Report - banditr.com

Report Overview

Visitedpublic

2025-07-20 23:30:50

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
banditr.com	unknown	2025-01-23	2025-02-26	2025-07-12	1.0 kB	11 kB	185.149.120.225
cdn.tailwindcss.com	422202	2017-07-20	2018-07-09	2025-07-19	814 B	815 kB	172.66.155.116

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-07-20	medium	banditr.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	cdn.tailwindcss.com/	ScriptElement	407 kB	2024-12-07	2025-08-01
URL cdn.tailwindcss.com/ IP / ASN 172.66.155.116 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded false Resource Info First Seen 2024-12-07 Last Seen 2025-08-01 Times Seen 3883 Size 407 kB (407279 bytes) MD5 2697bf25afb0982dfa17c73536f934c1 SHA1 7d7db122d0639cd1f1a53eb6018d6d713d312679 SHA256 fb798bb21731986940cf3a9950fbca386e03633e9a45497701e71f9b87d132ea Format Code Loading...

HTTP Transactions (4)

URL IP Response Size

GET banditr.com/

185.149.120.225

200 OK

4.9 kB

URL

banditr.com/

IP / ASN

185.149.120.225

#57724 Ddos-guard Ltd

Requested byN/A

Resource Info

File typeHTML document, ASCII text

First Seen2024-12-18

Last Seen2025-07-20

Times Seen14

Size4.9 kB (4897 bytes)

MD5cff41e0fe15d0a5d1b7527ba5f5711b3

SHA16cb3759a7c030d7cc10b5a7a771a22d62de5a5cc

SHA256610fdf532a2645a7f0e69fe97175b686e7514c8f50c8e8e8f77c7ee1efbff0d2

Certificate Info

IssuerLet's Encrypt

Subjectbanditr.com

Fingerprint7B:4A:C3:90:1C:B9:EA:8E:1B:59:86:78:D9:1A:66:49:62:7B:43:CE

ValiditySat, 24 May 2025 10:21:24 GMT - Fri, 22 Aug 2025 10:21:23 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: banditr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=89qfRyJ70mZ8VN71; Domain=.banditr.com; Path=/; Expires=Sun, 20-Jul-2025 23:50:27 GMT
__ddg10_=1753054227; Domain=.banditr.com; Path=/; Expires=Sun, 20-Jul-2025 23:50:27 GMT
__ddg9_=91.90.42.154; Domain=.banditr.com; Path=/; Expires=Sun, 20-Jul-2025 23:50:27 GMT
__ddg1_=AskItn0UEhPzfDchlUCk; Domain=.banditr.com; HttpOnly; Path=/; Expires=Mon, 20-Jul-2026 23:30:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Sun, 20 Jul 2025 23:30:27 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
etag: W/"1321-bLN1mnwDDXzBC1p6dxoi1i3lpcw"
content-encoding: gzip
X-Firefox-Spdy: h2

GET cdn.tailwindcss.com/

172.66.155.116

302 Found

407 kB

URL

cdn.tailwindcss.com/

IP / ASN

172.66.155.116

#13335 CLOUDFLARENET

Requested byhttps://banditr.com/

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5607286

Size407 kB (407279 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerGoogle Trust Services

Subjecttailwindcss.com

FingerprintD9:F5:6C:8B:23:AD:83:43:52:AD:FB:E6:17:93:EC:54:CE:F9:17:88

ValidityFri, 30 May 2025 03:30:41 GMT - Thu, 28 Aug 2025 04:30:37 GMT

HTTP Headers

GET / HTTP/1.1
Host: cdn.tailwindcss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://banditr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Sun, 20 Jul 2025 23:30:27 GMT
age: 10
cache-control: max-age=14400
location: /3.4.16
server: cloudflare
strict-transport-security: max-age=63072000
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::lmmkl-1753054217228-6c0a8dd5218a
cf-cache-status: HIT
vary: accept-encoding
cf-ray: 96263f1cae0db4ff-OSL
X-Firefox-Spdy: h2

GET cdn.tailwindcss.com/3.4.16

172.66.155.116

200 OK

407 kB

URL

cdn.tailwindcss.com/3.4.16

IP / ASN

172.66.155.116

#13335 CLOUDFLARENET

Requested byhttps://banditr.com/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (52853)

First Seen2024-12-07

Last Seen2025-08-01

Times Seen3883

Size407 kB (407279 bytes)

MD52697bf25afb0982dfa17c73536f934c1

SHA17d7db122d0639cd1f1a53eb6018d6d713d312679

SHA256fb798bb21731986940cf3a9950fbca386e03633e9a45497701e71f9b87d132ea

Certificate Info

IssuerGoogle Trust Services

Subjecttailwindcss.com

FingerprintD9:F5:6C:8B:23:AD:83:43:52:AD:FB:E6:17:93:EC:54:CE:F9:17:88

ValidityFri, 30 May 2025 03:30:41 GMT - Thu, 28 Aug 2025 04:30:37 GMT

HTTP Headers

GET /3.4.16 HTTP/1.1
Host: cdn.tailwindcss.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://banditr.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 20 Jul 2025 23:30:27 GMT
content-type: text/javascript
server: cloudflare
vary: accept-encoding
cache-control: max-age=31536000
content-encoding: br
strict-transport-security: max-age=63072000
x-vercel-cache: MISS
x-vercel-id: cle1::iad1::dtq8q-1752504889240-247de917db3c
last-modified: Mon, 14 Jul 2025 14:54:49 GMT
cf-cache-status: HIT
age: 157663
cf-ray: 96263f1cce25b4ff-OSL
X-Firefox-Spdy: h2

GET banditr.com/favicon.ico

185.149.120.225

200 OK

4.9 kB

URL

banditr.com/favicon.ico

IP / ASN

185.149.120.225

#57724 Ddos-guard Ltd

Requested byhttps://banditr.com/

Resource Info

File typeHTML document, ASCII text

First Seen2024-12-18

Last Seen2025-07-20

Times Seen14

Size4.9 kB (4897 bytes)

MD5cff41e0fe15d0a5d1b7527ba5f5711b3

SHA16cb3759a7c030d7cc10b5a7a771a22d62de5a5cc

SHA256610fdf532a2645a7f0e69fe97175b686e7514c8f50c8e8e8f77c7ee1efbff0d2

Certificate Info

IssuerLet's Encrypt

Subjectbanditr.com

Fingerprint7B:4A:C3:90:1C:B9:EA:8E:1B:59:86:78:D9:1A:66:49:62:7B:43:CE

ValiditySat, 24 May 2025 10:21:24 GMT - Fri, 22 Aug 2025 10:21:23 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: banditr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://banditr.com/
Cookie: __ddg8_=89qfRyJ70mZ8VN71; __ddg10_=1753054227; __ddg9_=91.90.42.154; __ddg1_=AskItn0UEhPzfDchlUCk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=4LYI1iuYyLjffk8T; Domain=.banditr.com; Path=/; Expires=Sun, 20-Jul-2025 23:50:28 GMT
__ddg10_=1753054228; Domain=.banditr.com; Path=/; Expires=Sun, 20-Jul-2025 23:50:28 GMT
__ddg9_=91.90.42.154; Domain=.banditr.com; Path=/; Expires=Sun, 20-Jul-2025 23:50:28 GMT
content-security-policy: upgrade-insecure-requests;
date: Sun, 20 Jul 2025 23:30:28 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
etag: W/"1321-bLN1mnwDDXzBC1p6dxoi1i3lpcw"
content-encoding: br
vary: Accept-Encoding
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2