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeASCII text, with CRLF line terminators Hashb055216bd2b549614633094804fa9151 b9c25c1c22ca4683691268e530d4d9c97083c8a8 55a7c5ff64f4d0a68336a88fac35779a6d1bcef736d4bbe89486b84e5a6095e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/meanmenu.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Tue, 20 Aug 2019 09:48:05 GMT
ETag: "eff-590895a645f40"
Accept-Ranges: bytes
Content-Length: 3839
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
|
|
| 159.69.145.28/css/owl.carousel.min.css | 159.69.145.28 | 200 OK | 3.2 kB |
URL GET HTTP/1.1159.69.145.28/css/owl.carousel.min.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeASCII text, with very long lines (3081) Hash351b4e5f569a83790bed10824208390d c20bb4cbb04f19dd2ffc4e8734b96fe06cdc9b48 813f1398bf1531b20c365414d810e75f2ae867a70391794ca28eb57e18117c66
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/owl.carousel.min.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Tue, 30 Apr 2019 22:59:42 GMT
ETag: "cb0-587c75b351380"
Accept-Ranges: bytes
Content-Length: 3248
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| 159.69.145.28/css/icomoon.css | 159.69.145.28 | 200 OK | 28 kB |
URL GET HTTP/1.1159.69.145.28/css/icomoon.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
Hashe841f7cdec90ebf92272192c8e8bc027 adb98f477baaa9e703034dbb04e374f65800124a c009b6d8414d258f737d128b4519be3f3a13fcd81b7b3682753ff06de3b54d13
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/icomoon.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 27 Jun 2019 21:40:32 GMT
ETag: "6efe-58c5502e19400"
Accept-Ranges: bytes
Content-Length: 28414
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
|
|
| 159.69.145.28/css/animate.min.css | 159.69.145.28 | 200 OK | 54 kB |
URL GET HTTP/1.1159.69.145.28/css/animate.min.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeASCII text, with very long lines (53660) Hasha332e9019e2a787d926d9fa1abaeb9d4 0b841113e864a4f89e12387d816546cf5bdc86fe 86abaffb470415e30702185491101c1f3767a73b2283305428d2450e358442ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/animate.min.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 27 Jun 2019 21:40:08 GMT
ETag: "d1ae-58c5501735e00"
Accept-Ranges: bytes
Content-Length: 53678
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
|
|
| 159.69.145.28/css/normalize.css | 159.69.145.28 | 200 OK | 7.4 kB |
URL GET HTTP/1.1159.69.145.28/css/normalize.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
Hash8d9d541cc4c37ce152038f142628e199 b2e67ca61fc06e08530de1a70c476c72000fa297 1b9540dbd7121fe2712bcf8c78054bdfa4215254efec58a9724e5d9d55e9517c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/normalize.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Tue, 30 Apr 2019 22:59:42 GMT
ETag: "1cd5-587c75b351380"
Accept-Ranges: bytes
Content-Length: 7381
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
|
|
| 159.69.145.28/css/jquery-ui.css | 159.69.145.28 | 200 OK | 36 kB |
URL GET HTTP/1.1159.69.145.28/css/jquery-ui.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeASCII text, with very long lines (2363) Hashc4a88ec0cb998929a670c0c58d7dc526 03135a88e8dbc36020dd453d1e7407ce9a3a2cc2 44f8a56d427917b5fa0dd7933ba545679be5e6b3b93099e64a4e29c2159f57c0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/jquery-ui.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 27 Jun 2019 21:40:30 GMT
ETag: "8c85-58c5502c30f80"
Accept-Ranges: bytes
Content-Length: 35973
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
|
|
| 159.69.145.28/css/swiper.min.css | 159.69.145.28 | 404 Not Found | 196 B |
URL GET HTTP/1.1159.69.145.28/css/swiper.min.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeHTML document, ASCII text Hash62962daa1b19bbcc2db10b7bfd531ea6 d64bae91091eda6a7532ebec06aa70893b79e1f8 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/swiper.min.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Content-Length: 196
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 159.69.145.28/css/slick.css | 159.69.145.28 | 200 OK | 1.9 kB |
URL GET HTTP/1.1159.69.145.28/css/slick.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
Hashf46bd015743c36e5514de87e0c1b40e5 11d17a03235ff610f893d04c5c6a30c7b1b401d3 00f74ce6434ed37ab229be8039bcdf6495a2fa58cc1e4ee65c5e623ec6b7af17
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/slick.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Tue, 30 Apr 2019 22:59:34 GMT
ETag: "75c-587c75abb0180"
Accept-Ranges: bytes
Content-Length: 1884
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
|
|
| 159.69.145.28/css/jquery.fancybox.min.css | 159.69.145.28 | 200 OK | 14 kB |
URL GET HTTP/1.1159.69.145.28/css/jquery.fancybox.min.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeASCII text, with very long lines (14143), with no line terminators Hashba919c6d4aced8bb72840a2618f397a3 b6148ec09012fa119d02e0fc64d8e91ec272cd30 71655a3a80f0ede6a9011e1ab7d584473c29026c09f500cbe9bef99da96c70fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/jquery.fancybox.min.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 27 Jun 2019 21:40:28 GMT
ETag: "373f-58c5502a48b00"
Accept-Ranges: bytes
Content-Length: 14143
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
|
|
| 159.69.145.28/css/nice-select.css | 159.69.145.28 | 200 OK | 3.7 kB |
URL GET HTTP/1.1159.69.145.28/css/nice-select.css IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
Hash7641aec4b8c405f570860925f7f64580 84460de5f6746a823d71cd2df0328ffa21f8431a 685f9eca266a49de2eaa2f052eee413ecef3ec2bca80b6d7e04c70dc02d0906a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/nice-select.css HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Thu, 27 Jun 2019 21:40:48 GMT
ETag: "e45-58c5503d5b800"
Accept-Ranges: bytes
Content-Length: 3653
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
|
|
| 159.69.145.28/images/banner.png | 159.69.145.28 | 200 OK | 50 kB |
URL GET HTTP/1.1159.69.145.28/images/banner.png IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typePNG image data, 1920 x 1100, 8-bit/color RGBA, non-interlaced Hashabc9522770419b0fcd9d7b70ce6427a5 6c27845be4b5b1b59aa35e4088d8be7e73d1bbc2 0421d7b274ed37ee38ad82a98567c4beb0b519bc3980cca24daf6037274b0a06
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/banner.png HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Fri, 06 Sep 2019 09:26:46 GMT
ETag: "c4ba-591df0975c180"
Accept-Ranges: bytes
Content-Length: 50362
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
|
|
| netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css | 104.18.10.207 | 200 OK | 16 kB |
URL GET HTTP/2netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css IP104.18.10.207:443
Requested byhttp://159.69.145.28/index.html CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint93:87:98:7E:3F:62:5F:E6:68:1C:1C:8A:E4:9D:FB:A8:C3:72:4F:90 ValiditySat, 25 May 2024 01:51:52 GMT - Fri, 23 Aug 2024 01:51:51 GMT
File typegzip compressed data, from Unix Hash1927463f17cc91684bada8243dc833af 8fb9be6584ee1fb561a681dc6771960650c29059 4d492bddc912a4001f24d2fc488b476aa329d13a6030e7b9c300188852f1c743
GET /font-awesome/4.0.3/css/font-awesome.css HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 May 2024 07:40:58 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: gzip
etag: W/"1f9e9d1a5a1d347d945ef4b7727f2ea0"
last-modified: Mon, 25 Jan 2021 22:04:53 GMT
cdn-cachedat: 09/09/2023 15:04:09
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 756
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 712ee4b3c17826367971d61ec7639739
cdn-cache: HIT
cf-cache-status: HIT
age: 2470437
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 88b4d6e14c8d56c6-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2 |  142.250.74.163 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2 IP142.250.74.163:443
Requested byhttp://159.69.145.28/index.html CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE4:8A:04:4E:A9:40:14:A5:25:38:29:DB:90:36:5A:67:AE:85:31:6C ValidityMon, 06 May 2024 14:43:26 GMT - Mon, 29 Jul 2024 14:43:25 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48336, version 1.0 Hashbfe7ad4aa54cff8909b2d7632073cc30 7c2e625bea4d449ca78cde09ab59dc6c9cb4726f 47d477915fa5912616e2dc5df8c5780f9202671678cf275472bd39f3381c0098
GET /s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://159.69.145.28
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48336
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 May 2024 08:49:09 GMT
expires: Sun, 25 May 2025 08:49:09 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 May 2024 20:31:48 GMT
content-type: font/woff2
age: 341510
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2 | 142.250.74.163 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2 IP142.250.74.163:443
Requested byhttp://159.69.145.28/index.html CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE4:8A:04:4E:A9:40:14:A5:25:38:29:DB:90:36:5A:67:AE:85:31:6C ValidityMon, 06 May 2024 14:43:26 GMT - Mon, 29 Jul 2024 14:43:25 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48336, version 1.0 Hashbfe7ad4aa54cff8909b2d7632073cc30 7c2e625bea4d449ca78cde09ab59dc6c9cb4726f 47d477915fa5912616e2dc5df8c5780f9202671678cf275472bd39f3381c0098
GET /s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://159.69.145.28
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48336
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 May 2024 08:49:09 GMT
expires: Sun, 25 May 2025 08:49:09 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 May 2024 20:31:48 GMT
content-type: font/woff2
age: 341510
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2 | 142.250.74.163 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2 IP142.250.74.163:443
Requested byhttp://159.69.145.28/index.html CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE4:8A:04:4E:A9:40:14:A5:25:38:29:DB:90:36:5A:67:AE:85:31:6C ValidityMon, 06 May 2024 14:43:26 GMT - Mon, 29 Jul 2024 14:43:25 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48336, version 1.0 Hashbfe7ad4aa54cff8909b2d7632073cc30 7c2e625bea4d449ca78cde09ab59dc6c9cb4726f 47d477915fa5912616e2dc5df8c5780f9202671678cf275472bd39f3381c0098
GET /s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://159.69.145.28
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48336
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 May 2024 08:49:09 GMT
expires: Sun, 25 May 2025 08:49:09 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 May 2024 20:31:48 GMT
content-type: font/woff2
age: 341510
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Raleway:400,500,600,700&display=swap | 142.250.74.106 | 200 OK | 49 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Raleway:400,500,600,700&display=swap IP142.250.74.106:443
Requested byhttp://159.69.145.28/index.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint58:16:76:D3:35:A7:C7:1B:68:67:E2:F5:33:04:0E:E9:CB:56:BD:77 ValidityMon, 06 May 2024 14:43:20 GMT - Mon, 29 Jul 2024 14:43:19 GMT
File typegzip compressed data, max compression Hash093688bc0457dee3b92db5a0c746e780 2f76b8a5231aab9bf0c519cbf2de634c4047da43 0e920d77a269d42cf81bf21ea18e94214888c40ec4da49b67692263e7d991a24
GET /css?family=Raleway:400,500,600,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 29 May 2024 07:40:59 GMT
date: Wed, 29 May 2024 07:40:59 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 159.69.145.28/images/fevicon.png | 159.69.145.28 | 404 Not Found | 196 B |
URL GET HTTP/1.1159.69.145.28/images/fevicon.png IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeHTML document, ASCII text Hash62962daa1b19bbcc2db10b7bfd531ea6 d64bae91091eda6a7532ebec06aa70893b79e1f8 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/fevicon.png HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Content-Length: 196
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| 159.69.145.28/index.html | 159.69.145.28 | 200 OK | 18 kB |
IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typeHTML document, Unicode text, UTF-8 text, with very long lines (388), with CRLF line terminators Hash680ed9dee429739a418174eb3d3d706c db1a6a811606d8a8b22aade4699e3c27fc9005fe ce1428bd973efadebee4a837e33754e45dc7f9dc6b597d02bcb02e48d590aa14
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /index.html HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/index.html
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Mon, 14 Oct 2019 08:21:03 GMT
ETag: "4603-594da8c6899c0"
Accept-Ranges: bytes
Content-Length: 17923
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| leostop.com/tracking/tracking.js?_=1716968459439 | 15.197.240.20 | 200 OK | 130 B |
URL GET HTTP/1.1leostop.com/tracking/tracking.js?_=1716968459439 IP15.197.240.20:80
Requested byhttp://159.69.145.28/index.html
File typeHTML document, ASCII text, with no line terminators Hashbbb3effd8ef981de34abfbd976c90f92 abcf3c7c241fd1f439095dea631b4bb84a0e8983 373bfa4ea2975a885e6c56cd8f42d6d40119d5b2d00f7e1200dc8ec03b73093d
GET /tracking/tracking.js?_=1716968459439 HTTP/1.1
Host: leostop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 29 May 2024 07:41:00 GMT
Content-Type: text/html
Content-Length: 130
Connection: keep-alive
|
|
| 159.69.145.28/images/cross_bottom.png | 159.69.145.28 | 200 OK | 10 kB |
URL GET HTTP/1.1159.69.145.28/images/cross_bottom.png IP159.69.145.28:80 ASN#24940 Hetzner Online GmbH
Requested byhttp://159.69.145.28/index.html
File typePNG image data, 1920 x 243, 8-bit/color RGBA, non-interlaced Hashbe06f50031ef7a0aff7d7c4cf03bed6c 2d831c12c429647d69500fc0c24b7e9b55180ae4 36867d9d23edd0bc5d1f1adb56cb25fac75d1548b60081748086d2c14fcef9c0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/cross_bottom.png HTTP/1.1
Host: 159.69.145.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 29 May 2024 07:40:59 GMT
Server: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k
Last-Modified: Fri, 06 Sep 2019 07:20:58 GMT
ETag: "27b6-591dd47906a80"
Accept-Ranges: bytes
Content-Length: 10166
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
|
|
| fonts.googleapis.com/css?family=Rajdhani:300,400,500,600,700 | 142.250.74.106 | 200 OK | 5.4 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Rajdhani:300,400,500,600,700 IP142.250.74.106:443
Requested byhttp://159.69.145.28/index.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint58:16:76:D3:35:A7:C7:1B:68:67:E2:F5:33:04:0E:E9:CB:56:BD:77 ValidityMon, 06 May 2024 14:43:20 GMT - Mon, 29 Jul 2024 14:43:19 GMT
File typeASCII text, with very long lines (5553), with no line terminators Hashf2b48d6292fbd751a16f03d66158a17a 43539436e846b66b31d18150b91e67841678fbbf c8507bad019e4b5c64296119f2f580017b88301a661cf3eca222b98af5dfe9c5
GET /css?family=Rajdhani:300,400,500,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 29 May 2024 07:40:59 GMT
date: Wed, 29 May 2024 07:40:59 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Poppins:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i | 142.250.74.106 | 200 OK | 13 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Poppins:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i IP142.250.74.106:443
Requested byhttp://159.69.145.28/index.html CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint58:16:76:D3:35:A7:C7:1B:68:67:E2:F5:33:04:0E:E9:CB:56:BD:77 ValidityMon, 06 May 2024 14:43:20 GMT - Mon, 29 Jul 2024 14:43:19 GMT
Hash958f1648d2413aa161ba92e573b267be 18f1caf193f19d1be5767f514820669ef89aa9e0 1b5055f0e4f12757f77cb6a296d6dcf95a02784c987731892dcfa730d12dd0f3
GET /css?family=Poppins:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://159.69.145.28/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 29 May 2024 07:40:59 GMT
date: Wed, 29 May 2024 07:40:59 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|