| unotree.ru/gate.php?id=70&build=XitoryTraffic&passwords=0&cookies=0&username=user&country= | 172.67.169.128 | 200 OK | 523 B |
URL User Request GET HTTP/2unotree.ru/gate.php?id=70&build=XitoryTraffic&passwords=0&cookies=0&username=user&country= IP172.67.169.128:443
CertificateIssuerLet's Encrypt Subjectunotree.ru FingerprintA8:B5:40:8F:01:E9:E4:DE:59:E7:23:D0:60:09:98:C7:E3:AF:44:00 ValidityThu, 07 Mar 2024 20:55:44 GMT - Wed, 05 Jun 2024 20:55:43 GMT
File typegzip compressed data, from Unix Hash51d9143ca038efa85e72be9eaefa4ab7 2670f9f5e267d8cf01462ce388ba56a3c4956ef7 e639748d0c5b5e43121ae206dc16827ee5ad8ce3611c81a7186669506f3a836e
Analyzer | Verdict | Alert | ThreatFox | malicious | Unknown malware | mnemonic secure dns | malicious | Sinkholed | Quad9 DNS | malicious | Sinkholed |
GET /gate.php?id=70&build=XitoryTraffic&passwords=0&cookies=0&username=user&country= HTTP/1.1
Host: unotree.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 18:42:19 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i4rtiEiZPMdFqb%2FrAcm4nWUuj1Fb92kRW%2Bo1efpisL56moTvzbyYcawkc6dU6T94NWAejRsDO5oUR%2F2THxfSzaDTxrqtCY5v%2FHmyHJ5ra5PumGW1elAxxSE5lefS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 875e8de64f4a56be-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
IP172.67.169.128:443
Requested byhttps://unotree.ru/gate.php?id=70&build=XitoryTraffic&passwords=0&cookies=0&username=user&country= CertificateIssuerLet's Encrypt Subjectunotree.ru FingerprintA8:B5:40:8F:01:E9:E4:DE:59:E7:23:D0:60:09:98:C7:E3:AF:44:00 ValidityThu, 07 Mar 2024 20:55:44 GMT - Wed, 05 Jun 2024 20:55:43 GMT
File typeHTML document, ASCII text, with no line terminators Hash8d961231f452de2a7c7df17fccaedf1c f0b8949b04fbaf7eb6620a9f5186d74a5a97dbf4 fcc5add541d36c11f1815a1d3c9ad8008aa782c13d57abdb774a4f12955fdbdd
Analyzer | Verdict | Alert | ThreatFox | malicious | Unknown malware | mnemonic secure dns | malicious | Sinkholed | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: unotree.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://unotree.ru/gate.php?id=70&build=XitoryTraffic&passwords=0&cookies=0&username=user&country=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 17 Apr 2024 18:42:19 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MMGIkAqYBbi6Yiucj8ATyFy1PgoPOLcV0VJmbAqN%2FJo%2FOHfOcPiu%2FLGpw6VmPK42hbOQeFRHYCZnHj2%2FOkG4jMbY5CNHF0SuxhTPMTdmxU2gikGxec44DCK7Uqfo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875e8de9ec07b4f4-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
|