Report - server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===QPwQFUSp1VhpEctRVMwsWZOxGWTBXOVFmUkZVWthXbiFmQuNVWwxWTL5URUBnVGJ1TkhFVVVTVlpmUrRVNGZkUQJEVTVUNFVmTwhFV1Y1ahpkWUNFRwx2UrFzVTpHbwUlTohlUxhXVNpEcHRFeFxWYNxGWTVVMVFmdwd1Uzg3VipkTYRVR5UUTyB3VUhXRGZlTohVVVFDMNZEcyQFcxU0VhxGSihkTH50Vxc1U6xGMVFFbUJ1cwZ0YPVzVUFmSFNVYWhkYyVzaT9EeyYlenNjUUR3RilXUHZFeBRkW1pEbWVFZYZlRKFDVvhGbVZkVUJFbw1WVXJFbNJnQUVFaoNjVPhGbSRnUyQGejFTV2g3RNZVOrJVVOZlV3p1aZpnSGJWVoNTYXp0VZdkUxYlVohlVsBHbTFnUG1kQwhVVQVTRWZFaV5kRS1mVTRnMWp3dH10VxsWVVplVSh3cXlFaCh0VVpESjdlStNVYSFTVFJkbSpmVUJVVsZ1YhZFbZFnSrFGVSVUZWZUbWNFdHZleFRlUXlTRip3aWJVMVZlWTpkRNVFZzEmRKFDVvhmRWJTRUZFbaV0YY5EbNJnQUVFaKV0VQRWRjhXTyM2aat2VxIESNJVMFJGWOZ1YxUFbU9kQIdVVWRkYWZ0RVNHZWZVWaVlYh5EWORHZxQ2dWBjVoB3ahRlVqZFWCZkYThmVXdHNrJ2SOhkYYxmRkdlS6NlNKFjUpJkbWp3bsNmc102V3pEbilGetVFWGd1TWRGMZJTNr1kaxIjW510RjFzYWlFdspXVrxGWORlVXJ2cxITWzBnRX1kVY9EWGdUTHRmVZJHcw0Uaw1GVZZkMhVzaIRlMwU0UqJkaVlkRX9kcxITW4tmaStGctZFdOd0YTRGbXVDcxUVY0d1T5tmVPZFZwkVMJFTTZhXbUVnStR2QOpXWzB3aitkVUZVR1ATTWB3VUNjVGJlToh1UxFTVOJlUWRlNxsWYOhGSNVEcGNWNZVkWxoVMWhmTuRVeBZkY3hmVZVDb6JFaCpmVZxGbkpkUVl1dZZ0VapFWPRlUXVWMNZlW0h3VipGetdVW4VFZ1MmVZdXWwYFa012U6lUbh9EaWllcWRVYpJESalXSyMWNrhEVyATRTpmQqVVSGdVY2B3VTNnSGdlWCpGV1xGMjpkTxQFeFxWZPZEVTVUMV1kQSZFV1wWRWBlQUJlNxsWZKJlVUBXOtFmS0dkY5dmRNFzYsd1do5WTaxmMkBHbF5kUSBDV5tWRW9EbzkVcxATTqBXbUdXVrF2TkhlU2UTVhZHcXNlc41WTZxmbWlXTX10SshlW

Report Overview

Submitted URL
server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===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
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-26 06:54:28
Access
public
Website Title
Wick Verification
Final URL
server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===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
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	473 B	146 kB	142.250.74.106
wickbot.com	74575	2019-06-16	2020-04-24	2024-03-08	3.3 kB	191 kB	104.26.7.136
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-26	1.1 kB	17 kB	216.58.207.227
server.discordiation-verify.ru	unknown	unknown	No data	No data	1.8 kB	29 kB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	discordiation-verify.ru	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===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	1.6 kB	2024-04-26	2024-04-26
Pretty URL server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===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 IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 08:54:34 Last Seen2024-04-26 08:54:34 Times Seen1 Hash 0d2d4b3a9a9c1244e30817bf3c8b4dd1 fdb5750a0a95bc41781bd59d3585f1f9da95cc49 d8a3463375fc67a0cd87606d1e79b2f80154b4cb22a6aeb541aae69fecadd8c9 Loading...

HTTP Transactions (11)

URL IP Response Size

fonts.googleapis.com/css2?family=Poppins:wght@300;400;500&display=swap

142.250.74.106

200 OK

146 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Poppins:wght@300;400;500&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===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
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
146 kB (145519 bytes)
Hash
2624be9e49ad015168ca5bba7f6da9fb
ccf29ca04e6b93f0e088283969c53579cb5fe8e7
9eb2e4814794e7bb64a4e4ab1fb04a3534f84c67642c9cc8951d88e9cb319820

HTTP Headers

GET /css2?family=Poppins:wght@300;400;500&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://server.discordiation-verify.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 06:53:57 GMT
date: Fri, 26 Apr 2024 06:53:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

wickbot.com/_app/immutable/assets/stores-31916336.css

104.26.7.136

200 OK

30 kB

URL GET HTTP/2
wickbot.com/_app/immutable/assets/stores-31916336.css
IP
104.26.7.136:443
ASN
#13335 CLOUDFLARENET

Requested by
https://server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===QPwQFUSp1VhpEctRVMwsWZOxGWTBXOVFmUkZVWthXbiFmQuNVWwxWTL5URUBnVGJ1TkhFVVVTVlpmUrRVNGZkUQJEVTVUNFVmTwhFV1Y1ahpkWUNFRwx2UrFzVTpHbwUlTohlUxhXVNpEcHRFeFxWYNxGWTVVMVFmdwd1Uzg3VipkTYRVR5UUTyB3VUhXRGZlTohVVVFDMNZEcyQFcxU0VhxGSihkTH50Vxc1U6xGMVFFbUJ1cwZ0YPVzVUFmSFNVYWhkYyVzaT9EeyYlenNjUUR3RilXUHZFeBRkW1pEbWVFZYZlRKFDVvhGbVZkVUJFbw1WVXJFbNJnQUVFaoNjVPhGbSRnUyQGejFTV2g3RNZVOrJVVOZlV3p1aZpnSGJWVoNTYXp0VZdkUxYlVohlVsBHbTFnUG1kQwhVVQVTRWZFaV5kRS1mVTRnMWp3dH10VxsWVVplVSh3cXlFaCh0VVpESjdlStNVYSFTVFJkbSpmVUJVVsZ1YhZFbZFnSrFGVSVUZWZUbWNFdHZleFRlUXlTRip3aWJVMVZlWTpkRNVFZzEmRKFDVvhmRWJTRUZFbaV0YY5EbNJnQUVFaKV0VQRWRjhXTyM2aat2VxIESNJVMFJGWOZ1YxUFbU9kQIdVVWRkYWZ0RVNHZWZVWaVlYh5EWORHZxQ2dWBjVoB3ahRlVqZFWCZkYThmVXdHNrJ2SOhkYYxmRkdlS6NlNKFjUpJkbWp3bsNmc102V3pEbilGetVFWGd1TWRGMZJTNr1kaxIjW510RjFzYWlFdspXVrxGWORlVXJ2cxITWzBnRX1kVY9EWGdUTHRmVZJHcw0Uaw1GVZZkMhVzaIRlMwU0UqJkaVlkRX9kcxITW4tmaStGctZFdOd0YTRGbXVDcxUVY0d1T5tmVPZFZwkVMJFTTZhXbUVnStR2QOpXWzB3aitkVUZVR1ATTWB3VUNjVGJlToh1UxFTVOJlUWRlNxsWYOhGSNVEcGNWNZVkWxoVMWhmTuRVeBZkY3hmVZVDb6JFaCpmVZxGbkpkUVl1dZZ0VapFWPRlUXVWMNZlW0h3VipGetdVW4VFZ1MmVZdXWwYFa012U6lUbh9EaWllcWRVYpJESalXSyMWNrhEVyATRTpmQqVVSGdVY2B3VTNnSGdlWCpGV1xGMjpkTxQFeFxWZPZEVTVUMV1kQSZFV1wWRWBlQUJlNxsWZKJlVUBXOtFmS0dkY5dmRNFzYsd1do5WTaxmMkBHbF5kUSBDV5tWRW9EbzkVcxATTqBXbUdXVrF2TkhlU2UTVhZHcXNlc41WTZxmbWlXTX10SshlW
Certificate
IssuerGoogle Trust Services LLC
Subjectwickbot.com
Fingerprint0C:C2:DA:12:14:DA:35:FF:A5:4C:37:64:C2:E2:D9:47:87:3A:8A:64
ValidityTue, 23 Apr 2024 03:05:07 GMT - Mon, 22 Jul 2024 03:05:06 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
30 kB (30270 bytes)
Hash
abcf391e6dc4ae2c530b15919202696e
b262e4b0010c03d94e7a9098a6e82d7dfd16dd58
750161db9ec3945dd89dad7044bf80f640803e274500cc182b8946aa885a7627

HTTP Headers

GET /_app/immutable/assets/stores-31916336.css HTTP/1.1
Host: wickbot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://server.discordiation-verify.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 06:53:57 GMT
content-type: text/css; charset=utf-8
cache-control: public, immutable, max-age=31536000
x-robots-tag: noindex
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mV17HAG6GkJdlyvqTxSfGG4N5T7tlGSnmagRMUi6SE%2BQnpH3ApjiyfcIR5AjfRdK8bXGsrPKBiRRk3R%2FQQ4KT1I40%2FKuVkiWTYf2%2Bq8qe9WdIElcf%2FnfSDXHNSRC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87a4a8a4bc54568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

wickbot.com/_app/immutable/assets/pages/__layout.svelte-c111369e.css

104.26.7.136

200 OK

8.8 kB

URL GET HTTP/2
wickbot.com/_app/immutable/assets/pages/__layout.svelte-c111369e.css
IP
104.26.7.136:443
ASN
#13335 CLOUDFLARENET

Requested by
https://server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===QPwQFUSp1VhpEctRVMwsWZOxGWTBXOVFmUkZVWthXbiFmQuNVWwxWTL5URUBnVGJ1TkhFVVVTVlpmUrRVNGZkUQJEVTVUNFVmTwhFV1Y1ahpkWUNFRwx2UrFzVTpHbwUlTohlUxhXVNpEcHRFeFxWYNxGWTVVMVFmdwd1Uzg3VipkTYRVR5UUTyB3VUhXRGZlTohVVVFDMNZEcyQFcxU0VhxGSihkTH50Vxc1U6xGMVFFbUJ1cwZ0YPVzVUFmSFNVYWhkYyVzaT9EeyYlenNjUUR3RilXUHZFeBRkW1pEbWVFZYZlRKFDVvhGbVZkVUJFbw1WVXJFbNJnQUVFaoNjVPhGbSRnUyQGejFTV2g3RNZVOrJVVOZlV3p1aZpnSGJWVoNTYXp0VZdkUxYlVohlVsBHbTFnUG1kQwhVVQVTRWZFaV5kRS1mVTRnMWp3dH10VxsWVVplVSh3cXlFaCh0VVpESjdlStNVYSFTVFJkbSpmVUJVVsZ1YhZFbZFnSrFGVSVUZWZUbWNFdHZleFRlUXlTRip3aWJVMVZlWTpkRNVFZzEmRKFDVvhmRWJTRUZFbaV0YY5EbNJnQUVFaKV0VQRWRjhXTyM2aat2VxIESNJVMFJGWOZ1YxUFbU9kQIdVVWRkYWZ0RVNHZWZVWaVlYh5EWORHZxQ2dWBjVoB3ahRlVqZFWCZkYThmVXdHNrJ2SOhkYYxmRkdlS6NlNKFjUpJkbWp3bsNmc102V3pEbilGetVFWGd1TWRGMZJTNr1kaxIjW510RjFzYWlFdspXVrxGWORlVXJ2cxITWzBnRX1kVY9EWGdUTHRmVZJHcw0Uaw1GVZZkMhVzaIRlMwU0UqJkaVlkRX9kcxITW4tmaStGctZFdOd0YTRGbXVDcxUVY0d1T5tmVPZFZwkVMJFTTZhXbUVnStR2QOpXWzB3aitkVUZVR1ATTWB3VUNjVGJlToh1UxFTVOJlUWRlNxsWYOhGSNVEcGNWNZVkWxoVMWhmTuRVeBZkY3hmVZVDb6JFaCpmVZxGbkpkUVl1dZZ0VapFWPRlUXVWMNZlW0h3VipGetdVW4VFZ1MmVZdXWwYFa012U6lUbh9EaWllcWRVYpJESalXSyMWNrhEVyATRTpmQqVVSGdVY2B3VTNnSGdlWCpGV1xGMjpkTxQFeFxWZPZEVTVUMV1kQSZFV1wWRWBlQUJlNxsWZKJlVUBXOtFmS0dkY5dmRNFzYsd1do5WTaxmMkBHbF5kUSBDV5tWRW9EbzkVcxATTqBXbUdXVrF2TkhlU2UTVhZHcXNlc41WTZxmbWlXTX10SshlW
Certificate
IssuerGoogle Trust Services LLC
Subjectwickbot.com
Fingerprint0C:C2:DA:12:14:DA:35:FF:A5:4C:37:64:C2:E2:D9:47:87:3A:8A:64
ValidityTue, 23 Apr 2024 03:05:07 GMT - Mon, 22 Jul 2024 03:05:06 GMT

File type
ASCII text, with very long lines (5077)
Size
8.8 kB (8818 bytes)
Hash
a0f864dc87f632bdf3c3b80876c825f8
01e62159ac86994db2c5bf25033e18238daf87cb
5c28d957009aa0f81bf2ef88788404d4e0cdbb9000cfdea9f8c70b291480d065

HTTP Headers

GET /_app/immutable/assets/pages/__layout.svelte-c111369e.css HTTP/1.1
Host: wickbot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://server.discordiation-verify.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 06:53:57 GMT
content-type: text/css; charset=utf-8
cache-control: public, immutable, max-age=31536000
x-robots-tag: noindex
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BvwDrXLzcVCci9XPYRsMVD7wZadEJVUXlPTOQKVABv9Fe61b9hmq3gfxLsG%2BjyM%2BymNR78rtORTCs%2BJK5xrlTjDIaE2kmF3Fn1iudsdqEZINeNVxGPuTvO7mmdk%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87a4a8a4bc53568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

wickbot.com/_app/immutable/assets/pages/__error.svelte-49cc1fa9.css

104.26.7.136

200 OK

927 B

URL GET HTTP/2
wickbot.com/_app/immutable/assets/pages/__error.svelte-49cc1fa9.css
IP
104.26.7.136:443
ASN
#13335 CLOUDFLARENET

Requested by
https://server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===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
Certificate
IssuerGoogle Trust Services LLC
Subjectwickbot.com
Fingerprint0C:C2:DA:12:14:DA:35:FF:A5:4C:37:64:C2:E2:D9:47:87:3A:8A:64
ValidityTue, 23 Apr 2024 03:05:07 GMT - Mon, 22 Jul 2024 03:05:06 GMT

File type
ASCII text, with very long lines (928), with no line terminators
Size
927 B (927 bytes)
Hash
c0e51dc8206550988e53a2e7516ab0ce
e34007b906452b0f2965e3ff16ed83ee1e0b20b9
48f8aa4ba1ac9eb1ca61678684f0ac56a5f185d151812899f7886e67b3c4fa0a

HTTP Headers

GET /_app/immutable/assets/pages/__error.svelte-49cc1fa9.css HTTP/1.1
Host: wickbot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://server.discordiation-verify.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 06:53:57 GMT
content-type: text/css; charset=utf-8
cache-control: public, immutable, max-age=31536000
x-robots-tag: noindex
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dXSdN1XlyCOh4%2FtEJf9fiHRZWeSz4QT0Z6z3WfQe%2FLgqptKyqtykyorurgG%2F40xYvHKa9uI2shK%2B9PFSb5pV77w5zlM3OSUR5cnDPIhSKrbBihrpuuv2MWQIDb6I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87a4a8a4bc57568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

wickbot.com/favicon.ico

0.0.0.0

0 B

URL GET
wickbot.com/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===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
Certificate
IssuerGoogle Trust Services LLC
Subjectwickbot.com
Fingerprint0C:C2:DA:12:14:DA:35:FF:A5:4C:37:64:C2:E2:D9:47:87:3A:8A:64
ValidityTue, 23 Apr 2024 03:05:07 GMT - Mon, 22 Jul 2024 03:05:06 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: wickbot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://server.discordiation-verify.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 06:53:58 GMT
content-type: image/vnd.microsoft.icon
cf-ray: 87a4a8a6d8851c12-OSL
cf-cache-status: HIT
age: 162732
etag: W/"favicon.ea2da21b72.ico"
vary: Accept-Encoding
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VAaC68EFaubmahhJZG60b5652uNj7fn%2FZiF%2FG0grnxuhr%2FUycqyEilvRYCxEfXpY1VRc%2FSmTm6aQjyNrfpk9Jq3u%2FkEnPDT4REtWZTdky42O3Jfdh5Ttlz8Thbf9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400

wickbot.com/_app/immutable/assets/Core.svelte_svelte_type_style_lang-7571463e.css

104.26.7.136

200 OK

969 B

URL GET HTTP/2
wickbot.com/_app/immutable/assets/Core.svelte_svelte_type_style_lang-7571463e.css
IP
104.26.7.136:443
ASN
#13335 CLOUDFLARENET

Requested by
https://server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===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
Certificate
IssuerGoogle Trust Services LLC
Subjectwickbot.com
Fingerprint0C:C2:DA:12:14:DA:35:FF:A5:4C:37:64:C2:E2:D9:47:87:3A:8A:64
ValidityTue, 23 Apr 2024 03:05:07 GMT - Mon, 22 Jul 2024 03:05:06 GMT

File type
ASCII text, with very long lines (970), with no line terminators
Size
969 B (969 bytes)
Hash
5d74c40f2d070822061ecf49a4a56ebe
a4792a238763edbfe928b2b78e1d024a4ad205e2
b5de87d809062564e1d7b2dc4da8440831885600f094fa3371e1061064dd1be9

HTTP Headers

GET /_app/immutable/assets/Core.svelte_svelte_type_style_lang-7571463e.css HTTP/1.1
Host: wickbot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://server.discordiation-verify.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 06:53:57 GMT
content-type: text/css; charset=utf-8
cache-control: public, immutable, max-age=31536000
x-robots-tag: noindex
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4kBW6ZvYxKAal8xTBLggMyhXheXCXjG6T1rfQBg5CP7HygflLKNEy9ve24fZ7cYLQZx3wrMIlGhpCUM8JdzO6dq853PtAyLV84PtyoZLRx6A0%2F3xf%2Fh5MqA1ZX4i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87a4a8a4bc50568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

wickbot.com/_app/immutable/assets/Footer.svelte_svelte_type_style_lang-5a318128.css

104.26.7.136

200 OK

473 B

URL GET HTTP/2
wickbot.com/_app/immutable/assets/Footer.svelte_svelte_type_style_lang-5a318128.css
IP
104.26.7.136:443
ASN
#13335 CLOUDFLARENET

Requested by
https://server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===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
Certificate
IssuerGoogle Trust Services LLC
Subjectwickbot.com
Fingerprint0C:C2:DA:12:14:DA:35:FF:A5:4C:37:64:C2:E2:D9:47:87:3A:8A:64
ValidityTue, 23 Apr 2024 03:05:07 GMT - Mon, 22 Jul 2024 03:05:06 GMT

File type
ASCII text, with very long lines (476), with no line terminators
Size
473 B (473 bytes)
Hash
bf19d3b2d44190d0af092d88f97cdff6
8c91596dfc3820e60ab6c3610b4a9907be1bac04
cfdc6edf0e803bfe4714305424f8568146e4d50a129ca40c2d45d8b4878c4d95

HTTP Headers

GET /_app/immutable/assets/Footer.svelte_svelte_type_style_lang-5a318128.css HTTP/1.1
Host: wickbot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://server.discordiation-verify.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 06:53:57 GMT
content-type: text/css; charset=utf-8
cache-control: public, immutable, max-age=31536000
x-robots-tag: noindex
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XqZDx5aZujbOR7AMt2xfwk6yTCnLI1naY3R0Im%2FNVQVeRT9Pzos%2FpsL3p5HEhL%2F9w4suwBnU7toSGIt48JXHJHx8dzhr8KAQgxIXw73vAmpe4v2gxtr8iKIMdGLb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87a4a8a4bc4d568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

wickbot.com/dash_hero.webp

104.26.7.136

200 OK

145 kB

URL GET HTTP/3
wickbot.com/dash_hero.webp
IP
104.26.7.136:443
ASN
#13335 CLOUDFLARENET

Requested by
https://server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===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
Certificate
IssuerGoogle Trust Services LLC
Subjectwickbot.com
Fingerprint0C:C2:DA:12:14:DA:35:FF:A5:4C:37:64:C2:E2:D9:47:87:3A:8A:64
ValidityTue, 23 Apr 2024 03:05:07 GMT - Mon, 22 Jul 2024 03:05:06 GMT

File type
RIFF (little-endian) data, Web/P image
Size
145 kB (145102 bytes)
Hash
3ea24ea0247922c35ec407b3d6a8197b
3d879bf6f72e32386b64422ca0759f02b15c5bb6
f78f9ca7e452e28f3829110309b90004e46101b4434067ce237ad44aac61c0f1

HTTP Headers

GET /dash_hero.webp HTTP/1.1
Host: wickbot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wickbot.com/_app/immutable/assets/pages/__layout.svelte-c111369e.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 06:53:58 GMT
content-type: image/webp
content-length: 145102
cf-ray: 87a4a8a5ffb41c12-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 162732
etag: "dash_hero.6854a092cb.webp"
vary: Accept-Encoding
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nfKQpAcAeXH6aSL9KT8HgBKGpRhiwrea1MubIAgh4HLYX5YVEj8MMsJOsGqjDrclATWKzegt3YYoYNLOh97tCTLAW4Rxp9MkqwptXXrOfgxZTrWrSqqDUZGz9udG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2

216.58.207.227

200 OK

7.9 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===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
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Size
7.9 kB (7884 bytes)
Hash
9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f

HTTP Headers

GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://server.discordiation-verify.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:53:15 GMT
expires: Sat, 26 Apr 2025 05:53:15 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
age: 3643
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2

216.58.207.227

200 OK

7.7 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===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
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Size
7.7 kB (7748 bytes)
Hash
a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://server.discordiation-verify.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 03:25:26 GMT
expires: Wed, 23 Apr 2025 03:25:26 GMT
cache-control: public, max-age=31536000
age: 271712
last-modified: Fri, 22 Mar 2024 00:01:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===QPwQFUSp1VhpEctRVMwsWZOxGWTBXOVFmUkZVWthXbiFmQuNVWwxWTL5URUBnVGJ1TkhFVVVTVlpmUrRVNGZkUQJEVTVUNFVmTwhFV1Y1ahpkWUNFRwx2UrFzVTpHbwUlTohlUxhXVNpEcHRFeFxWYNxGWTVVMVFmdwd1Uzg3VipkTYRVR5UUTyB3VUhXRGZlTohVVVFDMNZEcyQFcxU0VhxGSihkTH50Vxc1U6xGMVFFbUJ1cwZ0YPVzVUFmSFNVYWhkYyVzaT9EeyYlenNjUUR3RilXUHZFeBRkW1pEbWVFZYZlRKFDVvhGbVZkVUJFbw1WVXJFbNJnQUVFaoNjVPhGbSRnUyQGejFTV2g3RNZVOrJVVOZlV3p1aZpnSGJWVoNTYXp0VZdkUxYlVohlVsBHbTFnUG1kQwhVVQVTRWZFaV5kRS1mVTRnMWp3dH10VxsWVVplVSh3cXlFaCh0VVpESjdlStNVYSFTVFJkbSpmVUJVVsZ1YhZFbZFnSrFGVSVUZWZUbWNFdHZleFRlUXlTRip3aWJVMVZlWTpkRNVFZzEmRKFDVvhmRWJTRUZFbaV0YY5EbNJnQUVFaKV0VQRWRjhXTyM2aat2VxIESNJVMFJGWOZ1YxUFbU9kQIdVVWRkYWZ0RVNHZWZVWaVlYh5EWORHZxQ2dWBjVoB3ahRlVqZFWCZkYThmVXdHNrJ2SOhkYYxmRkdlS6NlNKFjUpJkbWp3bsNmc102V3pEbilGetVFWGd1TWRGMZJTNr1kaxIjW510RjFzYWlFdspXVrxGWORlVXJ2cxITWzBnRX1kVY9EWGdUTHRmVZJHcw0Uaw1GVZZkMhVzaIRlMwU0UqJkaVlkRX9kcxITW4tmaStGctZFdOd0YTRGbXVDcxUVY0d1T5tmVPZFZwkVMJFTTZhXbUVnStR2QOpXWzB3aitkVUZVR1ATTWB3VUNjVGJlToh1UxFTVOJlUWRlNxsWYOhGSNVEcGNWNZVkWxoVMWhmTuRVeBZkY3hmVZVDb6JFaCpmVZxGbkpkUVl1dZZ0VapFWPRlUXVWMNZlW0h3VipGetdVW4VFZ1MmVZdXWwYFa012U6lUbh9EaWllcWRVYpJESalXSyMWNrhEVyATRTpmQqVVSGdVY2B3VTNnSGdlWCpGV1xGMjpkTxQFeFxWZPZEVTVUMV1kQSZFV1wWRWBlQUJlNxsWZKJlVUBXOtFmS0dkY5dmRNFzYsd1do5WTaxmMkBHbF5kUSBDV5tWRW9EbzkVcxATTqBXbUdXVrF2TkhlU2UTVhZHcXNlc41WTZxmbWlXTX10SshlW

188.114.96.1

200 OK

28 kB

URL User Request GET HTTP/2
server.discordiation-verify.ru/verify?user_id=710614677272526848&hash===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
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectdiscordiation-verify.ru
Fingerprint3F:32:03:28:EE:A3:DE:6B:08:47:56:9C:59:6C:9D:B8:43:B5:F9:4C
ValidityWed, 24 Apr 2024 16:32:14 GMT - Tue, 23 Jul 2024 16:32:13 GMT

File type

Size
28 kB (28124 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /verify?user_id=710614677272526848&hash===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 HTTP/1.1
Host: server.discordiation-verify.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 06:53:57 GMT
content-type: text/html; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=0
last-modified: Sat, 30 Mar 2024 13:46:38 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ONhSB3qmUTN8B085%2FSFz3gdbCZWO%2Bl5PfknrRLesoi5hBW1jBglIOVY6sKRvCk020OLzS7IrrC8jouLP6Lgsh3L38LgLCsSo4kyPxCZ39kPl8%2BRBl0BO0AMo4rfqCBSgiPa7%2FHZkxpQnOOrqOLwr5HU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a4a8a1cddab4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (11)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2