| |  162.0.215.32 | 200 OK | 8.3 kB |
URL User Request GET HTTP/1.1IP162.0.215.32:80
File typeJavaScript source, ASCII text, with very long lines (12186) Hashec64d55d7e1e1243fecc6f1ac123a60a 3a0ac706aa9ac68b0c67c137eaf33475a9d3bd96 c0e71f6477cb19e1e7e1be2e8cff867ae021625eba1ed845d87788fe0e229bd8
GET / HTTP/1.1
Host: eaglelocation.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
keep-alive: timeout=5, max=100
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
content-length: 8320
content-encoding: gzip
vary: Accept-Encoding
date: Thu, 18 Apr 2024 06:30:25 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
|
|
| cdn.specialtaskevents.com/JZFYbC |  45.140.146.101 | 200 OK | 6.5 kB |
URL GET HTTP/2cdn.specialtaskevents.com/JZFYbC IP45.140.146.101:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttp://eaglelocation.xyz/ CertificateIssuerLet's Encrypt Subjectcdn.specialtaskevents.com FingerprintC7:57:A9:58:43:91:CF:C9:25:92:A5:7E:3A:17:9A:B8:B4:FD:00:FC ValidityFri, 15 Mar 2024 02:16:35 GMT - Thu, 13 Jun 2024 02:16:34 GMT
File typeJavaScript source, ASCII text, with very long lines (15287), with no line terminators Hashb0149465e313403016a11ea7df794a63 3818a94fc421c0788c7db55adc59d58318f26d4b 94b3871c5af9ca42f481e355e3183d28ba94ef16165db7b07873248898735dd0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /JZFYbC HTTP/1.1
Host: cdn.specialtaskevents.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://eaglelocation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:30:25 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: Thu, 18 Apr 2024 06:30:25 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| visit.startfinishthis.com/fGGy8K | 172.67.152.194 | 200 OK | 0 B |
URL GET HTTP/3visit.startfinishthis.com/fGGy8K IP172.67.152.194:443
Requested byhttp://eaglelocation.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectstartfinishthis.com FingerprintD5:E5:97:E4:E8:D4:53:86:B2:E1:D7:EF:F4:69:83:94:C6:46:E9:8C ValidityMon, 04 Mar 2024 14:59:39 GMT - Sun, 02 Jun 2024 14:59:38 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fGGy8K HTTP/1.1
Host: visit.startfinishthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://eaglelocation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 06:30:26 GMT
content-type: application/javascript
content-length: 0
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 18 Apr 2024 06:30:26 GMT
set-cookie: _subid=376l60jdtdvip; expires=Sun, 19 May 2024 06:30:26 GMT; path=/
a4fba=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjQ1XCI6MTcxMzQyMTgyNn0sXCJjYW1wYWlnbnNcIjp7XCIxNVwiOjE3MTM0MjE4MjZ9LFwidGltZVwiOjE3MTM0MjE4MjZ9In0.aoWygHGw8TJtHt5vuSBQ28aySyrMiNvqU0Pbq0CID8I; expires=Fri, 05 Aug 2078 01:00:52 GMT; path=/
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qrePu9A2TK%2BwYLz9C%2BsbXlgljukpNoNtHeVbNw8jUxDjOEEOaZW40Fs%2ByLSNrUyjGhn2bKTDFMDFmokduoMjjzu0MGgayZpSDz0uQiS8tiBfyKThK3dgtOotYgThTeoRpzt7amvyqrmhi8dN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87629b2e8f14b505-OSL
alt-svc: h3=":443"; ma=86400
|
|
| eaglelocation.xyz/favicon.ico | 162.0.215.32 | 404 Not Found | 1.3 kB |
URL GET HTTP/1.1eaglelocation.xyz/favicon.ico IP162.0.215.32:80
Requested byhttp://eaglelocation.xyz/
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash8150f458ed6fb9b1db4e5cfa57a1a281 6e5726854d28687b560d7fdcb5c782c425c7dfb9 4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896
GET /favicon.ico HTTP/1.1
Host: eaglelocation.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://eaglelocation.xyz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
keep-alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Thu, 18 Apr 2024 06:30:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
|
|
| bind.bestresulttostart.com/scripts/statistics.js?s=5.4.2 |  193.163.7.113 | 200 OK | 14 kB |
URL GET HTTP/2bind.bestresulttostart.com/scripts/statistics.js?s=5.4.2 IP193.163.7.113:443
Requested byhttp://eaglelocation.xyz/ CertificateIssuerLet's Encrypt Subjectbestresulttostart.com FingerprintF4:4C:F5:1D:A8:B6:9F:52:11:56:EC:A1:D7:C6:98:DF:2E:96:E0:4C ValidityMon, 08 Apr 2024 08:36:22 GMT - Sun, 07 Jul 2024 08:36:21 GMT
File typeJavaScript source, ASCII text, with very long lines (13785), with no line terminators Hashdad59bad08a8fdf2f2ddf9cc28d23153 65c2b2ca6142364cfd1539c37828d2df06b4f572 dbc09b358c3f5de04d44f6158441259a2f29526008594e05a9ac3cc829186e27
| Analyzer | Verdict | Alert |
|---|
| ThreatFox | malicious | Unknown malware | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /scripts/statistics.js?s=5.4.2 HTTP/1.1
Host: bind.bestresulttostart.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://eaglelocation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:30:26 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 09 Apr 2024 17:57:49 GMT
vary: Accept-Encoding
etag: W/"6615819d-35d9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| lists.clickandanalytics.com/9BcW9F | 45.140.146.101 | 200 OK | 15 kB |
URL GET HTTP/2lists.clickandanalytics.com/9BcW9F IP45.140.146.101:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttp://eaglelocation.xyz/ CertificateIssuerLet's Encrypt Subjectcollect.clickandanalytics.com FingerprintF4:17:1E:5D:BF:87:33:FD:05:62:19:CA:43:50:59:23:2B:D3:13:C0 ValidityFri, 15 Mar 2024 02:13:25 GMT - Thu, 13 Jun 2024 02:13:24 GMT
File typeJavaScript source, ASCII text, with very long lines (15287), with no line terminators Hashb0149465e313403016a11ea7df794a63 3818a94fc421c0788c7db55adc59d58318f26d4b 94b3871c5af9ca42f481e355e3183d28ba94ef16165db7b07873248898735dd0
GET /9BcW9F HTTP/1.1
Host: lists.clickandanalytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://eaglelocation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:30:26 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: Thu, 18 Apr 2024 06:30:26 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| gate.getmygateway.com/KQGrXb?c=eaglelocation.xyz | 45.140.146.101 | 200 OK | 0 B |
URL GET HTTP/2gate.getmygateway.com/KQGrXb?c=eaglelocation.xyz IP45.140.146.101:443 ASN#44477 Stark Industries Solutions Ltd
Requested byhttp://eaglelocation.xyz/ CertificateIssuerLet's Encrypt Subjectgate.getmygateway.com FingerprintF2:E0:B0:7B:1E:89:C9:4D:C8:55:A1:09:83:F6:7D:58:9F:98:0A:46 ValidityFri, 15 Mar 2024 02:12:16 GMT - Thu, 13 Jun 2024 02:12:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /KQGrXb?c=eaglelocation.xyz HTTP/1.1
Host: gate.getmygateway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://eaglelocation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:30:26 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 18 Apr 2024 06:30:26 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| visit.startfinishthis.com/2L1mRj?q=eaglelocation.xyz | 172.67.152.194 | 200 OK | 7.8 kB |
URL GET HTTP/2visit.startfinishthis.com/2L1mRj?q=eaglelocation.xyz IP172.67.152.194:443
Requested byhttp://eaglelocation.xyz/ CertificateIssuerGoogle Trust Services LLC Subjectstartfinishthis.com FingerprintD5:E5:97:E4:E8:D4:53:86:B2:E1:D7:EF:F4:69:83:94:C6:46:E9:8C ValidityMon, 04 Mar 2024 14:59:39 GMT - Sun, 02 Jun 2024 14:59:38 GMT
File typeJavaScript source, ASCII text, with very long lines (7752), with no line terminators Hash36b37c2b32cb60a5f7689fc7bc992368 75c21b11e9d45c0f100caba87985605f0f68749b e5bd093f5b2293f655d1c324186c2241e2dc972d50c8ad68df56bbaff4d71e12
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /2L1mRj?q=eaglelocation.xyz HTTP/1.1
Host: visit.startfinishthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://eaglelocation.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:30:26 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
expires: Thu, 18 Apr 2024 06:30:26 GMT
set-cookie: _subid=376l60jdtdvi4; expires=Sun, 19 May 2024 06:30:26 GMT; path=/
a4fba=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjQxXCI6MTcxMzQyMTgyNn0sXCJjYW1wYWlnbnNcIjp7XCIxM1wiOjE3MTM0MjE4MjZ9LFwidGltZVwiOjE3MTM0MjE4MjZ9In0.kn2pRx0phPw8_WTCBJpcDs2V3vYqEP1cGc0tqu-PtkQ; expires=Fri, 05 Aug 2078 13:00:52 GMT; path=/
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7XzSillzGNeh5iUO2IHorG%2BvYXWClqOxfUpMK7thDlnThDHF24BF9%2B%2FySHXffSsiGs1t3%2BZmIN6aNOr5EBWrphEnofnyLnxQ41akD9m%2BewT6kxZsPE%2Bm0VSlfjcHLJRxv%2Bs5%2Bimmn1FEGfyN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87629b2d9a3e56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|