| accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 |  94.156.68.105 | | 148 kB |
URL accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 IP94.156.68.105:0
File typeHTML document, ASCII text, with very long lines (15178) Size148 kB (148524 bytes) Hash618735e6f09d9ca0f7992cebdef6e5a4 de111a8d933b53cb332129935851bd7b69c5c142 3a4faa77d50f54c65e2d8fc0aad43b6ea28d5cb0f29b4db0892a4462009db2aa
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - Suspicious Javascript code | | Quad9 DNS | malicious | Sinkholed |
GET /en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 HTTP/1.1
Host: accounts.jagex.com-ea.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 10 May 2024 15:19:10 GMT
Content-Type: text/html
Last-Modified: Thu, 02 May 2024 00:14:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6632dadd-75692"
Content-Encoding: gzip
|
|
| accounts.jagex.com-ea.ru/en-GB/assets/jquery-3.6.4.slim.min.js | 94.156.68.105 | 200 OK | 73 kB |
URL GET HTTP/1.1accounts.jagex.com-ea.ru/en-GB/assets/jquery-3.6.4.slim.min.js IP94.156.68.105:443
Requested byhttps://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 CertificateIssuerLet's Encrypt Subjectaccounts.jagex.com-ea.ru FingerprintE2:F5:1C:35:49:C8:64:E2:01:68:0D:88:C8:03:31:B3:BB:A5:8A:29 ValiditySun, 28 Apr 2024 22:59:40 GMT - Sat, 27 Jul 2024 22:59:39 GMT
File typeJavaScript source, ASCII text, with very long lines (65241) Hash2a66ca8e202dcdc62bf4b4e7bdd08219 9507ef9a305c33ced86964bfd54fe2ccc9a45c6c 6b6ca31cce239c5f5fe78c5441a9236466aa62cfd5d4262f5a9a2a6730b6fc1c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en-GB/assets/jquery-3.6.4.slim.min.js HTTP/1.1
Host: accounts.jagex.com-ea.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 10 May 2024 15:19:11 GMT
Content-Type: application/javascript
Content-Length: 72666
Last-Modified: Sun, 17 Dec 2023 17:17:59 GMT
Connection: keep-alive
ETag: "657f2d47-11bda"
Accept-Ranges: bytes
|
|
| accounts.jagex.com-ea.ru/en-GB/assets/34d292ddbaa5c7f48e00d3781772e1b8.jpg | 94.156.68.105 | 200 OK | 426 kB |
URL GET HTTP/1.1accounts.jagex.com-ea.ru/en-GB/assets/34d292ddbaa5c7f48e00d3781772e1b8.jpg IP94.156.68.105:443
Requested byhttps://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 CertificateIssuerLet's Encrypt Subjectaccounts.jagex.com-ea.ru FingerprintE2:F5:1C:35:49:C8:64:E2:01:68:0D:88:C8:03:31:B3:BB:A5:8A:29 ValiditySun, 28 Apr 2024 22:59:40 GMT - Sat, 27 Jul 2024 22:59:39 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3840x2160, components 3 Size426 kB (426114 bytes) Hash30cb489031683a1b73a792190c208aa7 e13027d784a6cee75e3f9b775e25a291dfb972eb cfe6f52eb498236d9ebed24c24ef8d06ac79f601834dd227c28eedd56bf49a9d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en-GB/assets/34d292ddbaa5c7f48e00d3781772e1b8.jpg HTTP/1.1
Host: accounts.jagex.com-ea.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 10 May 2024 15:19:11 GMT
Content-Type: image/jpeg
Content-Length: 426114
Last-Modified: Sun, 17 Dec 2023 17:17:59 GMT
Connection: keep-alive
ETag: "657f2d47-68082"
Accept-Ranges: bytes
|
|
| fonts.cdnfonts.com/s/86590/PFBagueSansPro-Reg-subset.woff |  172.67.184.158 | 200 OK | 6.8 kB |
URL GET HTTP/3fonts.cdnfonts.com/s/86590/PFBagueSansPro-Reg-subset.woff IP172.67.184.158:443
Requested byhttps://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 CertificateIssuerGoogle Trust Services LLC Subjectcdnfonts.com FingerprintAA:60:46:5D:49:FA:16:2E:61:90:A6:B2:50:1E:CF:8E:0C:8B:D2:F0 ValidityWed, 27 Mar 2024 09:13:21 GMT - Tue, 25 Jun 2024 09:13:20 GMT
File typeWeb Open Font Format, CFF, length 6840, version 0.0 Hashd3649918fc441652cb6e11332c752ad2 6fc3f62b82e077a5ed0b28fef89c245675457ca1 be0aafde640986593671a7cb2230e4783dd33192607d436868958e63c2f6778d
GET /s/86590/PFBagueSansPro-Reg-subset.woff HTTP/1.1
Host: fonts.cdnfonts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://accounts.jagex.com-ea.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.cdnfonts.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 15:19:11 GMT
content-type: font/woff
content-length: 6840
last-modified: Thu, 11 Aug 2022 09:03:59 GMT
etag: "1ab8-5e5f372332802"
cache-control: max-age=2678400
cf-cache-status: HIT
age: 699098
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JKUwafIV%2FcioxwOs9M0lg8eSsl0lHg4BOoGt9rfNuiFhMtEC8J%2BUWxDkeh%2BQ8P7ARXYfKuCF1oV99JoZyjHAxcuAOIdTJkiMaJkjd2tKmZITwm15BFwf9Ke93%2BmP2fp%2FJ8Hqe3k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 881ae7f75fd3b4eb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| accounts.jagex.com-ea.ru/en-GB/assets/jquery-3.6.4.slim.min.js | 94.156.68.105 | 200 OK | 73 kB |
URL GET HTTP/1.1accounts.jagex.com-ea.ru/en-GB/assets/jquery-3.6.4.slim.min.js IP94.156.68.105:443
Requested byhttps://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 CertificateIssuerLet's Encrypt Subjectaccounts.jagex.com-ea.ru FingerprintE2:F5:1C:35:49:C8:64:E2:01:68:0D:88:C8:03:31:B3:BB:A5:8A:29 ValiditySun, 28 Apr 2024 22:59:40 GMT - Sat, 27 Jul 2024 22:59:39 GMT
File typeJavaScript source, ASCII text, with very long lines (65241) Hash2a66ca8e202dcdc62bf4b4e7bdd08219 9507ef9a305c33ced86964bfd54fe2ccc9a45c6c 6b6ca31cce239c5f5fe78c5441a9236466aa62cfd5d4262f5a9a2a6730b6fc1c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en-GB/assets/jquery-3.6.4.slim.min.js HTTP/1.1
Host: accounts.jagex.com-ea.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 10 May 2024 15:19:11 GMT
Content-Type: application/javascript
Content-Length: 72666
Last-Modified: Sun, 17 Dec 2023 17:17:59 GMT
Connection: keep-alive
ETag: "657f2d47-11bda"
Accept-Ranges: bytes
|
|
| accounts.jagex.com-ea.ru/en-GB/assets/jquery-3.6.4.slim.min.js | 94.156.68.105 | 200 OK | 73 kB |
URL GET HTTP/1.1accounts.jagex.com-ea.ru/en-GB/assets/jquery-3.6.4.slim.min.js IP94.156.68.105:443
Requested byhttps://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 CertificateIssuerLet's Encrypt Subjectaccounts.jagex.com-ea.ru FingerprintE2:F5:1C:35:49:C8:64:E2:01:68:0D:88:C8:03:31:B3:BB:A5:8A:29 ValiditySun, 28 Apr 2024 22:59:40 GMT - Sat, 27 Jul 2024 22:59:39 GMT
File typeJavaScript source, ASCII text, with very long lines (65241) Hash2a66ca8e202dcdc62bf4b4e7bdd08219 9507ef9a305c33ced86964bfd54fe2ccc9a45c6c 6b6ca31cce239c5f5fe78c5441a9236466aa62cfd5d4262f5a9a2a6730b6fc1c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en-GB/assets/jquery-3.6.4.slim.min.js HTTP/1.1
Host: accounts.jagex.com-ea.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 10 May 2024 15:19:11 GMT
Content-Type: application/javascript
Content-Length: 72666
Last-Modified: Sun, 17 Dec 2023 17:17:59 GMT
Connection: keep-alive
ETag: "657f2d47-11bda"
Accept-Ranges: bytes
|
|
| accounts.jagex.com-ea.ru/en-GB/assets/jquery-3.6.4.slim.min.js | 94.156.68.105 | 200 OK | 73 kB |
URL GET HTTP/1.1accounts.jagex.com-ea.ru/en-GB/assets/jquery-3.6.4.slim.min.js IP94.156.68.105:443
Requested byhttps://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 CertificateIssuerLet's Encrypt Subjectaccounts.jagex.com-ea.ru FingerprintE2:F5:1C:35:49:C8:64:E2:01:68:0D:88:C8:03:31:B3:BB:A5:8A:29 ValiditySun, 28 Apr 2024 22:59:40 GMT - Sat, 27 Jul 2024 22:59:39 GMT
File typeJavaScript source, ASCII text, with very long lines (65241) Hash2a66ca8e202dcdc62bf4b4e7bdd08219 9507ef9a305c33ced86964bfd54fe2ccc9a45c6c 6b6ca31cce239c5f5fe78c5441a9236466aa62cfd5d4262f5a9a2a6730b6fc1c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en-GB/assets/jquery-3.6.4.slim.min.js HTTP/1.1
Host: accounts.jagex.com-ea.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 10 May 2024 15:19:11 GMT
Content-Type: application/javascript
Content-Length: 72666
Last-Modified: Sun, 17 Dec 2023 17:17:59 GMT
Connection: keep-alive
ETag: "657f2d47-11bda"
Accept-Ranges: bytes
|
|
| accounts.jagex.com-ea.ru/en-GB/assets/jquery-3.6.4.slim.min.js | 94.156.68.105 | 200 OK | 73 kB |
URL GET HTTP/1.1accounts.jagex.com-ea.ru/en-GB/assets/jquery-3.6.4.slim.min.js IP94.156.68.105:443
Requested byhttps://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 CertificateIssuerLet's Encrypt Subjectaccounts.jagex.com-ea.ru FingerprintE2:F5:1C:35:49:C8:64:E2:01:68:0D:88:C8:03:31:B3:BB:A5:8A:29 ValiditySun, 28 Apr 2024 22:59:40 GMT - Sat, 27 Jul 2024 22:59:39 GMT
File typeJavaScript source, ASCII text, with very long lines (65241) Hash2a66ca8e202dcdc62bf4b4e7bdd08219 9507ef9a305c33ced86964bfd54fe2ccc9a45c6c 6b6ca31cce239c5f5fe78c5441a9236466aa62cfd5d4262f5a9a2a6730b6fc1c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en-GB/assets/jquery-3.6.4.slim.min.js HTTP/1.1
Host: accounts.jagex.com-ea.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 10 May 2024 15:19:11 GMT
Content-Type: application/javascript
Content-Length: 72666
Last-Modified: Sun, 17 Dec 2023 17:17:59 GMT
Connection: keep-alive
ETag: "657f2d47-11bda"
Accept-Ranges: bytes
|
|
| accounts.jagex.com-ea.ru/en-GB/assets/jquery-3.6.4.slim.min.js | 94.156.68.105 | 200 OK | 73 kB |
URL GET HTTP/1.1accounts.jagex.com-ea.ru/en-GB/assets/jquery-3.6.4.slim.min.js IP94.156.68.105:443
Requested byhttps://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 CertificateIssuerLet's Encrypt Subjectaccounts.jagex.com-ea.ru FingerprintE2:F5:1C:35:49:C8:64:E2:01:68:0D:88:C8:03:31:B3:BB:A5:8A:29 ValiditySun, 28 Apr 2024 22:59:40 GMT - Sat, 27 Jul 2024 22:59:39 GMT
File typeJavaScript source, ASCII text, with very long lines (65241) Hash2a66ca8e202dcdc62bf4b4e7bdd08219 9507ef9a305c33ced86964bfd54fe2ccc9a45c6c 6b6ca31cce239c5f5fe78c5441a9236466aa62cfd5d4262f5a9a2a6730b6fc1c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en-GB/assets/jquery-3.6.4.slim.min.js HTTP/1.1
Host: accounts.jagex.com-ea.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 10 May 2024 15:19:11 GMT
Content-Type: application/javascript
Content-Length: 72666
Last-Modified: Sun, 17 Dec 2023 17:17:59 GMT
Connection: keep-alive
ETag: "657f2d47-11bda"
Accept-Ranges: bytes
|
|
| accounts.jagex.com-ea.ru/en-GB/assets/jquery-3.6.4.slim.min.js | 94.156.68.105 | 200 OK | 73 kB |
URL GET HTTP/1.1accounts.jagex.com-ea.ru/en-GB/assets/jquery-3.6.4.slim.min.js IP94.156.68.105:443
Requested byhttps://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 CertificateIssuerLet's Encrypt Subjectaccounts.jagex.com-ea.ru FingerprintE2:F5:1C:35:49:C8:64:E2:01:68:0D:88:C8:03:31:B3:BB:A5:8A:29 ValiditySun, 28 Apr 2024 22:59:40 GMT - Sat, 27 Jul 2024 22:59:39 GMT
File typeJavaScript source, ASCII text, with very long lines (65241) Hash2a66ca8e202dcdc62bf4b4e7bdd08219 9507ef9a305c33ced86964bfd54fe2ccc9a45c6c 6b6ca31cce239c5f5fe78c5441a9236466aa62cfd5d4262f5a9a2a6730b6fc1c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en-GB/assets/jquery-3.6.4.slim.min.js HTTP/1.1
Host: accounts.jagex.com-ea.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 10 May 2024 15:19:11 GMT
Content-Type: application/javascript
Content-Length: 72666
Last-Modified: Sun, 17 Dec 2023 17:17:59 GMT
Connection: keep-alive
ETag: "657f2d47-11bda"
Accept-Ranges: bytes
|
|
| accounts.jagex.com-ea.ru/en-GB/assets/ef7cc04ef94e06fece58adb4c849cc0e.svg | 94.156.68.105 | 200 OK | 477 B |
URL GET HTTP/1.1accounts.jagex.com-ea.ru/en-GB/assets/ef7cc04ef94e06fece58adb4c849cc0e.svg IP94.156.68.105:443
Requested byhttps://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 CertificateIssuerLet's Encrypt Subjectaccounts.jagex.com-ea.ru FingerprintE2:F5:1C:35:49:C8:64:E2:01:68:0D:88:C8:03:31:B3:BB:A5:8A:29 ValiditySun, 28 Apr 2024 22:59:40 GMT - Sat, 27 Jul 2024 22:59:39 GMT
File typeSVG Scalable Vector Graphics image Hashffeeb71d7b850a3e669103b231541e54 0997938b9a6f63278da9ebad649af2f8e5119bac eff624915560cce2d52549e3513ed7f6d186b0c102339c6b5f8ea18e6361216b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en-GB/assets/ef7cc04ef94e06fece58adb4c849cc0e.svg HTTP/1.1
Host: accounts.jagex.com-ea.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 10 May 2024 15:19:11 GMT
Content-Type: image/svg+xml
Content-Length: 477
Last-Modified: Sun, 17 Dec 2023 17:17:58 GMT
Connection: keep-alive
ETag: "657f2d46-1dd"
Accept-Ranges: bytes
|
|
| accounts.jagex.com-ea.ru/en-GB/assets/ef7cc04ef94e06fece58adb4c849cc0e.svg | 94.156.68.105 | 200 OK | 477 B |
URL GET HTTP/1.1accounts.jagex.com-ea.ru/en-GB/assets/ef7cc04ef94e06fece58adb4c849cc0e.svg IP94.156.68.105:443
Requested byhttps://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 CertificateIssuerLet's Encrypt Subjectaccounts.jagex.com-ea.ru FingerprintE2:F5:1C:35:49:C8:64:E2:01:68:0D:88:C8:03:31:B3:BB:A5:8A:29 ValiditySun, 28 Apr 2024 22:59:40 GMT - Sat, 27 Jul 2024 22:59:39 GMT
File typeSVG Scalable Vector Graphics image Hashffeeb71d7b850a3e669103b231541e54 0997938b9a6f63278da9ebad649af2f8e5119bac eff624915560cce2d52549e3513ed7f6d186b0c102339c6b5f8ea18e6361216b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en-GB/assets/ef7cc04ef94e06fece58adb4c849cc0e.svg HTTP/1.1
Host: accounts.jagex.com-ea.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Fri, 10 May 2024 15:19:11 GMT
Content-Type: image/svg+xml
Content-Length: 477
Last-Modified: Sun, 17 Dec 2023 17:17:58 GMT
Connection: keep-alive
ETag: "657f2d46-1dd"
Accept-Ranges: bytes
|
|
| fonts.cdnfonts.com/css/pf-bague-sans-pro | 172.67.184.158 | 200 OK | 1.2 kB |
URL GET HTTP/2fonts.cdnfonts.com/css/pf-bague-sans-pro IP172.67.184.158:443
Requested byhttps://accounts.jagex.com-ea.ru/en-GB/assisted-login=login_challenge=dc197744c4a04124a6d04da6b85adcb4_ga=2.238398720.1406457486.1694086910-1863512970.169408678563454200 CertificateIssuerGoogle Trust Services LLC Subjectcdnfonts.com FingerprintAA:60:46:5D:49:FA:16:2E:61:90:A6:B2:50:1E:CF:8E:0C:8B:D2:F0 ValidityWed, 27 Mar 2024 09:13:21 GMT - Tue, 25 Jun 2024 09:13:20 GMT
File typeASCII text, with very long lines (1168), with no line terminators Hashec2c934e17d940e5b685353a9278b2e6 2e074a0834d29caf435d9047a15a300bc12f13ea 750f768a34dcf00fbd35db090a8ec31a6adadb8242a06bb3f4a66cb3f02eccd4
GET /css/pf-bague-sans-pro HTTP/1.1
Host: fonts.cdnfonts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.jagex.com-ea.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 15:19:11 GMT
content-type: text/css;charset=UTF-8
cf-bgj: minify
cf-polished: origSize=1368
vary: Accept-Encoding
cache-control: max-age=2678400
cf-cache-status: HIT
age: 775702
last-modified: Wed, 01 May 2024 15:50:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z0FOGsv2ytlddhDnrQYwgssnPj7wUSPzgVM%2Fg8iP81BCMDlVggE6clYHQk8i%2Fr4pTRzzeNCJLytvGHVbtBGWv4hwTM0ulMmSSGvTr2HaqsBtzSAu8RkoUzrL9rO%2FK0j3BEJKwZw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
access-control-allow-origin: *
server: cloudflare
cf-ray: 881ae7f67e380b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|