| www.obdt.org/guest2/go.php?url=//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23/ |  46.30.213.42 | | 0 B |
URL www.obdt.org/guest2/go.php?url=//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23/ IP46.30.213.42:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /guest2/go.php?url=//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23/ HTTP/1.1
Host: www.obdt.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 28 Mar 2024 15:03:59 GMT
server: Apache
x-powered-by: PHP/8.0.30
content-length: 0
content-type: text/html; charset=UTF-8
location: //jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23/
x-varnish: 288539633
age: 0
via: 1.1 webcache2 (Varnish/trunk)
X-Firefox-Spdy: h2
|
|
| jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23/ |  193.3.19.52 | | 59 B |
URL jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23/ IP193.3.19.52:0 ASN#50340 OOO Network of data-centers Selectel
Hash2620b29224abe58ef4d80edabf45bc79 cadedf5ca14bcd70a2f04b3becdfcb18fb49c649 19df5b2da6e3aa0c70580ec774c2694b0e4424dcd989902e4f74b61dbb8baccd
GET /erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23/ HTTP/1.1
Host: jonesjerry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 28 Mar 2024 15:03:59 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 59
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 25 Mar 2024 21:10:21 GMT
ETag: "3b-6148299ee6a52"
Accept-Ranges: bytes
|
|
| jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23/ | 193.3.19.52 | | 59 B |
URL jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23/ IP193.3.19.52:0 ASN#50340 OOO Network of data-centers Selectel
Hash2620b29224abe58ef4d80edabf45bc79 cadedf5ca14bcd70a2f04b3becdfcb18fb49c649 19df5b2da6e3aa0c70580ec774c2694b0e4424dcd989902e4f74b61dbb8baccd
GET /erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23//jonesjerry.com/erifwf23/ HTTP/1.1
Host: jonesjerry.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 28 Mar 2024 15:03:59 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 59
Connection: keep-alive
Keep-Alive: timeout=60
Last-Modified: Mon, 25 Mar 2024 21:10:21 GMT
ETag: "3b-6148299ee6a52"
Accept-Ranges: bytes
|
|
| j13a09x.ru/ | 193.106.174.153 | | 5.4 kB |
IP193.106.174.153:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (374), with CRLF line terminators Hash256c5e5812e6bb848fedc7778fc2dfc2 a7b1d0bddfe75da85ba0274129e90bff22460620 2f068411a04242f8b67b4e9e96ea875bfd176332438307d344f6573056a3a630
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:00 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5404
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0/css/all.min.css |  104.17.24.14 | 200 OK | 10 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0/css/all.min.css IP104.17.24.14:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (56331) Hash25a0ac5d7d8e48930fe0b6772b7254a8 6f4095f66e56d39ef0adefbe85a1dcfc13bd133b a94a13d4e9df8dc2bc696a168930cd511f83498136bba3bb0b968d7556f0b807
GET /ajax/libs/font-awesome/5.10.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 28 Mar 2024 15:04:00 GMT
content-type: text/css; charset=utf-8
content-length: 9974
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e60-dcc5"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 498698
expires: Tue, 18 Mar 2025 15:04:00 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FBJNPBzlygzPxtj7tA2vR0gRWXOQMzolew36q%2F4tfzb%2FkzwUKT%2BVjMUbhbIkpFqGf91xPFBKl7HWAchwDiJoYLxi89g7Jw2S04YW3DZQoUf3o1Y0f58fqy%2BQ9Yg5VtEukuzsf%2BCk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 86b8829cc84b56c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap-icons@1.4.1/font/bootstrap-icons.css |  151.101.65.229 | | 8.4 kB |
URL cdn.jsdelivr.net/npm/bootstrap-icons@1.4.1/font/bootstrap-icons.css IP151.101.65.229:0
Hashbe381d17fc13c12e0615e405435c3a8d bfb64c5442c93b83bc8c5e2b70d1b0ae6f1801a1 412edd2008e5f7dfc4a86b864dcca396f7699308ec92abef7623ca151bf78d66
GET /npm/bootstrap-icons@1.4.1/font/bootstrap-icons.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.4.1
x-jsd-version-type: version
etag: W/"f8b2-v7ZMVELJO4O8jF4rcNGwrm8YAaE"
content-encoding: br
accept-ranges: bytes
date: Thu, 28 Mar 2024 15:04:00 GMT
age: 14115752
x-served-by: cache-fra-etou8220070-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 8417
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-3.4.1.min.js | 151.101.194.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.4.1.min.js IP151.101.194.137:443
CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hash220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 28 Mar 2024 15:04:00 GMT
age: 3556738
x-served-by: cache-lga21965-LGA, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 754844
x-timer: S1711638241.815229,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.0.0/dist/js/bootstrap.bundle.min.js | 151.101.65.229 | | 24 kB |
URL cdn.jsdelivr.net/npm/bootstrap@5.0.0/dist/js/bootstrap.bundle.min.js IP151.101.65.229:0
File typeJavaScript source, ASCII text, with very long lines (65299) Hash1fa88fa805d906cc3d966a4bf3a5ff43 d8961702df54aa970f1f30087c8d0b1f6967c784 325d19f9a1f62ad82f9f382a877f42bf447c8cbb293dd7cd2c03cf3bcf2f146a
GET /npm/bootstrap@5.0.0/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.0.0
x-jsd-version-type: version
etag: W/"13731-2JYXAt9UqpcPHzAIfI0LH2lnx4Q"
content-encoding: br
accept-ranges: bytes
date: Thu, 28 Mar 2024 15:04:00 GMT
age: 13436973
x-served-by: cache-fra-etou8220040-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23928
X-Firefox-Spdy: h2
|
|
| j13a09x.ru/lib/animate/animate.min.css | 193.106.174.153 | | 2.6 kB |
URL j13a09x.ru/lib/animate/animate.min.css IP193.106.174.153:0
File typeASCII text, with very long lines (16755), with CRLF line terminators Hash49a9d2997750b3ff77389e0909374af3 afb997fbbc34d1b69b7973423ce5f5373ef62bc0 d94d98ac4369a9db03e7b4040445b922d71a46ab0065f33db21f157e8436c6dd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /lib/animate/animate.min.css HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:00 GMT
Content-Type: text/css
Content-Length: 2628
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:42:00 GMT
ETag: "4244-6135474f2b9b3-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| j13a09x.ru/lib/easing/easing.min.js | 193.106.174.153 | 200 OK | 770 B |
URL GET HTTP/1.1j13a09x.ru/lib/easing/easing.min.js IP193.106.174.153:443
CertificateIssuerLet's Encrypt Subjectj13a09x.ru Fingerprint3A:55:78:AA:51:60:0C:AA:08:61:20:1E:33:CA:B5:92:8C:80:5F:1B ValiditySun, 10 Mar 2024 15:11:16 GMT - Sat, 08 Jun 2024 15:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (2301), with CRLF line terminators Hashd64116a742887080b3a0abd09e0bdad7 8cd4375fc3c60237ea3994209d17a57ccbe6b0c6 901eb80cc3f8c274fe6711bd023884258839610c9274082a4881f71e2206b4fb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /lib/easing/easing.min.js HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:00 GMT
Content-Type: application/javascript
Content-Length: 770
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:42:13 GMT
ETag: "8ff-6135475bbb7a8-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| j13a09x.ru/lib/waypoints/waypoints.min.js | 193.106.174.153 | | 2.8 kB |
URL j13a09x.ru/lib/waypoints/waypoints.min.js IP193.106.174.153:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (8863) Hash7d05f92297dede9ecfe3706efb95677a 56bdb149d9baf64474a4c24ae66445769a28254e 368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /lib/waypoints/waypoints.min.js HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:00 GMT
Content-Type: application/javascript
Content-Length: 2753
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:42:32 GMT
ETag: "2344-6135476daf418-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| j13a09x.ru/lib/counterup/counterup.min.js | 193.106.174.153 | 200 OK | 1.0 kB |
URL GET HTTP/1.1j13a09x.ru/lib/counterup/counterup.min.js IP193.106.174.153:443
CertificateIssuerLet's Encrypt Subjectj13a09x.ru Fingerprint3A:55:78:AA:51:60:0C:AA:08:61:20:1E:33:CA:B5:92:8C:80:5F:1B ValiditySun, 10 Mar 2024 15:11:16 GMT - Sat, 08 Jun 2024 15:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (2182) Hashd0ce5cfe7008eab4a73260954f06df68 4426c6745ebb31e834dcc1f9105e2e2e7402ffc1 cffc5847cc961e6d38ede0947f9e0e9650c92521660360468647d59944a75638
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /lib/counterup/counterup.min.js HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: application/javascript
Content-Length: 1011
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:42:10 GMT
ETag: "966-61354758fe4b9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| j13a09x.ru/css/style.css | 193.106.174.153 | | 1.8 kB |
IP193.106.174.153:0
File typeASCII text, with CRLF line terminators Hash2e4cab1e90b174121b3d571e80e85227 1bd9a10b7c60a54b29142019ac9cd0021dc2a47b df0ec56dfcd6a98ec34ada5b5a45be53720f4a0cfae80cbe5cf3d02b82a4ff90
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/style.css HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: text/css
Content-Length: 1756
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:34 GMT
ETag: "1d33-61354735fd36a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| j13a09x.ru/lib/wow/wow.min.js | 193.106.174.153 | | 2.8 kB |
URL j13a09x.ru/lib/wow/wow.min.js IP193.106.174.153:0
File typeJavaScript source, ASCII text, with very long lines (8099), with CRLF line terminators Hash5ccc5286f6d87963ed8474ff9ed6f146 6e6c6236ae0e36425cd195937d6d992cabb0907f 6d76008b112ea700919e9ec1ef978f6c4a8d7e94ccf4594920486625d6f36486
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /lib/wow/wow.min.js HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: application/javascript
Content-Length: 2830
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:42:38 GMT
ETag: "1fdf-61354773a98dd-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| j13a09x.ru/lib/owlcarousel/assets/owl.carousel.min.css | 193.106.174.153 | | 912 B |
URL j13a09x.ru/lib/owlcarousel/assets/owl.carousel.min.css IP193.106.174.153:0
File typeASCII text, with very long lines (2846) Hashde0dfbabe627afa1b718d848b6b58e97 73d8a692734089983b00005d99ef8e5e5b0dadeb 016ab0bd0de4839680e4a717a57db9b182a8c2c5fdeec4c24db7a8df761fca4d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /lib/owlcarousel/assets/owl.carousel.min.css HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: text/css
Content-Length: 912
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:44:24 GMT
ETag: "b78-613547d89bc53-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| j13a09x.ru/lib/tempusdominus/css/tempusdominus-bootstrap-4.min.css | 193.106.174.153 | | 1.6 kB |
URL j13a09x.ru/lib/tempusdominus/css/tempusdominus-bootstrap-4.min.css IP193.106.174.153:0
File typeASCII text, with very long lines (836) Hash9a7109f8d171e3b3c833ed5e0a0b96d9 c870dd166fd0ad08258b9c55301de10353c9db02 9b193e1384f6ecbca0e4419b6b5e7db171b5f7874a23fc5e10da21a6772a8c8e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /lib/tempusdominus/css/tempusdominus-bootstrap-4.min.css HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: text/css
Content-Length: 1594
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:44:44 GMT
ETag: "2362-613547eb34971-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| j13a09x.ru/lib/owlcarousel/owl.carousel.min.js | 193.106.174.153 | | 11 kB |
URL j13a09x.ru/lib/owlcarousel/owl.carousel.min.js IP193.106.174.153:0
File typeJavaScript source, ASCII text, with very long lines (32000) Hashb7b9c97cd68ec336d01a79d5be48c58d 1a99890b57c9859a622337ed0b2f989d6e30cc0e b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /lib/owlcarousel/owl.carousel.min.js HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: application/javascript
Content-Length: 10926
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:42:26 GMT
ETag: "a70e-61354767ac2b2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| j13a09x.ru/js/main.js | 193.106.174.153 | | 862 B |
IP193.106.174.153:0
File typeJavaScript source, ASCII text, with CRLF line terminators Hash1269a6e9287188bc47bb18c15adfc1fe 59ebfd8976d2e757c8e9a4656b2df35f17e21d7b b77b0b0cc858c9d3c975b08a7dcead5c60b67f2d4aab281f5a74a60333913b37
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/main.js HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: application/javascript
Content-Length: 862
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:40:34 GMT
ETag: "ab8-613546fcac206-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| j13a09x.ru/lib/tempusdominus/js/moment-timezone.min.js | 193.106.174.153 | | 9.3 kB |
URL j13a09x.ru/lib/tempusdominus/js/moment-timezone.min.js IP193.106.174.153:0
File typeJavaScript source, ASCII text, with very long lines (32832), with no line terminators Hash1a771c7f06717ed315ff7e6bad2d7058 0fc8a0049e382f0f0ad7dda5ba0b0178677e875e 26ffb9c1e8b8cc2a1f8bb33a0fe1db19c5db1413acb2136ff9a2094a87411a13
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /lib/tempusdominus/js/moment-timezone.min.js HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: application/javascript
Content-Length: 9322
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:45:06 GMT
ETag: "8040-61354800de943-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| j13a09x.ru/lib/tempusdominus/js/tempusdominus-bootstrap-4.min.js | 193.106.174.153 | 200 OK | 12 kB |
URL GET HTTP/1.1j13a09x.ru/lib/tempusdominus/js/tempusdominus-bootstrap-4.min.js IP193.106.174.153:443
CertificateIssuerLet's Encrypt Subjectj13a09x.ru Fingerprint3A:55:78:AA:51:60:0C:AA:08:61:20:1E:33:CA:B5:92:8C:80:5F:1B ValiditySun, 10 Mar 2024 15:11:16 GMT - Sat, 08 Jun 2024 15:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (32032) Hashac4d4d755b70ee1a00f7fc78cc85bc05 e6ce53ab1858b532c037334b512e010f0f093943 cf4a0a620eb188bab7c891aca7f2ec63d5f291bc1e4251e5e368c7bf65d3073e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /lib/tempusdominus/js/tempusdominus-bootstrap-4.min.js HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: application/javascript
Content-Length: 12131
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:45:11 GMT
ETag: "de2f-61354804fd48a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| j13a09x.ru/lib/tempusdominus/js/moment.min.js | 193.106.174.153 | | 68 kB |
URL j13a09x.ru/lib/tempusdominus/js/moment.min.js IP193.106.174.153:0
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hasha79a8710a3517e497846aca9179f8d81 a84840cafc097fbcfaab6c49d5fcfaa598e0ec6d 56b9ad34701d1b38cdb1436d5981b9e71c44f710d3cf8805eb7c7fa6b297287d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /lib/tempusdominus/js/moment.min.js HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:45:10 GMT
ETag: "4fc01-613548046dba0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| j13a09x.ru/css/bootstrap.min.css | 193.106.174.153 | 200 OK | 24 kB |
URL GET HTTP/1.1j13a09x.ru/css/bootstrap.min.css IP193.106.174.153:443
CertificateIssuerLet's Encrypt Subjectj13a09x.ru Fingerprint3A:55:78:AA:51:60:0C:AA:08:61:20:1E:33:CA:B5:92:8C:80:5F:1B ValiditySun, 10 Mar 2024 15:11:16 GMT - Sat, 08 Jun 2024 15:11:15 GMT
File typeASCII text, with very long lines (65326) Hash17331f6ecdbd0404a2256fcd67c24ef7 d113ee6b221f5a16d9b5847515fa2c2241f0db88 f503964c14f923eff6ad796d65b6e6b58ffda5805a6a132443876cb1597fafbe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/bootstrap.min.css HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: text/css
Content-Length: 23768
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:44 GMT
ETag: "28128-613547405a939-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0/webfonts/fa-solid-900.woff2 | 104.17.24.14 | | 75 kB |
URL cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0/webfonts/fa-solid-900.woff2 IP104.17.24.14:0
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 75392, version 330.15728 Hash60ce8cf4dd9fe177abdfeda21e20798e d378644ff0f7549fa6f217a08dfd2566a770638e e348d772480f8c0e5fa546b3c531a38700ae16b5dad5defb5e67ade7f6d332e8
GET /ajax/libs/font-awesome/5.10.0/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://j13a09x.ru
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:04:01 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 75392
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e60-12680"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 643877
expires: Tue, 18 Mar 2025 15:04:01 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O5ygEOlKFpuhMzRV37XKMxIOBNjQIIN79FHD2%2BXZaSXYQOSzm1UqDDuujpWlQ03biqEP4zUrPC%2FTxIU5RXhgnB6Pvs2h1FIbTUiDekDM8NITb%2Bm1i6hrNAiOtkwsjnnVk4%2F18P8s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 86b882a37945b4ed-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0/webfonts/fa-regular-400.woff2 | 104.17.24.14 | 200 OK | 14 kB |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0/webfonts/fa-regular-400.woff2 IP104.17.24.14:443
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 13584, version 330.15728 Hashd90e1b03a9168c0d775a52098423adfb 8b356dc021032d9380af47f7608a6b62a9b6f363 a2460c0e122c3d45c9edb07730c80674f317ddba364c37af3775b19bc79fb223
GET /ajax/libs/font-awesome/5.10.0/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://j13a09x.ru
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:04:01 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 13584
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e60-3510"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 500829
expires: Tue, 18 Mar 2025 15:04:01 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2AmhNnHYJ6nNOdS%2BeI71ntwz2zVhA8FLoqLfpL7e4disd%2FcqS31ks%2Ff9W9U%2FDqwPcpD%2BSHFM%2BTCqH%2FlbDpFC1XNThpd5TLt8yjbzn0RTYcbj05CvEwCcvVhGuczA38KLC3iYQvy9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 86b882a37946b4ed-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0/webfonts/fa-brands-400.woff2 | 104.17.24.14 | | 75 kB |
URL cdnjs.cloudflare.com/ajax/libs/font-awesome/5.10.0/webfonts/fa-brands-400.woff2 IP104.17.24.14:0
CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 74760, version 330.15728 Hash4f786efdf6328877ec2448bf265bcc8f 9465c5894ca2f93655fa5767b820b762aff6b518 fe85646af222500a866fd63beedb6ae00576c4afab4e0d28b15d9d6d92cb7da5
GET /ajax/libs/font-awesome/5.10.0/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://j13a09x.ru
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 28 Mar 2024 15:04:01 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 74760
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e60-12408"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4315405
expires: Tue, 18 Mar 2025 15:04:01 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S98uecvfTII%2BmUDZGaPwVhpRc6VcUX0gBKcFFIm5iFWA1v7FFrF%2BqjZnmhsIaFN9p214qc7yoSPjDxAYTp9wQnNfZax31JU%2BubXfHjmpKQVSABgjJgCnzwqf%2BPqbWJSVHdKCocCZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 86b882a38954b4ed-OSL
alt-svc: h3=":443"; ma=86400
|
|
| j13a09x.ru/img/team-2.jpg | 193.106.174.153 | 200 OK | 22 kB |
URL GET HTTP/1.1j13a09x.ru/img/team-2.jpg IP193.106.174.153:443
CertificateIssuerLet's Encrypt Subjectj13a09x.ru Fingerprint3A:55:78:AA:51:60:0C:AA:08:61:20:1E:33:CA:B5:92:8C:80:5F:1B ValiditySun, 10 Mar 2024 15:11:16 GMT - Sat, 08 Jun 2024 15:11:15 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3 Hash3a2626e357f1408ae3ce45a8be62c507 979deb64eb2fba2b44cb5d4252352e0f64b9040a 58678186ab8d21ca2f4c294de1ada247dfb07de5d99117a3e668126908b0beb5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/team-2.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: image/jpeg
Content-Length: 21460
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:18 GMT
ETag: "53d4-61354726f772d"
Accept-Ranges: bytes
|
|
| fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 | 142.250.74.131 | | 35 kB |
URL fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 IP142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 34852, version 1.0 Hash0e8eefb4549a2edf26c560cb9845952e 8d0b1718aacad934fd0043c87cbc54aa091396bf 7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://j13a09x.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 02:44:42 GMT
expires: Fri, 28 Mar 2025 02:44:42 GMT
cache-control: public, max-age=31536000
age: 44359
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap-icons@1.4.1/font/fonts/bootstrap-icons.woff2?231ce25e89ab5804f9a6c427b8d325c9 | 151.101.65.229 | 200 OK | 85 kB |
URL GET HTTP/3cdn.jsdelivr.net/npm/bootstrap-icons@1.4.1/font/fonts/bootstrap-icons.woff2?231ce25e89ab5804f9a6c427b8d325c9 IP151.101.65.229:443
CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 85120, version 1.0 Hash638b6203b5126378173b7b45137b6af7 ed167d335e2e0cb00a82f2d7367f05cb4d6557cf 83ff8bf521e8844e2ce560ff8d4e2beca0be44cb3c7a361729fa555c647cff60
GET /npm/bootstrap-icons@1.4.1/font/fonts/bootstrap-icons.woff2?231ce25e89ab5804f9a6c427b8d325c9 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://j13a09x.ru
DNT: 1
Connection: keep-alive
Referer: https://cdn.jsdelivr.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 85120
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: font/woff2
x-jsd-version: 1.4.1
x-jsd-version-type: version
etag: W/"14c80-7RZ9M14uDLAKgvLXNn8Fy01lV88"
accept-ranges: bytes
date: Thu, 28 Mar 2024 15:04:01 GMT
age: 2992002
x-served-by: cache-fra-eddf8230135-FRA, cache-hel1410022-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| j13a09x.ru/img/service-2.jpg | 193.106.174.153 | | 30 kB |
URL j13a09x.ru/img/service-2.jpg IP193.106.174.153:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x600, components 3 Hashe17bc89ffb9ca2850dabf2d980a47078 99331b859953698e53dbfdb64dfbadb17250b52f d56d45acda241da1f6c49a22e0514fcbad96c05077286cb8b42ddefbb5ab4ff8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/service-2.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: image/jpeg
Content-Length: 30537
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:13 GMT
ETag: "7749-613547228d8c2"
Accept-Ranges: bytes
|
|
| fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3t-4s51os.woff2 | 142.250.74.131 | | 22 kB |
URL fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3t-4s51os.woff2 IP142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 21724, version 1.0 Hashc3609c36a150ce088ea4dcab92b7c00b 0c18236a183e962533a4f61bff3ae2581313561a 65a47caa5183b035bf78d0f93adbe5cea500333410259c54abf2de356740df7e
GET /s/barlow/v12/7cHqv4kjgoGqM7E3t-4s51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://j13a09x.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21724
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 02:47:23 GMT
expires: Fri, 28 Mar 2025 02:47:23 GMT
cache-control: public, max-age=31536000
age: 44198
last-modified: Tue, 19 Apr 2022 19:29:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 | 142.250.74.131 | | 30 kB |
URL fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 IP142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 30480, version 1.0 Hash0e7e5f9d3a8ef121149827180b790b5c 0e9f9333078e5df9245630ff6f68ba1d9da3c403 e8e147e15907f25cad69b2bcf060213efad4ed04e0d36374715cbca17b2afc1c
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://j13a09x.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30480
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Mar 2024 02:49:58 GMT
expires: Fri, 28 Mar 2025 02:49:58 GMT
cache-control: public, max-age=31536000
age: 44043
last-modified: Wed, 27 Apr 2022 16:04:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| j13a09x.ru/img/team-1.jpg | 193.106.174.153 | | 36 kB |
URL j13a09x.ru/img/team-1.jpg IP193.106.174.153:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3 Hashb8cc88f35ed55725f51d6494498939df 06aaafc2a46433c5f8ae0a96640dedce7f662037 d2e1c97108773b30a5329aa469745ab11a7cb2fa5ec97ba65bcb3f52e02b84eb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/team-1.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: image/jpeg
Content-Length: 35525
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:16 GMT
ETag: "8ac5-613547257f774"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/service-3.jpg | 193.106.174.153 | 200 OK | 42 kB |
URL GET HTTP/1.1j13a09x.ru/img/service-3.jpg IP193.106.174.153:443
CertificateIssuerLet's Encrypt Subjectj13a09x.ru Fingerprint3A:55:78:AA:51:60:0C:AA:08:61:20:1E:33:CA:B5:92:8C:80:5F:1B ValiditySun, 10 Mar 2024 15:11:16 GMT - Sat, 08 Jun 2024 15:11:15 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x600, components 3 Hash313f8df85e745db5799e0e7f9d0fd399 87780cce73424db368df02ff3014715c2f6abbce 820c7262e33dd916c218a960c53b94c87c8d289243c4df3967b445b57fd60408
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/service-3.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: image/jpeg
Content-Length: 41462
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:14 GMT
ETag: "a1f6-613547234fe2f"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/about.jpg | 193.106.174.153 | | 42 kB |
IP193.106.174.153:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x600, components 3 Hashc8598e9195861228e0ecc984975a4fb6 86e2373c38ba6b2c71149eb45fe7b84c1783c907 72a8b8fdec0f0492367589db1e5c0d42c8aa7e316ed3001c124786f33e318dad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/about.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: image/jpeg
Content-Length: 42176
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:40:48 GMT
ETag: "a4c0-6135470aa3610"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/service-4.jpg | 193.106.174.153 | 200 OK | 30 kB |
URL GET HTTP/1.1j13a09x.ru/img/service-4.jpg IP193.106.174.153:443
CertificateIssuerLet's Encrypt Subjectj13a09x.ru Fingerprint3A:55:78:AA:51:60:0C:AA:08:61:20:1E:33:CA:B5:92:8C:80:5F:1B ValiditySun, 10 Mar 2024 15:11:16 GMT - Sat, 08 Jun 2024 15:11:15 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x600, components 3 Hash2d054dec67554173707bf9b65b52cd90 ed961a95a4f730f05cedcba9b33c65d9befb01c1 faa4cbfc14f2184a75466a0f3e3623076c1a9407030d51ea3e74a128b2df1755
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/service-4.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: image/jpeg
Content-Length: 30278
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:16 GMT
ETag: "7646-61354724e048a"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/team-3.jpg | 193.106.174.153 | | 30 kB |
URL j13a09x.ru/img/team-3.jpg IP193.106.174.153:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3 Hasha8932ea181722e7cb088898c29d2c4df 82e3e00cdcf6bd8773920894423eebceb3215527 e62338b5e235b1d965439133b781b8d2d0b70e507ab2e073da7d91ac8dc61f9e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/team-3.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:02 GMT
Content-Type: image/jpeg
Content-Length: 30119
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:18 GMT
ETag: "75a7-6135472792b97"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/team-4.jpg | 193.106.174.153 | | 22 kB |
URL j13a09x.ru/img/team-4.jpg IP193.106.174.153:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3 Hash1ff51d1a26186d490b8d3864bacec8b0 3c1f9dd5e9b8960e0b7974dc21e073b801e7b4bb eca1268b93825991526792ec04c04ea46ca44f90a99bc479a8ab58ef7f727962
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/team-4.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:02 GMT
Content-Type: image/jpeg
Content-Length: 21777
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:20 GMT
ETag: "5511-6135472939953"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/service-1.jpg | 193.106.174.153 | | 53 kB |
URL j13a09x.ru/img/service-1.jpg IP193.106.174.153:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x600, components 3 Hashf72e3599cd39dc7e2199f7434c6b11fa 2586c7cbba6248856c949f36625991c8755f0574 90cbbf610f8254af8e64bb58377d1d8ef9b1b27da675757658a86a4460b0de02
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/service-1.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: image/jpeg
Content-Length: 53412
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:08 GMT
ETag: "d0a4-6135471db0691"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/testimonial-2.jpg | 193.106.174.153 | | 3.5 kB |
URL j13a09x.ru/img/testimonial-2.jpg IP193.106.174.153:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3 Hashedf85c62027f4c849fac2345997fd364 3ca23ab37f9dd20c8d1856c5224900fbf705f11f 0a672d37b5ad1fe1b10c4a146c922c848ccd0f2b6a9b77c01d7f527857e5561d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/testimonial-2.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:02 GMT
Content-Type: image/jpeg
Content-Length: 3517
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:22 GMT
ETag: "dbd-6135472aa8c6b"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/testimonial-1.jpg | 193.106.174.153 | | 3.5 kB |
URL j13a09x.ru/img/testimonial-1.jpg IP193.106.174.153:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3 Hash64a5d16c40afde3d3c2109477c217bfd a29347d0f55d5db769c52492fea7b82c7b155fb3 86f57e837d37eacdfc13b95b1daae5358e6a03ae46e2cb561d6d1c3f990df46c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/testimonial-1.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:02 GMT
Content-Type: image/jpeg
Content-Length: 3451
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:20 GMT
ETag: "d7b-613547294f114"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/testimonial-3.jpg | 193.106.174.153 | | 3.1 kB |
URL j13a09x.ru/img/testimonial-3.jpg IP193.106.174.153:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3 Hash6d6cd5a03aa8ae932d5fce413740e597 28f87829c1ec6962fce9538a01553bdaf7dd78e1 5b51188abcfc9a65e1177c456997144d3fd08794bcf984038983e75ef4bbb3b7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/testimonial-3.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:02 GMT
Content-Type: image/jpeg
Content-Length: 3066
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:22 GMT
ETag: "bfa-6135472ac036c"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/testimonial-4.jpg | 193.106.174.153 | | 3.3 kB |
URL j13a09x.ru/img/testimonial-4.jpg IP193.106.174.153:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 100x100, components 3 Hashefa63a57f8da299aa8f4f143c2eb4404 611ac053d9c5a3c5ad29ba0a3d99cf1ec3ea9b03 db0030bee5df5b38cc44c30a4882f9f38c1baa1fa0aa72cd04605505e9ba8baa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/testimonial-4.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:02 GMT
Content-Type: image/jpeg
Content-Length: 3268
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:23 GMT
ETag: "cc4-6135472c18f23"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/carousel-1.png | 193.106.174.153 | 200 OK | 118 kB |
URL GET HTTP/1.1j13a09x.ru/img/carousel-1.png IP193.106.174.153:443
CertificateIssuerLet's Encrypt Subjectj13a09x.ru Fingerprint3A:55:78:AA:51:60:0C:AA:08:61:20:1E:33:CA:B5:92:8C:80:5F:1B ValiditySun, 10 Mar 2024 15:11:16 GMT - Sat, 08 Jun 2024 15:11:15 GMT
File typePNG image data, 600 x 420, 8-bit colormap, non-interlaced Size118 kB (118295 bytes) Hashe8a1200fe3fd2a304215054042104615 c5018b5e4992cc066116166a58eddce8712741e9 41b5fe7f4c8bc9d3537337223595b57b807a4f75a3e02b20d7da41c0ed33f617
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/carousel-1.png HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:02 GMT
Content-Type: image/png
Content-Length: 118295
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:40:50 GMT
ETag: "1ce17-6135470c22329"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/carousel-bg-1.jpg | 193.106.174.153 | | 191 kB |
URL j13a09x.ru/img/carousel-bg-1.jpg IP193.106.174.153:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3 Size191 kB (191139 bytes) Hashc29232f0da1562f1c3d453d9ba770632 c2cbf716d3e476ee8be7d275f0a6789a940e0ecf 990d89df04c061c1d61a07cc75f9e3db709d9a36ee6f981a950ef6b7e5f83b27
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/carousel-bg-1.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:01 GMT
Content-Type: image/jpeg
Content-Length: 191139
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:00 GMT
ETag: "2eaa3-61354715f1f4e"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/carousel-2.png | 193.106.174.153 | | 115 kB |
URL j13a09x.ru/img/carousel-2.png IP193.106.174.153:0
File typePNG image data, 541 x 442, 8-bit colormap, non-interlaced Size115 kB (115013 bytes) Hashba89cb584a8bb5bc318cb8f3fc8f0087 7767c232af03531bd6546f64ba727b67684c75a0 a9ef17a7dd4685cf8400e0115dabafacad873285a1b7f59688bf4a49aa5be8a8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/carousel-2.png HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:02 GMT
Content-Type: image/png
Content-Length: 115013
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:40:59 GMT
ETag: "1c145-6135471485b16"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/carousel-bg-2.jpg | 193.106.174.153 | | 222 kB |
URL j13a09x.ru/img/carousel-bg-2.jpg IP193.106.174.153:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3 Size222 kB (221941 bytes) Hash4c74e3ecce608ba1c722d2a1b6fb7141 7845526e8e3d7d6c4208484cc003d565cb0c9f9f c0448654f1a884a57b430a13df6a50886b91806a37b9ce7dd51399a1d1a7e24d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/carousel-bg-2.jpg HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:02 GMT
Content-Type: image/jpeg
Content-Length: 221941
Connection: keep-alive
Last-Modified: Sun, 10 Mar 2024 20:41:07 GMT
ETag: "362f5-6135471cec1e4"
Accept-Ranges: bytes
|
|
| j13a09x.ru/img/favicon.ico | 193.106.174.153 | | 231 B |
URL j13a09x.ru/img/favicon.ico IP193.106.174.153:0
File typeHTML document, ASCII text Hash35a2ec1e2d44eb4506286d7910e2216b e42459dbeb4ba68f0269000b256a317f601a99b8 62db3052e1a8f0b757895356734c7cabd6c0b74f031e4bed04529bb232267383
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/favicon.ico HTTP/1.1
Host: j13a09x.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://j13a09x.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.14.2
Date: Thu, 28 Mar 2024 15:04:02 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|