GET pl.logowaniie-alegrropll.com/assets/ikea.png
104.21.64.1200 OK 14 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/ikea.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 640 x 256, 8-bit/color RGB, non-interlaced
Hash 9c79def7332dd362215740662b344341
637ca0d0707bf225daa269df5b19981d8d9f4a28
bb54d7aa1c960b0095d5b9060424ec3e1f15c98154e94a468f8e8c1d68d314dd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/ikea.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:57 GMT
content-type: image/png
content-length: 13924
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FWmafn50xPccjsMVN3nJIZqi0v7RQb2p9Ei3%2FcAsUPanhwio6ZYLwO%2F3B7MjKQghmy3vK6BPrCXwOEnBU2k2PxJZrcE7HEcyN1PcqOQjj0xEb5mq3DZILK48uxvvbqx5ibq7WA4B0HiWagipoibw"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 19:06:23 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
cf-ray: 911e8df08847b524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET cdn.jsdelivr.net/npm/intl-tel-input@18.1.1/build/css/intlTelInput.min.css
104.18.186.31200 OK 2.8 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/intl-tel-input@18.1.1/build/css/intlTelInput.min.css
IP 104.18.186.31:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerSectigo Limited
Subject*.jsdelivr.net
Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE
ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File type ASCII text, with very long lines (19665), with no line terminators
Hash b41fad07c500d63c076f70669ba7f9e6
4e55da95a7d18d3ecbde16440484df380bbaf0fe
a1e9f2c7a8c80a11fd8da5caddf517a5c28e7a64d01c84295014283897c762d8
GET /npm/intl-tel-input@18.1.1/build/css/intlTelInput.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pl.logowaniie-alegrropll.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 14 Feb 2025 16:49:57 GMT
content-type: text/css; charset=utf-8
content-length: 2775
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 18.1.1
x-jsd-version-type: version
etag: W/"4cd1-TlXalafRjT7L3hZEBITfOAu68P4"
content-encoding: br
x-served-by: cache-fra-etou8220048-FRA, cache-lga21970-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 115104
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ADEVrOh3LyBf8aw5VkWWIyf3XVvh25n7sns6F5GWljk1P9CaFJx0fL57GIDTDaKYVENXYfNnweWu7A2tXrW0RmmfRF1ch45%2B7UOaRopWIuSF5j1G50vyeGRoykRh52aUcVA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 911e8df0bc020b55-OSL
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/intl-tel-input@18.1.1/build/js/intlTelInput.min.js
104.18.186.31200 OK 12 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/intl-tel-input@18.1.1/build/js/intlTelInput.min.js
IP 104.18.186.31:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerSectigo Limited
Subject*.jsdelivr.net
Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE
ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (27283)
Hash 56ac609bb900dc42d7df6667c5c3ce31
7d9df7aa529524c88873d0af057d0d92e17da8e8
116f7fd41bf96c3881805a25dc8bf19d731807de97a90316544fcf311ba5123b
GET /npm/intl-tel-input@18.1.1/build/js/intlTelInput.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pl.logowaniie-alegrropll.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 14 Feb 2025 16:49:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 11919
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 18.1.1
x-jsd-version-type: version
etag: W/"779c-fZ33qlKVJMiIc9CvBX0NkuF9qOg"
content-encoding: br
x-served-by: cache-fra-etou8220036-FRA, cache-lga21970-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2450212
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j7qVhqmGBP%2FsULcRbz5GBEQzigE50%2B0POF3WQ%2BxcnE4A9X6keJTeYZNaUJ7KmEyng%2FaHFFfDv5RTCw6bd6ImRvmPTQD7H7lO6UxlDTKmnCADY%2BUY9GlLrjNIMqWRUFFhmFU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 911e8df0cc030b55-OSL
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
104.17.24.14200 OK 27 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
IP 104.17.24.14:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32
ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 2c872dbe60f4ba70fb85356113d8b35e
ee48592d1fff952fcf06ce0b666ed4785493afdc
fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pl.logowaniie-alegrropll.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 14 Feb 2025 16:49:57 GMT
content-type: application/javascript; charset=utf-8
content-length: 27446
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64ed75bb-6b36"
last-modified: Tue, 29 Aug 2023 04:36:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 177296
expires: Wed, 04 Feb 2026 16:49:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yITnvxHgevxA5akRIflBy008Eqg2VAb1bmkWXm1IXxPuazoU1znkAWU5aXtpZUucKrvJrtNccasOyXZIWCBIhbHI8AI7cLdD36c3iF502bSOT5FIWhwnxHjxXKRw463VPokXsvEv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 911e8df0b963b512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET pl.logowaniie-alegrropll.com/assets/allegro.png
104.21.64.1200 OK 33 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/allegro.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 640 x 256, 8-bit/color RGB, non-interlaced
Hash ab8aed89d092b2adc771e8b3f6475cf0
2b140d4932ab0f43c850f79ba21d25eebe5d67ee
33f97e008009926bf61a0595d10f115a1cc8f3c2c2fa3a1d855e056baaed2950
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/allegro.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: image/png
content-length: 32558
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S%2BHfW8vpv5FAU62zEvZGBV7ZjvH4NpR0yyBbIW9nfuUmeJa2FSjuOPHwYYx4IPW52fxK3ujtobzrWfrEmLGxb9EPN2oTrrbGfpKFLIZ5gmFF2gHOBVYDJEQ4nYVOxxMOIh5vmiQjK88amuUhy19L"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 10 Aug 2024 21:57:36 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
cf-ray: 911e8df56856b524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/fonts/TrustlySans-Regular.woff
104.21.64.1200 OK 92 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/fonts/TrustlySans-Regular.woff
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type Web Open Font Format, TrueType, length 29156, version 0.0
Hash e29f62135ce46926d67332bd90189d29
15d8e0065cc10867daed07ea973ce5e6c1724b38
4d36d92911fd97b7bd637d3c4a797169c471b6779f5b7510f054d028dee5371b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/fonts/TrustlySans-Regular.woff HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://pl.logowaniie-alegrropll.com/assets/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: font/woff
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NAV60bbhmYvWYRjcDduv6Im4AInMxQLDctdVcQRsqM3t8%2FPUIneYfqGHL3edWaKCGuVglgqVd7%2FBeK4SUKf8fQA6Hc9k3lKKtlgfyRv4oCvjdL8T3Kxl6cUQ5u%2Fvka2%2FC8%2FSqk67IJO22Cjgxcu9"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 23:26:28 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
cf-ray: 911e8df37852b524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/lang.js
104.21.64.1200 OK 58 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/lang.js
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type JavaScript source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 2eeabedc412af28cb3959eabd8c48713
eb1265824d7316f654a58816b291090baa25861f
44250e82c27989c9fcbe90724d75f4d2bbef2448189d804a06171d46806dce84
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/lang.js HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:57 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9KbGRPgUdxOREhWsj7E79w55m3VfS8alObnRf19XdPeE3v1cPdZYJSE%2Bt5Aya%2FKknmgeUNjGHjgCur3rQScKuzsgOrhxmxD%2Fb9Svr42tyuJU2fz%2BGi0B71pJLmfSf4hwEtzXvQNwqM21GkJGfNEO"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 28 Aug 2024 13:34:02 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
content-encoding: br
cf-ray: 911e8df08845b524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/router.js
104.21.64.1200 OK 287 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/router.js
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type JavaScript source, Unicode text, UTF-8 text
Size 287 kB (286575 bytes)
Hash 0cf02e455838c90eb216631cab3fddba
c301856896622b5244a5b25e63674469f0dbbda8
5e18deff80a4b2a4f826d3b01e02770745ad0ffa069018e535ea37fb661c750d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/router.js HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:57 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fgtDmNAALcD5dCR8wTYAA9jBbUHuMccaK1vPrEa2rehPrDCqH1sbZbprtDVQm%2BizjfZIjqAYdhVFMSLMgA7uAd2BNJksmZYQyls%2FmKZeKRAv3mJMwWV0IC3nZ%2FwUCuXphyD9WX3fko95LNVGgqlQ"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 27 Aug 2024 10:55:11 GMT
vary: Accept-Encoding
age: 34
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 911e8df0b84cb524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/agricole.png
104.21.64.1200 OK 7.6 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/agricole.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 720 x 720, 8-bit colormap, non-interlaced
Hash c138bc3a1318831e637e8d57e968f5fe
c4e1a6f009c1ae1f462d68f27788c0e0841c33c8
22ce53106e91f1155f04ea4b6c3122bd93eeded176b23f1d33cfefaefb7cce7e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/agricole.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: image/png
content-length: 7571
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OamCCJUkt58H8PYSUPGpJEDxr3jkHnNeinUCrBaS0umbipIcx8YQHmYBIq%2BvrIp2nJq6aO5PrmJxKzR0oKlkVUX0NGBq76LjXGTiZ6%2FQcV%2F2BcT34M82InIFo61YLTi3MmdXJlw4ySKnA9%2BjTpeE"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
cf-ray: 911e8df6d85ab524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/bostokenbank.png
104.21.64.1200 OK 16 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/bostokenbank.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced
Hash 6116de5cc25cf34b690b5268c01a2f82
712fb73483be453ad8c1010ce9fcb3494d8b8395
a872e7d9cc3b41166b77d39ab942036c57ded6c4dd6f495e2a37fe3a12971e84
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/bostokenbank.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: image/png
content-length: 15562
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jQ1Z3EAPctbEN%2F9vHLcpQOSRa%2B9KXYUbzuBPTar40Ie1nT%2BGOYH3s5qSO28ZjkQSwHPbXq9vuHI7Se7t3cZPKwGaK9UZhE%2B8T6wzGAksBY5oCA6fIocjjP%2BRD3g%2BhZxSCdAXAltdHnIBECWu2Sqx"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
cf-ray: 911e8df6d85cb524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/bankpocztowy.png
104.21.64.1200 OK 30 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/bankpocztowy.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced
Hash 7f4d0f1b0d45cb296657777b6c1b6112
80772fe8e93176c3e6ec7a53f5cc90284b5d5153
e99791482476b8e4cb7dd71bce4258dc6e376223b4d93cb62a17cd5e4b1423dc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/bankpocztowy.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: image/png
content-length: 30455
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QvVmndV5UTA3vTexstS1nwPWen6atqk2o%2Bnv5baUhgD9zsWSS6u9E84L7J9JxjtermspuHla89eSTvKZWLbrrxum9cNXCIJc%2FAWziS7waxq6qlZuCACA9e3wHo96guvsAUgDkMpBSbnk0QjEnwbF"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
accept-ranges: bytes
age: 33
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 911e8df6e85eb524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/finland.css
104.21.64.1200 OK 26 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/finland.css
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type assembler source, Unicode text, UTF-8 text, with CRLF line terminators
Hash c85c2592f343a8f7c3b1e547bcc93d95
bedc7d4866d8fd0f9ea34acf1395c6483a7490f9
1f9331d90268bd933d18280ef23904f4f31f4ca757072b6eceddaf47bcf0d1c3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/finland.css HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:57 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fWOfpGAp44LyjEi4%2FcQHeaYnguB6cJGLkpPVB%2B1%2BWXGWOIZrp3CkbPq6%2Bs0%2BeoxDzDB0AxwTDr9l31g3TKFZo5Y9TNsAsHZipfCYweXOnXbH5hTVw0j%2BwjW2mUggpgbV0NZ%2FH9cfyCMOCLh04KNT"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 11 Aug 2024 00:00:22 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
content-encoding: br
cf-ray: 911e8df08844b524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/citihandlowy.png
104.21.64.1200 OK 12 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/citihandlowy.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Hash 761b2a6138eacad1a2f18deff6a0d5d4
e6e9cfe12790d1df729433e19c3634f59cfbbe6e
555d912520b071a5829b657d5a0baafe8eb42ae77165232d1ba0c38ed9b13ccb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/citihandlowy.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: image/png
content-length: 11581
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OSbd3wVkPGXv%2BpqUYqoMNV3sIHfGKzpDN9xByGCQ3ZiJzt2%2BtD9HtGvXe8GOkhlE4cGUg2VZ2P4pGO71D7Qa9VIEy98IvACI41yo7Q%2BRAjLSf6gSzHXqOfmJ1G4gSlRVhU6TcALzwGyKlIeGPfCQ"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
cf-ray: 911e8df7085fb524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/bpsbank.png
104.21.64.1200 OK 13 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/bpsbank.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Hash daac32c9131cd662edcd898647c433f5
21ea2e8dc872344a33a7f479a9c276131e7a9e36
c28f5d8f407c01ae7e38c737a1326ab7299418d539dc8061c278fbd6452e5499
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/bpsbank.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: image/png
content-length: 12782
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kxO2MCGh1AysNKoOukhFoIrgCosycX0IF3%2F%2FZZlrt%2F4onbWwOFTedf1sk8CTdqXKHiR1Wi9N95PNAsLNjdniEGhDAJGVLP7MfC%2BH0iqo4ylmnSLEpy%2BMrVSP70C%2B0j8fEAp%2B20qxzch55qhKAZWR"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
cf-ray: 911e8df70860b524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/polyfill.min.js
104.21.64.1200 OK 126 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/polyfill.min.js
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
Size 126 kB (125635 bytes)
Hash 435a451090061be4c0254761f2f94e1f
1a873f8c9a0dfb421e3213dfbbfa8aafa9960d4c
6c68769e8470ce89a0f2270529a5d47db00917e3ef9df946dca202098f09d0a2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/polyfill.min.js HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:57 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uw0sb%2Fmowu4QF5cniyk%2F9iS7xT8E7BlsLCHb6EohnPMmWhfG6QMNGI1R%2FWDi8HuvZo%2BkeLkHkWAvxlWTmEJb54BMJ7FyiMj5iN4TGsRbaYRrtfiUP5HILII3gw9LiqGEmrir6Q%2F4Mvw%2BHbSUbo0P"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
content-encoding: br
cf-ray: 911e8df08846b524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/dbnbank.png
104.21.64.1200 OK 29 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/dbnbank.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Hash a1c2aaa0d3c9021ec3d8785212a872a7
6f465cf39041b1d51c120989785b9520f1e861ce
2adf245f6fe35807e30162acd7c54bd523badc80bfddc3c6db2c87c82661f6c0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/dbnbank.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:59 GMT
content-type: image/png
content-length: 29322
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MPXJlkIUDvkmTnteMty1y8kJQps94oUO8yHX6iyCpNMb0gU3%2B4KD1nfKQteRmTRPYoIhnWGPKJn%2B1NuRs8NdAhWLJalBQXwaVYfUn1TpPmj%2FHL%2FoGL%2FV8IN2NuY1iVvJXH32YHV%2FE4r3UClRkuYX"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
cf-ray: 911e8df7c863b524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/nestbank.png
104.21.64.1200 OK 35 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/nestbank.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Hash 110ff8bb5901d87a85595ae24f7c8aae
4d8796e99af91ebe8f2626f3c80f4cbc1aff0f82
2889bd96a1914cd07d5767e6a78e023e097dfea0e6f4f3981d2cc5c02bbc298e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/nestbank.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:59 GMT
content-type: image/png
content-length: 35319
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FVxnzsheLC9%2FWDrsuBQ%2FMpFTUwWbhQE4NEFa%2FlTPuAFgcuylx6AyA8as57OtgRo1VL%2FoWWBg2%2FHjU31Mn3hXeYT4WeDTCb0%2BI9GyJk65j8c9W7UGvXiV3N%2FWVAt5z%2FOtu1%2FBx9H0Co0srO2nCgMm"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
cf-ray: 911e8df7d868b524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/ing.png
104.21.64.1200 OK 57 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/ing.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced
Hash b544fa33ff239e07c7bf485e37ea838c
777004cfeb5a57fdcf131f6ea288400a27271598
1f353fe95340bac4eab116b41b523fe14e8954c3f8b9b6e5583580f544c16e82
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/ing.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:59 GMT
content-type: image/png
content-length: 57430
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pw7C91TGWP9BMgWDxREhjCHpcCahNMb2objWrBWtutUzE3lHjrXAvjqhksyf9gHpCeeIhibdLht86R7b5WJjtAu1YKT6uymeoJ%2FkxewWF2vgvBZWU9TiP4jR9ULlLevZonLChpNKxmBld1iL9LYW"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
cf-ray: 911e8df7d864b524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/plusbank.png
104.21.64.1200 OK 29 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/plusbank.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Hash b9d96f70996a4973156388872cfd476a
7f8c748373d4035651b90cdb4fd212b5af00fa34
91c1058cf7577fd881908ee7fb619e701a9a755cd92d8a005aa42c10e6b25795
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/plusbank.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:59 GMT
content-type: image/png
content-length: 28598
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DnDqICq4T8qM9DfI%2B10PzlzU2AZiUczB6nhPG%2BkKhRpC7u2LOgu4MCjk7WXtDwbCaVWPlGIKVbsf1%2BrCHvwb8r1%2FD0mGBHvWJySL3vF0g4dlzMA%2F1x1iLnzxxKVGuuSlejTWLXx33OyWdw9R9KJ2"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
cf-ray: 911e8df7d869b524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/deutschebank.png
104.21.64.1200 OK 15 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/deutschebank.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Hash 34c4552d9809a68d05f7c7e1261f211c
b66110923a4d043dfd814ed2c83a7c4b68c7d37b
a2b1d8f9daa1b9d52be940c19692939f29d60f8eb834a1d7e3dd54ee08c0ce2b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/deutschebank.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:59 GMT
content-type: image/png
content-length: 15081
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dFw0GvJhUKQ0wqyyYmE%2FexxyrOjlBxmRkCdcGiutmrkHMz5hqSN7lq1S%2BXRXmqQ9R5aiGb12agX8G2sA%2BYW2QBK2Wf%2BaZeExGV3tkV33KD5f8I2cuEArD8NtcuMMFxiSSSKAoUTh1elITv80XhBV"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
cf-ray: 911e8df7c862b524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/velobank.png
104.21.64.1200 OK 16 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/velobank.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Hash 21745895fa61bfab0ec44c322a5a91e9
b1e01f896c25ec245856e9c336976722c624e6be
abeb1bb28b8da6fc7209f224fba4c41b2ca45660429d827628ebc92a335e39ae
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/velobank.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:59 GMT
content-type: image/png
content-length: 15596
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AZTxZZCt6fSddvJER3lgfbu6k0in1F79zMdLAWSEPPPhyxj46ddZvSzQ67CkJ6Kyvc1QoUYDyfT%2FOId2qgJyEv5GAQU3bunz6UJWTqCFRTPTiQWWfdri91ShY70O0kmZvyTbgmGlaWV%2FbnrJ%2BsR%2F"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
cf-ray: 911e8df7d86cb524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/santander.png
104.21.64.1200 OK 21 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/santander.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Hash 7ba79fb8a105e83dfd27848914a3e0aa
43d1cfaf8b5937a8da539276c87866c38e750235
ce1adf8c6a9de49a7cd2c0d09d7c31c607e851affc8e8f3ef5608ddaae3d88f3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/santander.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:59 GMT
content-type: image/png
content-length: 21075
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vzdG5pBKVZ166nRh8KFX7JlRU7ob8MdWvtGDk1UzqzOlvlNhUDzlPphwsx7qaudTwssVQ0ppPA75vtozCqn3dcRu6cY%2F5OWTM0GeLvoxbyhuOcCNVItznJX50DZaPqKo9MFflPkFB2xp6piMF8iH"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
cf-ray: 911e8df7d86bb524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/sgbbank.png
104.21.64.1200 OK 35 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/sgbbank.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Hash f7761decc7bd3b2d42d688583c3d7f5d
ef7d9287ba5e3d52a18a980ee9ad0abc78ec7295
848a099263c8ac5b35daa30b024cdea1f914d1ba0f818db7c579c4b883ecfcbf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/sgbbank.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:59 GMT
content-type: image/png
content-length: 34835
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TMCDO3eAhecMwy3DBwzIHRAV2BFkYRBeKDIrEKKkq3dK8gmrNMvs2GRxdxJ7Pe824lKYJF72W0GyvocipMEK9D2%2BgS25m1T1DEWPjKHPLr24q%2BHJ4dwlSBXa03AuUbQGcsY4pgM9GEVz9j4FBRDx"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
cf-ray: 911e8df7d86ab524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/kasastef.png
104.21.64.1200 OK 124 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/kasastef.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size 124 kB (124431 bytes)
Hash 3c32fddc9bff18290841c1c43b9c8e9d
d9ad81724483c8f73bc41c110b97ee3a07866cf0
60d5feed499d95a1925e7f653114e1ab0e1e53363f5e7abba15b50e46acba01a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/kasastef.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:59 GMT
content-type: image/png
content-length: 124431
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bVax%2FQP5VPm3he8zFsxrxnw20G2HdiFnotCjUYJCmJVHIW6V0obIRH3g8QJCzsuvj4zPSE6zwZaPPnhlSwBPr5HkNy7YhZ55wqwBisMywx1erubsalOYjMgmQD6haR4iTEYUXc935ZPag6fnzaBm"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
cf-ray: 911e8df7d866b524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/mbank.png
104.21.64.1200 OK 5.9 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/mbank.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Hash f587618442db507828d06b58b9821d9e
1590718814b32c5a770b14dcac2bd969cc7f54b4
7c2792830c13ab3d723502328040d43cec5a864e97f6a1e3a72097b5db6ac4f5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/mbank.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:59 GMT
content-type: image/png
content-length: 5860
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gOxeHL0Wlzhnrte7yFL9jKMULc1Ehob%2BNZRX1V5voZ%2B9NuTdgjGUDrfWo4pU4m8UIzO6TRXosE4EKskPdm2JMVwcT0AXICD1YKHdGrRf2Mdhgn5Zb%2FKbI8bVBiO10gQNg4Uq9pb17UuhUR5cxeNh"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
cf-ray: 911e8df7d867b524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/ipko.svg
104.21.64.1200 OK 8.6 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/ipko.svg
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type SVG Scalable Vector Graphics image
Hash bffabaf51201b88a700d764b721f6d5f
b4ece59b3ce1c21e4ae64d2f76a214741fb19b53
29ece7b2e689f637d125e4049a960fd9d5a5a71ead05cb4a89660221bd671038
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/ipko.svg HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:59 GMT
content-type: image/svg+xml
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jZQ%2FYqK%2B5pN2QwxZG3Fowj6F%2B%2BGTu%2BQawqSxK544Pfg%2B5aTtfOLtqJ7O5vkpYxmyry6FrOMdDySydF320aQuRiz8rzl7YncxZSkoSDvbPMFpUDVA43qZEUxi%2BaiU6seYIjBsCoVb%2B4jMOpgYuz99"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
content-encoding: br
cf-ray: 911e8df7d865b524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
POST pl.logowaniie-alegrropll.com/inc/router.php
104.21.64.1200 OK 6.6 kB URL POST HTTP/3 pl.logowaniie-alegrropll.com/inc/router.php
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
Hash d361e6b3f641788dace6707209d55a63
02826cbae05e1312a9b9fd2e58ca2a07e488c76b
fe85cceb474303eb80a5ca9a60b16d92208a8e0b38647647654b0c42447b51f7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /inc/router.php HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 245
Origin: https://pl.logowaniie-alegrropll.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:50:01 GMT
content-type: application/json
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1zls3OiOedQu85Y2tDJGmaCYsdmqvNFpRdOqoSO8OwwuU5Cp7YPExr4oJ%2FcFy5GiePugDkIxpFb79OlwoD0W6fE2HJM0oaUuByQHSxPJkZu0NsJCsaJY9IxQH65eBKRajEzU0%2Fia%2BWMHs3Ac59vk"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 911e8e06989bb524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
POST pl.logowaniie-alegrropll.com/inc/router.php
104.21.64.1200 OK 7.0 kB URL POST HTTP/3 pl.logowaniie-alegrropll.com/inc/router.php
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
Hash d361e6b3f641788dace6707209d55a63
02826cbae05e1312a9b9fd2e58ca2a07e488c76b
fe85cceb474303eb80a5ca9a60b16d92208a8e0b38647647654b0c42447b51f7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /inc/router.php HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 245
Origin: https://pl.logowaniie-alegrropll.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:50:07 GMT
content-type: application/json
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7i8WCPmaY0WGojVnFfZVnSElwZCn9gdhzPDQK4kjn6ufwRwpd8jvPaqu%2Bxdz2WLvcpHVFwm9CpKkIqGBoiFR3wrGtN%2BKaw7yUWAoMOZJhR4HCWrSmrF1nXp0b6MwFoTkHdCG8r3onK8v32%2FGlNi1"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 911e8e2c28c7b524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/data.php
104.21.64.1200 OK 5.0 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/data.php
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
Hash 3dcd9b24f3a3ed41571f6dd2565789e2
fb7e3cedcb4d92e455908842913e70a233b206c3
5361921829090e73df45864e62e8b434b3d87c5856bde788afa68e11c4a9ecf1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/data.php HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=97ptaMWNNqcLPgSL56zBIOhaPI%2FsMk3fyq%2F58J7sn04rp%2FyYz%2Bb3U3XMHE6COZWTQySuNrqywmGvwDYKOyGJ7%2BF5S8BweONh6ou%2FsxNdkZgdFSEY9BpyhITjtTwYTDukXuSYuBj0KVp7dhnaQNu2"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 911e8df3f854b524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
location.services.mozilla.com/v1/country?key=no-mozilla-api-key
35.190.72.216200 OK 45 B URL location.services.mozilla.com/v1/country?key=no-mozilla-api-key
IP 35.190.72.216:0
Hash 6aaea1b4e41c32104faa9a0ffb941938
396890ef2e1e114cb792d7cafdec0342b5a35b78
adaecf23a14a64db5915718f88d4e7679741121d8546937adc0fed553791246c
GET /v1/country?key=no-mozilla-api-key HTTP/1.1
Host: location.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 14 Feb 2025 16:50:25 GMT
content-type: application/json
content-length: 45
cache-control: max-age=0, no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST pl.logowaniie-alegrropll.com/assets/bank.php
104.21.64.1200 OK 19 kB URL POST HTTP/3 pl.logowaniie-alegrropll.com/assets/bank.php
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /assets/bank.php HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 26
Origin: https://pl.logowaniie-alegrropll.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y8s3t2iFl1q7D0FdS6DsKrtoBtq%2Bn3wKxWx6G3Gzs5HCjNmQ0UEQFdcsYKIgSMnUZlF7Ucut6gW2m51nyi0dLJURIC0CV45mvSSiF27%2FORcA2Ha9rZX9pMJV36rTnr9fcwRQiutvvxZOV8poL4MP"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 911e8df56857b524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/paribas.png
104.21.64.1200 OK 126 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/paribas.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced
Size 126 kB (125541 bytes)
Hash 75c6d5c81604504872f331843ca342a0
872a3e7f31dce51fe49e2365323056de903d98ab
6622d4cef0634af3d4e239148ee21265ca5ba671caa17582b7e3ac967339204f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/paribas.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: image/png
content-length: 125541
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0TlA8s%2BhbOkFEjsgHbPNR2jU9xsJYqYkF7LvQQVzjRryyU%2BxcDA93iY%2FzooVGJkRzeJJZgqyj%2Ft4UvKLIUKCowSh7IdCEygQxMSG8Z9XNKkZgrG0257FyJqEyYmfbshbERbqVInL%2B99poaynPig7"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
cf-ray: 911e8df70861b524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/alior.png
104.21.64.1200 OK 285 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/alior.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size 285 kB (284917 bytes)
Hash ce15e1156a9a4c3ad6f3502b747fff4f
36d08ab14d97fa1426c745bfddd2c7f8707f9e1a
5dfbeb5ad5d3eda9e99d19c0d4d803296bda9444c09a5003c4d1822154de524d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/alior.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: image/png
content-length: 284917
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QKU7Mnj%2BHCJiDdDba3xhlCJ7oUUzpfgZglSx1PaBI6teyK25Uhrb4MEsrc4qrnHq0ba9T9vRMte6ks0YqKvnifZL29XeBN5j6lTMlD16UdXoE5zJ%2F5Hak3blBEYNYkEEP96TZirrKlY%2FJTPt7tFo"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
cf-ray: 911e8df6d859b524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/post.js
104.21.64.1200 OK 11 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/post.js
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/post.js HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:57 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Lpv49lUIwWUJrjd5OmOdfg0dWYN2fr4STzJjZabnrYCrZQNC5zHlx0GHU3KDCQ%2F43j8gORjDBrkVJnLBeMVyNFi2hon3BCeyQ%2FdhxjH%2Bg7VX2ho%2B0DV6NXYjp2WSjepCwdkkJZ3yGXjzMtrTr%2Fc"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 27 Aug 2024 10:45:57 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
content-encoding: br
cf-ray: 911e8df0b84bb524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/style.css
104.21.64.1200 OK 48 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/style.css
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/style.css HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:57 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EjCbtpUr7x6m11lE2X0mGKtszVsc8%2FETjjpbWxl9mEbFNwyDtc8FP0g%2BlZR%2F0nzznsqp6ov1sDuE0yyzTA2hLdVcCCWuknqtpydsuCYqEySq93GPptOAihJMGAiyh9dhp7GwNzbqbva0cOFcdNLq"}],"group":"cf-nel","max_age":604800}
last-modified: Sun, 11 Aug 2024 00:31:13 GMT
vary: Accept-Encoding
age: 34
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 911e8df08843b524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET cdn.jsdelivr.net/npm/intl-tel-input@18.1.1/build/js/utils.js
104.18.186.31200 OK 253 kB URL GET HTTP/3 cdn.jsdelivr.net/npm/intl-tel-input@18.1.1/build/js/utils.js
IP 104.18.186.31:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerSectigo Limited
Subject*.jsdelivr.net
Fingerprint74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE
ValiditySat, 04 May 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1454)
Size 253 kB (253021 bytes)
Hash 958ffe72993523881b77e140ce759bce
574e439ae457ca23f79d1a7cc0906457abb15c40
0399719be23112b963e66643f253e231063844e560f6e5f27cdf1be25c68cc5a
GET /npm/intl-tel-input@18.1.1/build/js/utils.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pl.logowaniie-alegrropll.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: application/javascript; charset=utf-8
content-length: 62446
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 18.1.1
x-jsd-version-type: version
etag: W/"3dc5d-V05DmuRXyiP3nRp8wJBkV6uxXEA"
content-encoding: br
x-served-by: cache-fra-eddf8230068-FRA, cache-lga21930-LGA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 19377685
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=go6ueneFx6KdF5PZ1Pw7%2FDr8U0JXsmZ2IUGK9QOy0acB4Ji8dZ7I%2B8TNXY5QYEvT%2BNI%2FuLrI93fCJwvn3XwJDmki%2BOElKRY%2BJUubWea%2BqBgGKGPIj5euF%2BDs879cI2zxkDg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 911e8df56b4656a9-OSL
server-timing: cfExtPri
GET pl.logowaniie-alegrropll.com/assets/fonts/TrustlySans-Bold.woff
104.21.64.1200 OK 30 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/fonts/TrustlySans-Bold.woff
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type Web Open Font Format, TrueType, length 29888, version 0.0
Hash c93f9458ff7a5204656b3df3375d0683
5b3a06422d6754fd7fc95e65073448ee9149607a
c48bb0bfacc648604edee50b7b8cef6e10fd0fc6910a68931fcca25672356c0f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/fonts/TrustlySans-Bold.woff HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://pl.logowaniie-alegrropll.com/assets/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:59 GMT
content-type: font/woff
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lTWmaLPkWV085mwjaOoCGtQWdqNo2dKLYG6ZZCWVNat84jULwYwRPjH8qOXkoLHuxQpu0SnAwJNNq3J1F1OVM3Pl3busDXaGv%2BxSbUWSt3R%2BMlobghlVu86cSuxgRZ8DT34lrDeEPvE2vz%2B9I6Tc"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 23:26:35 GMT
vary: Accept-Encoding
age: 33
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 911e8df7d86db524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
104.21.64.1200 OK 43 kB URL User Request GET HTTP/2 pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
IP 104.21.64.1:443
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 14 Feb 2025 16:49:57 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RfBmHI1MVEiRum6na3VFfhvOMn6rUaNJpdY%2B3ITthSE6KOEIdrj%2FG0a7cOQW1A%2Fy2fE7gL0merNshthRLYitqXazyVD6Y%2F6abYAqPPBjfq0Rr53x%2FCWKkggv6G82PJPvXTqdUjVOPlT6YbKDFWFf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 911e8ded19275693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=692&min_rtt=520&rtt_var=206&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3292&recv_bytes=1463&delivery_rate=6652373&cwnd=253&unsent_bytes=0&cid=2f163d39f9c1d861&ts=241&x=0"
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
142.250.74.10200 OK 67 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
IP 142.250.74.10:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint91:3E:F9:90:4B:40:4C:8E:D9:11:EA:64:14:86:3D:AD:DB:41:93:5C
ValidityMon, 20 Jan 2025 08:37:08 GMT - Mon, 14 Apr 2025 08:37:07 GMT
File type ASCII text, with very long lines (1572)
Hash 034d5adc1cbedc8d7e0e7edd3b85b3bf
5296f6d4a3757879ff503163d2f08a293b15fe55
4e10df21374bf29431a4189a853d94cfa2ddaba4e89e8dff3b823f94b10e5d95
GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pl.logowaniie-alegrropll.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 14 Feb 2025 16:49:58 GMT
date: Fri, 14 Feb 2025 16:49:58 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET pl.logowaniie-alegrropll.com/assets/fonts/TrustlyIcons.otf
104.21.64.1200 OK 3.0 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/fonts/TrustlyIcons.otf
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
Hash 64a75d8661147354cf01c4e6f827fd94
39446ec4c32962c94deeb685335c859ed82b0be5
2770ea9ca2d00806d0c02f8c716edce88f2eaa36e83d1728a9b0361a2cdc3ca7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/fonts/TrustlyIcons.otf HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pl.logowaniie-alegrropll.com/assets/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: font/otf
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=slYVjnD7%2FrbPSRA0C6HvNd1NoHid7fiQp4P8apkMzCdXfyvKkVRq2tHg9oUDRBJz%2FmD2uNHecvGCZASTpm3HzAn6fSsNo%2BdftLgiQMBpLbpgH5bVlRrzHFqtSsP%2BPBQPG%2B7QZ6F66bmwPH%2F4NFy2"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 27 Jul 2024 00:01:06 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
content-encoding: br
cf-ray: 911e8df36851b524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/millenium.png
104.21.64.1200 OK 51 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/millenium.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced
Hash 3354120600f986aad73c2b18c5273343
e78be0ad5e617ed7221c3af78ea474d1a07f26ce
649ee08fbc7f0fd8bd2ec9fe8758e30c76c55ffde0ad14b41db5f3918dc4045c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/millenium.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: image/png
content-length: 50799
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mYUxbkLRI155Nzogo9CMaZdYYBHRgOt6JPhAjySjNogqIAXTTI4scyYjsvWDh0MEnUCsYjZpgY9wLlYeL6PTzgowP14mMQ9ReXEhBQ8tREy1X7QWsLm6PROJo8S4Cff9Bsgzbfsqy4fxj2UMYipQ"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
cf-ray: 911e8df6d85bb524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/ikea_favicon.png
104.21.64.1404 Not Found 315 B URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/ikea_favicon.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type HTML document, ASCII text, with very long lines (326), with no line terminators
Hash 97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/ikea_favicon.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: text/html; charset=iso-8859-1
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sVmFAqx9Jy8VI8If%2B03iLuFXuy7bNfRvNcyIfh9HRjfELBa9Gm7qR%2BqsugcUVQLSFGCzdVAIjGBB4ZcJOlH0kkyBP0lHSGFXj3RytV5mBNgGf0yM5peRAWnNE5xBfhdCS1LoMbgG0qOrt2rhoT0Y"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
content-encoding: br
cf-ray: 911e8df3c853b524-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/password.svg
104.21.64.1200 OK 1.3 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/password.svg
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type SVG Scalable Vector Graphics image
Hash 983379295fed9e91c749f71900f30524
d4440781fd0e3871e98379c0cf687a2cd76abb22
b579a2cd2ffe308e2b14fb2c554743df856330c246b33de51d7d2839c53419bb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/password.svg HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:57 GMT
content-type: image/svg+xml
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IoxVyfQ%2BKodgtYUW24NWchWZwqL%2FceNia2yJH1n6%2FFlTaF5bKVhzEkKz%2B1e35UsqcXr5qWMoIKhWo%2BYNU7MUXKjL%2Bwhln6EgIXlrHt9wUjvYOfnJbWQ9q4FAlhXlKwaSnG0GZ0lLQfk7labTDwUd"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
content-encoding: br
cf-ray: 911e8df09849b524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET fonts.googleapis.com/css2?family=Poppins:wght@600;700;800;900&display=swap
142.250.74.10200 OK 3.4 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Poppins:wght@600;700;800;900&display=swap
IP 142.250.74.10:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint91:3E:F9:90:4B:40:4C:8E:D9:11:EA:64:14:86:3D:AD:DB:41:93:5C
ValidityMon, 20 Jan 2025 08:37:08 GMT - Mon, 14 Apr 2025 08:37:07 GMT
File type ASCII text, with very long lines (3456), with no line terminators
Hash 4fdc479dc9e516e1930f276d8ee70965
70ee1d008bbdfc669ee1fa25d246bb22d4fc64e5
c349c6b1014b5c52ffde9bf4d988f2ab64eb467cb1c2a78771a4eed5a2b12294
GET /css2?family=Poppins:wght@600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pl.logowaniie-alegrropll.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 14 Feb 2025 16:49:58 GMT
date: Fri, 14 Feb 2025 16:49:58 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET pl.logowaniie-alegrropll.com/assets/pekao.png
104.21.64.1200 OK 21 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/pekao.png
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Hash 358279bd95d5c82c4335f4d888723845
1138a9817484678815684b0c52c07f49ef262b45
6e7281b17ceb0a429c851524a6e1ed3e0547c02a6e5a81ee9baad7660dffe257
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/pekao.png HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:58 GMT
content-type: image/png
content-length: 21058
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pjO4r0HRznJ9vBbRycvB70BcRD5nx2PWHB8lBxmNPikWQTMiwM8e2Aj1AhqW0%2BWCOm6cmMiOUPNKmlXjQiSFc%2BvuqT2AS3Lrr%2BLuythSDfdY90XUUbD4VmUm%2FgevvYG3NHRtjtLwrgePIHtspeuS"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:27 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
cf-ray: 911e8df6e85db524-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/username.svg
104.21.64.1200 OK 868 B URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/username.svg
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type SVG Scalable Vector Graphics image
Hash e4b6803e3f7b28cdf6ca7eb3a60711c4
fcfa751bd2e6b5b2e32bdf99ac74a4894da0ff14
3dac6e278ade3033d52ec48a9777fe9f08e7852b0d0d950e7c00939d9d71c375
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/username.svg HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:57 GMT
content-type: image/svg+xml
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0TyR8555iZldimkmJEqAQbFB36Xy61gmK02N4k53agV8HMl%2BA%2BBwNq3xrnIJSlpNmKDE%2B%2F8OdmLT6W3Og2KxPXEsfjpWAs6FkQ4DIbU%2FyciPwMJCoWYRewm4IPzHL%2BR84Xv54ZtZ%2Bsu7DipPnLEx"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
content-encoding: br
cf-ray: 911e8df08848b524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET pl.logowaniie-alegrropll.com/assets/inputmask.min.js
104.21.64.1200 OK 102 kB URL GET HTTP/3 pl.logowaniie-alegrropll.com/assets/inputmask.min.js
IP 104.21.64.1:443
Requested by https://pl.logowaniie-alegrropll.com/login.php?login=67aedc8b42901index.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.phpindex.php
Certificate IssuerGoogle Trust Services
Subjectlogowaniie-alegrropll.com
FingerprintA9:B9:57:2C:47:1B:11:2C:CA:C0:58:33:D9:13:75:BF:20:2F:2E:1A
ValidityFri, 07 Feb 2025 12:31:12 GMT - Thu, 08 May 2025 13:28:16 GMT
File type JavaScript source, ASCII text, with very long lines (65358)
Size 102 kB (101942 bytes)
Hash b89f54c50010cfec39c5cf6292b8f87a
11865641875699ad1e5d8bc1b1d4270ec86d5f8f
2104a74c194968212a6b332626b10108f02e476acbe1e705c7f52a441742c96d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/inputmask.min.js HTTP/1.1
Host: pl.logowaniie-alegrropll.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 14 Feb 2025 16:49:57 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ckzehZdFNQ%2FLwFuo25qw5A%2B8lLlawaQkvCcm8EsQI44ulxFgG3HavjY4bHLsC%2FMEZxTWZnFbAA7W90veducaiE2QdWNTdxskKuTULsGVuBkI91S%2B3TNyPpi0djw3wSRhNZ9KJ58npgHSQKtfeEX6"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 26 Jul 2024 18:52:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
content-encoding: br
cf-ray: 911e8df0984ab524-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400