Report - richainfosys.com/ua/etsmuaucascs

Report Overview

Submitted URL
richainfosys.com/ua/etsmuaucascs
IP
111.118.215.174
ASN
#394695 PUBLIC-DOMAIN-REGISTRY
Submitted
2022-10-05 15:04:24
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
190

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	54.230.111.7
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	329 B	737 B	93.184.220.29
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	331 B	699 B	142.250.74.3
richainfosys.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	23 kB	224 kB	111.118.215.174
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.1 kB	21 kB	34.120.237.76
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	4.4 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	54.230.111.14
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	52.27.12.161

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-10-05	medium	richainfosys.com/ua/images/video/Untitled.mp4	Phishing
2022-10-05	medium	richainfosys.com/ua/images/video/Untitled.mp4	Phishing
2022-10-05	medium	richainfosys.com/ua/js/theme-vendors.min.js	Phishing
2022-10-05	medium	richainfosys.com/ua/etsmuaucascs	Malware
2022-10-05	medium	richainfosys.com/ua/images/video/ITP%20VBR2%200.8-4.mp4	Phishing
2022-10-05	medium	richainfosys.com/ua/images/video/techno-video-verticle.ogg	Phishing
2022-10-05	medium	richainfosys.com/ua/js/main.js	Phishing
2022-10-05	medium	richainfosys.com/ua/images/video/techno-video-verticle.mp4	Phishing
2022-10-05	medium	richainfosys.com/ua/revolution/js/jquery.themepunch.revolution.min.js	Phishing
2022-10-05	medium	richainfosys.com/ua/js/jquery.min.js	Phishing
2022-10-05	medium	richainfosys.com/ua/revolution/js/jquery.themepunch.tools.min.js	Phishing

mnemonic secure dns

Scan Date	Severity	Indicator	Alert
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed

JavaScript (8)

	URL	Size	First Seen	Last Seen
	richainfosys.com/ua/etsmuaucascs	4.6 kB	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/etsmuaucascs IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash ba78ec7fc5fb4172eb9a371c72c464b0 1a0315848dca56a9d2dcd11af353360f08b6d4b1 b0a346fad15655b19b27d966133ba7d241f5baa296991f2d16c5dacacd0cbc59 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js	90 kB	2023-03-07	2024-04-25
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-04-25 16:40:25 Times Seen261349 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	richainfosys.com/ua/etsmuaucascs	153 B	2023-03-08	2023-03-10
Pretty URL richainfosys.com/ua/etsmuaucascs IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-10 08:54:44 Times Seen1 Hash 9ed9fe3cd901f2399b165e4dcfe6ff92 18ae3093a7fb517761aa80092f011b412805276c d4b6c397e2516ed6aed96b7bbe89cbd9dc46b68af08c9e30b88996d99a39bda4 Loading...

	richainfosys.com/ua/etsmuaucascs	94 B	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/etsmuaucascs IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash 312214c25f8762899a2108fd1db60b68 3c8502d018bd8e06d54adffd986c3d20386c82ba f645900a4eab85f3666934af59cf600d39fcf96de6c821dae27d7176f4863085 Loading...

	richainfosys.com/ua/etsmuaucascs	95 B	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/etsmuaucascs IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash c3bdf7cc77ac2a2162fa25942106c736 cb52bcded0c689649db423445e2715c429bcf3bf f441e6806259fc37bd2c3feb32c9da4a1a32c5f77adfcfa49cf0d73dfbdaf7af Loading...

	richainfosys.com/ua/etsmuaucascs	95 B	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/etsmuaucascs IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash 986b30a62a1f044d580dec48d6e1dd58 3d055e39bf49eb807020b0d6d2eea3170be1e085 f7e04a873ae58a43f26bbecea47ac109a3d64aa8e434ea91211ace82dc3830d3 Loading...

	www.googletagmanager.com/gtag/js?id=G-T09TWMJ58F	214 kB	2023-03-08	2023-03-08
Pretty URL www.googletagmanager.com/gtag/js?id=G-T09TWMJ58F IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:45 Last Seen2023-03-08 06:12:45 Times Seen1 Hash 530a018deb6f9fa88f78a6a77096ff85 52bc9ddf157e75f0fdb5a9934436bd0f77480b2b 2edeb6b84907b3d078ed889a174d9175c70ac6c1ef408153a4f766c870ce4568 Loading...

	richainfosys.com/ua/revolution/js/jquery.themepunch.revolution.min.js	75 kB	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/revolution/js/jquery.themepunch.revolution.min.js IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash 3ca7b9580089ed0d26e2c0c633736f1d c9cf34f6c4a9036efeb8adea23bc221f2371507a 86b2269045aae509b0b6f965e020b031c6cec426ec386d9f45c4591129a552bb Loading...

HTTP Transactions (58)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

54.230.111.7

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
54.230.111.7:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 14:47:16 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Rv-3C3Y03GYcEuHCeDYoWYb9REpM-GxMEjrMvMjdcChv03Jt91_a6Q==
Age: 1017

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7809
Expires: Wed, 05 Oct 2022 17:14:22 GMT
Date: Wed, 05 Oct 2022 15:04:13 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

54.230.111.14

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
54.230.111.14:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 05 Oct 2022 04:02:33 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kI94cV3QmMPd-qlNDVwi9NBdp2XvANcvPw5gKFAK0ugbGwICwcxbUw==
age: 39701
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 05 Oct 2022 15:04:13 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7b5fcdb0a228e4ee14e60a2d3b829476
d26c2f288818832734127cf90c1d30ac919d0532
cffd5a99d85b854ae3f14600835492f4a8e7b9f6128970f95874fec7f19b3986

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFFD5A99D85B854AE3F14600835492F4A8E7B9F6128970F95874FEC7F19B3986"
Last-Modified: Wed, 05 Oct 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21409
Expires: Wed, 05 Oct 2022 21:01:02 GMT
Date: Wed, 05 Oct 2022 15:04:13 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

54.230.111.7

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
54.230.111.7:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Wed, 05 Oct 2022 14:29:33 GMT
Expires: Wed, 05 Oct 2022 14:35:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hP0Necb8W5vcKG3yfDfAdulRWPn5QoA23d3RxtfcLxS2xM2lRgWSOA==
Age: 2080

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
1561c6be7c89d1357a80d12de47b6e74
9a705277922ecca583c867af58b3efce099f83bd
e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6116
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 15:04:14 GMT
Last-Modified: Wed, 05 Oct 2022 13:22:18 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
60dea52abe2437132a0387ad8becc0ac
61e9fb41f1fc795ef7204b8948621d4dbc6d3052
ac998fb48810aeb183ec2d19cfd58b81f2243207add4c553e1e87f00fa6d5f3f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 15:04:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

push.services.mozilla.com/

52.27.12.161

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.27.12.161:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qimpyx7BIaG62CJX5fDakA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XyoLHeKPGIbfPMaX5gsEmW29WE8=

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6798
Expires: Wed, 05 Oct 2022 16:57:33 GMT
Date: Wed, 05 Oct 2022 15:04:15 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6798
Expires: Wed, 05 Oct 2022 16:57:33 GMT
Date: Wed, 05 Oct 2022 15:04:15 GMT
Connection: keep-alive

richainfosys.com/ua/css/style.css

111.118.215.174

200 OK

21 kB

URL HTTP/2
richainfosys.com/ua/css/style.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
21 kB (21022 bytes)
Hash
7e571da415d16b15fc8870924e6c4fc4
b557b6723fe1db2544a82682601d0103349a3205
e486b5f05a36585b7350cb27c41fad355933196bdc981e8ff926284705177b30

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/css/style.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6798
Expires: Wed, 05 Oct 2022 16:57:33 GMT
Date: Wed, 05 Oct 2022 15:04:15 GMT
Connection: keep-alive

richainfosys.com/ua/images/video/Untitled.mp4

111.118.215.174

200 OK

34 kB

URL HTTP/2
richainfosys.com/ua/images/video/Untitled.mp4
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
34 kB (34132 bytes)
Hash
9b0ce5f5cb7d0911d279328286d299d3
944a8e18b0b5a8039f49b7bcc25703b6f8627841
f6fe92b6e391900a651ffef8a435c8edb28e408cd206afbf16e678654e5e8028

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/video/Untitled.mp4 HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:15 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/revolution/css/settings.css

111.118.215.174

200 OK

29 kB

URL HTTP/2
richainfosys.com/ua/revolution/css/settings.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
29 kB (29335 bytes)
Hash
eb7e37f3b390399ae0984b4c6724c6e6
917ad72afb262858a7a24895132b7726e835bbfb
e531cb5c658242b9adb15b761f90b6649e896273852ed2b6b2d96381dd3a1591

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/revolution/css/settings.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10158 bytes)
Hash
4fc2ddd86450d64d3fb659ab4e78be58
bbe71936b78a8c34d03ab87948dc840b35c6948f
84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10158
x-amzn-requestid: def1fc7e-8008-466f-9271-20fa1ab0fa5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaqZCH7doAMFcPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a8aa0-7fd2fb1249366f2277d719d6;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 07:09:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: aeOU8fGkf5uHuYZ79k17EzxiFnwm0_z7SeZJElgwECzRyhR2N_SYJA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 04:06:09 GMT
age: 39486
etag: "bbe71936b78a8c34d03ab87948dc840b35c6948f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-education-images2.jpg

111.118.215.174

200 OK

24 kB

URL HTTP/2
richainfosys.com/ua/images/home-education-images2.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
24 kB (24104 bytes)
Hash
2491e78c127db333fdddda79508424a6
d5497db9d7b9d483a071cea834366bcd73b3cf3b
da77ff560d511bc0a5c0c731f3dd164eac860e70c6cd1a68b58541c15d82a27c

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-education-images2.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/Home-security1.jpg

111.118.215.174

200 OK

12 kB

URL HTTP/2
richainfosys.com/ua/images/Home-security1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
12 kB (12287 bytes)
Hash
3cc89e6c628b28b8f1f4254ad9ef06ee
39c0f7df874d68a148b1ffebb61f890f5e71011a
65e14c3987aee849320f60666037615d7ff04462fcb5a27225215f3b5d8a55e6

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/Home-security1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8926 bytes)
Hash
1de7c17a0ba9295135e7f8b490b6a8d3
70e8d1589f3daf71378965dd197934e220fb6aa4
ee559ce3166479e2b930be7d18525f5c2d164aed8ca005302ddaf3bfe37eec24

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8926
x-amzn-requestid: 27fc8976-af8d-40a3-b701-0642fa135ec4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8s1GSbIAMFTiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7eb-4d4c7837576e0fdb5828fe3b;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YzVofPSJC-YVU1Q1V9AnjNeQTa1BQEh6ZiH2HjSeeX5RygysFP7oAA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:43:25 GMT
age: 62450
etag: "70e8d1589f3daf71378965dd197934e220fb6aa4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

richainfosys.com/ua/images/video/Untitled.mp4

111.118.215.174

200 OK

96 kB

URL HTTP/2
richainfosys.com/ua/images/video/Untitled.mp4
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (406), with CRLF, LF line terminators
Size
96 kB (95505 bytes)
Hash
64bd2c19dd810fb23cb7f8bc952fbc94
4b29ec173237a9293ff0ee3f647e16a1a76b5604
306493ab67a75f7c0d43fd3de8e7807ba64793742b97173e9cf3920ec8de0e3a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/video/Untitled.mp4 HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:15 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/logo-green-dark@2x.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/logo-green-dark@2x.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /ua/images/logo-green-dark@2x.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/revolution/css/layers.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/revolution/css/layers.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/revolution/css/layers.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-ab1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-ab1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-ab1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/js/theme-vendors.min.js

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/js/theme-vendors.min.js
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/js/theme-vendors.min.js HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-tab-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-tab-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-tab-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/pdf/Government_e_Marketplace_Logo.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/pdf/Government_e_Marketplace_Logo.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/pdf/Government_e_Marketplace_Logo.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-make-in-india1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-make-in-india1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-make-in-india1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/etsmuaucascs

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/etsmuaucascs
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/etsmuaucascs HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:13 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/revolution/css/navigation.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/revolution/css/navigation.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/revolution/css/navigation.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/jj1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/jj1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/jj1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/css/font-icons.min.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/css/font-icons.min.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/css/font-icons.min.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/jj1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/jj1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/jj1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:15 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/css/theme-vendors.min.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/css/theme-vendors.min.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/css/theme-vendors.min.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/richa-logo.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/richa-logo.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/richa-logo.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/video/ITP%20VBR2%200.8-4.mp4

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/video/ITP%20VBR2%200.8-4.mp4
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/video/ITP%20VBR2%200.8-4.mp4 HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:15 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/video/techno-video-verticle.ogg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/video/techno-video-verticle.ogg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/video/techno-video-verticle.ogg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.1.1664982255.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:15 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-interactive-flat-panel.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-interactive-flat-panel.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-interactive-flat-panel.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/js/main.js

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/js/main.js
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/js/main.js HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-dtd-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-dtd-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-dtd-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-flate-panel-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-flate-panel-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-flate-panel-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/logo-green-dark@2x.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/logo-green-dark@2x.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /ua/images/logo-green-dark@2x.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:15 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/video/techno-video-verticle.mp4

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/video/techno-video-verticle.mp4
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/video/techno-video-verticle.mp4 HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:15 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/revolution/js/jquery.themepunch.revolution.min.js

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/revolution/js/jquery.themepunch.revolution.min.js
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/revolution/js/jquery.themepunch.revolution.min.js HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/js/jquery.min.js

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/js/jquery.min.js
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/js/jquery.min.js HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/revolution/js/jquery.themepunch.tools.min.js

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/revolution/js/jquery.themepunch.tools.min.js
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/revolution/js/jquery.themepunch.tools.min.js HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-dtd1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-dtd1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-dtd1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-security-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-security-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-security-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-podium-ser-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-podium-ser-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-podium-ser-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/menu-camera1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/menu-camera1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/menu-camera1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/ripl-limited.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/ripl-limited.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/ripl-limited.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/pdf/Make_In_India.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/pdf/Make_In_India.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/pdf/Make_In_India.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-podium-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-podium-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-podium-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/favicon/android-icon-192x192.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/favicon/android-icon-192x192.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/favicon/android-icon-192x192.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.1.1664982255.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:15 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/css/responsive.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/css/responsive.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/css/responsive.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/tab-menu-image1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/tab-menu-image1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/tab-menu-image1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/background-video-bg.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/background-video-bg.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/background-video-bg.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/dtd-cabinate.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/dtd-cabinate.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/dtd-cabinate.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-conf-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-conf-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-conf-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/etsmuaucascs
Cookie: _ga_T09TWMJ58F=GS1.1.1664982142.1.0.1664982148.0.0.0; _ga=GA1.1.498846948.1664982142
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:04:14 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations