Report - app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php

Report Overview

Visited public
2025-04-19 14:51:42
Tags
URL
app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Finishing URL
app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
IP / ASN
35.204.252.203
#396982 GOOGLE-CLOUD-PLATFORM
Title
Home | Login

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
app-67bb38e2c1ac180cd415f7ff.closte.com	unknown	2015-01-15	2025-04-16	2025-04-16	14 kB	867 kB	35.204.252.203

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-04-17	medium	app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php	Argenta Group

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	From	Size	First Seen	Last Seen
	app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl_files/imask.min.js?MTI0Mg==	ScriptElement	46 kB	2023-03-07	2025-05-09
Pretty URL app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl_files/imask.min.js?MTI0Mg== IP 35.204.252.203 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07 Last Seen2025-05-09 22:25 Times Seen3775 Hash 79c82646b886e08184f7b9fff25e64ff 804b4b0f8f3443ff05833e33fb5b76780ffafe25 8b76b3502583edddf22df0b9c6ee640053a2cdfeaa113ceff3ea9b61d1f6410d Loading...

	app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php	ScriptElement	2.8 kB	2025-03-08	2025-05-07
Pretty URL app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php IP 35.204.252.203 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-08 16:49 Last Seen2025-05-07 21:25 Times Seen129 Hash 8cc17c5ed69db62cae3400b1479196b2 1cb1eceb698ea07e5fca1b7187983a87a630acbd 5b03088200970e04a4c3703b8815359b2a78d825b2515f0bcf7c4e936587bf25 Loading...

	app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php	ScriptElement	121 B	2023-08-05	2025-05-07
Pretty URL app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php IP 35.204.252.203 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML true Observations First Seen2023-08-05 13:44 Last Seen2025-05-07 21:25 Times Seen234 Hash f8c208e6bc8b2c08b5d4cff8262ca738 279e790467b735b2fbf3e73788f5e01bea561484 36c9aef1539392c83dda7aaa7d4213751febb730fdf8ae6c9f9d74b79918164f Loading...

	app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl_files/infos.js?ODEzNQ==	ScriptElement	97 kB	2023-03-08	2025-05-07
Pretty URL app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl_files/infos.js?ODEzNQ== IP 35.204.252.203 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 16:00 Last Seen2025-05-07 21:25 Times Seen243 Hash 0974b6380da7c9527b2d25e32e130e31 86ee512368a72973547f50a31351035639ff4c79 31d6c83c556571fbd4cbac36e0319c9d9b9d275fbe6c8156ce39bb4e878193f4 Loading...

	app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php	ScriptElement	564 B	2023-08-05	2025-05-07
Pretty URL app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php IP 35.204.252.203 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML true Observations First Seen2023-08-05 13:44 Last Seen2025-05-07 21:25 Times Seen228 Hash d942723d869dd07160fefcc534e37edf de2bcabb79bed54689d89bea93f2815237128b0b bb3b5af9fc1f46da48dc74c542256931edf07db80f041ba508b357d2d5adcfa6 Loading...

	app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl_files/jquery.min.js?NTQ4Nw==	ScriptElement	88 kB	2023-03-07	2025-05-07
Pretty URL app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl_files/jquery.min.js?NTQ4Nw== IP 35.204.252.203 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-07 21:25 Times Seen3657 Hash 2f772fed444d5489079f275bd01e26cc a8927ac2830b2fdd4a729eb0eb7f80923539ceb9 2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a Loading...

HTTP Transactions (21)

URL IP Response Size

app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-Regular.1b0809d519837cb7aad3.ttf

35.204.252.203

404 Not Found

1.3 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-Regular.1b0809d519837cb7aad3.ttf
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

HTTP Headers

GET /webapp/static/media/OpenSans-Regular.1b0809d519837cb7aad3.ttf HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 19 Apr 2025 14:51:22 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-SemiBold.a16d8201b06a03c6c365.ttf

35.204.252.203

404 Not Found

1.3 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-SemiBold.a16d8201b06a03c6c365.ttf
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

HTTP Headers

GET /webapp/static/media/OpenSans-SemiBold.a16d8201b06a03c6c365.ttf HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 19 Apr 2025 14:51:22 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl_files/jquery.min.js?NTQ4Nw==

35.204.252.203

200 OK

88 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl_files/jquery.min.js?NTQ4Nw==
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators
Size
88 kB (88145 bytes)
Hash
2f772fed444d5489079f275bd01e26cc
a8927ac2830b2fdd4a729eb0eb7f80923539ceb9
2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a

HTTP Headers

GET /wp-content/plugins/data/gene/home/nkl_files/jquery.min.js?NTQ4Nw== HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Sat, 26 Apr 2025 14:51:21 GMT
content-type: application/x-javascript
last-modified: Fri, 11 Apr 2025 21:58:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30041
date: Sat, 19 Apr 2025 14:51:21 GMT
server: LiteSpeed
access-control-allow-origin: *

app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl_files/imask.min.js?MTI0Mg==

35.204.252.203

200 OK

46 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl_files/imask.min.js?MTI0Mg==
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (45552)
Size
46 kB (45591 bytes)
Hash
79c82646b886e08184f7b9fff25e64ff
804b4b0f8f3443ff05833e33fb5b76780ffafe25
8b76b3502583edddf22df0b9c6ee640053a2cdfeaa113ceff3ea9b61d1f6410d

HTTP Headers

GET /wp-content/plugins/data/gene/home/nkl_files/imask.min.js?MTI0Mg== HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Sat, 26 Apr 2025 14:51:21 GMT
content-type: application/x-javascript
last-modified: Fri, 11 Apr 2025 21:58:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12393
date: Sat, 19 Apr 2025 14:51:21 GMT
server: LiteSpeed
access-control-allow-origin: *

app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-SemiBold.5708a985947a036761c9.woff

35.204.252.203

404 Not Found

1.3 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-SemiBold.5708a985947a036761c9.woff
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

HTTP Headers

GET /webapp/static/media/OpenSans-SemiBold.5708a985947a036761c9.woff HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 19 Apr 2025 14:51:22 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-Regular.cf3dcd5c9c7b91d997ba.woff

35.204.252.203

404 Not Found

1.3 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-Regular.cf3dcd5c9c7b91d997ba.woff
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

HTTP Headers

GET /webapp/static/media/OpenSans-Regular.cf3dcd5c9c7b91d997ba.woff HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 19 Apr 2025 14:51:22 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-Bold.26ccebe5aefb89e98ed2.woff

35.204.252.203

404 Not Found

1.3 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-Bold.26ccebe5aefb89e98ed2.woff
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

HTTP Headers

GET /webapp/static/media/OpenSans-Bold.26ccebe5aefb89e98ed2.woff HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 19 Apr 2025 14:51:22 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-Bold.dbb97fd982ce1b96b6de.ttf

35.204.252.203

404 Not Found

1.3 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-Bold.dbb97fd982ce1b96b6de.ttf
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

HTTP Headers

GET /webapp/static/media/OpenSans-Bold.dbb97fd982ce1b96b6de.ttf HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 19 Apr 2025 14:51:22 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php

35.204.252.203

200 OK

69 kB

URL User Request GET
app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (27600)
Size
69 kB (68969 bytes)
Hash
6504679043a0aad20f3296e4c2f12ee8
56676b27b36766740b7fcebbfb44c7b455e9a16a
1461ceb2415e0f3956b9b3b2bee75faf8618125bc5c1b3561c8da1878084997d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Argenta Group

HTTP Headers

GET /wp-content/plugins/data/gene/home/nkl-log.php HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
set-cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: text/html; charset=UTF-8
content-length: 21202
content-encoding: br
vary: Accept-Encoding
date: Sat, 19 Apr 2025 14:51:20 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css

35.204.252.203

200 OK

273 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
273 kB (272842 bytes)
Hash
93cbbc5a3f13472c63be6608ea96dfaf
9a0e89771c314cbfdef690acefb11970af642b21
ce51594eeb6af5877624714146be1133728a45030c11103474c81ddf08b1b423

HTTP Headers

GET /wp-content/plugins/data/gene/home/Home/main.4393a533.css HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Sat, 26 Apr 2025 14:51:21 GMT
content-type: text/css
last-modified: Fri, 11 Apr 2025 21:58:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 34674
date: Sat, 19 Apr 2025 14:51:21 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/favicon.png

35.204.252.203

200 OK

1.1 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/favicon.png
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
1.1 kB (1063 bytes)
Hash
c5092da771783f27b2a7a581d1cb2223
3aa4ca1d9373da891f5b40e09f8048ae9ddbfa2a
f5fa914217a12109a826446fc4a010eae5ab90a39866365ece6b24eb39761f86

HTTP Headers

GET /wp-content/plugins/data/gene/home/Home/favicon.png HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Sat, 26 Apr 2025 14:51:22 GMT
content-type: image/png
last-modified: Fri, 11 Apr 2025 21:58:12 GMT
accept-ranges: bytes
content-length: 1063
date: Sat, 19 Apr 2025 14:51:22 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/RobotoSlab-Regular.6b5aeda0ff4ad271e1d0.woff2

35.204.252.203

404 Not Found

1.3 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/RobotoSlab-Regular.6b5aeda0ff4ad271e1d0.woff2
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

HTTP Headers

GET /webapp/static/media/RobotoSlab-Regular.6b5aeda0ff4ad271e1d0.woff2 HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 19 Apr 2025 14:51:21 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-Regular.99c9a48be684203fdf57.woff2

35.204.252.203

404 Not Found

1.3 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-Regular.99c9a48be684203fdf57.woff2
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

HTTP Headers

GET /webapp/static/media/OpenSans-Regular.99c9a48be684203fdf57.woff2 HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 19 Apr 2025 14:51:21 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-Bold.ff184fecf504bf1f0eec.woff2

35.204.252.203

404 Not Found

1.3 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-Bold.ff184fecf504bf1f0eec.woff2
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

HTTP Headers

GET /webapp/static/media/OpenSans-Bold.ff184fecf504bf1f0eec.woff2 HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 19 Apr 2025 14:51:21 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/B612Mono-Regular.4ca3415dd63e4046647b.woff2

35.204.252.203

404 Not Found

1.3 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/B612Mono-Regular.4ca3415dd63e4046647b.woff2
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

HTTP Headers

GET /webapp/static/media/B612Mono-Regular.4ca3415dd63e4046647b.woff2 HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 19 Apr 2025 14:51:21 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/B612Mono-Regular.4ca3415dd63e4046647b.woff2

35.204.252.203

404 Not Found

1.3 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/B612Mono-Regular.4ca3415dd63e4046647b.woff2
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

HTTP Headers

GET /webapp/static/media/B612Mono-Regular.4ca3415dd63e4046647b.woff2 HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 19 Apr 2025 14:51:22 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/RobotoSlab-Regular.d8da8ee9a0cfad98b8dc.woff

35.204.252.203

404 Not Found

1.3 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/RobotoSlab-Regular.d8da8ee9a0cfad98b8dc.woff
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

HTTP Headers

GET /webapp/static/media/RobotoSlab-Regular.d8da8ee9a0cfad98b8dc.woff HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 19 Apr 2025 14:51:22 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/ib_jan-feb-2024_496x894.jpg

35.204.252.203

200 OK

270 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/ib_jan-feb-2024_496x894.jpg
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
JPEG image data, progressive, precision 8, 496x894, components 3
Size
270 kB (270075 bytes)
Hash
ad879a82225ab83e9c144ad7dc58ff90
69a41664c0d60fae64d30e1e3963becb47daaabc
84b4c0f7b633e2319adcd18b747c41ac0a517071624e40099ccde9e0e3abe6f6

HTTP Headers

GET /wp-content/plugins/data/gene/home/Home/ib_jan-feb-2024_496x894.jpg HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Sat, 26 Apr 2025 14:51:21 GMT
content-type: image/jpeg
last-modified: Fri, 11 Apr 2025 21:58:12 GMT
accept-ranges: bytes
content-length: 270075
date: Sat, 19 Apr 2025 14:51:21 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-SemiBold.3267ae658068fe839ae7.woff2

35.204.252.203

404 Not Found

1.3 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/OpenSans-SemiBold.3267ae658068fe839ae7.woff2
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

HTTP Headers

GET /webapp/static/media/OpenSans-SemiBold.3267ae658068fe839ae7.woff2 HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 19 Apr 2025 14:51:21 GMT
server: LiteSpeed

app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl_files/infos.js?ODEzNQ==

35.204.252.203

200 OK

97 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl_files/infos.js?ODEzNQ==
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
ASCII text, with very long lines (18129)
Size
97 kB (96865 bytes)
Hash
0974b6380da7c9527b2d25e32e130e31
86ee512368a72973547f50a31351035639ff4c79
31d6c83c556571fbd4cbac36e0319c9d9b9d275fbe6c8156ce39bb4e878193f4

HTTP Headers

GET /wp-content/plugins/data/gene/home/nkl_files/infos.js?ODEzNQ== HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Sat, 26 Apr 2025 14:51:21 GMT
content-type: application/x-javascript
last-modified: Fri, 11 Apr 2025 21:58:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30373
date: Sat, 19 Apr 2025 14:51:21 GMT
server: LiteSpeed
access-control-allow-origin: *

app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/RobotoSlab-Regular.25b38cf89b4f06b9849d.ttf

35.204.252.203

404 Not Found

1.3 kB

URL GET
app-67bb38e2c1ac180cd415f7ff.closte.com/webapp/static/media/RobotoSlab-Regular.25b38cf89b4f06b9849d.ttf
IP
35.204.252.203:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/nkl-log.php
Certificate
IssuerSectigo Limited
Subject*.closte.com
Fingerprint8E:69:D4:9B:6C:23:5E:09:6B:A2:C4:0E:54:32:E4:60:01:92:61:53
ValidityMon, 27 May 2024 00:00:00 GMT - Fri, 27 Jun 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF, LF line terminators
Size
1.3 kB (1251 bytes)
Hash
8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896

HTTP Headers

GET /webapp/static/media/RobotoSlab-Regular.25b38cf89b4f06b9849d.ttf HTTP/1.1
Host: app-67bb38e2c1ac180cd415f7ff.closte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-67bb38e2c1ac180cd415f7ff.closte.com/wp-content/plugins/data/gene/home/Home/main.4393a533.css
Cookie: PHPSESSID=d9f00c505b7cccf12f9b7dc69e728632
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Sat, 19 Apr 2025 14:51:22 GMT
server: LiteSpeed

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (21)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size