Report - wstiffel.hier-im-netz.de

Report Overview

Visitedpublic

2024-12-27 06:06:39

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
wstiffel.hier-im-netz.de	unknown	unknown	2024-12-27	2024-12-27	1.9 kB	121 kB	80.150.6.138

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-12-27	medium	hier-im-netz.de	Sinkholed
2024-12-27	medium	hier-im-netz.de	Sinkholed
2024-12-27	medium	hier-im-netz.de	Sinkholed
2024-12-27	medium	hier-im-netz.de	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

URL IP Response Size

GET wstiffel.hier-im-netz.de/

80.150.6.138

200 OK

23 kB

URL

wstiffel.hier-im-netz.de/

IP / ASN

80.150.6.138

#3320 Deutsche Telekom AG

Requested byN/A

Resource Info

File typeHTML document, Non-ISO extended-ASCII text, with CRLF line terminators

First Seen2024-12-27

Last Seen2024-12-27

Times Seen1

Size23 kB (22923 bytes)

MD56fa86c76135f9036ff1216c32c427943

SHA1c9e7dd019adfe6b3776f4c740c73000c0b3f99e3

SHA25688a3022519a3ed56cddaf8aa44bcf71ec266e3aa32a80319577ca6f12a5b1efd

Certificate Info

IssuerDeutsche Telekom Security GmbH

Subject*.hier-im-netz.de

Fingerprint12:BC:0D:F9:DE:0A:41:A2:44:BD:76:D8:E6:C5:50:56:18:24:26:8B

ValidityTue, 17 Dec 2024 06:55:43 GMT - Sun, 21 Dec 2025 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: wstiffel.hier-im-netz.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-length: 22923
accept-ranges: bytes
server: CM4all Webserver
content-type: text/html
date: Fri, 27 Dec 2024 06:06:16 GMT
etag: "0g1-ujt2k1-io7t3f1-03ptub"
last-modified: Sat, 08 Feb 2020 11:44:18 GMT
X-Firefox-Spdy: h2

GET wstiffel.hier-im-netz.de/index-Dateien/image003.gif

80.150.6.138

404 Not Found

34 B

URL

wstiffel.hier-im-netz.de/index-Dateien/image003.gif

IP / ASN

80.150.6.138

#3320 Deutsche Telekom AG

Requested byhttps://wstiffel.hier-im-netz.de/

Resource Info

File typeASCII text, with no line terminators

First Seen2023-04-12

Last Seen2025-07-01

Times Seen36

Size34 B (34 bytes)

MD532541efd24b012503776f14c721f8c8e

SHA1777cf581d32d3d1fee3df95946607f6b7ed26b5a

SHA25602da121ef131feaf8d8ac6c081129481fdd1b0fe89ba3bf02b55ef224fbfa814

Certificate Info

IssuerDeutsche Telekom Security GmbH

Subject*.hier-im-netz.de

Fingerprint12:BC:0D:F9:DE:0A:41:A2:44:BD:76:D8:E6:C5:50:56:18:24:26:8B

ValidityTue, 17 Dec 2024 06:55:43 GMT - Sun, 21 Dec 2025 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index-Dateien/image003.gif HTTP/1.1
Host: wstiffel.hier-im-netz.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wstiffel.hier-im-netz.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-length: 34
server: CM4all Webserver
content-type: text/plain
date: Fri, 27 Dec 2024 06:06:17 GMT
X-Firefox-Spdy: h2

GET wstiffel.hier-im-netz.de/img/image007.jpg

80.150.6.138

200 OK

97 kB

URL

wstiffel.hier-im-netz.de/img/image007.jpg

IP / ASN

80.150.6.138

#3320 Deutsche Telekom AG

Requested byhttps://wstiffel.hier-im-netz.de/

Resource Info

File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 564x552, components 3

First Seen2024-12-27

Last Seen2024-12-27

Times Seen1

Size97 kB (96972 bytes)

MD59a55f819de74be2f9b6f366c8025c156

SHA1b47c520654e298116792a88ba88b85cb25372b8d

SHA2569abc0b4cf6821df8da2b673291a0e8efeb84fb4f3682171471957ab5cc05191c

Certificate Info

IssuerDeutsche Telekom Security GmbH

Subject*.hier-im-netz.de

Fingerprint12:BC:0D:F9:DE:0A:41:A2:44:BD:76:D8:E6:C5:50:56:18:24:26:8B

ValidityTue, 17 Dec 2024 06:55:43 GMT - Sun, 21 Dec 2025 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/image007.jpg HTTP/1.1
Host: wstiffel.hier-im-netz.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wstiffel.hier-im-netz.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-length: 96972
accept-ranges: bytes
server: CM4all Webserver
content-type: image/jpg
date: Fri, 27 Dec 2024 06:06:17 GMT
etag: "0g1-0kt2k1-lm7t3f1-o23aho"
last-modified: Sat, 08 Feb 2020 11:43:17 GMT
X-Firefox-Spdy: h2

GET wstiffel.hier-im-netz.de/favicon.ico

80.150.6.138

404 Not Found

34 B

URL

wstiffel.hier-im-netz.de/favicon.ico

IP / ASN

80.150.6.138

#3320 Deutsche Telekom AG

Requested byhttps://wstiffel.hier-im-netz.de/

Resource Info

File typeASCII text, with no line terminators

First Seen2023-04-12

Last Seen2025-07-01

Times Seen36

Size34 B (34 bytes)

MD532541efd24b012503776f14c721f8c8e

SHA1777cf581d32d3d1fee3df95946607f6b7ed26b5a

SHA25602da121ef131feaf8d8ac6c081129481fdd1b0fe89ba3bf02b55ef224fbfa814

Certificate Info

IssuerDeutsche Telekom Security GmbH

Subject*.hier-im-netz.de

Fingerprint12:BC:0D:F9:DE:0A:41:A2:44:BD:76:D8:E6:C5:50:56:18:24:26:8B

ValidityTue, 17 Dec 2024 06:55:43 GMT - Sun, 21 Dec 2025 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: wstiffel.hier-im-netz.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wstiffel.hier-im-netz.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-length: 34
server: CM4all Webserver
content-type: text/plain
date: Fri, 27 Dec 2024 06:06:17 GMT
X-Firefox-Spdy: h2