Report - a.esquelesquad.rip/?url=https://bskeklive.com/%231-bXNuC

Report Overview

Visitedpublic

2025-07-20 19:34:55

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
a.esquelesquad.rip	unknown	2018-10-19	2025-06-28	2025-06-28	533 B	5.9 kB	185.178.208.189
bskeklive.com	unknown	2025-04-30	2025-05-02	2025-07-16	933 B	6.1 kB	88.214.27.56

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-07-20	medium	esquelesquad.rip	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	bskeklive.com/#1-bXNuC	ScriptElement	1.7 kB	2025-07-19	2025-07-31
URL bskeklive.com/#1-bXNuC IP / ASN 88.214.27.56 #209272 Alviva Holding Limited Introduced by ScriptElement Embedded true Resource Info First Seen 2025-07-19 Last Seen 2025-07-31 Times Seen 1342 Size 1.7 kB (1694 bytes) MD5 fb15e8a1bf19995a1fdedaef8b10df81 SHA1 170fa3347654b60101923901ff046616eac74fba SHA256 6c85ce09fd6096eb603dbc8f03b2ab15e504bb19d6b27350a525839d87244144 Format Code Loading...

HTTP Transactions (3)

URL IP Response Size

GET a.esquelesquad.rip/?url=https://bskeklive.com/%231-bXNuC

185.178.208.189

302 Found

5.3 kB

URL

a.esquelesquad.rip/?url=https://bskeklive.com/%231-bXNuC

IP / ASN

185.178.208.189

#57724 Ddos-guard Ltd

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606313

Size5.3 kB (5252 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerLet's Encrypt

Subject5axdjr4pvwtgn35i.zv86xuzeae33uava.esquelesquad.rip

Fingerprint55:85:B4:F8:88:35:8A:5C:19:06:96:0D:87:25:4E:0C:D2:34:DD:9C

ValidityWed, 02 Jul 2025 10:12:01 GMT - Tue, 30 Sep 2025 10:12:00 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /?url=https://bskeklive.com/%231-bXNuC HTTP/1.1
Host: a.esquelesquad.rip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: ddos-guard
set-cookie: __ddg8_=2fnvJwi8MXzgLUKl; Domain=.esquelesquad.rip; Path=/; Expires=Sun, 20-Jul-2025 19:54:19 GMT
__ddg10_=1753040059; Domain=.esquelesquad.rip; Path=/; Expires=Sun, 20-Jul-2025 19:54:19 GMT
__ddg9_=91.90.42.154; Domain=.esquelesquad.rip; Path=/; Expires=Sun, 20-Jul-2025 19:54:19 GMT
__ddg1_=iEsBmi4vZT2Z5X0i6J0v; Domain=.esquelesquad.rip; HttpOnly; Path=/; Expires=Mon, 20-Jul-2026 19:34:19 GMT
content-security-policy: upgrade-insecure-requests;
date: Sun, 20 Jul 2025 19:34:20 GMT
location: https://bskeklive.com/#1-bXNuC
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
X-Firefox-Spdy: h2

GET bskeklive.com/#1-bXNuC

88.214.27.56

200 OK

5.3 kB

URL

bskeklive.com/#1-bXNuC

IP / ASN

88.214.27.56

#209272 Alviva Holding Limited

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text

First Seen2025-07-19

Last Seen2025-07-31

Times Seen1342

Size5.3 kB (5252 bytes)

MD55e36d0feec3641b9beea272f35f75f3d

SHA1ed41349073183ef4abb6d42a88fc173c949f1c3c

SHA2561e2f62d232e2c20f406c387963d4facd050d74ae8ee962f2be06d7bf0f63cdc4

Certificate Info

IssuerSectigo Limited

Subjectbskeklive.com

Fingerprint77:9D:C4:62:6E:21:EE:F6:9E:10:15:79:45:8B:95:28:A6:03:54:C8

ValidityWed, 30 Apr 2025 00:00:00 GMT - Thu, 30 Apr 2026 23:59:59 GMT

HTTP Headers

GET / HTTP/1.1
Host: bskeklive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 20 Jul 2025 19:34:20 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 19 Jul 2025 10:38:44 GMT
ETag: "1484-63a45d8c1d500-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1928
Keep-Alive: timeout=2, max=100
Content-Type: text/html

GET bskeklive.com/favicon.ico

88.214.27.56

404 Not Found

315 B

URL

bskeklive.com/favicon.ico

IP / ASN

88.214.27.56

#209272 Alviva Holding Limited

Requested byhttps://bskeklive.com/#1-bXNuC

Resource Info

File typeHTML document, ASCII text

First Seen2023-03-07

Last Seen2025-08-02

Times Seen95581

Size315 B (315 bytes)

MD5a34ac19f4afae63adc5d2f7bc970c07f

SHA1a82190fc530c265aa40a045c21770d967f4767b8

SHA256d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Certificate Info

IssuerSectigo Limited

Subjectbskeklive.com

Fingerprint77:9D:C4:62:6E:21:EE:F6:9E:10:15:79:45:8B:95:28:A6:03:54:C8

ValidityWed, 30 Apr 2025 00:00:00 GMT - Thu, 30 Apr 2026 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
urlquery	malware	Malware - Botnet panel

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: bskeklive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bskeklive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Sun, 20 Jul 2025 19:34:21 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1