URL User Request GET HTTP/1.1IP 62.3.58.17:80
ASN#212913 FOP Hornostay Mykhaylo Ivanovych
File typeHTML document, ASCII text, with CRLF line terminators Hash4c555068310076e85908835c721911f5 9ec990aabb4391e139034f68e5e657e0f1d0b74d 568b4de0ad30e85670e724dc30ccb675924353b77807356c5ad7f29c8c38f510
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: emv1.clbc-login.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.14.2
Date: Fri, 03 May 2024 23:28:21 GMT
Content-Type: text/html
Content-Length: 185
Connection: close
Location: https://clbc-login.online/
|
URL User Request GET HTTP/1.1IP62.3.58.17:443 ASN#212913 FOP Hornostay Mykhaylo Ivanovych
CertificateIssuerLet's Encrypt Subjectclbc-login.online Fingerprint69:95:A5:D1:DA:59:CB:47:BE:57:B4:3C:F9:5B:DA:3D:3D:3C:15:AE ValidityThu, 02 May 2024 20:40:44 GMT - Wed, 31 Jul 2024 20:40:43 GMT
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: clbc-login.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.14.2
Date: Fri, 03 May 2024 23:28:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=h831rg94veajh5u47avrvaiq56; expires=Sat, 04 May 2024 01:28:22 GMT; Max-Age=7200; path=/
_subid=376l60j1dfqa; expires=Sat, 04 May 2024 23:28:23 GMT; Max-Age=86400; path=/; domain=.clbc-login.online
48a59=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE0Nzc4OTAzfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE0Nzc4OTAzfSxcInRpbWVcIjoxNzE0Nzc4OTAzfSJ9.QYKUpU-yUv9h9IkqqcnkzWTmD6f-b6UBngffbxZ8-FE; expires=Sat, 04 May 2024 23:28:23 GMT; Max-Age=86400; path=/; domain=.clbc-login.online
Content-Encoding: gzip
|
| clbc-login.online/favicon.ico | 62.3.58.17 | 200 OK | 198 B |
URL GET HTTP/1.1clbc-login.online/favicon.ico IP62.3.58.17:443 ASN#212913 FOP Hornostay Mykhaylo Ivanovych
Requested byhttps://clbc-login.online/ CertificateIssuerLet's Encrypt Subjectclbc-login.online Fingerprint69:95:A5:D1:DA:59:CB:47:BE:57:B4:3C:F9:5B:DA:3D:3D:3C:15:AE ValidityThu, 02 May 2024 20:40:44 GMT - Wed, 31 Jul 2024 20:40:43 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 2 colors Hashc6acedaff906029fc5455d9ec52c7f42 92cbd806ca421aa2c9ff5e1ff76bbc20913a2f81 9deb629637088856fe61dc868bf40a7d21ed942e4117659f3d6c3408f59b906b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: clbc-login.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://clbc-login.online/
Cookie: PHPSESSID=h831rg94veajh5u47avrvaiq56; _subid=376l60j1dfqa; 48a59=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjFcIjoxNzE0Nzc4OTAzfSxcImNhbXBhaWduc1wiOntcIjFcIjoxNzE0Nzc4OTAzfSxcInRpbWVcIjoxNzE0Nzc4OTAzfSJ9.QYKUpU-yUv9h9IkqqcnkzWTmD6f-b6UBngffbxZ8-FE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Fri, 03 May 2024 23:28:23 GMT
Content-Type: image/x-icon
Content-Length: 198
Connection: keep-alive
Last-Modified: Tue, 13 Feb 2024 16:29:26 GMT
ETag: "65cb98e6-c6"
Accept-Ranges: bytes
|