IP172.67.155.231:0
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
GET / HTTP/1.1
Host: planetroth.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 18 Apr 2024 05:43:15 GMT
content-type: text/html
content-length: 167
location: https://theologicalsnowshorter.com/zbj78pgpd?key=d097de23cd53eea360f48ec5332381d9
cache-control: max-age=3600
expires: Thu, 18 Apr 2024 06:43:15 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=487iTBvkGcBCdlOTpaSLK2JoBNJCqwfZQUADzjrj0y9vJ3bxRrO84RziFRJ97LnwLGIhLyowQea7ixk4X2LWOimSntwCW%2Fv5TeIhw0KNoSjHuRSHQLuxYbgLQ8oDQFp02A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87625614ae790b55-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
| theologicalsnowshorter.com/zbj78pgpd?key=d097de23cd53eea360f48ec5332381d9 | 192.243.59.20 | | 1.3 kB |
URL theologicalsnowshorter.com/zbj78pgpd?key=d097de23cd53eea360f48ec5332381d9 IP192.243.59.20:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text, with very long lines (408) Hash45e0610cc255e50bd3d8820d7e6210ec 44a426bbdf930607aa4cbc187a73dbbeea7d7b31 5021e092abc88abcacaa39f289034c938305bacba08b9a2ddb770415ea6962cd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /zbj78pgpd?key=d097de23cd53eea360f48ec5332381d9 HTTP/1.1
Host: theologicalsnowshorter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 18 Apr 2024 05:43:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=22861006; expires=Fri, 19 Apr 2024 05:43:16 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.qZYrQQpR7bRoarxAoh1TO4GUc147YpD1rYyxwwdDCbs; expires=Thu, 18 Apr 2024 05:44:16 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c02e5c5720113bcd1fa26ce21095a80d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
| theologicalsnowshorter.com/api/users?token=L3piajc4cGdwZD9rZXk9ZDA5N2RlMjNjZDUzZWVhMzYwZjQ4ZWM1MzMyMzgxZDkmcHN0PTE3MTM0MTkwNTYmcm10Yz10JnNodT1hM2JhZjc1Mzg1NDcxOGYwNDUzNDczMjhhMjdlM2Y2ZmVmYmVlZmQzYWM0NjYxNDhkOThkZDhiNzM4NDI1OTc0YWMwMzg2NmJhOGM3MTMyOTY2NTg0MmRjZjczZDE4Yzg4NDYwMzQyZWRjNzAyYTIyZjMyNDA3ZjM4OTczYWQ1MDg1MDI1MjFjOTUwZjM3ZjBjNzFjNTcxYTYzNmM2NWJjYzFmMmM4ODc1MWIzZDIwZmZhNDEzNWE5ZTA2OTQ3&uuid=&pii=&in=false | 192.243.59.12 | 200 OK | 0 B |
URL User Request GET HTTP/1.1theologicalsnowshorter.com/api/users?token=L3piajc4cGdwZD9rZXk9ZDA5N2RlMjNjZDUzZWVhMzYwZjQ4ZWM1MzMyMzgxZDkmcHN0PTE3MTM0MTkwNTYmcm10Yz10JnNodT1hM2JhZjc1Mzg1NDcxOGYwNDUzNDczMjhhMjdlM2Y2ZmVmYmVlZmQzYWM0NjYxNDhkOThkZDhiNzM4NDI1OTc0YWMwMzg2NmJhOGM3MTMyOTY2NTg0MmRjZjczZDE4Yzg4NDYwMzQyZWRjNzAyYTIyZjMyNDA3ZjM4OTczYWQ1MDg1MDI1MjFjOTUwZjM3ZjBjNzFjNTcxYTYzNmM2NWJjYzFmMmM4ODc1MWIzZDIwZmZhNDEzNWE5ZTA2OTQ3&uuid=&pii=&in=false IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjecttheologicalsnowshorter.com FingerprintC1:52:11:A6:FE:B9:0A:FF:8B:EE:7A:48:09:EE:72:1D:A6:DA:C7:72 ValiditySun, 07 Apr 2024 08:32:57 GMT - Sat, 06 Jul 2024 08:32:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /api/users?token=L3piajc4cGdwZD9rZXk9ZDA5N2RlMjNjZDUzZWVhMzYwZjQ4ZWM1MzMyMzgxZDkmcHN0PTE3MTM0MTkwNTYmcm10Yz10JnNodT1hM2JhZjc1Mzg1NDcxOGYwNDUzNDczMjhhMjdlM2Y2ZmVmYmVlZmQzYWM0NjYxNDhkOThkZDhiNzM4NDI1OTc0YWMwMzg2NmJhOGM3MTMyOTY2NTg0MmRjZjczZDE4Yzg4NDYwMzQyZWRjNzAyYTIyZjMyNDA3ZjM4OTczYWQ1MDg1MDI1MjFjOTUwZjM3ZjBjNzFjNTcxYTYzNmM2NWJjYzFmMmM4ODc1MWIzZDIwZmZhNDEzNWE5ZTA2OTQ3&uuid=&pii=&in=false HTTP/1.1
Host: theologicalsnowshorter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theologicalsnowshorter.com/api/users?token=L3piajc4cGdwZD9rZXk9OWNhNjAxYTlmNDdjNzM1ZGY3NmQ1Y2E0NmZhMjZhNjYmc3VibWV0cmljPTIyODYxMDA2
Cookie: u_pl=22861006; ain=eyJhbGciOiJIUzI1NiJ9.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.qZYrQQpR7bRoarxAoh1TO4GUc147YpD1rYyxwwdDCbs; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 18 Apr 2024 05:43:17 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d77d76e5009d2bb1203c5afe38e1a92a
Strict-Transport-Security: max-age=0; includeSubdomains
|
| theologicalsnowshorter.com/favicon.ico | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1theologicalsnowshorter.com/favicon.ico IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://theologicalsnowshorter.com/api/users?token=L3piajc4cGdwZD9rZXk9ZDA5N2RlMjNjZDUzZWVhMzYwZjQ4ZWM1MzMyMzgxZDkmcHN0PTE3MTM0MTkwNTYmcm10Yz10JnNodT1hM2JhZjc1Mzg1NDcxOGYwNDUzNDczMjhhMjdlM2Y2ZmVmYmVlZmQzYWM0NjYxNDhkOThkZDhiNzM4NDI1OTc0YWMwMzg2NmJhOGM3MTMyOTY2NTg0MmRjZjczZDE4Yzg4NDYwMzQyZWRjNzAyYTIyZjMyNDA3ZjM4OTczYWQ1MDg1MDI1MjFjOTUwZjM3ZjBjNzFjNTcxYTYzNmM2NWJjYzFmMmM4ODc1MWIzZDIwZmZhNDEzNWE5ZTA2OTQ3&uuid=&pii=&in=false CertificateIssuerLet's Encrypt Subjecttheologicalsnowshorter.com FingerprintC1:52:11:A6:FE:B9:0A:FF:8B:EE:7A:48:09:EE:72:1D:A6:DA:C7:72 ValiditySun, 07 Apr 2024 08:32:57 GMT - Sat, 06 Jul 2024 08:32:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: theologicalsnowshorter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theologicalsnowshorter.com/api/users?token=L3piajc4cGdwZD9rZXk9ZDA5N2RlMjNjZDUzZWVhMzYwZjQ4ZWM1MzMyMzgxZDkmcHN0PTE3MTM0MTkwNTYmcm10Yz10JnNodT1hM2JhZjc1Mzg1NDcxOGYwNDUzNDczMjhhMjdlM2Y2ZmVmYmVlZmQzYWM0NjYxNDhkOThkZDhiNzM4NDI1OTc0YWMwMzg2NmJhOGM3MTMyOTY2NTg0MmRjZjczZDE4Yzg4NDYwMzQyZWRjNzAyYTIyZjMyNDA3ZjM4OTczYWQ1MDg1MDI1MjFjOTUwZjM3ZjBjNzFjNTcxYTYzNmM2NWJjYzFmMmM4ODc1MWIzZDIwZmZhNDEzNWE5ZTA2OTQ3&uuid=&pii=&in=false
Cookie: u_pl=22861006; ain=eyJhbGciOiJIUzI1NiJ9.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.qZYrQQpR7bRoarxAoh1TO4GUc147YpD1rYyxwwdDCbs; cjs=t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 18 Apr 2024 05:43:17 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 005bd44655b3c06eca73896b0d0b572e
Strict-Transport-Security: max-age=0; includeSubdomains
|