Report - 185.30.35.224/wp-includes/tu/redirect.php?login=ees@slurpmail.net

Report Overview

Visited public
2025-02-14 05:09:06
Tags
URL
185.30.35.224/wp-includes/tu/redirect.php?login=ees@slurpmail.net
Finishing URL
s308.goserver.host/
IP / ASN
185.30.35.224
#48324 webgo GmbH
Title
webgo Webspace-Admin

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
s308.goserver.host	unknown	2015-09-10	2023-09-21	2024-03-20	7.7 kB	525 kB	185.30.35.224
webgo.de	395487	unknown	2015-11-11	2025-02-08	458 B	20 kB	89.44.8.138
www.webgo.de	499280	unknown	2017-02-01	2025-02-08	450 B	163 B	89.44.8.138
185.30.35.224	unknown	unknown	No data	No data	447 B	353 B	185.30.35.224

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-02-14	medium	185.30.35.224	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	s308.goserver.host/templates/default_v4/js/ie10-viewport-bug-workaround.js	ScriptElement	419 B	2023-03-08	2025-05-10
Pretty URL s308.goserver.host/templates/default_v4/js/ie10-viewport-bug-workaround.js IP 185.30.35.224 ASN #48324 webgo GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 16:18 Last Seen2025-05-10 08:21 Times Seen45 Hash f47b4c8143d35993d96da8b16b971971 5d2dba2c76cbedcd4ce0d5cb7a32095021fc8173 bc4e8896f4565e8ffd5e560e07b27d1f18ced669b3b9b831c61bebd2c4ba0847 Loading...

	s308.goserver.host/templates/default_v4/js/jquery.min.js	ScriptElement	96 kB	2023-03-07	2025-05-15
Pretty URL s308.goserver.host/templates/default_v4/js/jquery.min.js IP 185.30.35.224 ASN #48324 webgo GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-15 17:32 Times Seen8518 Hash f03e5a3bf534f4a738bc350631fd05bd 37b1db88b57438f1072a8ebc7559c909c9d3a682 aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947 Loading...

	s308.goserver.host/templates/default_v4/js/bootstrap.min.js	ScriptElement	58 kB	2023-03-07	2025-05-15
Pretty URL s308.goserver.host/templates/default_v4/js/bootstrap.min.js IP 185.30.35.224 ASN #48324 webgo GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-15 12:20 Times Seen11704 Hash e1d98d47689e00f8ecbc5d9f61bdb42e 6778fed3cf095a318141a31f455c8f4663885bde 0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b Loading...

HTTP Transactions (17)

URL IP Response Size

185.30.35.224/wp-includes/tu/redirect.php?login=ees@slurpmail.net

185.30.35.224

301 Moved Permanently

162 B

URL User Request GET HTTP/1.1
185.30.35.224/wp-includes/tu/redirect.php?login=ees@slurpmail.net
IP
185.30.35.224:80
ASN
#48324 webgo GmbH

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/tu/redirect.php?login=ees@slurpmail.net HTTP/1.1
Host: 185.30.35.224
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 14 Feb 2025 05:08:35 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://s308.goserver.host

s308.goserver.host/templates/default_v4/css/HhyJU5sn9vOmLxNkIwRSjTVNWLEJN7MV3A.ttf

185.30.35.224

200 OK

69 kB

URL GET HTTP/2
s308.goserver.host/templates/default_v4/css/HhyJU5sn9vOmLxNkIwRSjTVNWLEJN7MV3A.ttf
IP
185.30.35.224:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
TrueType Font data, 16 tables, 1st "GDEF", 10 names, Microsoft, language 0x409
Size
69 kB (69328 bytes)
Hash
0bb6fa7ea8f9394507c6ac77bb5bd62e
0158f5e150c6efd8897e1551bda2accc4bc679ab
17a1f6ec1ba7794ad2e9981922b893de21d8d397f707fabdb51a9fd6e55bd633

HTTP Headers

GET /templates/default_v4/css/HhyJU5sn9vOmLxNkIwRSjTVNWLEJN7MV3A.ttf HTTP/1.1
Host: s308.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s308.goserver.host/templates/default_v4/css/fonts.css?family=Dosis:wght@200;300;400;500;600;800&display=swap
Cookie: PHPSESSID=014d65bda3a58bed4876bbae7aa2a7c7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 05:08:36 GMT
content-type: font/ttf
content-length: 69328
last-modified: Thu, 24 Aug 2023 20:13:08 GMT
etag: "10ed0-603b0db431d00"
accept-ranges: bytes
X-Firefox-Spdy: h2

s308.goserver.host/templates/default_v4/js/jquery.min.js

185.30.35.224

200 OK

103 kB

URL GET HTTP/2
s308.goserver.host/templates/default_v4/js/jquery.min.js
IP
185.30.35.224:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
103 kB (103340 bytes)
Hash
71383721fff47a66238d4d3adfff18ff
f0b8f514bba4159f3725790d1ee6a3a0f608986e
dee9b36e02d4524e7c962f4d107824a173262882166ff3a59c86179894792575

HTTP Headers

GET /templates/default_v4/js/jquery.min.js HTTP/1.1
Host: s308.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s308.goserver.host/
Cookie: PHPSESSID=014d65bda3a58bed4876bbae7aa2a7c7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 05:08:36 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Tue, 20 Dec 2016 18:17:03 GMT
etag: W/"176f8-5441b0b0165c0"
content-encoding: gzip
X-Firefox-Spdy: h2

s308.goserver.host/templates/default_v4/js/bootstrap.min.js

185.30.35.224

200 OK

16 kB

URL GET HTTP/2
s308.goserver.host/templates/default_v4/js/bootstrap.min.js
IP
185.30.35.224:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
16 kB (15888 bytes)
Hash
9714c06b3357c52acdc323ae2bdd8cca
2cd2de40d937b5901430ee7bc1036306ce084039
7b458ca18941af0ceddf7114ccebf2114090de1cba2cb94bb3b35bb6d39e84cc

HTTP Headers

GET /templates/default_v4/js/bootstrap.min.js HTTP/1.1
Host: s308.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s308.goserver.host/
Cookie: PHPSESSID=014d65bda3a58bed4876bbae7aa2a7c7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 05:08:36 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Thu, 11 Jul 2019 10:28:27 GMT
etag: W/"e2d8-58d65411a28c0"
content-encoding: gzip
X-Firefox-Spdy: h2

s308.goserver.host/images/logo.svg

185.30.35.224

200 OK

3.1 kB

URL GET HTTP/2
s308.goserver.host/images/logo.svg
IP
185.30.35.224:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
3.1 kB (3093 bytes)
Hash
6234d29af0c2c4621cb71155ecd54845
22e15dc8c926c37cf9ebe9c845ff2c88ddcf5e1c
51442fb99d203251f0d8b84dfe858741105d1799132a1197e00321576f7e87ca

HTTP Headers

GET /images/logo.svg HTTP/1.1
Host: s308.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s308.goserver.host/
Cookie: PHPSESSID=014d65bda3a58bed4876bbae7aa2a7c7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 05:08:36 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Thu, 22 Aug 2024 13:53:40 GMT
etag: W/"1bd8-62045fc6b8100"
content-encoding: gzip
X-Firefox-Spdy: h2

s308.goserver.host/

185.30.35.224

200 OK

33 kB

URL User Request GET HTTP/2
s308.goserver.host/
IP
185.30.35.224:443
ASN
#48324 webgo GmbH

Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
33 kB (33150 bytes)
Hash
ebdca42ce121b235bfdba11faf7188c3
4dbf057e2a98125bea33d283034ded8d5db1d899
610c88e9b6cb56d0b3fcde339f2bcb5693b8c620d86fa80f3f90e3cef0658d7a

HTTP Headers

GET / HTTP/1.1
Host: s308.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 05:08:35 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=014d65bda3a58bed4876bbae7aa2a7c7; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

s308.goserver.host/templates/default_v4/css/bootstrap-theme.min.css

185.30.35.224

200 OK

8.1 kB

URL GET HTTP/2
s308.goserver.host/templates/default_v4/css/bootstrap-theme.min.css
IP
185.30.35.224:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
8.1 kB (8102 bytes)
Hash
9b1a28fabc01ffd2f22eef30e352f0b2
042273bcd8dfeac98687e257bc98629a743293c1
67638e18df67efa46290cd533cd271a86abb7f0ae2218d766f04e25c9dbb2cb2

HTTP Headers

GET /templates/default_v4/css/bootstrap-theme.min.css HTTP/1.1
Host: s308.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s308.goserver.host/
Cookie: PHPSESSID=014d65bda3a58bed4876bbae7aa2a7c7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 05:08:36 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 28 Oct 2016 09:27:13 GMT
etag: W/"5b71-53fe976959e40"
content-encoding: gzip
X-Firefox-Spdy: h2

webgo.de/assets/images/favicon.ico

89.44.8.138

404 Not Found

19 kB

URL GET HTTP/2
webgo.de/assets/images/favicon.ico
IP
89.44.8.138:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.webgo.de
FingerprintA7:C1:90:B4:89:3E:F0:B0:05:51:47:61:B0:79:43:3D:16:A1:83:8A
ValidityFri, 08 Nov 2024 00:00:00 GMT - Sat, 08 Nov 2025 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
19 kB (18585 bytes)
Hash
f86bdff8da8d89ab5fc2074f9164225c
14fef0c9316c2586328338304a1769a14272f995
c0e2ce11c8622bedb68391bd64f96b147351cec0eef84bc67bfcafed4e8b597d

HTTP Headers

GET /assets/images/favicon.ico HTTP/1.1
Host: webgo.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://s308.goserver.host/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
cache-control: no-cache, private
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Fri, 14 Feb 2025 05:08:37 GMT
permissions-policy: interest-cohort=()
server: nginx
set-cookie: XSRF-TOKEN=eyJpdiI6IlNyK3VwUkUrc1FUc29HMXZDa2J6OHc9PSIsInZhbHVlIjoiZ2FYeldhNis1WG5hT1JRRDJPSEl5TUNKMnhGZVhISHhVYXVrZjQxKzVXQU5nMEsxejloclFIRDFtUXJxYy9IWHdrWjh1bk5YZTJWYm5hQjZtNVlSNnNDRzg2ZVV5Uzhoa1EvWnl1emtaRUlwbC9GNXhQcGI5MTlCcDFUdjJQTm4iLCJtYWMiOiJiMTljYmRhMTE5MWMyMmJlZTJhYzI4ZjNlZmFmMjEyNDZiYmVhMTNmNjcxM2M3Nzk3Y2RmMWM3ZGQxNWM5MzE2IiwidGFnIjoiIn0%3D; expires=Fri, 14 Feb 2025 07:08:37 GMT; Max-Age=7200; path=/; secure; samesite=lax
webgode_session=eyJpdiI6ImlLS3dQVVczM0Z2b0V3d3NZWGNlOFE9PSIsInZhbHVlIjoieTROY3dHcXcvRWcrOVRzbnF5UVYrTlpIcXZPd0NyekNwenpQa3VINVVMeHg1NkthQWdYMFFpd1c1anFpWUdxU082NkZKM0g4N0hVZ3pocmZOTXFTOGN3QkEwR1hUWE5xdHFmOGxPWFpmWDA4eG15VStEMHMyL0pDcW4zNlA4TksiLCJtYWMiOiJlODk2NDVmNTBmOWI5OWEyMzc2MTc5ZTA2ZTY2NDY2NmJmYjA0MzdkN2IxMjAzM2QwYjVhZTM0ZTNjZWY0YmYwIiwidGFnIjoiIn0%3D; expires=Fri, 14 Feb 2025 07:08:37 GMT; Max-Age=7200; path=/; httponly; samesite=lax
vary: Accept-Encoding
x-powered-by: Statamic
X-Firefox-Spdy: h2

s308.goserver.host/templates/default_v4/css/bootstrap.min.css

185.30.35.224

200 OK

156 kB

URL GET HTTP/2
s308.goserver.host/templates/default_v4/css/bootstrap.min.css
IP
185.30.35.224:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
ASCII text, with very long lines (65324)
Size
156 kB (155764 bytes)
Hash
c13b6c38d6410f1935f15eab34ebcb5d
27588eaa30793e967c2443804205acabe00b0249
fee9f961702501cf90444cf1268920603d806f070402cf334f7c1ddf90bc523b

HTTP Headers

GET /templates/default_v4/css/bootstrap.min.css HTTP/1.1
Host: s308.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s308.goserver.host/
Cookie: PHPSESSID=014d65bda3a58bed4876bbae7aa2a7c7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 05:08:36 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 31 Jan 2024 16:54:19 GMT
etag: W/"26074-61040bad904c0"
content-encoding: gzip
X-Firefox-Spdy: h2

s308.goserver.host/templates/default_v4/css/login.css?v=20240924

185.30.35.224

200 OK

2.2 kB

URL GET HTTP/2
s308.goserver.host/templates/default_v4/css/login.css?v=20240924
IP
185.30.35.224:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
ASCII text, with very long lines (2277), with no line terminators
Size
2.2 kB (2183 bytes)
Hash
df3381152e940eca533fb9d670f4572e
eeaed41335a7af8dc188990b9db997a975d59d79
e22e24261d5dec1660bcb2009d4211db857e65e2c1dd46a9b413f544fdbe371c

HTTP Headers

GET /templates/default_v4/css/login.css?v=20240924 HTTP/1.1
Host: s308.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s308.goserver.host/
Cookie: PHPSESSID=014d65bda3a58bed4876bbae7aa2a7c7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 05:08:36 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 25 Sep 2024 12:17:50 GMT
etag: W/"887-622f09c4c3780"
content-encoding: gzip
X-Firefox-Spdy: h2

s308.goserver.host/templates/default_v4/css/fonts.css?family=Dosis:wght@200;300;400;500;600;800&display=swap

185.30.35.224

200 OK

1.2 kB

URL GET HTTP/2
s308.goserver.host/templates/default_v4/css/fonts.css?family=Dosis:wght@200;300;400;500;600;800&display=swap
IP
185.30.35.224:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
ASCII text, with very long lines (1242), with no line terminators
Size
1.2 kB (1200 bytes)
Hash
e3d27db1f658b576a09777e8f6e1ff1e
157f58e84b3002041b7661b43dd75156b7b94f71
f62a1f6b1361e48f62d4e2608ce4c21b6fb35df1206e1375c5df1354e4bd34ae

HTTP Headers

GET /templates/default_v4/css/fonts.css?family=Dosis:wght@200;300;400;500;600;800&display=swap HTTP/1.1
Host: s308.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s308.goserver.host/templates/default_v4/css/mesosadmin.css?v=2024092601
Cookie: PHPSESSID=014d65bda3a58bed4876bbae7aa2a7c7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 05:08:36 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sun, 10 Sep 2023 06:07:22 GMT
etag: W/"4b0-604fb05ddfa80"
content-encoding: gzip
X-Firefox-Spdy: h2

s308.goserver.host/templates/default_v4/css/font-awesome.min.css

185.30.35.224

200 OK

31 kB

URL GET HTTP/2
s308.goserver.host/templates/default_v4/css/font-awesome.min.css
IP
185.30.35.224:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
ASCII text, with very long lines (30837)
Size
31 kB (31000 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /templates/default_v4/css/font-awesome.min.css HTTP/1.1
Host: s308.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s308.goserver.host/
Cookie: PHPSESSID=014d65bda3a58bed4876bbae7aa2a7c7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 05:08:36 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Thu, 11 May 2017 06:42:26 GMT
etag: W/"7918-54f39e4541880"
content-encoding: gzip
X-Firefox-Spdy: h2

s308.goserver.host/templates/default_v4/css/bootstrap-select.min.css

185.30.35.224

200 OK

11 kB

URL GET HTTP/2
s308.goserver.host/templates/default_v4/css/bootstrap-select.min.css
IP
185.30.35.224:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
ASCII text, with very long lines (10482), with CRLF line terminators
Size
11 kB (10722 bytes)
Hash
21cc5aea03e9cf9390576e65b1ef1026
b2ecef12ad9565e2e218141bb2ae19b46f47380f
133aae81227644c3f25d54f7a4d2069d9b5dc1d4957379fdac83f53121f15c84

HTTP Headers

GET /templates/default_v4/css/bootstrap-select.min.css HTTP/1.1
Host: s308.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s308.goserver.host/
Cookie: PHPSESSID=014d65bda3a58bed4876bbae7aa2a7c7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 05:08:36 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Mon, 18 Nov 2019 09:03:21 GMT
etag: W/"29e2-5979b38218840"
content-encoding: gzip
X-Firefox-Spdy: h2

s308.goserver.host/templates/default_v4/css/mesosadmin.css?v=2024092601

185.30.35.224

200 OK

18 kB

URL GET HTTP/2
s308.goserver.host/templates/default_v4/css/mesosadmin.css?v=2024092601
IP
185.30.35.224:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
ASCII text
Size
18 kB (17921 bytes)
Hash
85a752b9d349768893be3b0f32436d59
a88ad506828e351c801579107ef128ed34d631c4
acf6f6e34b7a32ab5a38a6c41449ed7a0531102590c3889dd8dc2104d86e56a4

HTTP Headers

GET /templates/default_v4/css/mesosadmin.css?v=2024092601 HTTP/1.1
Host: s308.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s308.goserver.host/
Cookie: PHPSESSID=014d65bda3a58bed4876bbae7aa2a7c7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 05:08:36 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sat, 04 Jan 2025 14:05:57 GMT
etag: W/"4601-62ae1e4ecdb40"
content-encoding: gzip
X-Firefox-Spdy: h2

s308.goserver.host/templates/default_v4/js/ie10-viewport-bug-workaround.js

185.30.35.224

200 OK

419 B

URL GET HTTP/2
s308.goserver.host/templates/default_v4/js/ie10-viewport-bug-workaround.js
IP
185.30.35.224:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
ASCII text, with very long lines (437), with no line terminators
Size
419 B (419 bytes)
Hash
8ea0fee4c572e271a14b766545274c38
e49263dbfa8aa97f3af7dd2397452eba0b9d18de
e27c61c8ff24e01da6bdf9dd3ed0fc44da9a44fb77e3c88f546f7ddaf7e567e9

HTTP Headers

GET /templates/default_v4/js/ie10-viewport-bug-workaround.js HTTP/1.1
Host: s308.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s308.goserver.host/
Cookie: PHPSESSID=014d65bda3a58bed4876bbae7aa2a7c7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 05:08:36 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Tue, 01 Dec 2015 17:28:36 GMT
etag: W/"1a3-525d97cd4b900"
content-encoding: gzip
X-Firefox-Spdy: h2

www.webgo.de/assets/images/favicon.ico

89.44.8.138

301 Moved Permanently

0 B

URL GET HTTP/2
www.webgo.de/assets/images/favicon.ico
IP
89.44.8.138:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.webgo.de
FingerprintA7:C1:90:B4:89:3E:F0:B0:05:51:47:61:B0:79:43:3D:16:A1:83:8A
ValidityFri, 08 Nov 2024 00:00:00 GMT - Sat, 08 Nov 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/images/favicon.ico HTTP/1.1
Host: www.webgo.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s308.goserver.host/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
location: https://webgo.de/assets/images/favicon.ico
content-length: 17
date: Fri, 14 Feb 2025 05:08:36 GMT
X-Firefox-Spdy: h2

s308.goserver.host/templates/default_v4/css/HhyJU5sn9vOmLxNkIwRSjTVNWLEJt7QV3A.ttf

185.30.35.224

200 OK

69 kB

URL GET HTTP/2
s308.goserver.host/templates/default_v4/css/HhyJU5sn9vOmLxNkIwRSjTVNWLEJt7QV3A.ttf
IP
185.30.35.224:443
ASN
#48324 webgo GmbH

Requested by
https://s308.goserver.host/
Certificate
IssuerSectigo Limited
Subject*.goserver.host
Fingerprint9C:70:2E:BB:D2:25:E2:7D:B5:6F:24:0C:32:15:FA:3B:48:CD:27:26
ValidityMon, 18 Nov 2024 00:00:00 GMT - Fri, 19 Dec 2025 23:59:59 GMT

File type
TrueType Font data, 16 tables, 1st "GDEF", 12 names, Microsoft, language 0x409
Size
69 kB (69176 bytes)
Hash
197775f79fdd4d6d70f82e9688c0ea16
082276a19961ad0ff4d0aed2b2f553169d16686b
8413ed200700184d01c4efcafb77481086c6dc28184af182f7004d770eac5861

HTTP Headers

GET /templates/default_v4/css/HhyJU5sn9vOmLxNkIwRSjTVNWLEJt7QV3A.ttf HTTP/1.1
Host: s308.goserver.host
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://s308.goserver.host/templates/default_v4/css/fonts.css?family=Dosis:wght@200;300;400;500;600;800&display=swap
Cookie: PHPSESSID=014d65bda3a58bed4876bbae7aa2a7c7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 05:08:36 GMT
content-type: font/ttf
content-length: 69176
last-modified: Thu, 24 Aug 2023 20:13:09 GMT
etag: "10e38-603b0db525f40"
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (17)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP