Report - haymarketstat.de/js/container

Report Overview

Submitted URL
haymarketstat.de/js/container_eOXHH9wX.js/
IP
193.254.186.244
ASN
#25504 Vautron Rechenzentrum AG
Submitted
2024-04-18 13:39:32
Access
public
Website Title
Sign in - Matomo
Final URL
haymarketstat.de/js/container_eOXHH9wX.js/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
28

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
haymarketstat.de	unknown	unknown	2019-12-20	2024-02-23	7.9 kB	186 kB	193.254.186.244

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	haymarketstat.de	Sinkholed
2024-04-18	medium	haymarketstat.de	Sinkholed
2024-04-18	medium	haymarketstat.de	Sinkholed
2024-04-18	medium	haymarketstat.de	Sinkholed
2024-04-18	medium	haymarketstat.de	Sinkholed
2024-04-18	medium	haymarketstat.de	Sinkholed
2024-04-18	medium	haymarketstat.de	Sinkholed
2024-04-18	medium	haymarketstat.de	Sinkholed
2024-04-18	medium	haymarketstat.de	Sinkholed
2024-04-18	medium	haymarketstat.de	Sinkholed
2024-04-18	medium	haymarketstat.de	Sinkholed
2024-04-18	medium	haymarketstat.de	Sinkholed
2024-04-18	medium	haymarketstat.de	Sinkholed
2024-04-18	medium	haymarketstat.de	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	haymarketstat.de/js/container_eOXHH9wX.js/	1.4 kB	2024-04-18	2024-04-18
Pretty URL haymarketstat.de/js/container_eOXHH9wX.js/ IP 193.254.186.244 ASN #25504 Vautron Rechenzentrum AG Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 15:39:38 Last Seen2024-04-18 15:39:38 Times Seen1 Hash d6a3e8c325ea1f960be471ff189ba878 eca2a6c8f9214d840b5a15fd17720029d8a2bc02 659eef743edc5ed9507b7566a747fc186e7f62c075d544ab0abb747ebe2dbd84 Loading...

	haymarketstat.de/js/container_eOXHH9wX.js/	132 kB	2023-04-21	2024-04-18
Pretty URL haymarketstat.de/js/container_eOXHH9wX.js/ IP 193.254.186.244 ASN #25504 Vautron Rechenzentrum AG Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-21 12:40:23 Last Seen2024-04-18 15:39:39 Times Seen2 Hash 858cefff9aff864412ba6613d6623ad1 658eddff680e61dc08f0ca14e0a57bc409b532ef fff7cf991abad21fe83dfc45f26f067cfcb9f8d46af2b82085d99a21a39dd74b Loading...

	haymarketstat.de/js/container_eOXHH9wX.js/	268 B	2023-03-07	2024-04-18
Pretty URL haymarketstat.de/js/container_eOXHH9wX.js/ IP 193.254.186.244 ASN #25504 Vautron Rechenzentrum AG Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:10:24 Last Seen2024-04-18 15:39:39 Times Seen36 Hash ee2afcd416721ea696818f2e9064113c 5f3952d2e33af9433dc36ce3ad317e3e266c340c ce1b3240166041fbd0e7b88c7a6f526991d45fa41e923e02323646a3c4760ca7 Loading...

	haymarketstat.de/js/container_eOXHH9wX.js/	2.0 kB	2023-03-07	2024-04-29
Pretty URL haymarketstat.de/js/container_eOXHH9wX.js/ IP 193.254.186.244 ASN #25504 Vautron Rechenzentrum AG Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:10:24 Last Seen2024-04-29 12:01:53 Times Seen54 Hash 7ddb44ebb9a44dc5502c02bc3a1caa97 acdf0ec1acce848d2d7b3f800966d0d82a527b41 e49aaa7b48ff6c9b0447df4c9db48bf8c076b37f7b1933da5e6c17c3965db682 Loading...

HTTP Transactions (14)

URL IP Response Size

haymarketstat.de/js/container_eOXHH9wX.js/plugins/Morpheus/images/loading-blue.gif

193.254.186.244

404 Not Found

8.5 kB

URL GET HTTP/2
haymarketstat.de/js/container_eOXHH9wX.js/plugins/Morpheus/images/loading-blue.gif
IP
193.254.186.244:443
ASN
#25504 Vautron Rechenzentrum AG

Requested by
https://haymarketstat.de/js/container_eOXHH9wX.js/
Certificate
IssuerLet's Encrypt
Subjectstats.haymarket.pm-kunden.de
Fingerprint8E:E0:70:53:40:0E:36:41:18:02:67:A4:45:B7:25:5A:98:45:29:51
ValidityThu, 22 Feb 2024 22:03:03 GMT - Wed, 22 May 2024 22:03:02 GMT

File type
gzip compressed data, max speed, from Unix
Size
8.5 kB (8492 bytes)
Hash
4ca810d7602602f96b0957ff988e1b02
3bee608abfad5c9993ec148f85bb7ce28f93e71f
75afd680ed157d0db4668e9cfc98bcf6fc21f3ac2f2772495f44c001b2709312

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/container_eOXHH9wX.js/plugins/Morpheus/images/loading-blue.gif HTTP/1.1
Host: haymarketstat.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haymarketstat.de/js/container_eOXHH9wX.js/
DNT: 1
Connection: keep-alive
Cookie: MATOMO_SESSID=km2rk21io52g597uu3vaur2q7s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 18 Apr 2024 13:39:07 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2

haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getCss&cb=3d94bd3cb21530c62b94bd464acf2003

193.254.186.244

404 Not Found

7.9 kB

URL GET HTTP/2
haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getCss&cb=3d94bd3cb21530c62b94bd464acf2003
IP
193.254.186.244:443
ASN
#25504 Vautron Rechenzentrum AG

Requested by
https://haymarketstat.de/js/container_eOXHH9wX.js/
Certificate
IssuerLet's Encrypt
Subjectstats.haymarket.pm-kunden.de
Fingerprint8E:E0:70:53:40:0E:36:41:18:02:67:A4:45:B7:25:5A:98:45:29:51
ValidityThu, 22 Feb 2024 22:03:03 GMT - Wed, 22 May 2024 22:03:02 GMT

File type
gzip compressed data, max speed, from Unix
Size
7.9 kB (7931 bytes)
Hash
06d1bb22a4726f4d8791eac7e402f1b7
839b186876b34bb4c9af6d7b9caa870d25ec47ce
1927e8e5990274308d4898fae95fb0e2bee4b711d0f339ec99e803b4e0a1a883

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/container_eOXHH9wX.js/index.php?module=Proxy&action=getCss&cb=3d94bd3cb21530c62b94bd464acf2003 HTTP/1.1
Host: haymarketstat.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haymarketstat.de/js/container_eOXHH9wX.js/
DNT: 1
Connection: keep-alive
Cookie: MATOMO_SESSID=km2rk21io52g597uu3vaur2q7s
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 18 Apr 2024 13:39:07 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2

haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getUmdJs&chunk=1&cb=38ce40a1bce7d1c9927847d0d0cbc9bc

193.254.186.244

404 Not Found

11 kB

URL GET HTTP/2
haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getUmdJs&chunk=1&cb=38ce40a1bce7d1c9927847d0d0cbc9bc
IP
193.254.186.244:443
ASN
#25504 Vautron Rechenzentrum AG

Requested by
https://haymarketstat.de/js/container_eOXHH9wX.js/
Certificate
IssuerLet's Encrypt
Subjectstats.haymarket.pm-kunden.de
Fingerprint8E:E0:70:53:40:0E:36:41:18:02:67:A4:45:B7:25:5A:98:45:29:51
ValidityThu, 22 Feb 2024 22:03:03 GMT - Wed, 22 May 2024 22:03:02 GMT

File type
gzip compressed data, max speed, from Unix
Size
11 kB (10989 bytes)
Hash
ef0ad1374d9ba067341d93c87a726e4d
110c9d83fbd3c2755b52d9f7a4847d06cfd152a8
2cb46598b26cbfaa087c2357cd489d527104712808a074379153fbf6903e3827

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/container_eOXHH9wX.js/index.php?module=Proxy&action=getUmdJs&chunk=1&cb=38ce40a1bce7d1c9927847d0d0cbc9bc HTTP/1.1
Host: haymarketstat.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haymarketstat.de/js/container_eOXHH9wX.js/
DNT: 1
Connection: keep-alive
Cookie: MATOMO_SESSID=km2rk21io52g597uu3vaur2q7s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 18 Apr 2024 13:39:07 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2

haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getUmdJs&chunk=2&cb=38ce40a1bce7d1c9927847d0d0cbc9bc

193.254.186.244

404 Not Found

10 kB

URL GET HTTP/2
haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getUmdJs&chunk=2&cb=38ce40a1bce7d1c9927847d0d0cbc9bc
IP
193.254.186.244:443
ASN
#25504 Vautron Rechenzentrum AG

Requested by
https://haymarketstat.de/js/container_eOXHH9wX.js/
Certificate
IssuerLet's Encrypt
Subjectstats.haymarket.pm-kunden.de
Fingerprint8E:E0:70:53:40:0E:36:41:18:02:67:A4:45:B7:25:5A:98:45:29:51
ValidityThu, 22 Feb 2024 22:03:03 GMT - Wed, 22 May 2024 22:03:02 GMT

File type
gzip compressed data, max speed, from Unix
Size
10 kB (10064 bytes)
Hash
d9b20d31a9c1fe5a1ae00945085f60a4
45aba3ff6598e44262416d0af3468e8a443328ff
1d72be9eec4e8d16dd542a4f71a2d02474b76fa5e0ee943627021ef885814a4c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/container_eOXHH9wX.js/index.php?module=Proxy&action=getUmdJs&chunk=2&cb=38ce40a1bce7d1c9927847d0d0cbc9bc HTTP/1.1
Host: haymarketstat.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haymarketstat.de/js/container_eOXHH9wX.js/
DNT: 1
Connection: keep-alive
Cookie: MATOMO_SESSID=km2rk21io52g597uu3vaur2q7s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 18 Apr 2024 13:39:07 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2

haymarketstat.de/js/container_eOXHH9wX.js/plugins/CoreHome/images/applogo_256.png

193.254.186.244

404 Not Found

153 B

URL GET HTTP/2
haymarketstat.de/js/container_eOXHH9wX.js/plugins/CoreHome/images/applogo_256.png
IP
193.254.186.244:443
ASN
#25504 Vautron Rechenzentrum AG

Requested by
https://haymarketstat.de/js/container_eOXHH9wX.js/
Certificate
IssuerLet's Encrypt
Subjectstats.haymarket.pm-kunden.de
Fingerprint8E:E0:70:53:40:0E:36:41:18:02:67:A4:45:B7:25:5A:98:45:29:51
ValidityThu, 22 Feb 2024 22:03:03 GMT - Wed, 22 May 2024 22:03:02 GMT

File type
HTML document, ASCII text, with no line terminators
Size
153 B (153 bytes)
Hash
8da645239d94c3cb83c17629f652dd95
a4102d313dfaef4d919abc0a353f8a48c664ee01
a479b7847130ad7cfeab9ddbf70e7afdef9ed36c89b28e00afbb019a51999d6e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/container_eOXHH9wX.js/plugins/CoreHome/images/applogo_256.png HTTP/1.1
Host: haymarketstat.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haymarketstat.de/js/container_eOXHH9wX.js/
DNT: 1
Connection: keep-alive
Cookie: MATOMO_SESSID=km2rk21io52g597uu3vaur2q7s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 18 Apr 2024 13:39:07 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2

haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getUmdJs&chunk=0&cb=38ce40a1bce7d1c9927847d0d0cbc9bc

193.254.186.244

404 Not Found

153 B

URL GET HTTP/2
haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getUmdJs&chunk=0&cb=38ce40a1bce7d1c9927847d0d0cbc9bc
IP
193.254.186.244:443
ASN
#25504 Vautron Rechenzentrum AG

Requested by
https://haymarketstat.de/js/container_eOXHH9wX.js/
Certificate
IssuerLet's Encrypt
Subjectstats.haymarket.pm-kunden.de
Fingerprint8E:E0:70:53:40:0E:36:41:18:02:67:A4:45:B7:25:5A:98:45:29:51
ValidityThu, 22 Feb 2024 22:03:03 GMT - Wed, 22 May 2024 22:03:02 GMT

File type
HTML document, ASCII text, with no line terminators
Size
153 B (153 bytes)
Hash
8da645239d94c3cb83c17629f652dd95
a4102d313dfaef4d919abc0a353f8a48c664ee01
a479b7847130ad7cfeab9ddbf70e7afdef9ed36c89b28e00afbb019a51999d6e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/container_eOXHH9wX.js/index.php?module=Proxy&action=getUmdJs&chunk=0&cb=38ce40a1bce7d1c9927847d0d0cbc9bc HTTP/1.1
Host: haymarketstat.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haymarketstat.de/js/container_eOXHH9wX.js/
DNT: 1
Connection: keep-alive
Cookie: MATOMO_SESSID=km2rk21io52g597uu3vaur2q7s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 18 Apr 2024 13:39:07 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2

haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getUmdJs&chunk=0&cb=38ce40a1bce7d1c9927847d0d0cbc9bc

193.254.186.244

404 Not Found

153 B

URL GET HTTP/2
haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getUmdJs&chunk=0&cb=38ce40a1bce7d1c9927847d0d0cbc9bc
IP
193.254.186.244:443
ASN
#25504 Vautron Rechenzentrum AG

Requested by
https://haymarketstat.de/js/container_eOXHH9wX.js/
Certificate
IssuerLet's Encrypt
Subjectstats.haymarket.pm-kunden.de
Fingerprint8E:E0:70:53:40:0E:36:41:18:02:67:A4:45:B7:25:5A:98:45:29:51
ValidityThu, 22 Feb 2024 22:03:03 GMT - Wed, 22 May 2024 22:03:02 GMT

File type
HTML document, ASCII text, with no line terminators
Size
153 B (153 bytes)
Hash
8da645239d94c3cb83c17629f652dd95
a4102d313dfaef4d919abc0a353f8a48c664ee01
a479b7847130ad7cfeab9ddbf70e7afdef9ed36c89b28e00afbb019a51999d6e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/container_eOXHH9wX.js/index.php?module=Proxy&action=getUmdJs&chunk=0&cb=38ce40a1bce7d1c9927847d0d0cbc9bc HTTP/1.1
Host: haymarketstat.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haymarketstat.de/js/container_eOXHH9wX.js/
DNT: 1
Connection: keep-alive
Cookie: MATOMO_SESSID=km2rk21io52g597uu3vaur2q7s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 18 Apr 2024 13:39:07 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2

haymarketstat.de/js/container_eOXHH9wX.js/plugins/Morpheus/images/logo.svg?matomo

193.254.186.244

404 Not Found

153 B

URL GET HTTP/2
haymarketstat.de/js/container_eOXHH9wX.js/plugins/Morpheus/images/logo.svg?matomo
IP
193.254.186.244:443
ASN
#25504 Vautron Rechenzentrum AG

Requested by
https://haymarketstat.de/js/container_eOXHH9wX.js/
Certificate
IssuerLet's Encrypt
Subjectstats.haymarket.pm-kunden.de
Fingerprint8E:E0:70:53:40:0E:36:41:18:02:67:A4:45:B7:25:5A:98:45:29:51
ValidityThu, 22 Feb 2024 22:03:03 GMT - Wed, 22 May 2024 22:03:02 GMT

File type
HTML document, ASCII text, with no line terminators
Size
153 B (153 bytes)
Hash
8da645239d94c3cb83c17629f652dd95
a4102d313dfaef4d919abc0a353f8a48c664ee01
a479b7847130ad7cfeab9ddbf70e7afdef9ed36c89b28e00afbb019a51999d6e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/container_eOXHH9wX.js/plugins/Morpheus/images/logo.svg?matomo HTTP/1.1
Host: haymarketstat.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haymarketstat.de/js/container_eOXHH9wX.js/
DNT: 1
Connection: keep-alive
Cookie: MATOMO_SESSID=km2rk21io52g597uu3vaur2q7s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 18 Apr 2024 13:39:07 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2

haymarketstat.de/js/container_eOXHH9wX.js/plugins/Morpheus/images/logo.svg?matomo

193.254.186.244

404 Not Found

153 B

URL GET HTTP/2
haymarketstat.de/js/container_eOXHH9wX.js/plugins/Morpheus/images/logo.svg?matomo
IP
193.254.186.244:443
ASN
#25504 Vautron Rechenzentrum AG

Requested by
https://haymarketstat.de/js/container_eOXHH9wX.js/
Certificate
IssuerLet's Encrypt
Subjectstats.haymarket.pm-kunden.de
Fingerprint8E:E0:70:53:40:0E:36:41:18:02:67:A4:45:B7:25:5A:98:45:29:51
ValidityThu, 22 Feb 2024 22:03:03 GMT - Wed, 22 May 2024 22:03:02 GMT

File type
HTML document, ASCII text, with no line terminators
Size
153 B (153 bytes)
Hash
8da645239d94c3cb83c17629f652dd95
a4102d313dfaef4d919abc0a353f8a48c664ee01
a479b7847130ad7cfeab9ddbf70e7afdef9ed36c89b28e00afbb019a51999d6e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/container_eOXHH9wX.js/plugins/Morpheus/images/logo.svg?matomo HTTP/1.1
Host: haymarketstat.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haymarketstat.de/js/container_eOXHH9wX.js/
DNT: 1
Connection: keep-alive
Cookie: MATOMO_SESSID=km2rk21io52g597uu3vaur2q7s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 18 Apr 2024 13:39:07 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2

haymarketstat.de/js/container_eOXHH9wX.js/

193.254.186.244

200 OK

145 kB

URL User Request GET HTTP/2
haymarketstat.de/js/container_eOXHH9wX.js/
IP
193.254.186.244:443
ASN
#25504 Vautron Rechenzentrum AG

Certificate
IssuerLet's Encrypt
Subjectstats.haymarket.pm-kunden.de
Fingerprint8E:E0:70:53:40:0E:36:41:18:02:67:A4:45:B7:25:5A:98:45:29:51
ValidityThu, 22 Feb 2024 22:03:03 GMT - Wed, 22 May 2024 22:03:02 GMT

File type

Size
145 kB (144957 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/container_eOXHH9wX.js/ HTTP/1.1
Host: haymarketstat.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 18 Apr 2024 13:39:07 GMT
content-type: text/html; charset=utf-8
x-matomo-request-id: 4f7bf
set-cookie: MATOMO_SESSID=km2rk21io52g597uu3vaur2q7s; path=/; secure; HttpOnly; SameSite=Lax
cache-control: no-store, must-revalidate
x-frame-options: sameorigin
referrer-policy: same-origin
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' 'unsafe-inline' 'unsafe-eval' data:;
content-encoding: gzip
X-Firefox-Spdy: h2

haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getNonCoreJs&cb=38ce40a1bce7d1c9927847d0d0cbc9bc

193.254.186.244

404 Not Found

153 B

URL GET HTTP/2
haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getNonCoreJs&cb=38ce40a1bce7d1c9927847d0d0cbc9bc
IP
193.254.186.244:443
ASN
#25504 Vautron Rechenzentrum AG

Requested by
https://haymarketstat.de/js/container_eOXHH9wX.js/
Certificate
IssuerLet's Encrypt
Subjectstats.haymarket.pm-kunden.de
Fingerprint8E:E0:70:53:40:0E:36:41:18:02:67:A4:45:B7:25:5A:98:45:29:51
ValidityThu, 22 Feb 2024 22:03:03 GMT - Wed, 22 May 2024 22:03:02 GMT

File type
HTML document, ASCII text, with no line terminators
Size
153 B (153 bytes)
Hash
8da645239d94c3cb83c17629f652dd95
a4102d313dfaef4d919abc0a353f8a48c664ee01
a479b7847130ad7cfeab9ddbf70e7afdef9ed36c89b28e00afbb019a51999d6e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/container_eOXHH9wX.js/index.php?module=Proxy&action=getNonCoreJs&cb=38ce40a1bce7d1c9927847d0d0cbc9bc HTTP/1.1
Host: haymarketstat.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haymarketstat.de/js/container_eOXHH9wX.js/
DNT: 1
Connection: keep-alive
Cookie: MATOMO_SESSID=km2rk21io52g597uu3vaur2q7s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 18 Apr 2024 13:39:07 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2

haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getCoreJs&cb=38ce40a1bce7d1c9927847d0d0cbc9bc

193.254.186.244

404 Not Found

153 B

URL GET HTTP/2
haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getCoreJs&cb=38ce40a1bce7d1c9927847d0d0cbc9bc
IP
193.254.186.244:443
ASN
#25504 Vautron Rechenzentrum AG

Requested by
https://haymarketstat.de/js/container_eOXHH9wX.js/
Certificate
IssuerLet's Encrypt
Subjectstats.haymarket.pm-kunden.de
Fingerprint8E:E0:70:53:40:0E:36:41:18:02:67:A4:45:B7:25:5A:98:45:29:51
ValidityThu, 22 Feb 2024 22:03:03 GMT - Wed, 22 May 2024 22:03:02 GMT

File type
HTML document, ASCII text, with no line terminators
Size
153 B (153 bytes)
Hash
8da645239d94c3cb83c17629f652dd95
a4102d313dfaef4d919abc0a353f8a48c664ee01
a479b7847130ad7cfeab9ddbf70e7afdef9ed36c89b28e00afbb019a51999d6e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/container_eOXHH9wX.js/index.php?module=Proxy&action=getCoreJs&cb=38ce40a1bce7d1c9927847d0d0cbc9bc HTTP/1.1
Host: haymarketstat.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haymarketstat.de/js/container_eOXHH9wX.js/
DNT: 1
Connection: keep-alive
Cookie: MATOMO_SESSID=km2rk21io52g597uu3vaur2q7s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 18 Apr 2024 13:39:07 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2

haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getNonCoreJs&cb=38ce40a1bce7d1c9927847d0d0cbc9bc

193.254.186.244

404 Not Found

153 B

URL GET HTTP/2
haymarketstat.de/js/container_eOXHH9wX.js/index.php?module=Proxy&action=getNonCoreJs&cb=38ce40a1bce7d1c9927847d0d0cbc9bc
IP
193.254.186.244:443
ASN
#25504 Vautron Rechenzentrum AG

Requested by
https://haymarketstat.de/js/container_eOXHH9wX.js/
Certificate
IssuerLet's Encrypt
Subjectstats.haymarket.pm-kunden.de
Fingerprint8E:E0:70:53:40:0E:36:41:18:02:67:A4:45:B7:25:5A:98:45:29:51
ValidityThu, 22 Feb 2024 22:03:03 GMT - Wed, 22 May 2024 22:03:02 GMT

File type
HTML document, ASCII text, with no line terminators
Size
153 B (153 bytes)
Hash
8da645239d94c3cb83c17629f652dd95
a4102d313dfaef4d919abc0a353f8a48c664ee01
a479b7847130ad7cfeab9ddbf70e7afdef9ed36c89b28e00afbb019a51999d6e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/container_eOXHH9wX.js/index.php?module=Proxy&action=getNonCoreJs&cb=38ce40a1bce7d1c9927847d0d0cbc9bc HTTP/1.1
Host: haymarketstat.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haymarketstat.de/js/container_eOXHH9wX.js/
DNT: 1
Connection: keep-alive
Cookie: MATOMO_SESSID=km2rk21io52g597uu3vaur2q7s
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 18 Apr 2024 13:39:07 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2

haymarketstat.de/js/container_eOXHH9wX.js/plugins/CoreHome/images/applogo_256.png

193.254.186.244

404 Not Found

153 B

URL GET HTTP/2
haymarketstat.de/js/container_eOXHH9wX.js/plugins/CoreHome/images/applogo_256.png
IP
193.254.186.244:443
ASN
#25504 Vautron Rechenzentrum AG

Requested by
https://haymarketstat.de/js/container_eOXHH9wX.js/
Certificate
IssuerLet's Encrypt
Subjectstats.haymarket.pm-kunden.de
Fingerprint8E:E0:70:53:40:0E:36:41:18:02:67:A4:45:B7:25:5A:98:45:29:51
ValidityThu, 22 Feb 2024 22:03:03 GMT - Wed, 22 May 2024 22:03:02 GMT

File type
HTML document, ASCII text, with no line terminators
Size
153 B (153 bytes)
Hash
8da645239d94c3cb83c17629f652dd95
a4102d313dfaef4d919abc0a353f8a48c664ee01
a479b7847130ad7cfeab9ddbf70e7afdef9ed36c89b28e00afbb019a51999d6e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/container_eOXHH9wX.js/plugins/CoreHome/images/applogo_256.png HTTP/1.1
Host: haymarketstat.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://haymarketstat.de/js/container_eOXHH9wX.js/
DNT: 1
Connection: keep-alive
Cookie: MATOMO_SESSID=km2rk21io52g597uu3vaur2q7s
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 18 Apr 2024 13:39:07 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate