| |  158.69.54.116 | 200 OK | 436 kB |
URL User Request GET HTTP/1.1IP158.69.54.116:443
CertificateIssuerLet's Encrypt Subject*.goodnewsarticles.com FingerprintB9:7F:E1:DB:74:A5:C0:40:96:C5:53:A3:63:BC:B1:9E:A7:DE:CC:99 ValiditySun, 03 Nov 2024 15:29:35 GMT - Sat, 01 Feb 2025 15:29:34 GMT
File typeHTML document, ASCII text, with CRLF line terminators Size436 kB (435775 bytes) Hash44c84df28b3c2f594e9c775cc9464388 547b3248ff371308d9c883d710ef203c6f460d6c f2805f8845dee6f2a4d169e3976fd92d1d1e64b43030b599456831d85c5a7625
GET / HTTP/1.1
Host: goodnewsarticles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Dec 2024 08:41:25 GMT
Server: Apache
Last-Modified: Fri, 11 Oct 2024 12:09:51 GMT
Accept-Ranges: bytes
Content-Length: 435775
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
|
|
| goodnewsarticles.com/Impossible%20Cover.jpg | 158.69.54.116 | 200 OK | 6.3 kB |
URL GET HTTP/1.1goodnewsarticles.com/Impossible%20Cover.jpg IP158.69.54.116:443
Requested byhttps://goodnewsarticles.com/ CertificateIssuerLet's Encrypt Subject*.goodnewsarticles.com FingerprintB9:7F:E1:DB:74:A5:C0:40:96:C5:53:A3:63:BC:B1:9E:A7:DE:CC:99 ValiditySun, 03 Nov 2024 15:29:35 GMT - Sat, 01 Feb 2025 15:29:34 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 116x184, components 3 Hashd2023b8c93326c1145c2de414c3113c0 90f31136ae2ce72948a04213a5211d9f6cbfb6fa 181bec38e2e20ecea6cac882aeceac5c25f20addb1f8e3b269423d5ba4c11b2c
GET /Impossible%20Cover.jpg HTTP/1.1
Host: goodnewsarticles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goodnewsarticles.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Dec 2024 08:41:25 GMT
Server: Apache
Last-Modified: Tue, 01 Oct 2024 11:37:47 GMT
Accept-Ranges: bytes
Content-Length: 6256
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| goodnewsarticles.com/King_wbk.jpeg | 158.69.54.116 | 200 OK | 28 kB |
URL GET HTTP/1.1goodnewsarticles.com/King_wbk.jpeg IP158.69.54.116:443
Requested byhttps://goodnewsarticles.com/ CertificateIssuerLet's Encrypt Subject*.goodnewsarticles.com FingerprintB9:7F:E1:DB:74:A5:C0:40:96:C5:53:A3:63:BC:B1:9E:A7:DE:CC:99 ValiditySun, 03 Nov 2024 15:29:35 GMT - Sat, 01 Feb 2025 15:29:34 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 800x600, components 3 Hash4193539d747d3e70d3821ff88baf0063 7692dc2eec50f737a94a37373cbeaf23130b8de7 b49bfcbe39347adb7243e84cef9b198c742f07537a0037221e800c2e3d4f099c
GET /King_wbk.jpeg HTTP/1.1
Host: goodnewsarticles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goodnewsarticles.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 19 Dec 2024 08:41:25 GMT
Server: Apache
Last-Modified: Mon, 31 Mar 2014 14:59:31 GMT
Accept-Ranges: bytes
Content-Length: 27588
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| www.freehitcountercode.com/counter.php?b=ffffff&r=000000&f=000000&unique=0&start=0 |  104.21.96.39 | 301 Moved Permanently | 167 B |
URL GET HTTP/2www.freehitcountercode.com/counter.php?b=ffffff&r=000000&f=000000&unique=0&start=0 IP104.21.96.39:443
Requested byhttps://goodnewsarticles.com/ CertificateIssuerGoogle Trust Services Subjectfreehitcountercode.com FingerprintEC:FA:1E:AC:64:DA:F2:86:E8:07:88:45:D2:18:CB:3E:B3:8F:EA:83 ValidityFri, 25 Oct 2024 15:34:34 GMT - Thu, 23 Jan 2025 15:34:33 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET /counter.php?b=ffffff&r=000000&f=000000&unique=0&start=0 HTTP/1.1
Host: www.freehitcountercode.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 19 Dec 2024 08:41:25 GMT
content-type: text/html
content-length: 167
location: https://kubet.jp
cache-control: max-age=3600
expires: Thu, 19 Dec 2024 09:41:25 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0hsY5bwXgM6LhXYFZzV2y50RSjDCBwbKPsNsgWQY71ZWXu9%2FlM657MN5Z8F2Gc%2FCkDPHszo5DjVqBi%2BShtcj2%2BaWgzYQ6S3R%2BpYU5YiFuKvYjNcCaKZXB4cjFdGzDb0jM%2FWLMHsofk4LiUPRew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f4617f0bd505684-OSL
X-Firefox-Spdy: h2
|
|
| kubet.jp/ |  188.114.96.1 | 301 Moved Permanently | 167 B |
IP188.114.96.1:443
Requested byhttps://goodnewsarticles.com/ CertificateIssuerGoogle Trust Services Subjectkubet.jp Fingerprint20:AA:24:58:7B:49:92:1F:23:4C:60:F0:45:B6:64:CE:FB:98:7F:E0 ValiditySun, 01 Dec 2024 04:03:41 GMT - Sat, 01 Mar 2025 04:03:40 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET / HTTP/1.1
Host: kubet.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 19 Dec 2024 08:41:25 GMT
content-type: text/html
content-length: 167
location: https://kubetlogin.jp
cache-control: max-age=3600
expires: Thu, 19 Dec 2024 09:41:25 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WpAH9bo16y2vk1QRBZ6ED5Dk07gSDwgeXu9g8lX9Sm6gGYcDSOvQ0X88r5EqCiER4u24P%2B9dMrHAXYKBtAfGrT7W%2BOp1Y4%2B%2Bc537Hm6lkozb0HuVCpr5Xt2riw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f4617f10baa1c0a-OSL
X-Firefox-Spdy: h2
|
|
| kubetlogin.jp/ | 104.21.51.10 | 301 Moved Permanently | 167 B |
IP104.21.51.10:443
Requested byhttps://goodnewsarticles.com/ CertificateIssuerGoogle Trust Services Subjectkubetlogin.jp Fingerprint3C:0D:2C:8B:63:AC:2E:E1:43:34:9A:1D:D3:78:08:51:F8:DC:CA:99 ValidityThu, 05 Dec 2024 07:42:10 GMT - Wed, 05 Mar 2025 07:42:09 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET / HTTP/1.1
Host: kubetlogin.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 19 Dec 2024 08:41:26 GMT
content-type: text/html
content-length: 167
location: https://kubetbola.app
cache-control: max-age=3600
expires: Thu, 19 Dec 2024 09:41:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GXscjHmBR3%2F8BNT9soRMiA4B36is4Mc81SKwLqESHCCGsjfCs6FGaYr8zZqZIR5eEptMO5UYK1q2FN%2FW6CdYz9eM3Vh%2FdgcoxCUFAFHJmy09DdaREIDGwxoU12307nMS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f4617f18d6db4ee-OSL
X-Firefox-Spdy: h2
|
|
| kubetbola.app/ | 104.21.16.1 | 301 Moved Permanently | 167 B |
IP104.21.16.1:443
Requested byhttps://goodnewsarticles.com/ CertificateIssuerGoogle Trust Services Subjectkubetbola.app FingerprintD9:DE:38:92:E9:C9:8F:E3:72:CD:F6:BA:48:DA:F8:F7:3A:CB:EA:3E ValidityMon, 28 Oct 2024 10:37:37 GMT - Sun, 26 Jan 2025 10:37:36 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET / HTTP/1.1
Host: kubetbola.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 19 Dec 2024 08:41:26 GMT
content-type: text/html
content-length: 167
location: https://tyrepac.co.id
cache-control: max-age=3600
expires: Thu, 19 Dec 2024 09:41:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p3RO5AT4e7sKITfyq9C470FSN5j9phbVPPZByTpDoom1MIi4tn5vwpFTwamZv0Ai46r1zkqJeQJH3LMhj8PrmEDgoiYO2ARCScJo3HLMtElLqbp69xkWttet8P0705S%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f4617f20c25568b-OSL
X-Firefox-Spdy: h2
|
|
| goodnewsarticles.com/favicon.ico | 158.69.54.116 | 404 Not Found | 315 B |
URL GET HTTP/1.1goodnewsarticles.com/favicon.ico IP158.69.54.116:443
Requested byhttps://goodnewsarticles.com/ CertificateIssuerLet's Encrypt Subject*.goodnewsarticles.com FingerprintB9:7F:E1:DB:74:A5:C0:40:96:C5:53:A3:63:BC:B1:9E:A7:DE:CC:99 ValiditySun, 03 Nov 2024 15:29:35 GMT - Sat, 01 Feb 2025 15:29:34 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /favicon.ico HTTP/1.1
Host: goodnewsarticles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goodnewsarticles.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 19 Dec 2024 08:41:26 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| tyrepac.co.id/ | 0.0.0.0 | | 0 B |
IP0.0.0.0:0
Requested byhttps://goodnewsarticles.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: tyrepac.co.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|