Report - richainfosys.com/ua/leuceedtst

Report Overview

Submitted URL
richainfosys.com/ua/leuceedtst
IP
111.118.215.174
ASN
#394695 PUBLIC-DOMAIN-REGISTRY
Submitted
2022-10-05 15:06:01
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
166

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	54.230.111.35
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	331 B	699 B	142.250.74.3
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	34.223.168.227
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	3.5 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	54.230.111.14
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	329 B	737 B	93.184.220.29
richainfosys.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	20 kB	164 kB	111.118.215.174
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.1 kB	14 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-10-05	medium	richainfosys.com/ua/revolution/js/jquery.themepunch.tools.min.js	Phishing
2022-10-05	medium	richainfosys.com/ua/js/jquery.min.js	Phishing
2022-10-05	medium	richainfosys.com/ua/js/theme-vendors.min.js	Phishing
2022-10-05	medium	richainfosys.com/ua/js/main.js	Phishing
2022-10-05	medium	richainfosys.com/ua/leuceedtst	Malware
2022-10-05	medium	richainfosys.com/ua/images/video/ITP%20VBR2%200.8-4.mp4	Phishing
2022-10-05	medium	richainfosys.com/ua/images/video/techno-video-verticle.mp4	Phishing

mnemonic secure dns

Scan Date	Severity	Indicator	Alert
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed

JavaScript (8)

	URL	Size	First Seen	Last Seen
	richainfosys.com/ua/leuceedtst	153 B	2023-03-08	2023-03-10
Pretty URL richainfosys.com/ua/leuceedtst IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-10 08:54:44 Times Seen1 Hash 9ed9fe3cd901f2399b165e4dcfe6ff92 18ae3093a7fb517761aa80092f011b412805276c d4b6c397e2516ed6aed96b7bbe89cbd9dc46b68af08c9e30b88996d99a39bda4 Loading...

	richainfosys.com/ua/leuceedtst	94 B	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/leuceedtst IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash 312214c25f8762899a2108fd1db60b68 3c8502d018bd8e06d54adffd986c3d20386c82ba f645900a4eab85f3666934af59cf600d39fcf96de6c821dae27d7176f4863085 Loading...

	richainfosys.com/ua/leuceedtst	95 B	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/leuceedtst IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash c3bdf7cc77ac2a2162fa25942106c736 cb52bcded0c689649db423445e2715c429bcf3bf f441e6806259fc37bd2c3feb32c9da4a1a32c5f77adfcfa49cf0d73dfbdaf7af Loading...

	richainfosys.com/ua/leuceedtst	95 B	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/leuceedtst IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash 986b30a62a1f044d580dec48d6e1dd58 3d055e39bf49eb807020b0d6d2eea3170be1e085 f7e04a873ae58a43f26bbecea47ac109a3d64aa8e434ea91211ace82dc3830d3 Loading...

	www.googletagmanager.com/gtag/js?id=G-T09TWMJ58F	214 kB	2023-03-08	2023-03-08
Pretty URL www.googletagmanager.com/gtag/js?id=G-T09TWMJ58F IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:38 Last Seen2023-03-08 06:12:53 Times Seen1 Hash fe875e3da8ab69359c9e4aedd7f614cc faeba55b6a1ac60db837c8958a563500fe99a9d8 e161afd552a090df0d096fe2d28bf7661e378afcaf99a6f9ba2d1c394f01ea02 Loading...

	richainfosys.com/ua/js/main.js	75 kB	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/js/main.js IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash 3ca7b9580089ed0d26e2c0c633736f1d c9cf34f6c4a9036efeb8adea23bc221f2371507a 86b2269045aae509b0b6f965e020b031c6cec426ec386d9f45c4591129a552bb Loading...

	richainfosys.com/ua/leuceedtst	4.6 kB	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/leuceedtst IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash ba78ec7fc5fb4172eb9a371c72c464b0 1a0315848dca56a9d2dcd11af353360f08b6d4b1 b0a346fad15655b19b27d966133ba7d241f5baa296991f2d16c5dacacd0cbc59 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js	90 kB	2023-03-07	2024-04-25
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-04-25 05:46:56 Times Seen261104 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

HTTP Transactions (52)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

54.230.111.35

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
54.230.111.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 14:47:16 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: dEisWjUC-KrmCYB62PlrcK4ocT54pQK4Ba6nJcj48gJnf4RJY583vA==
Age: 1115

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7711
Expires: Wed, 05 Oct 2022 17:14:22 GMT
Date: Wed, 05 Oct 2022 15:05:51 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

54.230.111.14

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
54.230.111.14:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 05 Oct 2022 04:02:33 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BgvodkSs0xM4u3UwZCtk7nfRL34c0QaCOlsLl5Jz04ODzo_TzqFQmw==
age: 39799
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 05 Oct 2022 15:05:51 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7b5fcdb0a228e4ee14e60a2d3b829476
d26c2f288818832734127cf90c1d30ac919d0532
cffd5a99d85b854ae3f14600835492f4a8e7b9f6128970f95874fec7f19b3986

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFFD5A99D85B854AE3F14600835492F4A8E7B9F6128970F95874FEC7F19B3986"
Last-Modified: Wed, 05 Oct 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21311
Expires: Wed, 05 Oct 2022 21:01:02 GMT
Date: Wed, 05 Oct 2022 15:05:51 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

54.230.111.35

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
54.230.111.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Wed, 05 Oct 2022 14:29:33 GMT
Expires: Wed, 05 Oct 2022 14:35:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: grRE9b4GSIIFoaMmMEiKdS54GWy33U-hyqbgTa7yva8fz9D07UjR2w==
Age: 2178

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
1561c6be7c89d1357a80d12de47b6e74
9a705277922ecca583c867af58b3efce099f83bd
e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1591
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 15:05:51 GMT
Last-Modified: Wed, 05 Oct 2022 14:39:20 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
60dea52abe2437132a0387ad8becc0ac
61e9fb41f1fc795ef7204b8948621d4dbc6d3052
ac998fb48810aeb183ec2d19cfd58b81f2243207add4c553e1e87f00fa6d5f3f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 15:05:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

push.services.mozilla.com/

34.223.168.227

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.223.168.227:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ttVhh9LFywMN7HaC7sDslw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lBoNxn8zhQCR00MwaKvIhFFVQC0=

richainfosys.com/ua/css/style.css

111.118.215.174

200 OK

21 kB

URL HTTP/2
richainfosys.com/ua/css/style.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
21 kB (21022 bytes)
Hash
7e571da415d16b15fc8870924e6c4fc4
b557b6723fe1db2544a82682601d0103349a3205
e486b5f05a36585b7350cb27c41fad355933196bdc981e8ff926284705177b30

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/css/style.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:51 GMT
server: Apache
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6700
Expires: Wed, 05 Oct 2022 16:57:33 GMT
Date: Wed, 05 Oct 2022 15:05:53 GMT
Connection: keep-alive

richainfosys.com/ua/revolution/css/navigation.css

111.118.215.174

200 OK

21 kB

URL HTTP/2
richainfosys.com/ua/revolution/css/navigation.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
21 kB (21022 bytes)
Hash
7e571da415d16b15fc8870924e6c4fc4
b557b6723fe1db2544a82682601d0103349a3205
e486b5f05a36585b7350cb27c41fad355933196bdc981e8ff926284705177b30

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/revolution/css/navigation.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:51 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/pdf/Make_In_India.png

111.118.215.174

200 OK

4.4 kB

URL HTTP/2
richainfosys.com/ua/images/pdf/Make_In_India.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
4.4 kB (4376 bytes)
Hash
7b08dc3e8b67425052e39e1ccf17c429
d13eab46b361cc6582be850410b8ed260b4b12d1
ca4fa674a925c90f32fa01ebacdcb5a37aeffa8ce2f60851fa00b8532fc33e6d

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/pdf/Make_In_India.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6700
Expires: Wed, 05 Oct 2022 16:57:33 GMT
Date: Wed, 05 Oct 2022 15:05:53 GMT
Connection: keep-alive

richainfosys.com/ua/images/jj1.jpg

111.118.215.174

200 OK

28 kB

URL HTTP/2
richainfosys.com/ua/images/jj1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
28 kB (27540 bytes)
Hash
ea448e213b31094b9450c6ca14533bd6
3739c12c98ae9a65beb43290a3bf5c3c75c4c403
ee25e56e33907bb461976b5961cf41f6b70eb3950051ac6f734127c4d8c2e666

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/jj1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg

34.120.237.76

200 OK

3.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
3.6 kB (3585 bytes)
Hash
5d7d7df8d4c440f9db445c3d99e818d6
612b6dbd4ba895c167964ff7e6d9263013b52b0a
bf527a814c78f9e010cce4ba593c9146d54a2137d1f147f7a6250fbad81956ac

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 3585
x-amzn-requestid: ccb6f0c8-4d9b-48b8-aaf6-16781dc4c86b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaHFlEcFoAMFS3g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a5223-5c9276c873efee993ba54667;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 03:08:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: T8m1q2L45TWDVRBa-R2W70yq9BauBK3G4IX54AGIxdRhG736T974kg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 04:05:29 GMT
age: 39624
etag: "612b6dbd4ba895c167964ff7e6d9263013b52b0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

richainfosys.com/ua/revolution/css/layers.css

111.118.215.174

200 OK

66 kB

URL HTTP/2
richainfosys.com/ua/revolution/css/layers.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
66 kB (65534 bytes)
Hash
99307d5638b46c69481b113a9a9fb19a
5dc76a7bf86df7c0d1c8d7c27c116fa1c89840cf
176ba555d4f88504e1288c82ee1b474585d186602952bc2296473523431d7d1f

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/revolution/css/layers.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:51 GMT
server: Apache
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.8 kB (8816 bytes)
Hash
100559d746bedd7c3802661c875c35ee
5261a6c2ee6d6cc87e91ee82e32d8be234db393e
ff06f31267ddcc9a0d84ddc68932872bfed29d072783c3a1dd3790d41c280aec

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8816
x-amzn-requestid: b9f3ec8a-f478-4405-b275-e21f2d7d89d4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZKK7gFPJIAMF-7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333f1e3-250348e6140f3c74762263ea;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 07:04:03 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: F1ZWwxLKhRC6oSh6gnUxEm5AnYcY-mezJw9mNJ8GmNWnATAKx1JxSg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 22:42:26 GMT
age: 59007
etag: "5261a6c2ee6d6cc87e91ee82e32d8be234db393e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-make-in-india1.jpg

111.118.215.174

200 OK

10 kB

URL HTTP/2
richainfosys.com/ua/images/home-make-in-india1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
10 kB (10217 bytes)
Hash
a8bf977a2d1bb9240bc0aff3a95fa7cf
80302c9f3cc250bc965ca6529f162f42e53b3ec3
279d2b288eb374836ede14e3b41b355b8be386d64389e4bffd23edfef1b33c50

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-make-in-india1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-conf-image.jpg

111.118.215.174

200 OK

7.1 kB

URL HTTP/2
richainfosys.com/ua/images/home-conf-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
7.1 kB (7123 bytes)
Hash
ff8b3f29a1ee57ac984e3000a7e58c81
0141d94222ef7182de9e7b6c5d68bffa6e25ba09
f2e53e1216566eac8cdb259b7b68471ee3aa0f6fed240496dc84a9f0c8581ebd

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-conf-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/logo-green-dark@2x.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/logo-green-dark@2x.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /ua/images/logo-green-dark@2x.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:51 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/dtd-cabinate.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/dtd-cabinate.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/dtd-cabinate.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/background-video-bg.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/background-video-bg.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/background-video-bg.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/revolution/js/jquery.themepunch.tools.min.js

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/revolution/js/jquery.themepunch.tools.min.js
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/revolution/js/jquery.themepunch.tools.min.js HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-flate-panel-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-flate-panel-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-flate-panel-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/richa-logo.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/richa-logo.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/richa-logo.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-podium-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-podium-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-podium-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/revolution/css/settings.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/revolution/css/settings.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/revolution/css/settings.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:51 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/js/jquery.min.js

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/js/jquery.min.js
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/js/jquery.min.js HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-dtd-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-dtd-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-dtd-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/jj1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/jj1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/jj1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:51 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-education-images2.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-education-images2.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-education-images2.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/js/theme-vendors.min.js

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/js/theme-vendors.min.js
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/js/theme-vendors.min.js HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-ab1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-ab1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-ab1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/js/main.js

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/js/main.js
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/js/main.js HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/css/responsive.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/css/responsive.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/css/responsive.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:51 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/pdf/Government_e_Marketplace_Logo.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/pdf/Government_e_Marketplace_Logo.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/pdf/Government_e_Marketplace_Logo.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/css/font-icons.min.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/css/font-icons.min.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/css/font-icons.min.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:51 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/Home-security1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/Home-security1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/Home-security1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-tab-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-tab-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-tab-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/leuceedtst

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/leuceedtst
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/leuceedtst HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:51 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/ripl-limited.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/ripl-limited.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/ripl-limited.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/video/ITP%20VBR2%200.8-4.mp4

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/video/ITP%20VBR2%200.8-4.mp4
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/video/ITP%20VBR2%200.8-4.mp4 HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-podium-ser-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-podium-ser-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-podium-ser-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-dtd1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-dtd1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-dtd1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/favicon/android-icon-192x192.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/favicon/android-icon-192x192.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/favicon/android-icon-192x192.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.1.1664982352.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:53 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/tab-menu-image1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/tab-menu-image1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/tab-menu-image1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/menu-camera1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/menu-camera1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/menu-camera1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-interactive-flat-panel.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-interactive-flat-panel.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-interactive-flat-panel.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-security-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-security-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-security-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/video/techno-video-verticle.mp4

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/video/techno-video-verticle.mp4
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/video/techno-video-verticle.mp4 HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:52 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/css/theme-vendors.min.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/css/theme-vendors.min.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/css/theme-vendors.min.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/leuceedtst
Cookie: _ga_T09TWMJ58F=GS1.1.1664982239.1.0.1664982246.0.0.0; _ga=GA1.1.1832833433.1664982240
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:05:51 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations