| ecsrev.xyz/http:/www.https:/assetgame.https:/www.http:/assetgame.id=Standard/auth/home/auth/home/auth/home/auth |  172.67.155.126 | 301 Moved Permanently | 167 B |
URL User Request GET HTTP/2ecsrev.xyz/http:/www.https:/assetgame.https:/www.http:/assetgame.id=Standard/auth/home/auth/home/auth/home/auth IP172.67.155.126:443
CertificateIssuerGoogle Trust Services LLC Subjectecsrev.xyz Fingerprint74:1B:80:52:8F:C6:7E:50:E9:54:FA:62:92:7E:6F:35:71:72:6E:28 ValidityThu, 28 Mar 2024 02:19:48 GMT - Wed, 26 Jun 2024 02:19:47 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /http:/www.https:/assetgame.https:/www.http:/assetgame.id=Standard/auth/home/auth/home/auth/home/auth HTTP/1.1
Host: ecsrev.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 04 May 2024 11:08:41 GMT
content-type: text/html
content-length: 167
location: https://ecsr.io
cache-control: max-age=3600
expires: Sat, 04 May 2024 12:08:41 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uVnrjL0O1O8mV%2BpUcGCJQM1end5jJfG%2F4%2F53dsXsirEwKQUmcg1KfxSPk%2BRS1AuUT6l%2FfSWy6aKoqJJgkGrnWbSZkUgX3%2BRMBquqKpoaE9aDA7hR8kZPw11IVUmc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e808c9cab956bb-OSL
X-Firefox-Spdy: h2
|
| cdn.side7.xyz/photo_2024-01-05_14-19-45.jpg |  104.21.71.213 | 200 OK | 20 kB |
URL GET HTTP/2cdn.side7.xyz/photo_2024-01-05_14-19-45.jpg IP104.21.71.213:443
CertificateIssuerLet's Encrypt Subjectcdn.side7.xyz FingerprintF3:A5:10:67:E7:84:89:8D:3C:09:39:49:12:6D:3F:C9:EE:C7:66:89 ValidityTue, 02 Apr 2024 11:41:55 GMT - Mon, 01 Jul 2024 11:41:54 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 306x384, components 3 Hashe3ce476066a36260da62d2661c2b432d a5084f3734479e2c6eaef3efe072b50d5a939d71 6d7834650da0cd802dc5c2fc8fcd1fa0ac2dea107a0cd5ecbe1135d3aadf2b98
GET /photo_2024-01-05_14-19-45.jpg HTTP/1.1
Host: cdn.side7.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ecsr.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 11:08:42 GMT
content-type: image/jpeg
content-length: 20154
etag: "e3ce476066a36260da62d2661c2b432d"
last-modified: Sat, 24 Feb 2024 00:42:07 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kI92oE%2FDu9X8jf8Gyted3wVr9r9r6w4t6l1%2FYSiFg8wK%2BMMwrppqkkvQZI%2FwSS3O17d%2FfXwiqI9z4ZMP9KpAF7gCAs11ahMuEJX162m2Kky7DxlarsqbZLjML%2Fb3y5np"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 87e808ce39aab517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
URL User Request GET HTTP/2IP104.21.89.167:443
CertificateIssuerLet's Encrypt Subjectecsr.io FingerprintB5:55:E3:9F:82:9C:A9:55:31:EB:62:64:4D:0A:2D:3E:B4:B6:07:FC ValiditySat, 30 Mar 2024 17:15:27 GMT - Fri, 28 Jun 2024 17:15:26 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2227), with no line terminators Hashd182a82927362b53c1d2f91ff565a417 c6ce695091164158b025791641a091ef7ceae69d 26ff3b642b6c73b60712a698ac628797a039708b48b058f809f1fa42273662c1
GET / HTTP/1.1
Host: ecsr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 11:08:42 GMT
content-type: text/html
last-modified: Sun, 03 Mar 2024 21:56:26 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OUllkqeetivYGZK2DwJLFUSPIiBrTVa5gGM%2BWZ0O3IfsT6q1jU4tBwdo4UV4Z1%2BQWvSVINBwwjsmRMReRZD1dSDIKk9Fb%2BxFkhUhCoqUJwTMnbwmYNTOgTUM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e808cb1d7756c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|