Report - jasonsidabras.com

Report Overview

Submitted URL
jasonsidabras.com
IP
194.26.135.56
ASN
#57523 Chang Way Technologies Co. Limited
Submitted
2024-05-10 13:48:51
Access
public
Website Title
Meta
Final URL
jasonsidabras.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
4
Threat Detection Systems
42

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
jasonsidabras.com	unknown	2006-11-27	2017-04-02	2023-11-04	10 kB	607 kB	194.26.135.56
ipinfo.io	8136	2013-04-23	2013-12-16	2024-05-09	442 B	745 B	34.117.186.192
cdnstat.net	unknown	2023-03-24	2018-07-13	2024-05-06	439 B	807 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-10 13:48:25	medium	194.26.135.56	Client IP	ET DROP Spamhaus DROP Listed Traffic Inbound group 37
2024-05-10 13:48:25	medium	194.26.135.56	Client IP	ET DROP Spamhaus DROP Listed Traffic Inbound group 37
2024-05-10 13:48:26	medium	Client IP	34.117.186.192	ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)
2024-05-10 13:48:26	medium	Client IP	34.117.186.192	ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed
2024-05-10	medium	jasonsidabras.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	jasonsidabras.com/js/main.js	19 kB	2024-05-10	2024-05-16
Pretty URL jasonsidabras.com/js/main.js IP 194.26.135.56 ASN #57523 Chang Way Technologies Co. Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-10 15:48:51 Last Seen2024-05-16 01:41:32 Times Seen2 Hash 27b8715ba85211b9759979b4177e3f2d c5517260ea34551d51b187c471e8464aff5545d7 d351ea4632c22ccfc5079b4b61ad7b2e9ee148b019e58e98819294cf21b15e0c Loading...

	jasonsidabras.com/	0 B	2023-03-07	2024-05-20
Pretty URL jasonsidabras.com/ IP 194.26.135.56 ASN #57523 Chang Way Technologies Co. Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-20 21:44:48 Times Seen37893734 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdnstat.net/get/script.js?referrer=https://jasonsidabras.com/	129 B	2023-06-10	2024-05-19
Pretty URL cdnstat.net/get/script.js?referrer=https://jasonsidabras.com/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-10 20:46:14 Last Seen2024-05-19 08:58:02 Times Seen437 Hash f9cfcf8fa6b061acf946e44688f84187 f98c865b09ab852ce2274e5d02f9fd70e6341cb9 c59a3960888d96b3748601b9b77df171bafa3d53289ec4b8b6db3d474e9a39e1 Loading...

	jasonsidabras.com/	0 B	2023-03-07	2024-05-20
Pretty URL jasonsidabras.com/ IP 194.26.135.56 ASN #57523 Chang Way Technologies Co. Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-20 21:44:48 Times Seen37893734 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	jasonsidabras.com/	0 B	2023-03-07	2024-05-20
Pretty URL jasonsidabras.com/ IP 194.26.135.56 ASN #57523 Chang Way Technologies Co. Limited Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-20 21:44:48 Times Seen37893734 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	jasonsidabras.com/js/jquery.min.js	90 kB	2023-04-17	2024-05-16
Pretty URL jasonsidabras.com/js/jquery.min.js IP 194.26.135.56 ASN #57523 Chang Way Technologies Co. Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-17 09:31:06 Last Seen2024-05-16 01:41:33 Times Seen46 Hash 778ae96c2af47a39bdabec180ac55ec5 70157c5ab4d804fc206a560e4c6c2609c4294fd4 c167fa02bb2b940af9d88064784e89ce000c0c5e533cbfbcc0dd0b00b05b0c4b Loading...

	jasonsidabras.com/intl-tel-input/js/intlTelInput.js	89 kB	2023-03-08	2024-05-16
Pretty URL jasonsidabras.com/intl-tel-input/js/intlTelInput.js IP 194.26.135.56 ASN #57523 Chang Way Technologies Co. Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:10:50 Last Seen2024-05-16 01:41:33 Times Seen51 Hash 65be8f30796947f4fc86132bd24d4eb0 f8f5eaf8d327b0fb50594bcbf840f5489470cd63 c86d987ebaba52573e33c4c1f773ecae1661c964d83a35c8958627641c307940 Loading...

	jasonsidabras.com/intl-tel-input/js/utils.js	252 kB	2023-03-08	2024-05-20
Pretty URL jasonsidabras.com/intl-tel-input/js/utils.js IP 194.26.135.56 ASN #57523 Chang Way Technologies Co. Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:10:50 Last Seen2024-05-20 10:37:07 Times Seen181 Hash 85f88ba750d38b98d54f8b4afadc4df9 bd4c971b82de3d095f54837b68c08c5dcd1abecf b646dbfe618a51842d1a348601fff46100b4b36d924e0d740553764b0d7111ce Loading...

	jasonsidabras.com/js/main_s.js	9.2 kB	2024-05-10	2024-05-10
Pretty URL jasonsidabras.com/js/main_s.js IP 194.26.135.56 ASN #57523 Chang Way Technologies Co. Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-10 15:48:51 Last Seen2024-05-10 15:48:51 Times Seen2 Hash 4774dc541516ccb48c24f7927e5faba9 bab078b97086d3727688d8d1d9c914278a3e6ed9 46f101bcfae7cd740b757662998a93af1fde321f104759b8078f370cc9fcbef2 Loading...

	jasonsidabras.com/js/validate.js	4.5 kB	2023-03-14	2024-05-16
Pretty URL jasonsidabras.com/js/validate.js IP 194.26.135.56 ASN #57523 Chang Way Technologies Co. Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 04:20:48 Last Seen2024-05-16 01:41:33 Times Seen29 Hash a7b35f4d9cb795ec364b5a647d12eee9 0f30f76fbb4b8140fa526e7b13b6a6b719e17221 d66c7f488f83a4a4ea7ea0c1c98c67530aca35c4708285871570f891122c5493 Loading...

HTTP Transactions (23)

URL IP Response Size

jasonsidabras.com/

194.26.135.56

200 OK

2.7 kB

URL User Request GET HTTP/1.1
jasonsidabras.com/
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
HTML document, Unicode text, UTF-8 text
Size
2.7 kB (2706 bytes)
Hash
72db6a2ad3207c6eb7254b986b328471
05100f412a2b11928116b4e47a82973aa82cbe02
a37916dd10a354846df4e9ae6bc9457910754a22eb78ab53955f751883f11286

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:25 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 2706
Connection: keep-alive
Set-Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip

jasonsidabras.com/css/main.css

194.26.135.56

200 OK

4.9 kB

URL GET HTTP/1.1
jasonsidabras.com/css/main.css
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
ASCII text
Size
4.9 kB (4928 bytes)
Hash
da52ac19b5f97245eb747bfd759d36c1
462bd53d6e9efe65cc4fec1f8e54c5503ca13280
ebd3536dd7a8955c70279beb98748a56f9fe3fb2de895fc61ac25df4baed8ee4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/main.css HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:25 GMT
Content-Type: text/css
Last-Modified: Tue, 22 Aug 2023 20:57:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"64e52124-46c3"
Content-Encoding: gzip

jasonsidabras.com/css/form.css

194.26.135.56

200 OK

1.0 kB

URL GET HTTP/1.1
jasonsidabras.com/css/form.css
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
ASCII text
Size
1.0 kB (1025 bytes)
Hash
91c1a55955e2dc168edc9bee336ee663
ee944c1c47380214ce5dc8f8f7e8cf09e917119f
524f64ae2d22d7074593ed14c96152e0ffc84230ee25d366ae39887fe62d33d9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/form.css HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:25 GMT
Content-Type: text/css
Last-Modified: Tue, 22 Aug 2023 19:32:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"64e50d3a-bd4"
Content-Encoding: gzip

jasonsidabras.com/intl-tel-input/css/intlTelInput.min.css

194.26.135.56

200 OK

3.3 kB

URL GET HTTP/1.1
jasonsidabras.com/intl-tel-input/css/intlTelInput.min.css
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
ASCII text, with very long lines (19157), with no line terminators
Size
3.3 kB (3304 bytes)
Hash
6b7fb2ee130535419a67afb198f41c2b
ffb8a25633c4ddeab81d1b1742ac2fd0b442a4c6
c6956e8710cf477f7014440385ae16ee4b8cc7ecfd02fddd4d2f0c6c7fd15845

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /intl-tel-input/css/intlTelInput.min.css HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:25 GMT
Content-Type: text/css
Last-Modified: Tue, 22 Aug 2023 19:17:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"64e509be-4ad5"
Content-Encoding: gzip

jasonsidabras.com/js/jquery.min.js

194.26.135.56

200 OK

36 kB

URL GET HTTP/1.1
jasonsidabras.com/js/jquery.min.js
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65434)
Size
36 kB (36394 bytes)
Hash
778ae96c2af47a39bdabec180ac55ec5
70157c5ab4d804fc206a560e4c6c2609c4294fd4
c167fa02bb2b940af9d88064784e89ce000c0c5e533cbfbcc0dd0b00b05b0c4b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/jquery.min.js HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:26 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 22 Aug 2023 15:25:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"64e4d370-15f77"
Content-Encoding: gzip

jasonsidabras.com/css/css2.css

194.26.135.56

200 OK

617 B

URL GET HTTP/1.1
jasonsidabras.com/css/css2.css
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
ASCII text
Size
617 B (617 bytes)
Hash
517411abf438548d8e27b5121c3b20ba
3e2946fab6477e53a9ce15c8caca0f493a92b30f
508b0ee1905c335122026413c38c4cc1c0d871238acbaafa5202989c816313c9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/css2.css HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/css/main.css
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:26 GMT
Content-Type: text/css
Last-Modified: Tue, 22 Aug 2023 15:25:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"64e4d370-13e9"
Content-Encoding: gzip

jasonsidabras.com/images/avatar.png

194.26.135.56

200 OK

3.3 kB

URL GET HTTP/1.1
jasonsidabras.com/images/avatar.png
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
PNG image data, 75 x 46, 8-bit/color RGBA, non-interlaced
Size
3.3 kB (3299 bytes)
Hash
b1b639ab54b2176a2dba882217db8a76
0e8fd48e7a43961150fdf7c31f61596f71136b61
3e550c09d6f105c76f84c1016f0d34f5f6506073a26ad443536e382f9afefa87

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/avatar.png HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:26 GMT
Content-Type: image/png
Content-Length: 3299
Last-Modified: Tue, 22 Aug 2023 15:25:36 GMT
Connection: keep-alive
ETag: "64e4d370-ce3"
Accept-Ranges: bytes

jasonsidabras.com/js/main.js

194.26.135.56

200 OK

6.2 kB

URL GET HTTP/1.1
jasonsidabras.com/js/main.js
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
Unicode text, UTF-8 text, with very long lines (370)
Size
6.2 kB (6224 bytes)
Hash
c69ea629e874c19d7d5db36fd0d2be3c
a8cb2e79051f1f5a5eedc8d2bf5953f4ad210c72
3d4d232c7787e509eb85ba48e54903400f986ffbe39996e196965addd76f3189

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/main.js HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:26 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Mon, 27 Nov 2023 14:37:10 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6564a996-49b7"
Content-Encoding: gzip

jasonsidabras.com/js/main_s.js

194.26.135.56

200 OK

3.3 kB

URL GET HTTP/1.1
jasonsidabras.com/js/main_s.js
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
JavaScript source, Unicode text, UTF-8 text
Size
3.3 kB (3335 bytes)
Hash
4774dc541516ccb48c24f7927e5faba9
bab078b97086d3727688d8d1d9c914278a3e6ed9
46f101bcfae7cd740b757662998a93af1fde321f104759b8078f370cc9fcbef2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/main_s.js HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:26 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Mon, 04 Mar 2024 11:51:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"65e5b5d4-23df"
Content-Encoding: gzip

jasonsidabras.com/js/validate.js

194.26.135.56

200 OK

1.6 kB

URL GET HTTP/1.1
jasonsidabras.com/js/validate.js
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (451)
Size
1.6 kB (1624 bytes)
Hash
a7b35f4d9cb795ec364b5a647d12eee9
0f30f76fbb4b8140fa526e7b13b6a6b719e17221
d66c7f488f83a4a4ea7ea0c1c98c67530aca35c4708285871570f891122c5493

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/validate.js HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:26 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 22 Aug 2023 19:11:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"64e50858-118e"
Content-Encoding: gzip

jasonsidabras.com/intl-tel-input/js/intlTelInput.js

194.26.135.56

200 OK

25 kB

URL GET HTTP/1.1
jasonsidabras.com/intl-tel-input/js/intlTelInput.js
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (9885)
Size
25 kB (25448 bytes)
Hash
65be8f30796947f4fc86132bd24d4eb0
f8f5eaf8d327b0fb50594bcbf840f5489470cd63
c86d987ebaba52573e33c4c1f773ecae1661c964d83a35c8958627641c307940

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /intl-tel-input/js/intlTelInput.js HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:26 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 22 Aug 2023 19:17:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"64e509be-15cf8"
Content-Encoding: gzip

jasonsidabras.com/fonts/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2

194.26.135.56

200 OK

31 kB

URL GET HTTP/1.1
jasonsidabras.com/fonts/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 30856, version 1.0
Size
31 kB (30856 bytes)
Hash
d5de368ad6cb9721be72319431de3adb
0799da07002c5bc2250f2743b574320d4aa199fc
7eeb99e9f0563d79a34bf9d13c260f0552269bbde05b145d331cdf1aae47c25a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/css/css2.css
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7; PHPREFS=full
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:26 GMT
Content-Type: font/woff2
Content-Length: 30856
Last-Modified: Tue, 22 Aug 2023 15:25:36 GMT
Connection: keep-alive
ETag: "64e4d370-7888"
Accept-Ranges: bytes

jasonsidabras.com/intl-tel-input/js/utils.js

194.26.135.56

200 OK

74 kB

URL GET HTTP/1.1
jasonsidabras.com/intl-tel-input/js/utils.js
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
JavaScript source, ASCII text, with very long lines (1454)
Size
74 kB (74363 bytes)
Hash
85f88ba750d38b98d54f8b4afadc4df9
bd4c971b82de3d095f54837b68c08c5dcd1abecf
b646dbfe618a51842d1a348601fff46100b4b36d924e0d740553764b0d7111ce

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /intl-tel-input/js/utils.js HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:26 GMT
Content-Type: application/javascript; charset=utf-8
Last-Modified: Tue, 22 Aug 2023 19:17:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"64e509be-3d750"
Content-Encoding: gzip

jasonsidabras.com/fonts/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2

194.26.135.56

200 OK

31 kB

URL GET HTTP/1.1
jasonsidabras.com/fonts/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 30856, version 1.0
Size
31 kB (30856 bytes)
Hash
d5de368ad6cb9721be72319431de3adb
0799da07002c5bc2250f2743b574320d4aa199fc
7eeb99e9f0563d79a34bf9d13c260f0552269bbde05b145d331cdf1aae47c25a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/css/css2.css
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7; PHPREFS=full
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:26 GMT
Content-Type: font/woff2
Content-Length: 30856
Last-Modified: Tue, 22 Aug 2023 15:25:36 GMT
Connection: keep-alive
ETag: "64e4d370-7888"
Accept-Ranges: bytes

jasonsidabras.com/images/background.jpg

194.26.135.56

200 OK

207 kB

URL GET HTTP/1.1
jasonsidabras.com/images/background.jpg
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1440x1024, components 3
Size
207 kB (206759 bytes)
Hash
27e7aea2ab6cfc97269ba1b72f475044
e13df739e2f3ddda5c65049d1518d0f2a3cecbb9
769803a7484c865084cde758a1d1a9a3e95666ac5bbafcffea8203f45d1b49f3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/background.jpg HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/css/main.css
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:26 GMT
Content-Type: image/jpeg
Content-Length: 206759
Last-Modified: Tue, 22 Aug 2023 15:25:36 GMT
Connection: keep-alive
ETag: "64e4d370-327a7"
Accept-Ranges: bytes

jasonsidabras.com/fonts/JTUSjIg1_i6t8kCHKm459W1hyyTh89ZNpQ.woff2

194.26.135.56

200 OK

21 kB

URL GET HTTP/1.1
jasonsidabras.com/fonts/JTUSjIg1_i6t8kCHKm459W1hyyTh89ZNpQ.woff2
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 21212, version 1.0
Size
21 kB (21212 bytes)
Hash
86d7730928022ce4a8457e979238654b
51187f3cfb95954b7b7e1a290e245e6d43155a49
4002b3d33eacf22d2552a3a56bd15db58a1d7b850f5ffdc177c767a05e8423e5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/JTUSjIg1_i6t8kCHKm459W1hyyTh89ZNpQ.woff2 HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/css/css2.css
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7; PHPREFS=full
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:26 GMT
Content-Type: font/woff2
Content-Length: 21212
Last-Modified: Tue, 22 Aug 2023 15:25:36 GMT
Connection: keep-alive
ETag: "64e4d370-52dc"
Accept-Ranges: bytes

jasonsidabras.com/favicon.ico

194.26.135.56

200 OK

4.3 kB

URL GET HTTP/1.1
jasonsidabras.com/favicon.ico
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel
Size
4.3 kB (4307 bytes)
Hash
d982da3d157d88e870688f5914b43f23
8bd6a94cbd4ee722d8886ef477e0ab42c8ab3b16
3c9600c436978fe97c4be9a74ef2a7adf7c9e9507d876b4dfd5abe971db48733

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7; PHPREFS=full
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:26 GMT
Content-Type: image/x-icon
Last-Modified: Tue, 22 Aug 2023 15:25:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"64e4d370-1083e"
Content-Encoding: gzip

ipinfo.io/json?token=b4bf34466d3829

34.117.186.192

200 OK

235 B

URL GET HTTP/2
ipinfo.io/json?token=b4bf34466d3829
IP
34.117.186.192:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectipinfo.io
FingerprintC3:D1:C0:FE:0C:C8:E1:18:4F:C8:22:D0:9C:FF:D9:F4:EF:72:CD:6B
ValidityFri, 19 Apr 2024 20:17:23 GMT - Thu, 18 Jul 2024 20:17:22 GMT

File type
JSON text data
Size
235 B (235 bytes)
Hash
ac779bc45309c95092b4622f37ecbfb6
74c59641df79f8953bf4253f6d1f03e2f9a2a172
c5ce984eb68eb145babf790332e7f9d0741be53365f0171fbffe425c558b63d6

HTTP Headers

GET /json?token=b4bf34466d3829 HTTP/1.1
Host: ipinfo.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jasonsidabras.com/
Origin: https://jasonsidabras.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.24.0
date: Fri, 10 May 2024 13:48:26 GMT
content-type: application/json; charset=utf-8
content-length: 235
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-envoy-upstream-service-time: 3
via: 1.1 google
strict-transport-security: max-age=2592000; includeSubDomains
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

jasonsidabras.com/intl-tel-input/img/flags.png

194.26.135.56

200 OK

71 kB

URL GET HTTP/1.1
jasonsidabras.com/intl-tel-input/img/flags.png
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced
Size
71 kB (70857 bytes)
Hash
416250f60d785a2e02f17e054d2e4e44
21572c9751e5a3dc20395befa0fcb349c32c4811
0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /intl-tel-input/img/flags.png HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/intl-tel-input/css/intlTelInput.min.css
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7; PHPREFS=full
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:26 GMT
Content-Type: image/png
Content-Length: 70857
Last-Modified: Tue, 22 Aug 2023 19:17:18 GMT
Connection: keep-alive
ETag: "64e509be-114c9"
Accept-Ranges: bytes

jasonsidabras.com/fonts/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2

194.26.135.56

200 OK

31 kB

URL GET HTTP/1.1
jasonsidabras.com/fonts/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 30856, version 1.0
Size
31 kB (30856 bytes)
Hash
d5de368ad6cb9721be72319431de3adb
0799da07002c5bc2250f2743b574320d4aa199fc
7eeb99e9f0563d79a34bf9d13c260f0552269bbde05b145d331cdf1aae47c25a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/css/css2.css
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7; PHPREFS=full
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:28 GMT
Content-Type: font/woff2
Content-Length: 30856
Last-Modified: Tue, 22 Aug 2023 15:25:36 GMT
Connection: keep-alive
ETag: "64e4d370-7888"
Accept-Ranges: bytes

jasonsidabras.com/fonts/JTUSjIg1_i6t8kCHKm459W1hyyTh89ZNpQ.woff2

194.26.135.56

200 OK

21 kB

URL GET HTTP/1.1
jasonsidabras.com/fonts/JTUSjIg1_i6t8kCHKm459W1hyyTh89ZNpQ.woff2
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 21212, version 1.0
Size
21 kB (21212 bytes)
Hash
86d7730928022ce4a8457e979238654b
51187f3cfb95954b7b7e1a290e245e6d43155a49
4002b3d33eacf22d2552a3a56bd15db58a1d7b850f5ffdc177c767a05e8423e5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/JTUSjIg1_i6t8kCHKm459W1hyyTh89ZNpQ.woff2 HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/css/css2.css
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7; PHPREFS=full
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:28 GMT
Content-Type: font/woff2
Content-Length: 21212
Last-Modified: Tue, 22 Aug 2023 15:25:36 GMT
Connection: keep-alive
ETag: "64e4d370-52dc"
Accept-Ranges: bytes

jasonsidabras.com/fonts/JTUSjIg1_i6t8kCHKm459W1hyyTh89ZNpQ.woff2

194.26.135.56

200 OK

21 kB

URL GET HTTP/1.1
jasonsidabras.com/fonts/JTUSjIg1_i6t8kCHKm459W1hyyTh89ZNpQ.woff2
IP
194.26.135.56:443
ASN
#57523 Chang Way Technologies Co. Limited

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectjasonsidabras.com
Fingerprint39:EF:32:09:8D:D6:03:AF:05:38:AC:C1:95:D2:41:2E:A3:58:97:06
ValiditySun, 24 Mar 2024 15:13:07 GMT - Sat, 22 Jun 2024 15:13:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 21212, version 1.0
Size
21 kB (21212 bytes)
Hash
86d7730928022ce4a8457e979238654b
51187f3cfb95954b7b7e1a290e245e6d43155a49
4002b3d33eacf22d2552a3a56bd15db58a1d7b850f5ffdc177c767a05e8423e5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/JTUSjIg1_i6t8kCHKm459W1hyyTh89ZNpQ.woff2 HTTP/1.1
Host: jasonsidabras.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/css/css2.css
Cookie: PHPSESSID=grlna5bjtc87cq5rr5d87a8bk7; PHPREFS=full
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Fri, 10 May 2024 13:48:30 GMT
Content-Type: font/woff2
Content-Length: 21212
Last-Modified: Tue, 22 Aug 2023 15:25:36 GMT
Connection: keep-alive
ETag: "64e4d370-52dc"
Accept-Ranges: bytes

cdnstat.net/get/script.js?referrer=https://jasonsidabras.com/

0.0.0.0

0 B

URL GET
cdnstat.net/get/script.js?referrer=https://jasonsidabras.com/
IP
0.0.0.0:0
ASN
#0

Requested by
https://jasonsidabras.com/
Certificate
IssuerLet's Encrypt
Subjectcdnstat.net
FingerprintED:41:75:FC:84:B2:43:E3:55:6B:3E:16:3A:68:2F:3A:15:E4:F0:5E
ValidityWed, 13 Mar 2024 17:42:45 GMT - Tue, 11 Jun 2024 17:42:44 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /get/script.js?referrer=https://jasonsidabras.com/ HTTP/1.1
Host: cdnstat.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jasonsidabras.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 13:48:27 GMT
content-type: text/html; charset=utf-8
x-powered-by: PHP/8.2.1
access-control-allow-origin: https://jasonsidabras.com
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CE5zVNlaFXSXk4ri6NVNuzXuJZcij%2FMi0tw7ZWSelbLhhZ9elQnskhyeNOT9bAL7ixLN3n5vkxoEr6CfhMdgA6KNQgWACqzoMQb7yqPvJjefYWMWycP7TDJH56dm2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881a630dce72712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML