| |  94.131.101.129 | 200 OK | 4.3 kB |
URL User Request GET HTTP/1.1IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeHTML document, ASCII text Hash86d0e325d35f69a1aab6943fa5db7990 63587e487a7d396f01915fea8dfcc79163ea3f85 f850cfc09f7b620e9dc6830f6db8b676751e5f75515d7d28b96525dc431a5788
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| 94.131.101.129/css/owl.carousel.min.css | 94.131.101.129 | 200 OK | 912 B |
URL GET HTTP/1.194.131.101.129/css/owl.carousel.min.css IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeASCII text, with very long lines (2846) Hashde0dfbabe627afa1b718d848b6b58e97 73d8a692734089983b00005d99ef8e5e5b0dadeb 016ab0bd0de4839680e4a717a57db9b182a8c2c5fdeec4c24db7a8df761fca4d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/owl.carousel.min.css HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:25 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Apr 2024 03:08:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e02b-b78"
Expires: Fri, 26 Apr 2024 20:45:25 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/css/magnific-popup.css | 94.131.101.129 | 200 OK | 1.8 kB |
URL GET HTTP/1.194.131.101.129/css/magnific-popup.css IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
Hash30b593b71d7672658f89bfea0ab360c9 d6963db6faa9294387bb3175813a61bc3f859437 45d1f5f6cf913746c45dd697b1a8f3b719c02d8b3f678dc7fc2766d54e1aaf6e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/magnific-popup.css HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:25 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Apr 2024 03:08:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e02a-1b27"
Expires: Fri, 26 Apr 2024 20:45:25 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/css/bootstrap.min.css | 94.131.101.129 | | 24 kB |
URL 94.131.101.129/css/bootstrap.min.css IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
Hash86dbf3ef8e10b0adf38f45d91d443582 f4a76f1d7694b674a5e4e1a494ecb805a58c5d99 c4dbd0b9aad63e5dc7507313ef3e8757e1ab2f47def0dda9e527e379e385dce8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/bootstrap.min.css HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:25 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Apr 2024 03:08:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e027-2ddb8"
Expires: Fri, 26 Apr 2024 20:45:25 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/css/font-awesome.min.css | 94.131.101.129 | | 7.1 kB |
URL 94.131.101.129/css/font-awesome.min.css IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/font-awesome.min.css HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:25 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Apr 2024 03:08:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e029-7918"
Expires: Fri, 26 Apr 2024 20:45:25 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/css/nice-select.css | 94.131.101.129 | | 1.0 kB |
URL 94.131.101.129/css/nice-select.css IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
Hasha0e598eb1a69289ac5697b576304b173 c4d96283d754b77e15706fee0de24594d63f9730 43ed293afc0af7c973998231c36240e2b2386cf94b3008e9bd0173c4b586bbd1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/nice-select.css HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:25 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Apr 2024 03:08:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e02b-e37"
Expires: Fri, 26 Apr 2024 20:45:25 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/css/themify-icons.css | 94.131.101.129 | 200 OK | 3.0 kB |
URL GET HTTP/1.194.131.101.129/css/themify-icons.css IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
Hash7c857c5917c19d4a6d06cff65285bcd6 02d294472b1b6269104bc86e143ea6bd6743bbb7 31c76743d124ccdb1880daa37d23df0c584066649903c3533ef51af3826f0ec2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/themify-icons.css HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:25 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Apr 2024 03:08:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e02f-4048"
Expires: Fri, 26 Apr 2024 20:45:25 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/css/flaticon.css | 94.131.101.129 | | 355 B |
URL 94.131.101.129/css/flaticon.css IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
Hash2a2e2be2da4dfc3689f08650fac18aa4 9dc70555d9cacfb1479402bbf7bd656a8612ffca 7ba168c6766025f1db5eea8e4649bb9e775918e0c6278e0069f72b4a4db2f7c9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/flaticon.css HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:25 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Apr 2024 03:08:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e028-36f"
Expires: Fri, 26 Apr 2024 20:45:25 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/css/gijgo.css | 94.131.101.129 | 200 OK | 9.3 kB |
URL GET HTTP/1.194.131.101.129/css/gijgo.css IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeASCII text, with CRLF line terminators Hash1bc58004e7272e48e2b6d26de0d9d5ac 0250ea6833ab7e71b9b5947b8d6fdfe72d02d900 38331649935a45670b223b0b5c34e15f50374eac0d708a5be455f00ee9b834b7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/gijgo.css HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:25 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Apr 2024 03:08:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e029-eb42"
Expires: Fri, 26 Apr 2024 20:45:25 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/css/animate.min.css | 94.131.101.129 | 200 OK | 5.3 kB |
URL GET HTTP/1.194.131.101.129/css/animate.min.css IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeASCII text, with very long lines (460) Hash845cdc0806ac3d4153f409d29a02e8a5 cc020237acaa1153ea3ab2b5fd760b86d27e9b70 c5ff768c1724b8ee7b8c9fba6407f7afe83ddf4f138e8214a73765028d03469a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/animate.min.css HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:25 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Apr 2024 03:08:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e027-10c5d"
Expires: Fri, 26 Apr 2024 20:45:25 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/css/slicknav.css | 94.131.101.129 | | 1.4 kB |
URL 94.131.101.129/css/slicknav.css IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
Hashdd0b64cb4d3b648490b1fb4f0a5002d9 cb58af890b23f281fd5156d409536eb4ef1fa42e 8df9547d89b23cdb053d1f38034a07b7223bf0c6eca76e9b038c10504fa83a82
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/slicknav.css HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:25 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Apr 2024 03:08:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e02c-161a"
Expires: Fri, 26 Apr 2024 20:45:25 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/vendor/modernizr-3.5.0.min.js | 94.131.101.129 | 200 OK | 3.6 kB |
URL GET HTTP/1.194.131.101.129/js/vendor/modernizr-3.5.0.min.js IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with very long lines (8320) Hashd7c97fdd45a562ace6cffddc9437a779 eb6a5e550ab67f95986363a87da875212ba2f139 525ba420f42f72699e059e5c20dd3acd591da3d54d70a319b0e360369482dde8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/vendor/modernizr-3.5.0.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:25 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e195-21bc"
Expires: Fri, 26 Apr 2024 20:45:25 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/popper.min.js | 94.131.101.129 | | 6.9 kB |
URL 94.131.101.129/js/popper.min.js IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with very long lines (19015) Hash70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/popper.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e18f-4af4"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/bootstrap.min.js | 94.131.101.129 | 200 OK | 13 kB |
URL GET HTTP/1.194.131.101.129/js/bootstrap.min.js IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with very long lines (48664) Hash14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/bootstrap.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e180-bf30"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/owl.carousel.min.js | 94.131.101.129 | 200 OK | 11 kB |
URL GET HTTP/1.194.131.101.129/js/owl.carousel.min.js IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with very long lines (32000) Hashb7b9c97cd68ec336d01a79d5be48c58d 1a99890b57c9859a622337ed0b2f989d6e30cc0e b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/owl.carousel.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e18e-a70e"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/css/style.css | 94.131.101.129 | | 21 kB |
URL 94.131.101.129/css/style.css IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
Hash994bb411c1cef1e9942734a7e80270b5 bb4607007dbaf31ce81ec417eddbd8d9eda67be0 c8ddbc40f5a443cf9851d01763f1e1dd1271433139121395450770ea0a75ea18
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/style.css HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:25 GMT
Content-Type: text/css
Last-Modified: Fri, 19 Apr 2024 03:08:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e02d-309ca"
Expires: Fri, 26 Apr 2024 20:45:25 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/isotope.pkgd.min.js | 94.131.101.129 | | 10 kB |
URL 94.131.101.129/js/isotope.pkgd.min.js IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with very long lines (32004) Hash035a94b2b3f2103ab665f2885f953836 3cb37f0004158f3e8f9194ebdb1d361dce6f0ed0 2ac1dec2ea676653dc33c1dc718636434357b352fd07d6bf9750c69250191abc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/isotope.pkgd.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e185-8aaf"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/vendor/jquery-1.12.4.min.js | 94.131.101.129 | | 34 kB |
URL 94.131.101.129/js/vendor/jquery-1.12.4.min.js IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with very long lines (32077) Hash4f252523d4af0b478c810c2547a63e19 5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb 668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/vendor/jquery-1.12.4.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e195-17b8b"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/ajax-form.js | 94.131.101.129 | | 504 B |
URL 94.131.101.129/js/ajax-form.js IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with CRLF line terminators Hash1be30d77e5267cbcf399d6152253e315 8875c6e6232be6cb571e8a90e312107a44c0d4b8 e9d3e2a6c29998bcec8abc8ec7618f03d61a52ec8d4c7d5281e6ab2ec54ecd85
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/ajax-form.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e180-4e2"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/waypoints.min.js | 94.131.101.129 | 200 OK | 2.6 kB |
URL GET HTTP/1.194.131.101.129/js/waypoints.min.js IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with very long lines (7808) Hashdfe0eedf8da578f4a4c43b05448c51d9 812d7071b4e44b1aa5d5ea6c7ce0b79eb9d46520 a0fded691aed767f851011cd3185b928619298a21a0fbdad4808a9e88b490833
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/waypoints.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e191-1f6c"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/jquery.counterup.min.js | 94.131.101.129 | | 577 B |
URL 94.131.101.129/js/jquery.counterup.min.js IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with very long lines (917) Hashef36cca760bf1cd76cfcd0e4dc10cef1 ef38469f60d58850fe55c4de2ec7e289a2415d71 26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.counterup.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e188-42b"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/imagesloaded.pkgd.min.js | 94.131.101.129 | | 1.8 kB |
URL 94.131.101.129/js/imagesloaded.pkgd.min.js IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with very long lines (5477) Hashe2c1a80b99251b7b94726b41312fb160 6d3e11174e22668e69df236e5c4542168f7cbfec 96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/imagesloaded.pkgd.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:11 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e183-15da"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/scrollIt.js | 94.131.101.129 | | 1.2 kB |
URL 94.131.101.129/js/scrollIt.js IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, Unicode text, UTF-8 text Hash1fd678cda63a6e3a2f990b114797fd8e 11de1f96fd192216335836f0e0d6cb9b2f5d7389 5f4c8582ca830c29d3ae38da8daf98f13d4a6f2789126b04ce5c9c2e682eb261
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/scrollIt.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e190-e71"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/jquery.scrollUp.min.js | 94.131.101.129 | 200 OK | 932 B |
URL GET HTTP/1.194.131.101.129/js/jquery.scrollUp.min.js IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1872) Hash63bbf26c1fd78c531513dd6a4a2e4f51 f349a84e4c1bf94aa3278bc578043b52a9ce33a2 b7662ba99a132eafd0b7ccc8c3404c8ae442d97e7e6b73bb3ce0d4f11c28c98c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.scrollUp.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e18a-7f3"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/wow.min.js | 94.131.101.129 | 200 OK | 2.7 kB |
URL GET HTTP/1.194.131.101.129/js/wow.min.js IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with very long lines (8385) Hash36050285bfeeb7395752f0f9bbc08273 5924f7bbbf1dfa3f0926851d01f782f23a59e805 0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/wow.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e191-20df"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/nice-select.min.js | 94.131.101.129 | | 1.0 kB |
URL 94.131.101.129/js/nice-select.min.js IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2822) Hashd13462ec489f9f0c309a811f85feb3d6 d9545f8b139eae5b387de1a60a84abe949c7e88f 66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/nice-select.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e18d-b7e"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/jquery.slicknav.min.js | 94.131.101.129 | 200 OK | 2.7 kB |
URL GET HTTP/1.194.131.101.129/js/jquery.slicknav.min.js IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with very long lines (8320) Hashabb6ece52a5d3b908359c3dfa21d08a2 cdd58421d34de7c63034acb2726a678c55a546f5 190402f488a1616b47304ae066078580059ca6a5958b7f217d2156d0a73931a9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.slicknav.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e18c-20df"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/plugins.js | 94.131.101.129 | 200 OK | 380 B |
URL GET HTTP/1.194.131.101.129/js/plugins.js IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text Hash074c4c08f0730c4d4ca76f724355807c 09d6a93af6b87a67c5773163d35f40b993fca3d3 c6129bd3aeb079f5c310d2a9618478ba0d621992c1a5e5ef320917937dc2dbb7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/plugins.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e18e-2f8"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/jquery.magnific-popup.min.js | 94.131.101.129 | 200 OK | 7.4 kB |
URL GET HTTP/1.194.131.101.129/js/jquery.magnific-popup.min.js IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with very long lines (20087) Hashba6cf724c8bb1cf5b084e79ff230626e f455c5f153f872e52265f87a644ff89fe14a6fb6 3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.magnific-popup.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e18a-4ef8"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/gijgo.min.js | 94.131.101.129 | 200 OK | 39 kB |
URL GET HTTP/1.194.131.101.129/js/gijgo.min.js IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators Hash261c5b91fdec568ff41e3e6dbb95a397 537acdc868f5b364f589e630d46f6030349fb406 619854bbaf5b0a7f6e4ea4322b0c10dc6c91ca94bb79ac69ff09954b6f36b032
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/gijgo.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e186-2b54f"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/contact.js | 94.131.101.129 | | 752 B |
URL 94.131.101.129/js/contact.js IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7c0620c689e8bfea79d4fd06eac0b9d1 91ba00c0f91a387aa03f6fd178a9a2b4584b6b81 30f4afce6fd298cc840c98c170e74c218f9fc1985bec37d0c00b5056f3b3ff2f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/contact.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e181-c24"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/jquery.ajaxchimp.min.js | 94.131.101.129 | | 1.2 kB |
URL 94.131.101.129/js/jquery.ajaxchimp.min.js IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text Hash8eace32bdc314e746f5b01015115b3a8 90395aa2ff153cfb6d5c256a3f70bc4d545a3190 3c7c17459ec57867f6812625f1b95e2f878363ca728b92a5968d2fc8e60d9712
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.ajaxchimp.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e187-12d4"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15920, version 1.0 Hash3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://94.131.101.129
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 13:20:56 GMT
expires: Fri, 25 Apr 2025 13:20:56 GMT
cache-control: public, max-age=31536000
age: 26670
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 94.131.101.129/js/jquery.form.js | 94.131.101.129 | | 12 kB |
URL 94.131.101.129/js/jquery.form.js IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text Hash9ff23d156a15ac9eba83b6f571abd83f 63b1ceaea04590b9611d3ef6dbb588b365be4559 14b30a934e36cdfc5301709bf515adc31e060bd7275eb056964cf7d2ed6e7550
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.form.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e189-a087"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/jquery.validate.min.js | 94.131.101.129 | 200 OK | 6.4 kB |
URL GET HTTP/1.194.131.101.129/js/jquery.validate.min.js IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (20965) Hash15d67ada60f2b7a862e0fdcd1baddf72 9389012cc388a5177f0bce53fd474d16768344d0 7705fee13417229d718f14947e9860d5bb2b25bd15c9f5cd834f2545c7bad0a6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.validate.min.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e18c-524c"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/js/mail-script.js | 94.131.101.129 | | 494 B |
URL 94.131.101.129/js/mail-script.js IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text Hashdf98b7098690619c0c9e6b42b5a77b48 d3fe896ed8d259df077220f71fba197ff033d27e 01f639fd4c4119503e72e2bf2eb9c8a5984f7c83c7683c82dd0350ee9f63b3fd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/mail-script.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e18c-4ce"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://94.131.101.129
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 16:27:38 GMT
expires: Wed, 23 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 188268
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 | 216.58.207.227 | | 17 kB |
URL fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 IP216.58.207.227:0
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 17368, version 1.0 Hashabe083d96b58eb02ada8b7c30d7b09f2 61447d66d13a8c8f4335696777a85c438c46f749 db0424fb67fb52e7e538490240cc7fb9c05aa076333a4968f3dee30b825dabf9
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://94.131.101.129
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 20:50:59 GMT
expires: Thu, 24 Apr 2025 20:50:59 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 86067
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 94.131.101.129/js/main.js | 94.131.101.129 | 200 OK | 1.8 kB |
URL GET HTTP/1.194.131.101.129/js/main.js IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeJavaScript source, ASCII text, with CRLF line terminators Hashec4b13ae59484098cb15d19947daaa6a 6f33344b117d0c3267d8bf640e52f550af45e227 79e3345f5a841a801f72b3c2f40277cd01bc7340401ec36cba2e0a50ba3de4ab
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/main.js HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/javascript
Last-Modified: Fri, 19 Apr 2024 03:14:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e18d-1992"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/fonts/Flaticon.woff2 | 94.131.101.129 | 200 OK | 688 B |
URL GET HTTP/1.194.131.101.129/fonts/Flaticon.woff2 IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeWeb Open Font Format (Version 2), TrueType, length 688, version 1.0 Hashbd6d67601b4ccd990e3be1b0d38c5640 9615f4bc6efcdccbc2be321995f5cb53b100b23c 0215059e2c962e9094a50fec8c8f917f61dd0dddfc920bdbde58181a299c08e3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fonts/Flaticon.woff2 HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/css/flaticon.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/octet-stream
Content-Length: 688
Last-Modified: Fri, 19 Apr 2024 03:08:47 GMT
Connection: keep-alive
ETag: "6621e03f-2b0"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/logo.png | 94.131.101.129 | | 5.9 kB |
URL 94.131.101.129/img/logo.png IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 206 x 59, 8-bit/color RGBA, non-interlaced Hashd869db36de02046f1444286e641b571f ee220ba5be41fde697957e94d2ba903a367811da 44581a0be01b23738550dc1115b916249711f3b5fa13d626853287ce0da32fcb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/logo.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 5896
Last-Modified: Fri, 19 Apr 2024 03:11:09 GMT
Connection: keep-alive
ETag: "6621e0cd-1708"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/banner/illustration.png | 94.131.101.129 | | 64 kB |
URL 94.131.101.129/img/banner/illustration.png IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 693 x 511, 8-bit/color RGBA, non-interlaced Hasha898fa8ac70f092d5c126a7c67e9eecb ecdd5d8c3be53eb93d967067de244325dd691e8a 3005d36de79ad3551ecd320137462cf7a90d6f1d0ef7b5f0ddad4559c0c85090
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/banner/illustration.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 64234
Last-Modified: Fri, 19 Apr 2024 03:11:20 GMT
Connection: keep-alive
ETag: "6621e0d8-faea"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/fonts/themify.woff?-fvbane | 94.131.101.129 | 200 OK | 56 kB |
URL GET HTTP/1.194.131.101.129/fonts/themify.woff?-fvbane IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeWeb Open Font Format, CFF, length 56108, version 1.0 Hasha1ecc3b826d01251edddf29c3e4e1e97 9394f35bd2addd24666b79bfc36d4f9d247cb01d 0db5c5a1475eb7a3e5028983ea1e642d1b2c00faff6a250a37502b0f3832a4a7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fonts/themify.woff?-fvbane HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/css/themify-icons.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/font-woff
Content-Length: 56108
Last-Modified: Fri, 19 Apr 2024 03:08:58 GMT
Connection: keep-alive
ETag: "6621e04a-db2c"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/svg_icon/1.svg | 94.131.101.129 | 200 OK | 665 B |
URL GET HTTP/1.194.131.101.129/img/svg_icon/1.svg IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeSVG Scalable Vector Graphics image Hash86381a921e2dcbc53c4e3e10612964c5 17b74d1234a6c1c0449160637ae227a16bb4c2bc a9b1dc6e71eef46dad59b4d514ad814f3c40c7263befef84c26daf71cda3d66f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/svg_icon/1.svg HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/svg+xml
Last-Modified: Fri, 19 Apr 2024 03:13:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e142-6dc"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/img/svg_icon/2.svg | 94.131.101.129 | | 2.2 kB |
URL 94.131.101.129/img/svg_icon/2.svg IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeSVG Scalable Vector Graphics image Hashb70ac7a4139ee7ae5b6844a5b4a982a1 4b3ec0eb282df6dea77c090247d94ee84df8d8ac 838f8baf9c8bcc642f151210ff978031b6ef65eb1b694e6b4700276c29320eed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/svg_icon/2.svg HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/svg+xml
Last-Modified: Fri, 19 Apr 2024 03:13:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e143-1545"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:0
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://94.131.101.129
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:54:31 GMT
expires: Wed, 23 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 240655
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 94.131.101.129/fonts/fontawesome-webfont.woff2?v=4.7.0 | 94.131.101.129 | 200 OK | 77 kB |
URL GET HTTP/1.194.131.101.129/fonts/fontawesome-webfont.woff2?v=4.7.0 IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/css/font-awesome.min.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: application/octet-stream
Content-Length: 77160
Last-Modified: Fri, 19 Apr 2024 03:08:52 GMT
Connection: keep-alive
ETag: "6621e044-12d68"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/svg_icon/3.svg | 94.131.101.129 | | 1.0 kB |
URL 94.131.101.129/img/svg_icon/3.svg IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeSVG Scalable Vector Graphics image Hashf85569e3bb9bf3e30b14fd4f0fb607cc 3aaee10f85307545cb7a545eefabee4343337f22 93f358157bbb6f53cd578d7449e8c1fb6cd6c9f9fa9676a028d6133860cd35af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/svg_icon/3.svg HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/svg+xml
Last-Modified: Fri, 19 Apr 2024 03:13:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e143-836"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/img/svg_icon/4.svg | 94.131.101.129 | 200 OK | 845 B |
URL GET HTTP/1.194.131.101.129/img/svg_icon/4.svg IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typeSVG Scalable Vector Graphics image Hashabc983a3ea3a157192258ff61f761f52 6bd0880191002ae6092a98fd1352e21bd164aa71 9832804690cbbc75272f27efe615d4cc199750dfb092405f007fba9ff4850c0c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/svg_icon/4.svg HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/svg+xml
Last-Modified: Fri, 19 Apr 2024 03:13:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e144-946"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/img/svg_icon/5.svg | 94.131.101.129 | | 795 B |
URL 94.131.101.129/img/svg_icon/5.svg IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typeSVG Scalable Vector Graphics image Hashc90925884dbab2d2f8b555fba7c8994d 8bb111326ce08e5c2539f694144d4d4e0b39e6cb f8d2bd2d35c22b89ba33573cefc8c6cedaf4c8b6937e3aff0eb824050a4e98ef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/svg_icon/5.svg HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/svg+xml
Last-Modified: Fri, 19 Apr 2024 03:13:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6621e144-97f"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
|
|
| 94.131.101.129/img/candiateds/1.png | 94.131.101.129 | 200 OK | 20 kB |
URL GET HTTP/1.194.131.101.129/img/candiateds/1.png IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced Hash503b7bdb15de5e17ebb63c7a8b3dccd3 4cb3ede3c2b835b320f38be34296a04d37fb9fb0 9c5db89dd42675e2616de6a6b76b42bcb48f4e3b117e25cd78e9ba93d4c62c51
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/candiateds/1.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 19918
Last-Modified: Fri, 19 Apr 2024 03:11:46 GMT
Connection: keep-alive
ETag: "6621e0f2-4dce"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/candiateds/2.png | 94.131.101.129 | 200 OK | 21 kB |
URL GET HTTP/1.194.131.101.129/img/candiateds/2.png IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced Hash5895a2203bcd0a27e8535b0968d0d11e 986d63b5fbe44a545d3145bd3e44743a12d2815f 6130a56d30bceda912a15871f90657b845e49fbb66104bb455c096eabbc63a03
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/candiateds/2.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 20928
Last-Modified: Fri, 19 Apr 2024 03:11:47 GMT
Connection: keep-alive
ETag: "6621e0f3-51c0"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/candiateds/3.png | 94.131.101.129 | 200 OK | 19 kB |
URL GET HTTP/1.194.131.101.129/img/candiateds/3.png IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced Hashfab960dbb961112d5bb5a64180e34274 cb19d4f162d7dd00fac792258bf540ed6fde68bd 4c06856c66ea5bc71b0270044d9b4e4d9eced3272d684ec0e631e3f47fc7700f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/candiateds/3.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 18835
Last-Modified: Fri, 19 Apr 2024 03:11:47 GMT
Connection: keep-alive
ETag: "6621e0f3-4993"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/candiateds/4.png | 94.131.101.129 | 200 OK | 20 kB |
URL GET HTTP/1.194.131.101.129/img/candiateds/4.png IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced Hash21a4a2eb09ea59cce0b1a1141398ecaf 3491c006fa87a399ec9cfeb9d7139987c763c8d4 975fb023bdbcf1fbc240894879a827a34291d3d286fbda0f2901bf401e8e1dd3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/candiateds/4.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 20317
Last-Modified: Fri, 19 Apr 2024 03:11:48 GMT
Connection: keep-alive
ETag: "6621e0f4-4f5d"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/candiateds/5.png | 94.131.101.129 | 200 OK | 21 kB |
URL GET HTTP/1.194.131.101.129/img/candiateds/5.png IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced Hash5ce98f84ab1b2a505984d15e1f0a81c2 158cb5e2651e6cdec4cb383fb24fc164a0f2af09 423ef4415f4095f743286b7dfaff46e7dde58a10a5e5caf16b35cf967e488ba9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/candiateds/5.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 21188
Last-Modified: Fri, 19 Apr 2024 03:11:49 GMT
Connection: keep-alive
ETag: "6621e0f5-52c4"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/banner/banner.png | 94.131.101.129 | | 196 kB |
URL 94.131.101.129/img/banner/banner.png IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 1920 x 700, 8-bit/color RGBA, non-interlaced Size196 kB (195992 bytes) Hash1d46c560cc73ce59d396dffa10f2876b 14f92382343b8c3d65e36521a131c0901d328c18 fd7cef852ecea1e2f01e3603e9ae7048b1fa76991dba8ce9474885d10dcdcaaf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/banner/banner.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 195992
Last-Modified: Fri, 19 Apr 2024 03:11:19 GMT
Connection: keep-alive
ETag: "6621e0d7-2fd98"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/candiateds/6.png | 94.131.101.129 | | 25 kB |
URL 94.131.101.129/img/candiateds/6.png IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced Hash5356551dc17ffc9903b0da2f55838c61 1dc6f9aeb94e96c32ce49196893efdaa83a21df0 6e6ece1b8ded6a0bb4a4f7c0588da67c6efb7b4338c647bfac3f7b6b011b3781
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/candiateds/6.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 25406
Last-Modified: Fri, 19 Apr 2024 03:11:51 GMT
Connection: keep-alive
ETag: "6621e0f7-633e"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/candiateds/7.png | 94.131.101.129 | 200 OK | 25 kB |
URL GET HTTP/1.194.131.101.129/img/candiateds/7.png IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced Hashb9fdec57de82960ec33439a16ab7d537 f5f57fb34a9e5e426812f4682d48a75b28668492 b655bc8b0332b1c9c0464f18a5cba07140788a2e6247ae17a46c7051662a0eaa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/candiateds/7.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 24774
Last-Modified: Fri, 19 Apr 2024 03:11:51 GMT
Connection: keep-alive
ETag: "6621e0f7-60c6"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/candiateds/8.png | 94.131.101.129 | | 18 kB |
URL 94.131.101.129/img/candiateds/8.png IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced Hash544d942c8c6e7a3ff2f9885646cbd184 a4b7f9fb1134514cc9d5f60aa4c99435a63efe93 741885cb54907c85bd0c6da802b4df03480db85024f58a5b78114cb8e122ab53
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/candiateds/8.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 17510
Last-Modified: Fri, 19 Apr 2024 03:11:55 GMT
Connection: keep-alive
ETag: "6621e0fb-4466"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/candiateds/9.png | 94.131.101.129 | | 25 kB |
URL 94.131.101.129/img/candiateds/9.png IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced Hashb6a4c85b921159a8335c0e8aaca543b4 7722944ebfbce56778cc83f6fb75d1546fa7852a d9e048d7fa2af855f5638c85f0242773792b13990e1d355d0fa6a4ca7de555d1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/candiateds/9.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 24913
Last-Modified: Fri, 19 Apr 2024 03:11:55 GMT
Connection: keep-alive
ETag: "6621e0fb-6151"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/candiateds/10.png | 94.131.101.129 | 200 OK | 24 kB |
URL GET HTTP/1.194.131.101.129/img/candiateds/10.png IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced Hash51a07e85007a111b9892894669f88783 4ee34b30924311177d37305e0a95c7c9ee88f8c0 dbad7b0d5c91631390c261a71506ffb88a77c4817747dca8c98263a1759b576f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/candiateds/10.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 23883
Last-Modified: Fri, 19 Apr 2024 03:11:46 GMT
Connection: keep-alive
ETag: "6621e0f2-5d4b"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/testmonial/author.png | 94.131.101.129 | 200 OK | 90 kB |
URL GET HTTP/1.194.131.101.129/img/testmonial/author.png IP94.131.101.129:80 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced Hash731e82b796f81eca95879b041cf404ed ae53437ef4bd7ac511bc4d217559befcb7fbbb9d d51b8b4f02e9b6ff5dd5183554a59275bb1d42471752d000f306247677a28448
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/testmonial/author.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 90009
Last-Modified: Fri, 19 Apr 2024 03:13:12 GMT
Connection: keep-alive
ETag: "6621e148-15f99"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/favicon.png | 94.131.101.129 | | 1.7 kB |
URL 94.131.101.129/img/favicon.png IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 112 x 92, 8-bit/color RGBA, non-interlaced Hash821018649c8fdad8391c36fadcb793a5 e4251b5752128bfc0e83deaf1bf5f494ac346ba4 607e384ba6c44b635f15e2287493398aff8385eecf73e4925369a4004a49adbe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/favicon.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:27 GMT
Content-Type: image/png
Content-Length: 1672
Last-Modified: Fri, 19 Apr 2024 03:11:08 GMT
Connection: keep-alive
ETag: "6621e0cc-688"
Expires: Fri, 26 Apr 2024 20:45:27 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| 94.131.101.129/img/job/1.png | 94.131.101.129 | | 610 kB |
URL 94.131.101.129/img/job/1.png IP94.131.101.129:0 ASN#44477 Stark Industries Solutions Ltd
File typePNG image data, 960 x 400, 8-bit/color RGBA, non-interlaced Size610 kB (609615 bytes) Hash8b9ab95d1ab21ebd4709f876f0d0a0da 4959ae211d400c9b76dbd0fd5919c81a22406c83 a48d1a0ba503d5e0ef032bd22cc3175d174c0ad8ab7de3b9cb1e2ee40ff87bb9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/job/1.png HTTP/1.1
Host: 94.131.101.129
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/css/style.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 25 Apr 2024 20:45:26 GMT
Content-Type: image/png
Content-Length: 609615
Last-Modified: Fri, 19 Apr 2024 03:12:46 GMT
Connection: keep-alive
ETag: "6621e12e-94d4f"
Expires: Fri, 26 Apr 2024 20:45:26 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
|
|
| fonts.googleapis.com/css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&display=swap | 142.250.74.106 | | 9.1 kB |
URL fonts.googleapis.com/css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&display=swap IP142.250.74.106:0
File typegzip compressed data, max compression Hash03075331b25029d6aa2390f09336b3dd f8f018713f2854797ad35deb876a5ff8f8821f77 f7c375d259cfe0e266fddcf368d6ed185460363717a7792b5ec73280a7616d05
GET /css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://94.131.101.129/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 20:45:26 GMT
date: Thu, 25 Apr 2024 20:45:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|