| GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/images/m4.jpg |  81.30.157.12 | 200 OK | 91 kB |
URL GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/images/m4.jpg IP81.30.157.12:443
Requested byhttps://www.smoffrs.ru/s/42cf1c2250951 CertificateIssuerLet's Encrypt Subjectsmoffrs.ru Fingerprint18:23:26:08:0D:D9:5D:F3:99:DA:F0:4F:A5:63:AB:85:21:34:9B:36 ValidityFri, 21 Mar 2025 16:35:12 GMT - Thu, 19 Jun 2025 16:35:11 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 850x1240, components 3 Hash23115317e6653841144ffeb588d6e6a8 273272efa739b4ac5483a325814368c62e38c12f 97cb9082cd000f1c2b7f21aad8c61f604661a63fac636784bd70b2d4fef19b18
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bundle/trafee/prelands/882/assets/images/m4.jpg HTTP/1.1
Host: www.smoffrs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.smoffrs.ru/s/42cf1c2250951
Cookie: s=%2BWeb1Ue2Xrg7f3uLftoVEI3hx7eHzgpFW9PlCeSveEgK3XlsHhg%2BKVvYITKuRnjvsfHQY3lYEeGR3wQ0YsumeiB%2BLvYRH5tb%2FTdQQiJD4fZVtVjrYBUS0A1lDRDXoOLYPIDy1YIRSLxo%2FAe6AczcYAcmQ4NeTMYeph%2B71xehEEDLriUa6DuRmopY5xK5MS6HD%2FvfdpRKDHrw8qB8EF2nQ0IJD7ycpmanISx4KMPyUSfXhqlrIZ1egU%2Bb5UAo6oPjGltf1nAi0it6rFaRoEcGEP%2BaGDnpmcvxmcOvW8UvliNrmNJYBam615t4MA4sPISO0P20uFbik1duraSfYot%2BavnXZ%2FI1Qs191RxYJKs5NaysPQGpGdUMyiBgMMvglOEofCpMHtwbB36j4xB7NEOK%2B0G8tQNfxif5Lv1x0g5gQf2ki01bB7gavjbHgeCl4wDOIhQkaf6lzpg%2BEV4PZHl6p1nnYOO%2Bk5P5lC9WDXHaWFuhL%2FP%2FmjtDb%2FBl6P2Y7VlwrJ7PdrR1R%2FdcehK3hn95wR6Llrcd%2B0pinIracbPOKjyzhKfm1u8Mlgjb6qA45ZuwSNedaZ5hgGGW79kmof0wGwtIpYvG%2F49njYnmxbZJHXTbev1KFYw3UpiFtpP4gFRT8Fo81YxFKK0YPHj4TdEDWUpFWtRY49BwYR4anM7u0lwNREdBPONLzBtPiqguUTJbsLOXpsPiY3ivdyNZ6SP5sHpj7r3Y48AE1VirvpPMWASzsYoHwppC9Hy3fk1QH6oBYeYJZdWmktqJaFedMoGrVWNb9M4lYWh27SBBsh4jMkJuFhq0Wsj4lUYHdmvehaXEeyetg7Ri%2FB3G1Mf%2F%2BG8ZRSDHGRHtJjmo2wPiJ25FDDB2QtCpPk00JHLnrxlCYxA9MPX2AfE16GkqsfmcZI6lroFAAbZh3%2BtLuf90ZNTzjImOjE6NG4CYmZNK%2FAP6kEKNaAI%2FVH4FvDDQMCG%2B3eMuk8JLXIOUi9dE72xg0CehVD6vkk3BdtvZ73mlHvr2hZRf9ZfmG2e30aL3eH2s94drq3h5KF1WkJG7x%2BFKHGu8Y0yLdOeI%2FTVfJ%2FOSy4tDaPl7nqg%2FDDIxZBv0AYkRe1Aknawb4Rx4xQpIg82tBZfSbMM10vYEZpcCcAznY9B1HLzVwdq3fKD1th2Mphx7iATukbzmF%2BkAm5ERwkgeVRXTf5eKtIgVAbYIx7426cn3MjCA0xUz401jbs2s0hJbX%2B9WGHO0m6toM72dGAX1bAwbhtWOFU0mWrw%2Fv2cCPGK1CnC%2FPmQdf7FJ0dAPrDdSsFSQIyAQfO8ohpqtJQTSZYAygPHuG%2B%2BBW37mypDpA6woF3eOxwWXVEJQkPd%2FaNZ5JisB88Qz2ZjsKA17EXj%2FItbeP31UQPLAvIpUDUxh5LFN95ObkVDDVpABQsrGvww93emtoYHG2GtXt0nQZHGtwWkMcKrYrUdi1DN17fw0encPIpqFtTEBbzfrX8INItFYV01sBs0gKSPrn4ZYQE3%2FfkD9bsNBUeaRTyLP8Fk3yvZnMg%2F3Tg6AX7RLGkrimNiN8iRDyC5azIqU437GSk3ERQZI%2Bdmjb7dsjc1A5n5qc3Og61SNj%2FmcK99IhAoPMTyxYXZ1YPb8rQg8lihPJvEIKjcjqkoew9RZIK%2FKrCs1JRsV7Cp25Mg2zFCjfpRk%2Bh3c5NUrAoZcWW5FZFYyEgWcjO4mxDN5m2Lu2NFO1ZWgeb%2F0aIObmtKZuOJDOv5%2Bqb4rEp%2F4%2B9oPzQlH%2F9DECaiszeG77t1SFcPdMa97CJKt6vs7qpzBnhl8vgy4hNS%2BPayLRcFZmvw%2Be8yy7J2a4D9sY8ROTirl6S0L%2FO1QsmFAHG%2BNbtb1IGdZrLUR%2FxmI%2B1F13Jy4NrTGRSuoC3fKpLXG0tGj1gkTquShIuXtjhYKJGvb14VRYXuwM%2BxhK2N%2B%2FglHNCOHqa5k%2FO%2FDbq10%2BG3%2BYqTf0KN2dwwop0ghtRPB9VWPecBBa1Fn3Z9oxSghzsK%2FIBY7GRQN9m3RtIIkasphCKkx%2FxVFsvdlVYZClAx3stclCmJH%2FS2PyVmulqpvPQilJXaNrhAVH5C8eoYTirbD41v17JICtBgaCwoXl0A%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 28 Mar 2025 07:40:32 GMT
content-type: image/jpeg
cache-control: max-age=86400, public
X-Firefox-Spdy: h2
|
|
| GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/images/m5.jpg | 81.30.157.12 | 200 OK | 116 kB |
URL GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/images/m5.jpg IP81.30.157.12:443
Requested byhttps://www.smoffrs.ru/s/42cf1c2250951 CertificateIssuerLet's Encrypt Subjectsmoffrs.ru Fingerprint18:23:26:08:0D:D9:5D:F3:99:DA:F0:4F:A5:63:AB:85:21:34:9B:36 ValidityFri, 21 Mar 2025 16:35:12 GMT - Thu, 19 Jun 2025 16:35:11 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 851x1250, components 3 Size116 kB (115909 bytes) Hashf5c5999db74fe6166ee945e07506ba8c a4904543059b2addd5ed84eb54995c02f02a3225 428cbaa0c4660ae38bb16218d742b2280bbb43a171f55a57b7c7f31b25015644
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bundle/trafee/prelands/882/assets/images/m5.jpg HTTP/1.1
Host: www.smoffrs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.smoffrs.ru/s/42cf1c2250951
Cookie: s=%2BWeb1Ue2Xrg7f3uLftoVEI3hx7eHzgpFW9PlCeSveEgK3XlsHhg%2BKVvYITKuRnjvsfHQY3lYEeGR3wQ0YsumeiB%2BLvYRH5tb%2FTdQQiJD4fZVtVjrYBUS0A1lDRDXoOLYPIDy1YIRSLxo%2FAe6AczcYAcmQ4NeTMYeph%2B71xehEEDLriUa6DuRmopY5xK5MS6HD%2FvfdpRKDHrw8qB8EF2nQ0IJD7ycpmanISx4KMPyUSfXhqlrIZ1egU%2Bb5UAo6oPjGltf1nAi0it6rFaRoEcGEP%2BaGDnpmcvxmcOvW8UvliNrmNJYBam615t4MA4sPISO0P20uFbik1duraSfYot%2BavnXZ%2FI1Qs191RxYJKs5NaysPQGpGdUMyiBgMMvglOEofCpMHtwbB36j4xB7NEOK%2B0G8tQNfxif5Lv1x0g5gQf2ki01bB7gavjbHgeCl4wDOIhQkaf6lzpg%2BEV4PZHl6p1nnYOO%2Bk5P5lC9WDXHaWFuhL%2FP%2FmjtDb%2FBl6P2Y7VlwrJ7PdrR1R%2FdcehK3hn95wR6Llrcd%2B0pinIracbPOKjyzhKfm1u8Mlgjb6qA45ZuwSNedaZ5hgGGW79kmof0wGwtIpYvG%2F49njYnmxbZJHXTbev1KFYw3UpiFtpP4gFRT8Fo81YxFKK0YPHj4TdEDWUpFWtRY49BwYR4anM7u0lwNREdBPONLzBtPiqguUTJbsLOXpsPiY3ivdyNZ6SP5sHpj7r3Y48AE1VirvpPMWASzsYoHwppC9Hy3fk1QH6oBYeYJZdWmktqJaFedMoGrVWNb9M4lYWh27SBBsh4jMkJuFhq0Wsj4lUYHdmvehaXEeyetg7Ri%2FB3G1Mf%2F%2BG8ZRSDHGRHtJjmo2wPiJ25FDDB2QtCpPk00JHLnrxlCYxA9MPX2AfE16GkqsfmcZI6lroFAAbZh3%2BtLuf90ZNTzjImOjE6NG4CYmZNK%2FAP6kEKNaAI%2FVH4FvDDQMCG%2B3eMuk8JLXIOUi9dE72xg0CehVD6vkk3BdtvZ73mlHvr2hZRf9ZfmG2e30aL3eH2s94drq3h5KF1WkJG7x%2BFKHGu8Y0yLdOeI%2FTVfJ%2FOSy4tDaPl7nqg%2FDDIxZBv0AYkRe1Aknawb4Rx4xQpIg82tBZfSbMM10vYEZpcCcAznY9B1HLzVwdq3fKD1th2Mphx7iATukbzmF%2BkAm5ERwkgeVRXTf5eKtIgVAbYIx7426cn3MjCA0xUz401jbs2s0hJbX%2B9WGHO0m6toM72dGAX1bAwbhtWOFU0mWrw%2Fv2cCPGK1CnC%2FPmQdf7FJ0dAPrDdSsFSQIyAQfO8ohpqtJQTSZYAygPHuG%2B%2BBW37mypDpA6woF3eOxwWXVEJQkPd%2FaNZ5JisB88Qz2ZjsKA17EXj%2FItbeP31UQPLAvIpUDUxh5LFN95ObkVDDVpABQsrGvww93emtoYHG2GtXt0nQZHGtwWkMcKrYrUdi1DN17fw0encPIpqFtTEBbzfrX8INItFYV01sBs0gKSPrn4ZYQE3%2FfkD9bsNBUeaRTyLP8Fk3yvZnMg%2F3Tg6AX7RLGkrimNiN8iRDyC5azIqU437GSk3ERQZI%2Bdmjb7dsjc1A5n5qc3Og61SNj%2FmcK99IhAoPMTyxYXZ1YPb8rQg8lihPJvEIKjcjqkoew9RZIK%2FKrCs1JRsV7Cp25Mg2zFCjfpRk%2Bh3c5NUrAoZcWW5FZFYyEgWcjO4mxDN5m2Lu2NFO1ZWgeb%2F0aIObmtKZuOJDOv5%2Bqb4rEp%2F4%2B9oPzQlH%2F9DECaiszeG77t1SFcPdMa97CJKt6vs7qpzBnhl8vgy4hNS%2BPayLRcFZmvw%2Be8yy7J2a4D9sY8ROTirl6S0L%2FO1QsmFAHG%2BNbtb1IGdZrLUR%2FxmI%2B1F13Jy4NrTGRSuoC3fKpLXG0tGj1gkTquShIuXtjhYKJGvb14VRYXuwM%2BxhK2N%2B%2FglHNCOHqa5k%2FO%2FDbq10%2BG3%2BYqTf0KN2dwwop0ghtRPB9VWPecBBa1Fn3Z9oxSghzsK%2FIBY7GRQN9m3RtIIkasphCKkx%2FxVFsvdlVYZClAx3stclCmJH%2FS2PyVmulqpvPQilJXaNrhAVH5C8eoYTirbD41v17JICtBgaCwoXl0A%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 28 Mar 2025 07:40:32 GMT
content-type: image/jpeg
cache-control: max-age=86400, public
X-Firefox-Spdy: h2
|
|
| GET fonts.googleapis.com/css?family=Montserrat&subset=latin-ext |  142.250.74.10 | 200 OK | 1.9 kB |
URL GET fonts.googleapis.com/css?family=Montserrat&subset=latin-ext IP142.250.74.10:443
Requested byhttps://www.smoffrs.ru/s/42cf1c2250951 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint69:99:38:F9:7C:82:8E:AC:7D:DA:EA:3E:1C:E4:7F:52:1B:36:41:AA ValidityMon, 10 Mar 2025 08:37:02 GMT - Mon, 02 Jun 2025 08:37:01 GMT
File typeASCII text, with very long lines (1906), with no line terminators Hashf5ec513c09f9bc9d33600746b92585a3 6f145e5d20f222485c705d213a761db377a5ba9e 6c70f2579aaa62453e1492c49507fb9f4dd71b09b27af99e270bb1cba14e1c4f
GET /css?family=Montserrat&subset=latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.smoffrs.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 28 Mar 2025 07:40:32 GMT
date: Fri, 28 Mar 2025 07:40:32 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/images/d1.jpg | 81.30.157.12 | 200 OK | 70 kB |
URL GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/images/d1.jpg IP81.30.157.12:443
Requested byhttps://www.smoffrs.ru/s/42cf1c2250951 CertificateIssuerLet's Encrypt Subjectsmoffrs.ru Fingerprint18:23:26:08:0D:D9:5D:F3:99:DA:F0:4F:A5:63:AB:85:21:34:9B:36 ValidityFri, 21 Mar 2025 16:35:12 GMT - Thu, 19 Jun 2025 16:35:11 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 804x1080, components 3 Hash2e638708dc918990a035b9e010134391 7ad6e4f43f9e9b1eb95912d77c130a19ab9772ab 9274099e55794de4ca54d0bd15bc11bcd6a62fde2ac2a8d41f8b3de0cf7fee4b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bundle/trafee/prelands/882/assets/images/d1.jpg HTTP/1.1
Host: www.smoffrs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.smoffrs.ru/s/42cf1c2250951
Cookie: s=%2BWeb1Ue2Xrg7f3uLftoVEI3hx7eHzgpFW9PlCeSveEgK3XlsHhg%2BKVvYITKuRnjvsfHQY3lYEeGR3wQ0YsumeiB%2BLvYRH5tb%2FTdQQiJD4fZVtVjrYBUS0A1lDRDXoOLYPIDy1YIRSLxo%2FAe6AczcYAcmQ4NeTMYeph%2B71xehEEDLriUa6DuRmopY5xK5MS6HD%2FvfdpRKDHrw8qB8EF2nQ0IJD7ycpmanISx4KMPyUSfXhqlrIZ1egU%2Bb5UAo6oPjGltf1nAi0it6rFaRoEcGEP%2BaGDnpmcvxmcOvW8UvliNrmNJYBam615t4MA4sPISO0P20uFbik1duraSfYot%2BavnXZ%2FI1Qs191RxYJKs5NaysPQGpGdUMyiBgMMvglOEofCpMHtwbB36j4xB7NEOK%2B0G8tQNfxif5Lv1x0g5gQf2ki01bB7gavjbHgeCl4wDOIhQkaf6lzpg%2BEV4PZHl6p1nnYOO%2Bk5P5lC9WDXHaWFuhL%2FP%2FmjtDb%2FBl6P2Y7VlwrJ7PdrR1R%2FdcehK3hn95wR6Llrcd%2B0pinIracbPOKjyzhKfm1u8Mlgjb6qA45ZuwSNedaZ5hgGGW79kmof0wGwtIpYvG%2F49njYnmxbZJHXTbev1KFYw3UpiFtpP4gFRT8Fo81YxFKK0YPHj4TdEDWUpFWtRY49BwYR4anM7u0lwNREdBPONLzBtPiqguUTJbsLOXpsPiY3ivdyNZ6SP5sHpj7r3Y48AE1VirvpPMWASzsYoHwppC9Hy3fk1QH6oBYeYJZdWmktqJaFedMoGrVWNb9M4lYWh27SBBsh4jMkJuFhq0Wsj4lUYHdmvehaXEeyetg7Ri%2FB3G1Mf%2F%2BG8ZRSDHGRHtJjmo2wPiJ25FDDB2QtCpPk00JHLnrxlCYxA9MPX2AfE16GkqsfmcZI6lroFAAbZh3%2BtLuf90ZNTzjImOjE6NG4CYmZNK%2FAP6kEKNaAI%2FVH4FvDDQMCG%2B3eMuk8JLXIOUi9dE72xg0CehVD6vkk3BdtvZ73mlHvr2hZRf9ZfmG2e30aL3eH2s94drq3h5KF1WkJG7x%2BFKHGu8Y0yLdOeI%2FTVfJ%2FOSy4tDaPl7nqg%2FDDIxZBv0AYkRe1Aknawb4Rx4xQpIg82tBZfSbMM10vYEZpcCcAznY9B1HLzVwdq3fKD1th2Mphx7iATukbzmF%2BkAm5ERwkgeVRXTf5eKtIgVAbYIx7426cn3MjCA0xUz401jbs2s0hJbX%2B9WGHO0m6toM72dGAX1bAwbhtWOFU0mWrw%2Fv2cCPGK1CnC%2FPmQdf7FJ0dAPrDdSsFSQIyAQfO8ohpqtJQTSZYAygPHuG%2B%2BBW37mypDpA6woF3eOxwWXVEJQkPd%2FaNZ5JisB88Qz2ZjsKA17EXj%2FItbeP31UQPLAvIpUDUxh5LFN95ObkVDDVpABQsrGvww93emtoYHG2GtXt0nQZHGtwWkMcKrYrUdi1DN17fw0encPIpqFtTEBbzfrX8INItFYV01sBs0gKSPrn4ZYQE3%2FfkD9bsNBUeaRTyLP8Fk3yvZnMg%2F3Tg6AX7RLGkrimNiN8iRDyC5azIqU437GSk3ERQZI%2Bdmjb7dsjc1A5n5qc3Og61SNj%2FmcK99IhAoPMTyxYXZ1YPb8rQg8lihPJvEIKjcjqkoew9RZIK%2FKrCs1JRsV7Cp25Mg2zFCjfpRk%2Bh3c5NUrAoZcWW5FZFYyEgWcjO4mxDN5m2Lu2NFO1ZWgeb%2F0aIObmtKZuOJDOv5%2Bqb4rEp%2F4%2B9oPzQlH%2F9DECaiszeG77t1SFcPdMa97CJKt6vs7qpzBnhl8vgy4hNS%2BPayLRcFZmvw%2Be8yy7J2a4D9sY8ROTirl6S0L%2FO1QsmFAHG%2BNbtb1IGdZrLUR%2FxmI%2B1F13Jy4NrTGRSuoC3fKpLXG0tGj1gkTquShIuXtjhYKJGvb14VRYXuwM%2BxhK2N%2B%2FglHNCOHqa5k%2FO%2FDbq10%2BG3%2BYqTf0KN2dwwop0ghtRPB9VWPecBBa1Fn3Z9oxSghzsK%2FIBY7GRQN9m3RtIIkasphCKkx%2FxVFsvdlVYZClAx3stclCmJH%2FS2PyVmulqpvPQilJXaNrhAVH5C8eoYTirbD41v17JICtBgaCwoXl0A%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 28 Mar 2025 07:40:32 GMT
content-type: image/jpeg
cache-control: max-age=86400, public
X-Firefox-Spdy: h2
|
|
| GET xn--31-mlcaxniu6i.xn--p1ai/include/mainpage/uymkjp.php?haju=234o8w |  92.53.96.165 | 200 OK | 84 B |
URL User Request GET xn--31-mlcaxniu6i.xn--p1ai/include/mainpage/uymkjp.php?haju=234o8w IP92.53.96.165:443
CertificateIssuerLet's Encrypt Subjectxn--31-mlcaxniu6i.xn--p1ai Fingerprint86:22:8A:31:13:D8:52:50:46:B7:A9:FC:1E:2A:51:68:F3:84:FC:6C ValidityFri, 17 Jan 2025 06:03:24 GMT - Thu, 17 Apr 2025 06:03:23 GMT
File typeHTML document, ASCII text, with no line terminators Hash53485340c25077bdaf16e314590302eb 8f19497bae948f4ab24b378e717ed2f6d5338ef6 578a9d54c98b0659b18257ab3c553287c830f7ba7e7ba98992c2790ace9cdfef
GET /include/mainpage/uymkjp.php?haju=234o8w HTTP/1.1
Host: xn--31-mlcaxniu6i.xn--p1ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.26.3
date: Fri, 28 Mar 2025 07:40:29 GMT
content-type: text/html; charset=UTF-8
content-length: 84
X-Firefox-Spdy: h2
|
|
| GET openfpcdn.io/botd/v1 | 54.240.174.124 | 200 OK | 15 kB |
IP54.240.174.124:443
CertificateIssuerAmazon Subjectopenfpcdn.io FingerprintDB:8B:1E:08:FC:EE:6F:56:28:0B:74:80:37:E0:DE:69:D3:59:96:8D ValidityWed, 27 Nov 2024 00:00:00 GMT - Sat, 27 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (15005) Hash234a8c1c15df9b03c65e9e14c82fc872 e5ca36727846aede7dfbc07e88b2b025eb0cae90 29cb26e06f2a4a877f1134a46480d9b78f8b6e0e6f9b0fe67e34307c312b5a89
GET /botd/v1 HTTP/1.1
Host: openfpcdn.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://grayvsgray.pw
DNT: 1
Connection: keep-alive
Referer: https://grayvsgray.pw/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
server: CloudFront
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
date: Fri, 28 Mar 2025 06:39:14 GMT
cache-control: public, max-age=598056, s-maxage=10602
etag: W/"5co2cnhGrt59+8B+iLKwJesMrpA"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: N0d_GF99Wqdto43_TXo-Bay5YZYPNWHzCM2HLjN-1oAh0VR2tPfokA==
age: 3688
X-Firefox-Spdy: h2
|
|
| GET grayvsgray.pw/favicon.ico | 88.214.27.56 | 404 Not Found | 315 B |
URL GET grayvsgray.pw/favicon.ico IP88.214.27.56:443 ASN#209272 Alviva Holding Limited
CertificateIssuerSectigo Limited Subjectgrayvsgray.pw Fingerprint7F:B9:74:BA:4C:EA:1F:77:FB:1B:D7:88:62:E0:9C:E0:AE:4D:37:EB ValidityThu, 06 Mar 2025 00:00:00 GMT - Fri, 06 Mar 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (326), with no line terminators Hash97ef40509b73c101d6815511c3adf98d a4242322497ea630ea72e26ba297a95a2bbe5ccd 322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: grayvsgray.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://grayvsgray.pw/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Fri, 28 Mar 2025 07:40:30 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/images/favicon.png | 81.30.157.12 | 200 OK | 3.7 kB |
URL GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/images/favicon.png IP81.30.157.12:443
Requested byhttps://www.smoffrs.ru/s/42cf1c2250951 CertificateIssuerLet's Encrypt Subjectsmoffrs.ru Fingerprint18:23:26:08:0D:D9:5D:F3:99:DA:F0:4F:A5:63:AB:85:21:34:9B:36 ValidityFri, 21 Mar 2025 16:35:12 GMT - Thu, 19 Jun 2025 16:35:11 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash0141a83581ab1af25984db9541860643 a2a4fd5ee46dd5525a36000f3a8fbcf7b0d988a8 3656e4d13d097a874d3b2598e897ce435eab9325c2ac700a890bc5fbd143c124
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bundle/trafee/prelands/882/assets/images/favicon.png HTTP/1.1
Host: www.smoffrs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.smoffrs.ru/s/42cf1c2250951
Cookie: s=%2BWeb1Ue2Xrg7f3uLftoVEI3hx7eHzgpFW9PlCeSveEgK3XlsHhg%2BKVvYITKuRnjvsfHQY3lYEeGR3wQ0YsumeiB%2BLvYRH5tb%2FTdQQiJD4fZVtVjrYBUS0A1lDRDXoOLYPIDy1YIRSLxo%2FAe6AczcYAcmQ4NeTMYeph%2B71xehEEDLriUa6DuRmopY5xK5MS6HD%2FvfdpRKDHrw8qB8EF2nQ0IJD7ycpmanISx4KMPyUSfXhqlrIZ1egU%2Bb5UAo6oPjGltf1nAi0it6rFaRoEcGEP%2BaGDnpmcvxmcOvW8UvliNrmNJYBam615t4MA4sPISO0P20uFbik1duraSfYot%2BavnXZ%2FI1Qs191RxYJKs5NaysPQGpGdUMyiBgMMvglOEofCpMHtwbB36j4xB7NEOK%2B0G8tQNfxif5Lv1x0g5gQf2ki01bB7gavjbHgeCl4wDOIhQkaf6lzpg%2BEV4PZHl6p1nnYOO%2Bk5P5lC9WDXHaWFuhL%2FP%2FmjtDb%2FBl6P2Y7VlwrJ7PdrR1R%2FdcehK3hn95wR6Llrcd%2B0pinIracbPOKjyzhKfm1u8Mlgjb6qA45ZuwSNedaZ5hgGGW79kmof0wGwtIpYvG%2F49njYnmxbZJHXTbev1KFYw3UpiFtpP4gFRT8Fo81YxFKK0YPHj4TdEDWUpFWtRY49BwYR4anM7u0lwNREdBPONLzBtPiqguUTJbsLOXpsPiY3ivdyNZ6SP5sHpj7r3Y48AE1VirvpPMWASzsYoHwppC9Hy3fk1QH6oBYeYJZdWmktqJaFedMoGrVWNb9M4lYWh27SBBsh4jMkJuFhq0Wsj4lUYHdmvehaXEeyetg7Ri%2FB3G1Mf%2F%2BG8ZRSDHGRHtJjmo2wPiJ25FDDB2QtCpPk00JHLnrxlCYxA9MPX2AfE16GkqsfmcZI6lroFAAbZh3%2BtLuf90ZNTzjImOjE6NG4CYmZNK%2FAP6kEKNaAI%2FVH4FvDDQMCG%2B3eMuk8JLXIOUi9dE72xg0CehVD6vkk3BdtvZ73mlHvr2hZRf9ZfmG2e30aL3eH2s94drq3h5KF1WkJG7x%2BFKHGu8Y0yLdOeI%2FTVfJ%2FOSy4tDaPl7nqg%2FDDIxZBv0AYkRe1Aknawb4Rx4xQpIg82tBZfSbMM10vYEZpcCcAznY9B1HLzVwdq3fKD1th2Mphx7iATukbzmF%2BkAm5ERwkgeVRXTf5eKtIgVAbYIx7426cn3MjCA0xUz401jbs2s0hJbX%2B9WGHO0m6toM72dGAX1bAwbhtWOFU0mWrw%2Fv2cCPGK1CnC%2FPmQdf7FJ0dAPrDdSsFSQIyAQfO8ohpqtJQTSZYAygPHuG%2B%2BBW37mypDpA6woF3eOxwWXVEJQkPd%2FaNZ5JisB88Qz2ZjsKA17EXj%2FItbeP31UQPLAvIpUDUxh5LFN95ObkVDDVpABQsrGvww93emtoYHG2GtXt0nQZHGtwWkMcKrYrUdi1DN17fw0encPIpqFtTEBbzfrX8INItFYV01sBs0gKSPrn4ZYQE3%2FfkD9bsNBUeaRTyLP8Fk3yvZnMg%2F3Tg6AX7RLGkrimNiN8iRDyC5azIqU437GSk3ERQZI%2Bdmjb7dsjc1A5n5qc3Og61SNj%2FmcK99IhAoPMTyxYXZ1YPb8rQg8lihPJvEIKjcjqkoew9RZIK%2FKrCs1JRsV7Cp25Mg2zFCjfpRk%2Bh3c5NUrAoZcWW5FZFYyEgWcjO4mxDN5m2Lu2NFO1ZWgeb%2F0aIObmtKZuOJDOv5%2Bqb4rEp%2F4%2B9oPzQlH%2F9DECaiszeG77t1SFcPdMa97CJKt6vs7qpzBnhl8vgy4hNS%2BPayLRcFZmvw%2Be8yy7J2a4D9sY8ROTirl6S0L%2FO1QsmFAHG%2BNbtb1IGdZrLUR%2FxmI%2B1F13Jy4NrTGRSuoC3fKpLXG0tGj1gkTquShIuXtjhYKJGvb14VRYXuwM%2BxhK2N%2B%2FglHNCOHqa5k%2FO%2FDbq10%2BG3%2BYqTf0KN2dwwop0ghtRPB9VWPecBBa1Fn3Z9oxSghzsK%2FIBY7GRQN9m3RtIIkasphCKkx%2FxVFsvdlVYZClAx3stclCmJH%2FS2PyVmulqpvPQilJXaNrhAVH5C8eoYTirbD41v17JICtBgaCwoXl0A%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 28 Mar 2025 07:40:32 GMT
content-type: image/png
cache-control: max-age=86400, public
X-Firefox-Spdy: h2
|
|
| GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/images/m3.jpg | 81.30.157.12 | 200 OK | 61 kB |
URL GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/images/m3.jpg IP81.30.157.12:443
Requested byhttps://www.smoffrs.ru/s/42cf1c2250951 CertificateIssuerLet's Encrypt Subjectsmoffrs.ru Fingerprint18:23:26:08:0D:D9:5D:F3:99:DA:F0:4F:A5:63:AB:85:21:34:9B:36 ValidityFri, 21 Mar 2025 16:35:12 GMT - Thu, 19 Jun 2025 16:35:11 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 790x1100, components 3 Hashf461c44c2cf817e8d3ee610abf569156 07891fbf699a6890b4256c9c63094b722dd0346a 79d7694297da1656b0d25497e36d401ebad128cdf96dc3b0283df8f46277a7f1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bundle/trafee/prelands/882/assets/images/m3.jpg HTTP/1.1
Host: www.smoffrs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.smoffrs.ru/s/42cf1c2250951
Cookie: s=%2BWeb1Ue2Xrg7f3uLftoVEI3hx7eHzgpFW9PlCeSveEgK3XlsHhg%2BKVvYITKuRnjvsfHQY3lYEeGR3wQ0YsumeiB%2BLvYRH5tb%2FTdQQiJD4fZVtVjrYBUS0A1lDRDXoOLYPIDy1YIRSLxo%2FAe6AczcYAcmQ4NeTMYeph%2B71xehEEDLriUa6DuRmopY5xK5MS6HD%2FvfdpRKDHrw8qB8EF2nQ0IJD7ycpmanISx4KMPyUSfXhqlrIZ1egU%2Bb5UAo6oPjGltf1nAi0it6rFaRoEcGEP%2BaGDnpmcvxmcOvW8UvliNrmNJYBam615t4MA4sPISO0P20uFbik1duraSfYot%2BavnXZ%2FI1Qs191RxYJKs5NaysPQGpGdUMyiBgMMvglOEofCpMHtwbB36j4xB7NEOK%2B0G8tQNfxif5Lv1x0g5gQf2ki01bB7gavjbHgeCl4wDOIhQkaf6lzpg%2BEV4PZHl6p1nnYOO%2Bk5P5lC9WDXHaWFuhL%2FP%2FmjtDb%2FBl6P2Y7VlwrJ7PdrR1R%2FdcehK3hn95wR6Llrcd%2B0pinIracbPOKjyzhKfm1u8Mlgjb6qA45ZuwSNedaZ5hgGGW79kmof0wGwtIpYvG%2F49njYnmxbZJHXTbev1KFYw3UpiFtpP4gFRT8Fo81YxFKK0YPHj4TdEDWUpFWtRY49BwYR4anM7u0lwNREdBPONLzBtPiqguUTJbsLOXpsPiY3ivdyNZ6SP5sHpj7r3Y48AE1VirvpPMWASzsYoHwppC9Hy3fk1QH6oBYeYJZdWmktqJaFedMoGrVWNb9M4lYWh27SBBsh4jMkJuFhq0Wsj4lUYHdmvehaXEeyetg7Ri%2FB3G1Mf%2F%2BG8ZRSDHGRHtJjmo2wPiJ25FDDB2QtCpPk00JHLnrxlCYxA9MPX2AfE16GkqsfmcZI6lroFAAbZh3%2BtLuf90ZNTzjImOjE6NG4CYmZNK%2FAP6kEKNaAI%2FVH4FvDDQMCG%2B3eMuk8JLXIOUi9dE72xg0CehVD6vkk3BdtvZ73mlHvr2hZRf9ZfmG2e30aL3eH2s94drq3h5KF1WkJG7x%2BFKHGu8Y0yLdOeI%2FTVfJ%2FOSy4tDaPl7nqg%2FDDIxZBv0AYkRe1Aknawb4Rx4xQpIg82tBZfSbMM10vYEZpcCcAznY9B1HLzVwdq3fKD1th2Mphx7iATukbzmF%2BkAm5ERwkgeVRXTf5eKtIgVAbYIx7426cn3MjCA0xUz401jbs2s0hJbX%2B9WGHO0m6toM72dGAX1bAwbhtWOFU0mWrw%2Fv2cCPGK1CnC%2FPmQdf7FJ0dAPrDdSsFSQIyAQfO8ohpqtJQTSZYAygPHuG%2B%2BBW37mypDpA6woF3eOxwWXVEJQkPd%2FaNZ5JisB88Qz2ZjsKA17EXj%2FItbeP31UQPLAvIpUDUxh5LFN95ObkVDDVpABQsrGvww93emtoYHG2GtXt0nQZHGtwWkMcKrYrUdi1DN17fw0encPIpqFtTEBbzfrX8INItFYV01sBs0gKSPrn4ZYQE3%2FfkD9bsNBUeaRTyLP8Fk3yvZnMg%2F3Tg6AX7RLGkrimNiN8iRDyC5azIqU437GSk3ERQZI%2Bdmjb7dsjc1A5n5qc3Og61SNj%2FmcK99IhAoPMTyxYXZ1YPb8rQg8lihPJvEIKjcjqkoew9RZIK%2FKrCs1JRsV7Cp25Mg2zFCjfpRk%2Bh3c5NUrAoZcWW5FZFYyEgWcjO4mxDN5m2Lu2NFO1ZWgeb%2F0aIObmtKZuOJDOv5%2Bqb4rEp%2F4%2B9oPzQlH%2F9DECaiszeG77t1SFcPdMa97CJKt6vs7qpzBnhl8vgy4hNS%2BPayLRcFZmvw%2Be8yy7J2a4D9sY8ROTirl6S0L%2FO1QsmFAHG%2BNbtb1IGdZrLUR%2FxmI%2B1F13Jy4NrTGRSuoC3fKpLXG0tGj1gkTquShIuXtjhYKJGvb14VRYXuwM%2BxhK2N%2B%2FglHNCOHqa5k%2FO%2FDbq10%2BG3%2BYqTf0KN2dwwop0ghtRPB9VWPecBBa1Fn3Z9oxSghzsK%2FIBY7GRQN9m3RtIIkasphCKkx%2FxVFsvdlVYZClAx3stclCmJH%2FS2PyVmulqpvPQilJXaNrhAVH5C8eoYTirbD41v17JICtBgaCwoXl0A%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 28 Mar 2025 07:40:32 GMT
content-type: image/jpeg
cache-control: max-age=86400, public
X-Firefox-Spdy: h2
|
|
| GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/js/functions.js | 81.30.157.12 | 200 OK | 2.9 kB |
URL GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/js/functions.js IP81.30.157.12:443
Requested byhttps://www.smoffrs.ru/s/42cf1c2250951 CertificateIssuerLet's Encrypt Subjectsmoffrs.ru Fingerprint18:23:26:08:0D:D9:5D:F3:99:DA:F0:4F:A5:63:AB:85:21:34:9B:36 ValidityFri, 21 Mar 2025 16:35:12 GMT - Thu, 19 Jun 2025 16:35:11 GMT
File typeJavaScript source, ASCII text, with very long lines (3135), with no line terminators Hashbd0500d0d152202b450861565dcda750 6fcb4d4308471be2f7e1afb1a815e291ed5a7e30 3cbab5de775bf9958eab5958e5ea0d33653b60a7c27134de27dce3bf8d7f741c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bundle/trafee/prelands/882/assets/js/functions.js HTTP/1.1
Host: www.smoffrs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.smoffrs.ru/s/42cf1c2250951
Cookie: s=%2BWeb1Ue2Xrg7f3uLftoVEI3hx7eHzgpFW9PlCeSveEgK3XlsHhg%2BKVvYITKuRnjvsfHQY3lYEeGR3wQ0YsumeiB%2BLvYRH5tb%2FTdQQiJD4fZVtVjrYBUS0A1lDRDXoOLYPIDy1YIRSLxo%2FAe6AczcYAcmQ4NeTMYeph%2B71xehEEDLriUa6DuRmopY5xK5MS6HD%2FvfdpRKDHrw8qB8EF2nQ0IJD7ycpmanISx4KMPyUSfXhqlrIZ1egU%2Bb5UAo6oPjGltf1nAi0it6rFaRoEcGEP%2BaGDnpmcvxmcOvW8UvliNrmNJYBam615t4MA4sPISO0P20uFbik1duraSfYot%2BavnXZ%2FI1Qs191RxYJKs5NaysPQGpGdUMyiBgMMvglOEofCpMHtwbB36j4xB7NEOK%2B0G8tQNfxif5Lv1x0g5gQf2ki01bB7gavjbHgeCl4wDOIhQkaf6lzpg%2BEV4PZHl6p1nnYOO%2Bk5P5lC9WDXHaWFuhL%2FP%2FmjtDb%2FBl6P2Y7VlwrJ7PdrR1R%2FdcehK3hn95wR6Llrcd%2B0pinIracbPOKjyzhKfm1u8Mlgjb6qA45ZuwSNedaZ5hgGGW79kmof0wGwtIpYvG%2F49njYnmxbZJHXTbev1KFYw3UpiFtpP4gFRT8Fo81YxFKK0YPHj4TdEDWUpFWtRY49BwYR4anM7u0lwNREdBPONLzBtPiqguUTJbsLOXpsPiY3ivdyNZ6SP5sHpj7r3Y48AE1VirvpPMWASzsYoHwppC9Hy3fk1QH6oBYeYJZdWmktqJaFedMoGrVWNb9M4lYWh27SBBsh4jMkJuFhq0Wsj4lUYHdmvehaXEeyetg7Ri%2FB3G1Mf%2F%2BG8ZRSDHGRHtJjmo2wPiJ25FDDB2QtCpPk00JHLnrxlCYxA9MPX2AfE16GkqsfmcZI6lroFAAbZh3%2BtLuf90ZNTzjImOjE6NG4CYmZNK%2FAP6kEKNaAI%2FVH4FvDDQMCG%2B3eMuk8JLXIOUi9dE72xg0CehVD6vkk3BdtvZ73mlHvr2hZRf9ZfmG2e30aL3eH2s94drq3h5KF1WkJG7x%2BFKHGu8Y0yLdOeI%2FTVfJ%2FOSy4tDaPl7nqg%2FDDIxZBv0AYkRe1Aknawb4Rx4xQpIg82tBZfSbMM10vYEZpcCcAznY9B1HLzVwdq3fKD1th2Mphx7iATukbzmF%2BkAm5ERwkgeVRXTf5eKtIgVAbYIx7426cn3MjCA0xUz401jbs2s0hJbX%2B9WGHO0m6toM72dGAX1bAwbhtWOFU0mWrw%2Fv2cCPGK1CnC%2FPmQdf7FJ0dAPrDdSsFSQIyAQfO8ohpqtJQTSZYAygPHuG%2B%2BBW37mypDpA6woF3eOxwWXVEJQkPd%2FaNZ5JisB88Qz2ZjsKA17EXj%2FItbeP31UQPLAvIpUDUxh5LFN95ObkVDDVpABQsrGvww93emtoYHG2GtXt0nQZHGtwWkMcKrYrUdi1DN17fw0encPIpqFtTEBbzfrX8INItFYV01sBs0gKSPrn4ZYQE3%2FfkD9bsNBUeaRTyLP8Fk3yvZnMg%2F3Tg6AX7RLGkrimNiN8iRDyC5azIqU437GSk3ERQZI%2Bdmjb7dsjc1A5n5qc3Og61SNj%2FmcK99IhAoPMTyxYXZ1YPb8rQg8lihPJvEIKjcjqkoew9RZIK%2FKrCs1JRsV7Cp25Mg2zFCjfpRk%2Bh3c5NUrAoZcWW5FZFYyEgWcjO4mxDN5m2Lu2NFO1ZWgeb%2F0aIObmtKZuOJDOv5%2Bqb4rEp%2F4%2B9oPzQlH%2F9DECaiszeG77t1SFcPdMa97CJKt6vs7qpzBnhl8vgy4hNS%2BPayLRcFZmvw%2Be8yy7J2a4D9sY8ROTirl6S0L%2FO1QsmFAHG%2BNbtb1IGdZrLUR%2FxmI%2B1F13Jy4NrTGRSuoC3fKpLXG0tGj1gkTquShIuXtjhYKJGvb14VRYXuwM%2BxhK2N%2B%2FglHNCOHqa5k%2FO%2FDbq10%2BG3%2BYqTf0KN2dwwop0ghtRPB9VWPecBBa1Fn3Z9oxSghzsK%2FIBY7GRQN9m3RtIIkasphCKkx%2FxVFsvdlVYZClAx3stclCmJH%2FS2PyVmulqpvPQilJXaNrhAVH5C8eoYTirbD41v17JICtBgaCwoXl0A%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 28 Mar 2025 07:40:32 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=86400, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 | 142.250.178.99 | 200 OK | 19 kB |
URL GET fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 IP142.250.178.99:443
Requested byhttps://www.smoffrs.ru/s/42cf1c2250951 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18792, version 1.0 Hash74795056a2358804684c7e9d0479f484 7030f4f33183b8de843e82eedb9cb6a6cdd107c3 1c9c85d0b73b7321eb8ed22e0b6bcd577478dd5f99d1379a5d4cea10884033ac
GET /s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.smoffrs.ru
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18792
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 27 Mar 2025 18:01:40 GMT
expires: Fri, 27 Mar 2026 18:01:40 GMT
cache-control: public, max-age=31536000
age: 49132
last-modified: Wed, 06 Nov 2024 17:30:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/images/m1.jpg | 81.30.157.12 | 200 OK | 46 kB |
URL GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/images/m1.jpg IP81.30.157.12:443
Requested byhttps://www.smoffrs.ru/s/42cf1c2250951 CertificateIssuerLet's Encrypt Subjectsmoffrs.ru Fingerprint18:23:26:08:0D:D9:5D:F3:99:DA:F0:4F:A5:63:AB:85:21:34:9B:36 ValidityFri, 21 Mar 2025 16:35:12 GMT - Thu, 19 Jun 2025 16:35:11 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x1130, components 3 Hash810fce92becd5039b39fd482cf0c68e3 6d95515ef8231bfff77118ab6ef75f27899fa1b4 941ffee47bead0a7dee4358c6019f9e57857f19c376ccd0e45598916e1117cfd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bundle/trafee/prelands/882/assets/images/m1.jpg HTTP/1.1
Host: www.smoffrs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.smoffrs.ru/s/42cf1c2250951
Cookie: s=%2BWeb1Ue2Xrg7f3uLftoVEI3hx7eHzgpFW9PlCeSveEgK3XlsHhg%2BKVvYITKuRnjvsfHQY3lYEeGR3wQ0YsumeiB%2BLvYRH5tb%2FTdQQiJD4fZVtVjrYBUS0A1lDRDXoOLYPIDy1YIRSLxo%2FAe6AczcYAcmQ4NeTMYeph%2B71xehEEDLriUa6DuRmopY5xK5MS6HD%2FvfdpRKDHrw8qB8EF2nQ0IJD7ycpmanISx4KMPyUSfXhqlrIZ1egU%2Bb5UAo6oPjGltf1nAi0it6rFaRoEcGEP%2BaGDnpmcvxmcOvW8UvliNrmNJYBam615t4MA4sPISO0P20uFbik1duraSfYot%2BavnXZ%2FI1Qs191RxYJKs5NaysPQGpGdUMyiBgMMvglOEofCpMHtwbB36j4xB7NEOK%2B0G8tQNfxif5Lv1x0g5gQf2ki01bB7gavjbHgeCl4wDOIhQkaf6lzpg%2BEV4PZHl6p1nnYOO%2Bk5P5lC9WDXHaWFuhL%2FP%2FmjtDb%2FBl6P2Y7VlwrJ7PdrR1R%2FdcehK3hn95wR6Llrcd%2B0pinIracbPOKjyzhKfm1u8Mlgjb6qA45ZuwSNedaZ5hgGGW79kmof0wGwtIpYvG%2F49njYnmxbZJHXTbev1KFYw3UpiFtpP4gFRT8Fo81YxFKK0YPHj4TdEDWUpFWtRY49BwYR4anM7u0lwNREdBPONLzBtPiqguUTJbsLOXpsPiY3ivdyNZ6SP5sHpj7r3Y48AE1VirvpPMWASzsYoHwppC9Hy3fk1QH6oBYeYJZdWmktqJaFedMoGrVWNb9M4lYWh27SBBsh4jMkJuFhq0Wsj4lUYHdmvehaXEeyetg7Ri%2FB3G1Mf%2F%2BG8ZRSDHGRHtJjmo2wPiJ25FDDB2QtCpPk00JHLnrxlCYxA9MPX2AfE16GkqsfmcZI6lroFAAbZh3%2BtLuf90ZNTzjImOjE6NG4CYmZNK%2FAP6kEKNaAI%2FVH4FvDDQMCG%2B3eMuk8JLXIOUi9dE72xg0CehVD6vkk3BdtvZ73mlHvr2hZRf9ZfmG2e30aL3eH2s94drq3h5KF1WkJG7x%2BFKHGu8Y0yLdOeI%2FTVfJ%2FOSy4tDaPl7nqg%2FDDIxZBv0AYkRe1Aknawb4Rx4xQpIg82tBZfSbMM10vYEZpcCcAznY9B1HLzVwdq3fKD1th2Mphx7iATukbzmF%2BkAm5ERwkgeVRXTf5eKtIgVAbYIx7426cn3MjCA0xUz401jbs2s0hJbX%2B9WGHO0m6toM72dGAX1bAwbhtWOFU0mWrw%2Fv2cCPGK1CnC%2FPmQdf7FJ0dAPrDdSsFSQIyAQfO8ohpqtJQTSZYAygPHuG%2B%2BBW37mypDpA6woF3eOxwWXVEJQkPd%2FaNZ5JisB88Qz2ZjsKA17EXj%2FItbeP31UQPLAvIpUDUxh5LFN95ObkVDDVpABQsrGvww93emtoYHG2GtXt0nQZHGtwWkMcKrYrUdi1DN17fw0encPIpqFtTEBbzfrX8INItFYV01sBs0gKSPrn4ZYQE3%2FfkD9bsNBUeaRTyLP8Fk3yvZnMg%2F3Tg6AX7RLGkrimNiN8iRDyC5azIqU437GSk3ERQZI%2Bdmjb7dsjc1A5n5qc3Og61SNj%2FmcK99IhAoPMTyxYXZ1YPb8rQg8lihPJvEIKjcjqkoew9RZIK%2FKrCs1JRsV7Cp25Mg2zFCjfpRk%2Bh3c5NUrAoZcWW5FZFYyEgWcjO4mxDN5m2Lu2NFO1ZWgeb%2F0aIObmtKZuOJDOv5%2Bqb4rEp%2F4%2B9oPzQlH%2F9DECaiszeG77t1SFcPdMa97CJKt6vs7qpzBnhl8vgy4hNS%2BPayLRcFZmvw%2Be8yy7J2a4D9sY8ROTirl6S0L%2FO1QsmFAHG%2BNbtb1IGdZrLUR%2FxmI%2B1F13Jy4NrTGRSuoC3fKpLXG0tGj1gkTquShIuXtjhYKJGvb14VRYXuwM%2BxhK2N%2B%2FglHNCOHqa5k%2FO%2FDbq10%2BG3%2BYqTf0KN2dwwop0ghtRPB9VWPecBBa1Fn3Z9oxSghzsK%2FIBY7GRQN9m3RtIIkasphCKkx%2FxVFsvdlVYZClAx3stclCmJH%2FS2PyVmulqpvPQilJXaNrhAVH5C8eoYTirbD41v17JICtBgaCwoXl0A%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 28 Mar 2025 07:40:32 GMT
content-type: image/jpeg
cache-control: max-age=86400, public
X-Firefox-Spdy: h2
|
|
| GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/js/jquery.min.js | 81.30.157.12 | 200 OK | 86 kB |
URL GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/js/jquery.min.js IP81.30.157.12:443
Requested byhttps://www.smoffrs.ru/s/42cf1c2250951 CertificateIssuerLet's Encrypt Subjectsmoffrs.ru Fingerprint18:23:26:08:0D:D9:5D:F3:99:DA:F0:4F:A5:63:AB:85:21:34:9B:36 ValidityFri, 21 Mar 2025 16:35:12 GMT - Thu, 19 Jun 2025 16:35:11 GMT
File typeJavaScript source, ASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bundle/trafee/prelands/882/assets/js/jquery.min.js HTTP/1.1
Host: www.smoffrs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.smoffrs.ru/s/42cf1c2250951
Cookie: s=%2BWeb1Ue2Xrg7f3uLftoVEI3hx7eHzgpFW9PlCeSveEgK3XlsHhg%2BKVvYITKuRnjvsfHQY3lYEeGR3wQ0YsumeiB%2BLvYRH5tb%2FTdQQiJD4fZVtVjrYBUS0A1lDRDXoOLYPIDy1YIRSLxo%2FAe6AczcYAcmQ4NeTMYeph%2B71xehEEDLriUa6DuRmopY5xK5MS6HD%2FvfdpRKDHrw8qB8EF2nQ0IJD7ycpmanISx4KMPyUSfXhqlrIZ1egU%2Bb5UAo6oPjGltf1nAi0it6rFaRoEcGEP%2BaGDnpmcvxmcOvW8UvliNrmNJYBam615t4MA4sPISO0P20uFbik1duraSfYot%2BavnXZ%2FI1Qs191RxYJKs5NaysPQGpGdUMyiBgMMvglOEofCpMHtwbB36j4xB7NEOK%2B0G8tQNfxif5Lv1x0g5gQf2ki01bB7gavjbHgeCl4wDOIhQkaf6lzpg%2BEV4PZHl6p1nnYOO%2Bk5P5lC9WDXHaWFuhL%2FP%2FmjtDb%2FBl6P2Y7VlwrJ7PdrR1R%2FdcehK3hn95wR6Llrcd%2B0pinIracbPOKjyzhKfm1u8Mlgjb6qA45ZuwSNedaZ5hgGGW79kmof0wGwtIpYvG%2F49njYnmxbZJHXTbev1KFYw3UpiFtpP4gFRT8Fo81YxFKK0YPHj4TdEDWUpFWtRY49BwYR4anM7u0lwNREdBPONLzBtPiqguUTJbsLOXpsPiY3ivdyNZ6SP5sHpj7r3Y48AE1VirvpPMWASzsYoHwppC9Hy3fk1QH6oBYeYJZdWmktqJaFedMoGrVWNb9M4lYWh27SBBsh4jMkJuFhq0Wsj4lUYHdmvehaXEeyetg7Ri%2FB3G1Mf%2F%2BG8ZRSDHGRHtJjmo2wPiJ25FDDB2QtCpPk00JHLnrxlCYxA9MPX2AfE16GkqsfmcZI6lroFAAbZh3%2BtLuf90ZNTzjImOjE6NG4CYmZNK%2FAP6kEKNaAI%2FVH4FvDDQMCG%2B3eMuk8JLXIOUi9dE72xg0CehVD6vkk3BdtvZ73mlHvr2hZRf9ZfmG2e30aL3eH2s94drq3h5KF1WkJG7x%2BFKHGu8Y0yLdOeI%2FTVfJ%2FOSy4tDaPl7nqg%2FDDIxZBv0AYkRe1Aknawb4Rx4xQpIg82tBZfSbMM10vYEZpcCcAznY9B1HLzVwdq3fKD1th2Mphx7iATukbzmF%2BkAm5ERwkgeVRXTf5eKtIgVAbYIx7426cn3MjCA0xUz401jbs2s0hJbX%2B9WGHO0m6toM72dGAX1bAwbhtWOFU0mWrw%2Fv2cCPGK1CnC%2FPmQdf7FJ0dAPrDdSsFSQIyAQfO8ohpqtJQTSZYAygPHuG%2B%2BBW37mypDpA6woF3eOxwWXVEJQkPd%2FaNZ5JisB88Qz2ZjsKA17EXj%2FItbeP31UQPLAvIpUDUxh5LFN95ObkVDDVpABQsrGvww93emtoYHG2GtXt0nQZHGtwWkMcKrYrUdi1DN17fw0encPIpqFtTEBbzfrX8INItFYV01sBs0gKSPrn4ZYQE3%2FfkD9bsNBUeaRTyLP8Fk3yvZnMg%2F3Tg6AX7RLGkrimNiN8iRDyC5azIqU437GSk3ERQZI%2Bdmjb7dsjc1A5n5qc3Og61SNj%2FmcK99IhAoPMTyxYXZ1YPb8rQg8lihPJvEIKjcjqkoew9RZIK%2FKrCs1JRsV7Cp25Mg2zFCjfpRk%2Bh3c5NUrAoZcWW5FZFYyEgWcjO4mxDN5m2Lu2NFO1ZWgeb%2F0aIObmtKZuOJDOv5%2Bqb4rEp%2F4%2B9oPzQlH%2F9DECaiszeG77t1SFcPdMa97CJKt6vs7qpzBnhl8vgy4hNS%2BPayLRcFZmvw%2Be8yy7J2a4D9sY8ROTirl6S0L%2FO1QsmFAHG%2BNbtb1IGdZrLUR%2FxmI%2B1F13Jy4NrTGRSuoC3fKpLXG0tGj1gkTquShIuXtjhYKJGvb14VRYXuwM%2BxhK2N%2B%2FglHNCOHqa5k%2FO%2FDbq10%2BG3%2BYqTf0KN2dwwop0ghtRPB9VWPecBBa1Fn3Z9oxSghzsK%2FIBY7GRQN9m3RtIIkasphCKkx%2FxVFsvdlVYZClAx3stclCmJH%2FS2PyVmulqpvPQilJXaNrhAVH5C8eoYTirbD41v17JICtBgaCwoXl0A%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 28 Mar 2025 07:40:32 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=86400, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| | 88.214.27.56 | 200 OK | 1.8 kB |
IP88.214.27.56:443 ASN#209272 Alviva Holding Limited
CertificateIssuerSectigo Limited Subjectgrayvsgray.pw Fingerprint7F:B9:74:BA:4C:EA:1F:77:FB:1B:D7:88:62:E0:9C:E0:AE:4D:37:EB ValidityThu, 06 Mar 2025 00:00:00 GMT - Fri, 06 Mar 2026 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (1896), with no line terminators Hash46e5a2c3c6cccbea75a375728b966589 bd9bce69152b23309fd9ea10fc7d6a4fcce0a978 3da605a43f2538a80dad75cb865455e614c390cc574b8a13052123364fcc3d60
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: grayvsgray.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 28 Mar 2025 07:40:30 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 21 Mar 2025 18:18:12 GMT
ETag: "6f6-630de46fb2100-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 720
Keep-Alive: timeout=2, max=100
Content-Type: text/html
|
|
| GET www.smoffrs.ru/s/42cf1c2250951 | 81.30.157.12 | 200 OK | 46 kB |
URL User Request GET www.smoffrs.ru/s/42cf1c2250951 IP81.30.157.12:443
CertificateIssuerLet's Encrypt Subjectsmoffrs.ru Fingerprint18:23:26:08:0D:D9:5D:F3:99:DA:F0:4F:A5:63:AB:85:21:34:9B:36 ValidityFri, 21 Mar 2025 16:35:12 GMT - Thu, 19 Jun 2025 16:35:11 GMT
File typeHTML document, ASCII text, with very long lines (30569), with CRLF, LF line terminators Hash82bd05324eb2fe3835ae7b909860be62 045418bdef348cf19dbb8de0340601d86b8d84e6 c5e063360ea3ce30ee5d1b0d51582a9d91763768bf72b025d5e85e8230335cbf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /s/42cf1c2250951 HTTP/1.1
Host: www.smoffrs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 28 Mar 2025 07:40:32 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: s=%2BWeb1Ue2Xrg7f3uLftoVEI3hx7eHzgpFW9PlCeSveEgK3XlsHhg%2BKVvYITKuRnjvsfHQY3lYEeGR3wQ0YsumeiB%2BLvYRH5tb%2FTdQQiJD4fZVtVjrYBUS0A1lDRDXoOLYPIDy1YIRSLxo%2FAe6AczcYAcmQ4NeTMYeph%2B71xehEEDLriUa6DuRmopY5xK5MS6HD%2FvfdpRKDHrw8qB8EF2nQ0IJD7ycpmanISx4KMPyUSfXhqlrIZ1egU%2Bb5UAo6oPjGltf1nAi0it6rFaRoEcGEP%2BaGDnpmcvxmcOvW8UvliNrmNJYBam615t4MA4sPISO0P20uFbik1duraSfYot%2BavnXZ%2FI1Qs191RxYJKs5NaysPQGpGdUMyiBgMMvglOEofCpMHtwbB36j4xB7NEOK%2B0G8tQNfxif5Lv1x0g5gQf2ki01bB7gavjbHgeCl4wDOIhQkaf6lzpg%2BEV4PZHl6p1nnYOO%2Bk5P5lC9WDXHaWFuhL%2FP%2FmjtDb%2FBl6P2Y7VlwrJ7PdrR1R%2FdcehK3hn95wR6Llrcd%2B0pinIracbPOKjyzhKfm1u8Mlgjb6qA45ZuwSNedaZ5hgGGW79kmof0wGwtIpYvG%2F49njYnmxbZJHXTbev1KFYw3UpiFtpP4gFRT8Fo81YxFKK0YPHj4TdEDWUpFWtRY49BwYR4anM7u0lwNREdBPONLzBtPiqguUTJbsLOXpsPiY3ivdyNZ6SP5sHpj7r3Y48AE1VirvpPMWASzsYoHwppC9Hy3fk1QH6oBYeYJZdWmktqJaFedMoGrVWNb9M4lYWh27SBBsh4jMkJuFhq0Wsj4lUYHdmvehaXEeyetg7Ri%2FB3G1Mf%2F%2BG8ZRSDHGRHtJjmo2wPiJ25FDDB2QtCpPk00JHLnrxlCYxA9MPX2AfE16GkqsfmcZI6lroFAAbZh3%2BtLuf90ZNTzjImOjE6NG4CYmZNK%2FAP6kEKNaAI%2FVH4FvDDQMCG%2B3eMuk8JLXIOUi9dE72xg0CehVD6vkk3BdtvZ73mlHvr2hZRf9ZfmG2e30aL3eH2s94drq3h5KF1WkJG7x%2BFKHGu8Y0yLdOeI%2FTVfJ%2FOSy4tDaPl7nqg%2FDDIxZBv0AYkRe1Aknawb4Rx4xQpIg82tBZfSbMM10vYEZpcCcAznY9B1HLzVwdq3fKD1th2Mphx7iATukbzmF%2BkAm5ERwkgeVRXTf5eKtIgVAbYIx7426cn3MjCA0xUz401jbs2s0hJbX%2B9WGHO0m6toM72dGAX1bAwbhtWOFU0mWrw%2Fv2cCPGK1CnC%2FPmQdf7FJ0dAPrDdSsFSQIyAQfO8ohpqtJQTSZYAygPHuG%2B%2BBW37mypDpA6woF3eOxwWXVEJQkPd%2FaNZ5JisB88Qz2ZjsKA17EXj%2FItbeP31UQPLAvIpUDUxh5LFN95ObkVDDVpABQsrGvww93emtoYHG2GtXt0nQZHGtwWkMcKrYrUdi1DN17fw0encPIpqFtTEBbzfrX8INItFYV01sBs0gKSPrn4ZYQE3%2FfkD9bsNBUeaRTyLP8Fk3yvZnMg%2F3Tg6AX7RLGkrimNiN8iRDyC5azIqU437GSk3ERQZI%2Bdmjb7dsjc1A5n5qc3Og61SNj%2FmcK99IhAoPMTyxYXZ1YPb8rQg8lihPJvEIKjcjqkoew9RZIK%2FKrCs1JRsV7Cp25Mg2zFCjfpRk%2Bh3c5NUrAoZcWW5FZFYyEgWcjO4mxDN5m2Lu2NFO1ZWgeb%2F0aIObmtKZuOJDOv5%2Bqb4rEp%2F4%2B9oPzQlH%2F9DECaiszeG77t1SFcPdMa97CJKt6vs7qpzBnhl8vgy4hNS%2BPayLRcFZmvw%2Be8yy7J2a4D9sY8ROTirl6S0L%2FO1QsmFAHG%2BNbtb1IGdZrLUR%2FxmI%2B1F13Jy4NrTGRSuoC3fKpLXG0tGj1gkTquShIuXtjhYKJGvb14VRYXuwM%2BxhK2N%2B%2FglHNCOHqa5k%2FO%2FDbq10%2BG3%2BYqTf0KN2dwwop0ghtRPB9VWPecBBa1Fn3Z9oxSghzsK%2FIBY7GRQN9m3RtIIkasphCKkx%2FxVFsvdlVYZClAx3stclCmJH%2FS2PyVmulqpvPQilJXaNrhAVH5C8eoYTirbD41v17JICtBgaCwoXl0A%3D; expires=Sat, 29 Mar 2025 07:40:32 GMT; Max-Age=86400; path=/; domain=smoffrs.ru
cache-control: must-revalidate, no-cache, no-store, private
pragma: no-cache
expires: 0
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/css/style.css | 81.30.157.12 | 200 OK | 8.4 kB |
URL GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/css/style.css IP81.30.157.12:443
Requested byhttps://www.smoffrs.ru/s/42cf1c2250951 CertificateIssuerLet's Encrypt Subjectsmoffrs.ru Fingerprint18:23:26:08:0D:D9:5D:F3:99:DA:F0:4F:A5:63:AB:85:21:34:9B:36 ValidityFri, 21 Mar 2025 16:35:12 GMT - Thu, 19 Jun 2025 16:35:11 GMT
File typeASCII text, with very long lines (9822), with no line terminators Hashe5d9e6a0884a6464ca551cd1aa3928a1 124dcdb728f721047cb4ff5a538ada4726daf15c de4f6a198e65f02bb98cf2b018cc876b0a3c22d74a5b705188206de65c307559
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bundle/trafee/prelands/882/assets/css/style.css HTTP/1.1
Host: www.smoffrs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.smoffrs.ru/s/42cf1c2250951
Cookie: s=%2BWeb1Ue2Xrg7f3uLftoVEI3hx7eHzgpFW9PlCeSveEgK3XlsHhg%2BKVvYITKuRnjvsfHQY3lYEeGR3wQ0YsumeiB%2BLvYRH5tb%2FTdQQiJD4fZVtVjrYBUS0A1lDRDXoOLYPIDy1YIRSLxo%2FAe6AczcYAcmQ4NeTMYeph%2B71xehEEDLriUa6DuRmopY5xK5MS6HD%2FvfdpRKDHrw8qB8EF2nQ0IJD7ycpmanISx4KMPyUSfXhqlrIZ1egU%2Bb5UAo6oPjGltf1nAi0it6rFaRoEcGEP%2BaGDnpmcvxmcOvW8UvliNrmNJYBam615t4MA4sPISO0P20uFbik1duraSfYot%2BavnXZ%2FI1Qs191RxYJKs5NaysPQGpGdUMyiBgMMvglOEofCpMHtwbB36j4xB7NEOK%2B0G8tQNfxif5Lv1x0g5gQf2ki01bB7gavjbHgeCl4wDOIhQkaf6lzpg%2BEV4PZHl6p1nnYOO%2Bk5P5lC9WDXHaWFuhL%2FP%2FmjtDb%2FBl6P2Y7VlwrJ7PdrR1R%2FdcehK3hn95wR6Llrcd%2B0pinIracbPOKjyzhKfm1u8Mlgjb6qA45ZuwSNedaZ5hgGGW79kmof0wGwtIpYvG%2F49njYnmxbZJHXTbev1KFYw3UpiFtpP4gFRT8Fo81YxFKK0YPHj4TdEDWUpFWtRY49BwYR4anM7u0lwNREdBPONLzBtPiqguUTJbsLOXpsPiY3ivdyNZ6SP5sHpj7r3Y48AE1VirvpPMWASzsYoHwppC9Hy3fk1QH6oBYeYJZdWmktqJaFedMoGrVWNb9M4lYWh27SBBsh4jMkJuFhq0Wsj4lUYHdmvehaXEeyetg7Ri%2FB3G1Mf%2F%2BG8ZRSDHGRHtJjmo2wPiJ25FDDB2QtCpPk00JHLnrxlCYxA9MPX2AfE16GkqsfmcZI6lroFAAbZh3%2BtLuf90ZNTzjImOjE6NG4CYmZNK%2FAP6kEKNaAI%2FVH4FvDDQMCG%2B3eMuk8JLXIOUi9dE72xg0CehVD6vkk3BdtvZ73mlHvr2hZRf9ZfmG2e30aL3eH2s94drq3h5KF1WkJG7x%2BFKHGu8Y0yLdOeI%2FTVfJ%2FOSy4tDaPl7nqg%2FDDIxZBv0AYkRe1Aknawb4Rx4xQpIg82tBZfSbMM10vYEZpcCcAznY9B1HLzVwdq3fKD1th2Mphx7iATukbzmF%2BkAm5ERwkgeVRXTf5eKtIgVAbYIx7426cn3MjCA0xUz401jbs2s0hJbX%2B9WGHO0m6toM72dGAX1bAwbhtWOFU0mWrw%2Fv2cCPGK1CnC%2FPmQdf7FJ0dAPrDdSsFSQIyAQfO8ohpqtJQTSZYAygPHuG%2B%2BBW37mypDpA6woF3eOxwWXVEJQkPd%2FaNZ5JisB88Qz2ZjsKA17EXj%2FItbeP31UQPLAvIpUDUxh5LFN95ObkVDDVpABQsrGvww93emtoYHG2GtXt0nQZHGtwWkMcKrYrUdi1DN17fw0encPIpqFtTEBbzfrX8INItFYV01sBs0gKSPrn4ZYQE3%2FfkD9bsNBUeaRTyLP8Fk3yvZnMg%2F3Tg6AX7RLGkrimNiN8iRDyC5azIqU437GSk3ERQZI%2Bdmjb7dsjc1A5n5qc3Og61SNj%2FmcK99IhAoPMTyxYXZ1YPb8rQg8lihPJvEIKjcjqkoew9RZIK%2FKrCs1JRsV7Cp25Mg2zFCjfpRk%2Bh3c5NUrAoZcWW5FZFYyEgWcjO4mxDN5m2Lu2NFO1ZWgeb%2F0aIObmtKZuOJDOv5%2Bqb4rEp%2F4%2B9oPzQlH%2F9DECaiszeG77t1SFcPdMa97CJKt6vs7qpzBnhl8vgy4hNS%2BPayLRcFZmvw%2Be8yy7J2a4D9sY8ROTirl6S0L%2FO1QsmFAHG%2BNbtb1IGdZrLUR%2FxmI%2B1F13Jy4NrTGRSuoC3fKpLXG0tGj1gkTquShIuXtjhYKJGvb14VRYXuwM%2BxhK2N%2B%2FglHNCOHqa5k%2FO%2FDbq10%2BG3%2BYqTf0KN2dwwop0ghtRPB9VWPecBBa1Fn3Z9oxSghzsK%2FIBY7GRQN9m3RtIIkasphCKkx%2FxVFsvdlVYZClAx3stclCmJH%2FS2PyVmulqpvPQilJXaNrhAVH5C8eoYTirbD41v17JICtBgaCwoXl0A%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 28 Mar 2025 07:40:32 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=86400, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/images/m2.jpg | 81.30.157.12 | 200 OK | 84 kB |
URL GET www.smoffrs.ru/bundle/trafee/prelands/882/assets/images/m2.jpg IP81.30.157.12:443
Requested byhttps://www.smoffrs.ru/s/42cf1c2250951 CertificateIssuerLet's Encrypt Subjectsmoffrs.ru Fingerprint18:23:26:08:0D:D9:5D:F3:99:DA:F0:4F:A5:63:AB:85:21:34:9B:36 ValidityFri, 21 Mar 2025 16:35:12 GMT - Thu, 19 Jun 2025 16:35:11 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 854x1180, components 3 Hash34c972cf162da15ed4421b98cf4d41e3 42fa24f00f8bf1089789c9544e7f569db10a9093 d3c65263690bb9d0b8536aace6287badfc3f7a426aaf157bb1b8de7a5d3bc664
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bundle/trafee/prelands/882/assets/images/m2.jpg HTTP/1.1
Host: www.smoffrs.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.smoffrs.ru/s/42cf1c2250951
Cookie: s=%2BWeb1Ue2Xrg7f3uLftoVEI3hx7eHzgpFW9PlCeSveEgK3XlsHhg%2BKVvYITKuRnjvsfHQY3lYEeGR3wQ0YsumeiB%2BLvYRH5tb%2FTdQQiJD4fZVtVjrYBUS0A1lDRDXoOLYPIDy1YIRSLxo%2FAe6AczcYAcmQ4NeTMYeph%2B71xehEEDLriUa6DuRmopY5xK5MS6HD%2FvfdpRKDHrw8qB8EF2nQ0IJD7ycpmanISx4KMPyUSfXhqlrIZ1egU%2Bb5UAo6oPjGltf1nAi0it6rFaRoEcGEP%2BaGDnpmcvxmcOvW8UvliNrmNJYBam615t4MA4sPISO0P20uFbik1duraSfYot%2BavnXZ%2FI1Qs191RxYJKs5NaysPQGpGdUMyiBgMMvglOEofCpMHtwbB36j4xB7NEOK%2B0G8tQNfxif5Lv1x0g5gQf2ki01bB7gavjbHgeCl4wDOIhQkaf6lzpg%2BEV4PZHl6p1nnYOO%2Bk5P5lC9WDXHaWFuhL%2FP%2FmjtDb%2FBl6P2Y7VlwrJ7PdrR1R%2FdcehK3hn95wR6Llrcd%2B0pinIracbPOKjyzhKfm1u8Mlgjb6qA45ZuwSNedaZ5hgGGW79kmof0wGwtIpYvG%2F49njYnmxbZJHXTbev1KFYw3UpiFtpP4gFRT8Fo81YxFKK0YPHj4TdEDWUpFWtRY49BwYR4anM7u0lwNREdBPONLzBtPiqguUTJbsLOXpsPiY3ivdyNZ6SP5sHpj7r3Y48AE1VirvpPMWASzsYoHwppC9Hy3fk1QH6oBYeYJZdWmktqJaFedMoGrVWNb9M4lYWh27SBBsh4jMkJuFhq0Wsj4lUYHdmvehaXEeyetg7Ri%2FB3G1Mf%2F%2BG8ZRSDHGRHtJjmo2wPiJ25FDDB2QtCpPk00JHLnrxlCYxA9MPX2AfE16GkqsfmcZI6lroFAAbZh3%2BtLuf90ZNTzjImOjE6NG4CYmZNK%2FAP6kEKNaAI%2FVH4FvDDQMCG%2B3eMuk8JLXIOUi9dE72xg0CehVD6vkk3BdtvZ73mlHvr2hZRf9ZfmG2e30aL3eH2s94drq3h5KF1WkJG7x%2BFKHGu8Y0yLdOeI%2FTVfJ%2FOSy4tDaPl7nqg%2FDDIxZBv0AYkRe1Aknawb4Rx4xQpIg82tBZfSbMM10vYEZpcCcAznY9B1HLzVwdq3fKD1th2Mphx7iATukbzmF%2BkAm5ERwkgeVRXTf5eKtIgVAbYIx7426cn3MjCA0xUz401jbs2s0hJbX%2B9WGHO0m6toM72dGAX1bAwbhtWOFU0mWrw%2Fv2cCPGK1CnC%2FPmQdf7FJ0dAPrDdSsFSQIyAQfO8ohpqtJQTSZYAygPHuG%2B%2BBW37mypDpA6woF3eOxwWXVEJQkPd%2FaNZ5JisB88Qz2ZjsKA17EXj%2FItbeP31UQPLAvIpUDUxh5LFN95ObkVDDVpABQsrGvww93emtoYHG2GtXt0nQZHGtwWkMcKrYrUdi1DN17fw0encPIpqFtTEBbzfrX8INItFYV01sBs0gKSPrn4ZYQE3%2FfkD9bsNBUeaRTyLP8Fk3yvZnMg%2F3Tg6AX7RLGkrimNiN8iRDyC5azIqU437GSk3ERQZI%2Bdmjb7dsjc1A5n5qc3Og61SNj%2FmcK99IhAoPMTyxYXZ1YPb8rQg8lihPJvEIKjcjqkoew9RZIK%2FKrCs1JRsV7Cp25Mg2zFCjfpRk%2Bh3c5NUrAoZcWW5FZFYyEgWcjO4mxDN5m2Lu2NFO1ZWgeb%2F0aIObmtKZuOJDOv5%2Bqb4rEp%2F4%2B9oPzQlH%2F9DECaiszeG77t1SFcPdMa97CJKt6vs7qpzBnhl8vgy4hNS%2BPayLRcFZmvw%2Be8yy7J2a4D9sY8ROTirl6S0L%2FO1QsmFAHG%2BNbtb1IGdZrLUR%2FxmI%2B1F13Jy4NrTGRSuoC3fKpLXG0tGj1gkTquShIuXtjhYKJGvb14VRYXuwM%2BxhK2N%2B%2FglHNCOHqa5k%2FO%2FDbq10%2BG3%2BYqTf0KN2dwwop0ghtRPB9VWPecBBa1Fn3Z9oxSghzsK%2FIBY7GRQN9m3RtIIkasphCKkx%2FxVFsvdlVYZClAx3stclCmJH%2FS2PyVmulqpvPQilJXaNrhAVH5C8eoYTirbD41v17JICtBgaCwoXl0A%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 28 Mar 2025 07:40:32 GMT
content-type: image/jpeg
cache-control: max-age=86400, public
X-Firefox-Spdy: h2
|
|