email.mail1.onesignal.os.tc/c/eJwUz72u2zAMQOGnsTcGEkXqZ_DQJX2MghbpxqhjGZbQ4vbpL7Kf4XxyXb92XUrmLZWSITEzUCwBhIwgBiwrmq2KadYlEhfdZlt8zFyIfcnza9miQy5VCxdfyLwgZmYO2yarCNO8L3nLklOsELR6oOoM1uoQTHz2jI5r0cdhY9w2kTtalePV-piP5TXG1afwY8LnhM92Hvtp3Uz7KuefR23vCZ__LhB97-eEz_fXz_bXP17jfcxnG_u2Vxl7Oz_IuGookjzU5BWoZoaVgoGWRBSRaUOdr0O-7P7kGVNwURGcmgNac4WsmYBqjMmJ8xzqfC9V7tb74387f0_k9tt6_2x9BwAA__8tY2bl
34.102.239.211302 Found 446 B URL User Request GET HTTP/2 email.mail1.onesignal.os.tc/c/eJwUz72u2zAMQOGnsTcGEkXqZ_DQJX2MghbpxqhjGZbQ4vbpL7Kf4XxyXb92XUrmLZWSITEzUCwBhIwgBiwrmq2KadYlEhfdZlt8zFyIfcnza9miQy5VCxdfyLwgZmYO2yarCNO8L3nLklOsELR6oOoM1uoQTHz2jI5r0cdhY9w2kTtalePV-piP5TXG1afwY8LnhM92Hvtp3Uz7KuefR23vCZ__LhB97-eEz_fXz_bXP17jfcxnG_u2Vxl7Oz_IuGookjzU5BWoZoaVgoGWRBSRaUOdr0O-7P7kGVNwURGcmgNac4WsmYBqjMmJ8xzqfC9V7tb74387f0_k9tt6_2x9BwAA__8tY2bl
IP 34.102.239.211:443
Certificate IssuerLet's Encrypt
Subjectemail.mail1.onesignal.os.tc
Fingerprint66:96:AA:44:2E:73:9E:55:FB:C0:AD:0A:0E:13:70:96:7B:0F:B4:E7
ValidityFri, 26 May 2023 21:05:31 GMT - Thu, 24 Aug 2023 21:05:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bbfd7990f2d3018301d8b7badfa741e7
c57fb644edb9ec27f68723d8b969de39bb8371c1
9c9b4efe9db3e6f60f4c251ac2ac636cc50ba4a11c50c1be061b6dfb56af016b
Analyzer Verdict Alert openphish Australian Government
GET /c/eJwUz72u2zAMQOGnsTcGEkXqZ_DQJX2MghbpxqhjGZbQ4vbpL7Kf4XxyXb92XUrmLZWSITEzUCwBhIwgBiwrmq2KadYlEhfdZlt8zFyIfcnza9miQy5VCxdfyLwgZmYO2yarCNO8L3nLklOsELR6oOoM1uoQTHz2jI5r0cdhY9w2kTtalePV-piP5TXG1afwY8LnhM92Hvtp3Uz7KuefR23vCZ__LhB97-eEz_fXz_bXP17jfcxnG_u2Vxl7Oz_IuGookjzU5BWoZoaVgoGWRBSRaUOdr0O-7P7kGVNwURGcmgNac4WsmYBqjMmJ8xzqfC9V7tb74387f0_k9tt6_2x9BwAA__8tY2bl HTTP/1.1
Host: email.mail1.onesignal.os.tc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-store
content-type: text/html
date: Mon, 05 Jun 2023 23:41:04 GMT
location: https://onlineseedsbank.com/wp-admin/myGov1.html
x-robots-tag: noindex
x-xss-protection: 1; mode=block
content-length: 446
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
104.17.25.14200 OK 5.9 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
IP 104.17.25.14:443
Requested by https://rootxone.org/d845e/1/b7863/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (372)
Hash c495654869785bc3df60216616814ad1
0140952c64e3f2b74ef64e050f2fe86eab6624c8
36e0a7e08bee65774168528938072c536437669c1b7458ac77976ec788e4439c
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 23:41:05 GMT
content-type: text/css; charset=utf-8
content-length: 5884
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-9226"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 9430797
expires: Sat, 25 May 2024 23:41:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2trnUZ0YS%2FQm2P%2BT60bRy7piw%2Fp0z9Za%2F4vG8%2FgGzYuDYv9eGvJLwMYZZ2pj8o8Io4fvqCmfQJIuf1mHbxbeYEBsd7Pb0T75yY1%2FxbW5b8xELPU1u5TLx6riMSBwRXbSnmpCpFEc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d2c43ae9b16b50c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/css-social-buttons/1.2.0/css/zocial.css
104.17.25.14200 OK 22 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/css-social-buttons/1.2.0/css/zocial.css
IP 104.17.25.14:443
Requested by https://rootxone.org/d845e/1/b7863/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (24194)
Hash 11cb6e84ea92cdd2fb69596b7314ec7d
5a39ebdf2a4232161b55ef2d67cb20fda3dab304
bf8d41c2e2250b2f0b431531871178d57cd9af1f42bbe121c90b51fd66a1dff2
GET /ajax/libs/css-social-buttons/1.2.0/css/zocial.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 23:41:05 GMT
content-type: text/css; charset=utf-8
content-length: 21543
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e2d-ae99"
last-modified: Mon, 04 May 2020 16:09:17 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 125196
expires: Sat, 25 May 2024 23:41:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4TX%2B1PjL5jNsuha7B1dIsV7hI1ZAd0Yn6sWGUz1PT9MJjsvioyJDomHzSirOktGiQ17thiSzfKNIWZwiuMc8h4Q%2FrE%2FWqljMYL9jUWvLap9JyXo0VP%2FtOl1pdPgUc7LAxHpq50Tm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d2c43aeab19b50c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash f6e0fad54cb828605d258b3a3fc3494d
1998f119ae42787f25cac22435e05b7d8a7ecbcc
fdde19b20684979988b4db7567fdb883ef8cd0438f4c4ef053bdd058011f1dbc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 23:41:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash e658f45faae0edd26f5908c922167f73
33e4e65ccf9cb9b15a7a9f5fd0083f1cebfa7064
5cc8bb25c78320b6cafdc4a6a017081a2c953cb86e1a1dc45c8f8811798adbc5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 23:41:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
104.17.25.14200 OK 77 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 104.17.25.14:443
Requested by https://rootxone.org/d845e/1/b7863/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rootxone.org
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 05 Jun 2023 23:41:05 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1719288
expires: Sat, 25 May 2024 23:41:05 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Azry5BCq8aVGmKqGTuehjitGhUo9gAzuMfe2kwWmcvINyIbX%2FsoXbVbsPYmDrVV0F6sFrdFyB2xob8Ab4H%2F6ssmPeq2aiOKeSAtxmQs0NgoWDs9WZ5y23pQ7iiayTMmSC1P%2FsJnD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d2c43b03e5db4fa-OSL
alt-svc: h3=":443"; ma=86400
rootxone.org/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
104.21.56.166200 OK 3.9 kB URL GET HTTP/3 rootxone.org/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP 104.21.56.166:443
Requested by https://rootxone.org/d845e/1/b7863/
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
File type ASCII text, with very long lines (12331)
Hash 88a769d2fe35899fd45a332a0a032cc0
514c6c1d8475d17e412849a4c90159517d0fa10a
ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/d845e/1/b7863/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 05 Jun 2023 23:41:05 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2023 15:21:01 GMT
etag: W/"6476145d-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=veNPeMXbj2S84LpmAjv2TDlgHabpkI%2BDU%2BKTpLU8XHjU6l7%2BpvQeLmwvl0Mzba8wRUA7HM0C3wc8qV0cjEraueIlq%2F7aH9yxI6TFstmVuqWYyMx0BYpdqu1dBoliyBg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d2c43ae9dadb4f3-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 07 Jun 2023 23:41:05 GMT
cache-control: max-age=172800, public
content-encoding: gzip
rootxone.org/d845e/1/index.php
104.21.56.166302 Found 17 kB URL GET HTTP/2 rootxone.org/d845e/1/index.php
IP 104.21.56.166:443
Requested by https://onlineseedsbank.com/wp-admin/myGov1.html
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d845e/1/index.php HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onlineseedsbank.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 05 Jun 2023 23:41:05 GMT
content-type: text/html; charset=UTF-8
location: https://rootxone.org/d845e/1/b7863/
x-powered-by: PHP/8.1.14RC1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=usdyVUcNej9VXCyUbzmke1FbQmNvzqS2s1pr3Fd9zbHLqef8MoP%2BMvC1rBAZEBpDg4gTRPc5E8lFMiQk043lUiil720n%2Fq%2FGr1OUgnZuo5wofrZupCQChRv9vcbgDpQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2c43ab3caab4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:400,100,300
142.250.74.106200 OK 2.2 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Lato:400,100,300
IP 142.250.74.106:443
Requested by https://rootxone.org/d845e/1/b7863/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (2212), with no line terminators
Hash c1816f74999d0b496675b0880007b37b
8032f871c7165040f75ca71e40ca4ecb875b5f82
50c975ce65465a31e9128ee32073cf78d6fe9b07dea491b15f11c56081ffee7e
GET /css?family=Lato:400,100,300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Jun 2023 23:41:05 GMT
date: Mon, 05 Jun 2023 23:41:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rootxone.org/d845e/1/b7863/
104.21.56.166200 OK 17 kB URL GET HTTP/3 rootxone.org/d845e/1/b7863/
IP 104.21.56.166:443
Requested by https://onlineseedsbank.com/wp-admin/myGov1.html
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- assembler source, ASCII text, with very long lines (1608)
Hash 054f3b7f21a7387667afee6e80e3d091
b7e2e06d38e6858e2ffe571c7f0da2953f641ad3
98dd1e42cfbed5efbaf2306f73f9fbc2f99bc79f5f8948b5ba04d91a9f9f8e70
GET /d845e/1/b7863/ HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onlineseedsbank.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 Jun 2023 23:41:05 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.1.14RC1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GX1g4SarimR4A4vYl%2FhDq5N1nCjiNLkjHNOiwoE5B6Hdf%2FVzYyGvYZRcBDWHsJyfeHiMBeOb7%2F9suv%2FFJtlANXIFFip%2FT%2BsgWwhQhfSaYqpkXxCns%2BsrqtWiTUAdDBQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2c43ad5cf8b4f3-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
rootxone.org/d845e/sourcexone/xonecss/style.css
104.21.56.166200 OK 18 kB URL GET HTTP/3 rootxone.org/d845e/sourcexone/xonecss/style.css
IP 104.21.56.166:443
Requested by https://rootxone.org/d845e/1/b7863/
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
File type ASCII text, with very long lines (618)
Hash 80c528a617b78c6f3e5ce8878d30a042
8ee753b43bc1b75c0587093d8fce961a8c2029d5
a34fb4112dac269525802264dfe989c4bfce795635799fcc2f8726c0e2fb496f
GET /d845e/sourcexone/xonecss/style.css HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/d845e/1/b7863/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 Jun 2023 23:41:05 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 31 May 2023 05:18:45 GMT
etag: W/"4771-5fcf674359e8b"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 2811
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vu3RSVqLlnW09cwRzhckoWxzf1SNaEy66ScDd4D8tI9p%2FYhPdzY%2FJcp71wKjYvdID6hFnpG6yv0CLVwt0nno5M7zxpnKTVhvuIrr23GD%2FNK9Ycdsjb2O4GwATyBTpaM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2c43ae8d9db4f3-OSL
alt-svc: h3=":443"; ma=86400
rootxone.org/d845e/sourcexone/xonecss/stepbar.css
104.21.56.166200 OK 3.5 kB URL GET HTTP/3 rootxone.org/d845e/sourcexone/xonecss/stepbar.css
IP 104.21.56.166:443
Requested by https://rootxone.org/d845e/1/b7863/
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
File type ASCII text, with very long lines (3740), with no line terminators
Hash 3a9b1f7d547f56d4ff41eb8913687221
d749365d39433ccdd05ba2e6b414c35114a7975a
cc79e9f8f348e3ba6b1517549a864666ec0a580bf506c58419dc793ba42f7d15
GET /d845e/sourcexone/xonecss/stepbar.css HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/d845e/1/b7863/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 Jun 2023 23:41:05 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 31 May 2023 05:18:45 GMT
etag: W/"db8-5fcf67435a273"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 2811
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MhshwJFDnj3vM6ieRsXZvwckk7C8vcuYxffng7r8WkvzkgZD5pN7FIBBg%2FodCRPxfdfbqAKO5MYNV21HXDjda4hJSSxqHwsjqouLg0KVGfIqXWOk31aqTqk%2FW3J68FI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2c43ae8d9cb4f3-OSL
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Source+Code+Pro:400,500,600,700|Source+Sans+Pro:400,600,700&display=swap
142.250.74.106200 OK 17 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Source+Code+Pro:400,500,600,700|Source+Sans+Pro:400,600,700&display=swap
IP 142.250.74.106:443
Requested by https://rootxone.org/d845e/1/b7863/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
Hash abfd162751e3f57ac78b3a59fa2d2296
b8c8cade006465a56c2eb9b1d92add0c8bdf5dd6
5129bf0820f5e1637b02d8ba44a4e459137d46d1dcd854650a19b631ad2086ec
GET /css?family=Source+Code+Pro:400,500,600,700|Source+Sans+Pro:400,600,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Jun 2023 23:41:05 GMT
date: Mon, 05 Jun 2023 23:41:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rootxone.me/pixel/wz3xIB32v8DPajHZ
103.224.212.221302 Found 0 B URL GET HTTP/1.1 rootxone.me/pixel/wz3xIB32v8DPajHZ
IP 103.224.212.221:443
ASN #133618 Trellian Pty. Limited
Requested by https://rootxone.org/d845e/1/b7863/
Certificate IssuerLet's Encrypt
Subject123phim.info
FingerprintB4:31:19:96:2A:FE:CF:4C:8E:77:CB:EC:B2:E3:4D:5A:0C:D1:27:9B
ValidityThu, 11 May 2023 14:33:32 GMT - Wed, 09 Aug 2023 14:33:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/wz3xIB32v8DPajHZ HTTP/1.1
Host: rootxone.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Mon, 05 Jun 2023 23:41:06 GMT
server: Apache
set-cookie: __tad=1686008466.6595824; expires=Thu, 02-Jun-2033 23:41:06 GMT; Max-Age=315360000
location: http://ww25.rootxone.me/pixel/wz3xIB32v8DPajHZ?subid1=20230606-0941-062f-a1f2-3bf96180cfb2
content-length: 0
content-type: text/html; charset=UTF-8
connection: close
onlineseedsbank.com/wp-admin/myGov1.html
172.67.179.44200 OK 2.8 MB URL User Request GET HTTP/2 onlineseedsbank.com/wp-admin/myGov1.html
IP 172.67.179.44:443
Certificate IssuerGoogle Trust Services LLC
Subjectonlineseedsbank.com
Fingerprint05:44:19:F6:E7:A2:13:38:16:96:60:26:0B:05:30:CD:D2:07:96:88
ValidityWed, 17 May 2023 16:46:59 GMT - Tue, 15 Aug 2023 16:46:58 GMT
Size 2.8 MB (2822453 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert openphish Australian Government
quad9 Sinkholed
GET /wp-admin/myGov1.html HTTP/1.1
Host: onlineseedsbank.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 23:41:04 GMT
content-type: text/html
cf-ray: 7d2c43a7187bb50b-OSL
cf-cache-status: BYPASS
last-modified: Mon, 05 Jun 2023 04:55:53 GMT
vary: Accept-Encoding
cf-apo-via: origin,no-cache
x-powered-by: EasyEngine v4.0.14
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YV9dRzE0SeAzD%2BBy6kE6br1MZ8T8CAxLmeOewdMk2DW8AygWXsJIkI34o8yaWZyl29oGJMgw4dwLM%2FNlQALKNzeemzTJJrZ5SPBC3mLsF2JQ0%2FphhsF9gVTSyuJtENvBhVg4A8pD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
rootxone.org/d845e/index.php
104.21.56.166302 Found 17 kB URL GET HTTP/2 rootxone.org/d845e/index.php
IP 104.21.56.166:443
Requested by https://onlineseedsbank.com/wp-admin/myGov1.html
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d845e/index.php HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onlineseedsbank.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 05 Jun 2023 23:41:05 GMT
content-type: text/html; charset=UTF-8
location: ./1/index.php
x-powered-by: PHP/8.1.14RC1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fo%2F88DD%2BRoLL6Fj3%2F5682dDBrFs9vVX0Rihx8AAPRtJACdJppyiae0ckxj%2B0N2tu7Kcnk0EHRP8hXlwP0WPzDYUwAL3FRTP092qMT9sfQRsOS%2Bpy%2B2aFEKdtct4Ilpc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2c43aa8c12b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2