| r10.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8d2e6150f7d0845dc26f5bd5cd6f28dd 6aad5091620585a5f76065c1888456ee70b88257 ed538ea400323f4c987f91c0b0afc79a8526b62f7aa317dd62bd107cb37850a2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "ED538EA400323F4C987F91C0B0AFC79A8526B62F7AA317DD62BD107CB37850A2"
Last-Modified: Tue, 03 Sep 2024 09:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4906
Expires: Thu, 05 Sep 2024 05:47:38 GMT
Date: Thu, 05 Sep 2024 04:25:52 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash66fbf7f95cb55f388373a20d4b1a736e afc34259758a563362367848629ff7639982e1fb 41c00088afc20571f6a0c6998324d9517346256ac33696dc706192ec606fe7a7
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "41C00088AFC20571F6A0C6998324D9517346256AC33696DC706192EC606FE7A7"
Last-Modified: Mon, 02 Sep 2024 12:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3651
Expires: Thu, 05 Sep 2024 05:26:43 GMT
Date: Thu, 05 Sep 2024 04:25:52 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1f0091b166a0138433eabf08a4530e4a 769d1eeaefb4987198c821ea98e06ea8ba0de215 2eff28e3e6829bf2cfcbc417fd76313d5b5e8ba8a3f0f0de6a5b5cdc2888e7e5
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2EFF28E3E6829BF2CFCBC417FD76313D5B5E8BA8A3F0F0DE6A5B5CDC2888E7E5"
Last-Modified: Mon, 02 Sep 2024 14:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11660
Expires: Thu, 05 Sep 2024 07:40:12 GMT
Date: Thu, 05 Sep 2024 04:25:52 GMT
Connection: keep-alive
|
|
| o.pki.goog/wr2 |  142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash1839e9fe507f4796d021b9479142d1c8 b5e6392ee1cf5c31a8412746b79f1a37ff798513 913460ae8972c69c7858124187bc3208e92e782b440a433aa6c25c847899e6ce
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Sep 2024 04:25:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashcabaaa7c3e6a621cc5836be05eee4924 c4bc6288aed0597ff7ae2dbc5aea340b6c9636b8 2b2a41201a3881bd029ab7161be291b23128d5952e5959092607b98c951fa18c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2B2A41201A3881BD029AB7161BE291B23128D5952E5959092607B98C951FA18C"
Last-Modified: Mon, 02 Sep 2024 14:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13537
Expires: Thu, 05 Sep 2024 08:11:29 GMT
Date: Thu, 05 Sep 2024 04:25:52 GMT
Connection: keep-alive
|
|
| drnghx.blogspot.com/?m=1 | 142.250.74.65 | | 16 kB |
IP142.250.74.65:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (7912) Hashbd75f057e7b87123ce8c223367d33289 f3b1dae6773f4883c7c319649089f85e3767b125 ee50e590986d2babb672a9140b0651826c1533829320e55961ab850ead851670
GET /?m=1 HTTP/1.1
Host: drnghx.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Thu, 05 Sep 2024 04:25:52 GMT
date: Thu, 05 Sep 2024 04:25:52 GMT
cache-control: private, max-age=0
last-modified: Wed, 04 Sep 2024 16:11:59 GMT
etag: W/"c38363e37e05cfab55f8e55e3b1e4d52b298adfe999914c7f383a9e6122fe949"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 15570
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash1839e9fe507f4796d021b9479142d1c8 b5e6392ee1cf5c31a8412746b79f1a37ff798513 913460ae8972c69c7858124187bc3208e92e782b440a433aa6c25c847899e6ce
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Sep 2024 04:25:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash9e39f3ea70683f852b169f0038a1df23 05f9dca3eb4a4b7526b194dabd7f395d249ad539 c8c1d221df1a6384e1c879574d34385cd5e3c11959f077a00816971b5ae12dcc
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C8C1D221DF1A6384E1C879574D34385CD5E3C11959F077A00816971B5AE12DCC"
Last-Modified: Mon, 02 Sep 2024 18:55:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3504
Expires: Thu, 05 Sep 2024 05:24:17 GMT
Date: Thu, 05 Sep 2024 04:25:53 GMT
Connection: keep-alive
|
|
| |  91.195.13.3 | 302 Found | 0 B |
URL User Request GET HTTP/2IP91.195.13.3:443 ASN#61251 Host4Biz sp. z o.o.
CertificateIssuerLet's Encrypt Subjectspin0ff.xyz Fingerprint8D:C9:02:EE:00:0B:6D:35:0A:96:C0:11:AA:99:A2:05:86:DC:E1:02 ValidityThu, 22 Aug 2024 19:12:22 GMT - Wed, 20 Nov 2024 19:12:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /123/qq HTTP/1.1
Host: spin0ff.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://drnghx.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 05 Sep 2024 04:25:53 GMT
content-type: text/html; charset=UTF-8
content-length: 0
access-control-allow-origin: *
set-cookie: qwerty_123=0; expires=Fri, 06-Sep-2024 04:25:53 GMT; Max-Age=86400; path=/
location: https://spin0ff.xyz/redirect.php
x-cache-status: BYPASS
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2
|
|
| | 91.195.13.3 | 302 Found | 0 B |
URL User Request GET HTTP/2IP91.195.13.3:443 ASN#61251 Host4Biz sp. z o.o.
CertificateIssuerLet's Encrypt Subjectspin0ff.xyz Fingerprint8D:C9:02:EE:00:0B:6D:35:0A:96:C0:11:AA:99:A2:05:86:DC:E1:02 ValidityThu, 22 Aug 2024 19:12:22 GMT - Wed, 20 Nov 2024 19:12:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.php HTTP/1.1
Host: spin0ff.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://drnghx.blogspot.com/
DNT: 1
Connection: keep-alive
Cookie: qwerty_123=0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Thu, 05 Sep 2024 04:25:53 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://redlinkbits.top/go/5364y2/y2
x-cache-status: BYPASS
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf326f8db0383d91798c526ea906d96af 045d7098148cefa16756179bfb890c316d26b494 d9f49b6d67bf402859ab76a7ddce75efa9bd95a5a386f1b01111d9b6ca1b838c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D9F49B6D67BF402859AB76A7DDCE75EFA9BD95A5A386F1B01111D9B6CA1B838C"
Last-Modified: Wed, 04 Sep 2024 00:26:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3458
Expires: Thu, 05 Sep 2024 05:23:32 GMT
Date: Thu, 05 Sep 2024 04:25:54 GMT
Connection: keep-alive
|
|
| redlinkbits.top/go/5364y2/y2 |  91.212.166.23 | 302 Found | 0 B |
URL User Request GET HTTP/1.1redlinkbits.top/go/5364y2/y2 IP91.212.166.23:443
CertificateIssuerLet's Encrypt Subjectredlinkbits.top FingerprintF5:90:F0:B6:BB:49:B7:3E:CB:B9:D8:7B:CB:28:C5:DA:FE:21:8C:F9 ValidityTue, 27 Aug 2024 10:42:49 GMT - Mon, 25 Nov 2024 10:42:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /go/5364y2/y2 HTTP/1.1
Host: redlinkbits.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://drnghx.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:54 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Pragma: no-cache
Set-Cookie: PHPSESSID=avj1pbapshit15lo93v711sabt; expires=Thu, 05-Nov-2043 04:25:54 GMT; Max-Age=604800000; path=/; domain=redlinkbits.top
ofr_1=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D; expires=Sun, 06-Oct-2024 04:25:54 GMT; Max-Age=2678400; path=/; domain=redlinkbits.top
Location: https://fore-mining.top/payouts/?b=YTo0OntzOjU6ImxhYmVsIjtzOjA6IiI7czozOiJ1c3IiO2k6ODA0O3M6NDoibm9wZCI7czoxNToicmVkbGlua2JpdHMudG9wIjtzOjE6Im8iO2k6MTt9
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashc96a4972e341191f93e963880196f8e1 8318aa6dcbdababe8728023ec9ef3aaac10917a9 dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A"
Last-Modified: Mon, 02 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7479
Expires: Thu, 05 Sep 2024 06:30:33 GMT
Date: Thu, 05 Sep 2024 04:25:54 GMT
Connection: keep-alive
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashc96a4972e341191f93e963880196f8e1 8318aa6dcbdababe8728023ec9ef3aaac10917a9 dd8f73d55d492ad4e3fc3915c05ecfc6883f124c050dded51f4e43292e6b8c2a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DD8F73D55D492AD4E3FC3915C05ECFC6883F124C050DDED51F4E43292E6B8C2A"
Last-Modified: Mon, 02 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7479
Expires: Thu, 05 Sep 2024 06:30:33 GMT
Date: Thu, 05 Sep 2024 04:25:54 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash21c28dcc8a8afcbe07aefd13702082f9 76d9d922169bc19ec566e9b48517198a78208f52 3811cf506890fdd82b606620a7e2364727bb8b0a6cc6283ca80ae82a8da92db3
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3811CF506890FDD82B606620A7E2364727BB8B0A6CC6283CA80AE82A8DA92DB3"
Last-Modified: Wed, 04 Sep 2024 12:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3466
Expires: Thu, 05 Sep 2024 05:23:40 GMT
Date: Thu, 05 Sep 2024 04:25:54 GMT
Connection: keep-alive
|
|
| fore-mining.top/payouts/?b=YTo0OntzOjU6ImxhYmVsIjtzOjA6IiI7czozOiJ1c3IiO2k6ODA0O3M6NDoibm9wZCI7czoxNToicmVkbGlua2JpdHMudG9wIjtzOjE6Im8iO2k6MTt9 | 91.212.166.23 | 302 Found | 0 B |
URL User Request GET HTTP/1.1fore-mining.top/payouts/?b=YTo0OntzOjU6ImxhYmVsIjtzOjA6IiI7czozOiJ1c3IiO2k6ODA0O3M6NDoibm9wZCI7czoxNToicmVkbGlua2JpdHMudG9wIjtzOjE6Im8iO2k6MTt9 IP91.212.166.23:443
CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /payouts/?b=YTo0OntzOjU6ImxhYmVsIjtzOjA6IiI7czozOiJ1c3IiO2k6ODA0O3M6NDoibm9wZCI7czoxNToicmVkbGlua2JpdHMudG9wIjtzOjE6Im8iO2k6MTt9 HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://drnghx.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:54 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D; expires=Sun, 06-Oct-2024 04:25:54 GMT; Max-Age=2678400; path=/; domain=fore-mining.top
Location: http://fore-mining.top/payouts/
|
|
| | 91.212.166.23 | 200 OK | 169 B |
URL User Request GET HTTP/1.1IP91.212.166.23:443
CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash84855c13836b389d5ec7cfd4c9266173 1cf3056ff23c4176fd7ca9816a000ed461d6d323 502083c916ae481cdd413b8d93315300653df5fb3dcc5770c01991de19977eae
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /payouts/ HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:54 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://fore-mining.top:443/payouts/
|
|
| | 91.212.166.23 | 200 OK | 776 B |
URL User Request GET HTTP/1.1IP91.212.166.23:443
CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typeHTML document, ASCII text, with very long lines (425) Hash5a69b2aa81a99c305237e568ccc9719f 8fd4b9b80a0056f3e8bd1835fe52c903c5f8cf60 4e7a65ebfa5cce2b4e62d1fd531ac5172a3806e2c670ddb8cefc499240ca5213
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /payouts/ HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| fore-mining.top/_nuxt/entry.816a5a0f.css | 91.212.166.23 | 200 OK | 50 kB |
URL GET HTTP/1.1fore-mining.top/_nuxt/entry.816a5a0f.css IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typeASCII text, with very long lines (49996) Hasha3ec7f83dfc6f1a0b43babe4e72d86ab b759686938891eebffcfa01b2a49914bded151cd 816a5a0f5b2b5e79d25af268686381bfd7f2d7db7e04c59adc55731d13b67812
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_nuxt/entry.816a5a0f.css HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:55 GMT
Content-Type: text/css
Content-Length: 49997
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-c34d"
Accept-Ranges: bytes
|
|
| fore-mining.top/_nuxt/entry.4e713294.js | 91.212.166.23 | 200 OK | 3.6 MB |
URL GET HTTP/1.1fore-mining.top/_nuxt/entry.4e713294.js IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size3.6 MB (3594295 bytes) Hash9f216b45554f9370cd00c5ea972125b4 df8032566516debcb188a5986c3c2bc0cf5f90a7 0c87cbcdbec33073dcbc00a43b06068ad538d7e187e3d723497fd10844b4805b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_nuxt/entry.4e713294.js HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:55 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 3594295
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-36d837"
Accept-Ranges: bytes
|
|
| fore-mining.top/_nuxt/index.b71f6f30.js | 91.212.166.23 | 200 OK | 30 kB |
URL GET HTTP/1.1fore-mining.top/_nuxt/index.b71f6f30.js IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typeUnicode text, UTF-8 text, with very long lines (29624) Hash9eeeb4d4e651c91eca7a19503b465212 24c5e02592c21f6f7181d1b3abb998ded5b61b56 134b62d8677d19e752b03e19f80ea2bd0c4eea35badc7244139813cdf1379427
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_nuxt/index.b71f6f30.js HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/_nuxt/entry.4e713294.js
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:56 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 29627
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-73bb"
Accept-Ranges: bytes
|
|
| fore-mining.top/favicon.png | 91.212.166.23 | 200 OK | 1.2 kB |
URL GET HTTP/1.1fore-mining.top/favicon.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 32 x 32, 8-bit colormap, non-interlaced Hashd0ab0fb79e2687c9773cfa4018595dbd d79836a5df12dae77b9cfb0c34e382b6257bdd94 f1cacb91db22e156f7f11cf755ab73bcaf30c058efe51b398cb425482113f411
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:56 GMT
Content-Type: image/png
Content-Length: 1169
Last-Modified: Fri, 02 Aug 2024 05:19:32 GMT
Connection: keep-alive
ETag: "66ac6c64-491"
Accept-Ranges: bytes
|
|
| fore-mining.top/_nuxt/OnlineUsers.13b0b975.js | 91.212.166.23 | 200 OK | 638 B |
URL GET HTTP/1.1fore-mining.top/_nuxt/OnlineUsers.13b0b975.js IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typeJava source, ASCII text, with very long lines (637) Hash318bb3d9407c5219c0d10faf3efb2fb3 562dc2cdcd8754204be0ae7d4fc820a1dbc583a1 1a21637c07b53055a9627efbe546551eada3aca036aa7b825204ae296e4aa9bb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_nuxt/OnlineUsers.13b0b975.js HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/_nuxt/index.b71f6f30.js
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:56 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 638
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-27e"
Accept-Ranges: bytes
|
|
| fore-mining.top/_nuxt/visit.4c68a206.js | 91.212.166.23 | 200 OK | 421 B |
URL GET HTTP/1.1fore-mining.top/_nuxt/visit.4c68a206.js IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typeJava source, ASCII text, with very long lines (420) Hashc7e3cb2df48145483231af7036ac2511 557fa64be798741b3966edc1395ce6a08ae91186 aa520d0866b7b49b642e4c85b6915e695a087f963e120cba2e91041de4a54010
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_nuxt/visit.4c68a206.js HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/_nuxt/index.b71f6f30.js
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:56 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 421
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-1a5"
Accept-Ranges: bytes
|
|
| fore-mining.top/_nuxt/client-only.11dfce23.js | 91.212.166.23 | 200 OK | 468 B |
URL GET HTTP/1.1fore-mining.top/_nuxt/client-only.11dfce23.js IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typeJava source, ASCII text, with very long lines (467) Hash1b9370aaf1247adec1abae0a54fa2ec9 992735adce31717f721d0570f206e24c2f8d6e6e 8b9669ebd8a376e53af6be534e039dc797ac566c71b960f45f3f61726f568129
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_nuxt/client-only.11dfce23.js HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/_nuxt/index.b71f6f30.js
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:56 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 468
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-1d4"
Accept-Ranges: bytes
|
|
| fore-mining.top/payouts/img/bonus.png | 91.212.166.23 | 200 OK | 179 kB |
URL GET HTTP/1.1fore-mining.top/payouts/img/bonus.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 453 x 452, 8-bit/color RGBA, non-interlaced Size179 kB (179335 bytes) Hashcdaa7a9b79f2a5c45b869e02449e7a3b 2162a1a083ed2e39d7095e74e5fa6af4c5118d5d 9b63e525a10bf17284925abba402aa3fd935d24a063f1fd332a95dc925d76968
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /payouts/img/bonus.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:56 GMT
Content-Type: image/png
Content-Length: 179335
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-2bc87"
Accept-Ranges: bytes
|
|
| images.unsplash.com/photo-1672456465401-7ba2598de4c2?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 | 151.101.2.208 | 200 OK | 20 kB |
URL GET HTTP/2images.unsplash.com/photo-1672456465401-7ba2598de4c2?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 IP151.101.2.208:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerGlobalSign nv-sa Subjectimages.unsplash.com FingerprintBF:67:10:BA:79:03:BE:CD:51:C3:B7:BF:E5:3B:98:79:82:3C:B9:99 ValidityThu, 07 Dec 2023 01:14:14 GMT - Tue, 07 Jan 2025 01:14:13 GMT
Hash549e7547da0fafbd2e03b9b2ca862c2b c94c728ace0f424caae9d0804bcf40fe7e73f36e de22661a5aad51215203bd79e07e1da3527726339e7a4fa504c8775f38de49ad
GET /photo-1672456465401-7ba2598de4c2?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 HTTP/1.1
Host: images.unsplash.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-imgix-id: 6cff5d18150d7876b876bd0608f43e2f23bc16f4
cache-control: public, max-age=31536000
last-modified: Sat, 27 Jul 2024 08:06:19 GMT
server: imgix
date: Thu, 05 Sep 2024 04:25:56 GMT
age: 3442776
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000110-SJC, cache-fra-etou8220062-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT, HIT
vary: Accept, User-Agent
content-length: 19973
X-Firefox-Spdy: h2
|
|
| images.unsplash.com/photo-1674490364497-ee1f32e4cb4c?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 | 151.101.2.208 | 200 OK | 8.3 kB |
URL GET HTTP/2images.unsplash.com/photo-1674490364497-ee1f32e4cb4c?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 IP151.101.2.208:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerGlobalSign nv-sa Subjectimages.unsplash.com FingerprintBF:67:10:BA:79:03:BE:CD:51:C3:B7:BF:E5:3B:98:79:82:3C:B9:99 ValidityThu, 07 Dec 2023 01:14:14 GMT - Tue, 07 Jan 2025 01:14:13 GMT
Hashec4b073614a51c1f725fce8e8d604212 78d92252aaebc3a81cb72ccb56358299531fe464 412a29cbc2ed4ffab295396c8fe411672785968ef9d514191d493b6b388953ae
GET /photo-1674490364497-ee1f32e4cb4c?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 HTTP/1.1
Host: images.unsplash.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-imgix-id: 8f8552b8e13694a6949e2c2a38b69f47498f7638
cache-control: public, max-age=31536000
last-modified: Wed, 03 Jul 2024 17:32:52 GMT
server: imgix
date: Thu, 05 Sep 2024 04:25:56 GMT
age: 5482385
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000133-SJC, cache-fra-eddf8230047-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT, HIT
vary: Accept, User-Agent
content-length: 8273
X-Firefox-Spdy: h2
|
|
| images.unsplash.com/photo-1674502374937-391815503667?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 | 151.101.2.208 | 200 OK | 17 kB |
URL GET HTTP/2images.unsplash.com/photo-1674502374937-391815503667?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 IP151.101.2.208:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerGlobalSign nv-sa Subjectimages.unsplash.com FingerprintBF:67:10:BA:79:03:BE:CD:51:C3:B7:BF:E5:3B:98:79:82:3C:B9:99 ValidityThu, 07 Dec 2023 01:14:14 GMT - Tue, 07 Jan 2025 01:14:13 GMT
Hashe81b4d123b08935a977e36b977d98169 7586f14e4fc906f4ac17ad40d00c5c6de51495b0 26d169ff03a742dfb99ace5e3bb48972aea95438c8cb3f8eb25feb9700cb1f34
GET /photo-1674502374937-391815503667?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 HTTP/1.1
Host: images.unsplash.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-imgix-id: 3014bf6deb7c939ec5b873a872cf775dc3f4505a
cache-control: public, max-age=31536000
last-modified: Sun, 28 Jul 2024 07:57:18 GMT
server: imgix
date: Thu, 05 Sep 2024 04:25:56 GMT
age: 3356920
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000114-SJC, cache-chi-kigq8000118-CHI, cache-fra-eddf8230024-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT, HIT, HIT
vary: Accept, User-Agent
content-length: 16746
X-Firefox-Spdy: h2
|
|
| images.unsplash.com/photo-1599566150163-29194dcaad36?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 | 151.101.2.208 | 200 OK | 14 kB |
URL GET HTTP/2images.unsplash.com/photo-1599566150163-29194dcaad36?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 IP151.101.2.208:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerGlobalSign nv-sa Subjectimages.unsplash.com FingerprintBF:67:10:BA:79:03:BE:CD:51:C3:B7:BF:E5:3B:98:79:82:3C:B9:99 ValidityThu, 07 Dec 2023 01:14:14 GMT - Tue, 07 Jan 2025 01:14:13 GMT
Hash634f7a129d0a02122009c07b0fdb53d8 96e16ce42223c6448b6f988059f61526270b4745 a6b313b884672d146deabf2d311f04b513fcaa73a537fdc3441ea05eb3d012e9
GET /photo-1599566150163-29194dcaad36?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 HTTP/1.1
Host: images.unsplash.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-imgix-id: 5eb8452a7abd2a17edbe6a610616d55f81fc8fb0
cache-control: public, max-age=31536000
last-modified: Fri, 16 Aug 2024 19:10:14 GMT
server: imgix
date: Thu, 05 Sep 2024 04:25:56 GMT
age: 1674943
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-chi-klot8100167-CHI, cache-fra-etou8220055-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT, HIT
vary: Accept, User-Agent
content-length: 14484
X-Firefox-Spdy: h2
|
|
| fore-mining.top/payouts/img/bitcoin.png | 91.212.166.23 | 200 OK | 25 kB |
URL GET HTTP/1.1fore-mining.top/payouts/img/bitcoin.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 126 x 127, 8-bit/color RGBA, non-interlaced Hashdd81b4a670bf3c3dd0034b0c0a03234d 6eccd5f254ab4988ffd2f4f89289b16041d61f22 d77369aa7567af2889718639538e0140ce999433bca0a41a6ea291a985490f97
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /payouts/img/bitcoin.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:56 GMT
Content-Type: image/png
Content-Length: 25437
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-635d"
Accept-Ranges: bytes
|
|
| plus.unsplash.com/premium_photo-1673507503135-79a58e3ece0d?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 | 151.101.194.208 | 200 OK | 14 kB |
URL GET HTTP/2plus.unsplash.com/premium_photo-1673507503135-79a58e3ece0d?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 IP151.101.194.208:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerCertainly Subjectplus.unsplash.com Fingerprint80:16:36:76:90:59:7C:00:3A:C5:A4:47:BE:7A:0B:14:63:DD:DE:71 ValidityWed, 04 Sep 2024 06:57:40 GMT - Fri, 04 Oct 2024 06:57:39 GMT
Hash6f133c5e20165d7c03980d9e2c2b7d99 d28a5e873c6361e930418f81bba0df3313c21053 1911e537ed595e53afb3c4c7eac2259633b92db5ff47c0fd58dcdf1509ffa3f4
GET /premium_photo-1673507503135-79a58e3ece0d?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 HTTP/1.1
Host: plus.unsplash.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-imgix-id: cfd267a1c137131a3aa01306a2d41e6aa28e2acc
cache-control: public, max-age=31536000
last-modified: Mon, 12 Aug 2024 19:48:04 GMT
server: imgix
date: Thu, 05 Sep 2024 04:25:56 GMT
age: 2018273
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-chi-kigq8000047-CHI, cache-fra-eddf8230096-FRA, cache-hel1410028-HEL
x-cache: HIT, HIT, HIT
vary: Accept, User-Agent
content-length: 13969
X-Firefox-Spdy: h2
|
|
| images.unsplash.com/photo-1671116807928-2963fe1e75c1?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 | 151.101.2.208 | 200 OK | 16 kB |
URL GET HTTP/2images.unsplash.com/photo-1671116807928-2963fe1e75c1?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 IP151.101.2.208:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerGlobalSign nv-sa Subjectimages.unsplash.com FingerprintBF:67:10:BA:79:03:BE:CD:51:C3:B7:BF:E5:3B:98:79:82:3C:B9:99 ValidityThu, 07 Dec 2023 01:14:14 GMT - Tue, 07 Jan 2025 01:14:13 GMT
Hash679ab0612d02491c2296a53972cce1e5 d5c4f9ae3968089c3494d7769e67d0796df8c438 c0b3f5105965db98eb23c42e4cc52ed4629c49e19f7785915449efe5c39da268
GET /photo-1671116807928-2963fe1e75c1?b=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80 HTTP/1.1
Host: images.unsplash.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-imgix-id: 03fa0d9c2e1079958050dd6b23fbf3d526f07b1e
cache-control: public, max-age=31536000
last-modified: Mon, 29 Jul 2024 09:33:47 GMT
server: imgix
date: Thu, 05 Sep 2024 04:25:56 GMT
age: 3264729
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc10023-SJC, cache-chi-kigq8000061-CHI, cache-fra-eddf8230043-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT, HIT, HIT
vary: Accept, User-Agent
content-length: 15475
X-Firefox-Spdy: h2
|
|
| fore-mining.top/img/bg/circuit.svg | 91.212.166.23 | 200 OK | 5.3 kB |
URL GET HTTP/1.1fore-mining.top/img/bg/circuit.svg IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typeSVG Scalable Vector Graphics image Hashdffdfc8a90f7ff767f72a1d6216fcea6 7f8d3b7b7ea288aed96e1a5b326d3f8571b0ebe6 759172998df26a3de2a6c715de7bea7e1ade68a5596833e8dc1425c1a504cce0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/bg/circuit.svg HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/_nuxt/entry.816a5a0f.css
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:56 GMT
Content-Type: image/svg+xml
Content-Length: 5273
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-1499"
Accept-Ranges: bytes
|
|
| fore-mining.top/_nuxt/url.0b90d914.js | 91.212.166.23 | 200 OK | 366 B |
URL GET HTTP/1.1fore-mining.top/_nuxt/url.0b90d914.js IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typeJava source, ASCII text, with very long lines (365) Hash64b3327f89702a18d2440973fd274662 f460a828cb4566abcf4ba8e295bd2ea33eb5e294 66a2fa73c10cf8e22e709ac61a1585b8b3535d9f0e0c5fe2ae08abc88611c22a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_nuxt/url.0b90d914.js HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:57 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 366
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-16e"
Accept-Ranges: bytes
|
|
| fore-mining.top/_nuxt/error-component.e8645654.js | 91.212.166.23 | 200 OK | 1.2 kB |
URL GET HTTP/1.1fore-mining.top/_nuxt/error-component.e8645654.js IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typeASCII text, with very long lines (719) Hash88b31d9279571188e305fd1b5392108d 360bfd5ae1bbbf5cb9c1d9c1f55bae4989bdf7f5 7c20920a025aaf7b9c4b24cfd7405b9b90053dbf4c32c2ca67057fd5bd281ca7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_nuxt/error-component.e8645654.js HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:57 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 1182
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-49e"
Accept-Ranges: bytes
|
|
| fore-mining.top/img/coins/bitcoin.png | 91.212.166.23 | 200 OK | 2.7 kB |
URL GET HTTP/1.1fore-mining.top/img/coins/bitcoin.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 64 x 64, 8-bit colormap, non-interlaced Hash2edf1ef8b333c40979976d1a49bc234c d75ac12795b4a9575c874e1b190712cd62a87afc 50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/coins/bitcoin.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:57 GMT
Content-Type: image/png
Content-Length: 2691
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-a83"
Accept-Ranges: bytes
|
|
| fore-mining.top/img/coins/bch.png | 91.212.166.23 | 200 OK | 2.7 kB |
URL GET HTTP/1.1fore-mining.top/img/coins/bch.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 64 x 64, 8-bit colormap, non-interlaced Hash6ad5509616a5fca9f389801052bea3fe 5b53d204b7e6066409067fba9fce5202ff20e9d6 6becc3abea448b67731610708852a70c3ceb99059b2dee98da3711dc0620218a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/coins/bch.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:57 GMT
Content-Type: image/png
Content-Length: 2694
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-a86"
Accept-Ranges: bytes
|
|
| fore-mining.top/img/coins/ethereum.png | 91.212.166.23 | 200 OK | 2.8 kB |
URL GET HTTP/1.1fore-mining.top/img/coins/ethereum.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 64 x 64, 8-bit colormap, non-interlaced Hash856bfdb63dc0d6fad6b92fc6a29719e1 2fed2e3409ce1bbbfb37f6da4abeecc30cefc021 eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/coins/ethereum.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:57 GMT
Content-Type: image/png
Content-Length: 2780
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-adc"
Accept-Ranges: bytes
|
|
| fore-mining.top/img/coins/litecoin.png | 91.212.166.23 | 200 OK | 2.5 kB |
URL GET HTTP/1.1fore-mining.top/img/coins/litecoin.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 64 x 64, 8-bit colormap, non-interlaced Hashbdaeb947a2eb31bae0a170559df9013c 7fc8496c9bf51eea98dc9060262f87a792a24a43 3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/coins/litecoin.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:57 GMT
Content-Type: image/png
Content-Length: 2456
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-998"
Accept-Ranges: bytes
|
|
| fore-mining.top/img/coins/doge.png | 91.212.166.23 | 200 OK | 4.3 kB |
URL GET HTTP/1.1fore-mining.top/img/coins/doge.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashae64499c8825452f6262177ee6dd525b 92a35e0817cefb5befbb18422fb4c9d220f6754c 47fb417f6b72c4edc08dfb90a376b2c88b3b51992bf3c83dd14e011edba2f339
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/coins/doge.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:57 GMT
Content-Type: image/png
Content-Length: 4251
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-109b"
Accept-Ranges: bytes
|
|
| fore-mining.top/img/coins/xrp.png | 91.212.166.23 | 200 OK | 2.3 kB |
URL GET HTTP/1.1fore-mining.top/img/coins/xrp.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 64 x 64, 8-bit colormap, non-interlaced Hash39edd8e5c80256300562f68afb1ab525 506e80486e2b9e90f7344334cd95e93ac8fa0338 cf4c3c2ec18de3d4dcd49151ffe00cb299f86fc98467cf806b9c447467935479
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/coins/xrp.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:57 GMT
Content-Type: image/png
Content-Length: 2330
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-91a"
Accept-Ranges: bytes
|
|
| fore-mining.top/img/coins/usdt.png | 91.212.166.23 | 200 OK | 923 B |
URL GET HTTP/1.1fore-mining.top/img/coins/usdt.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashae9f6b15ca809b5d92a8f305d954682b e6350b10f296d88e48c32ae6ad41b95488d2fc56 e8b7dc15525de712cb597b4c4daa6b11dce462e6dd10913e41720f59b2608117
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/coins/usdt.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:57 GMT
Content-Type: image/png
Content-Length: 923
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-39b"
Accept-Ranges: bytes
|
|
| fore-mining.top/img/coins/solana.png | 91.212.166.23 | 200 OK | 1.6 kB |
URL GET HTTP/1.1fore-mining.top/img/coins/solana.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash0e21c0532ba33810e3d7e30192a0dbb0 5820cba622518979f538410e6f50445a7c5bdd60 7e81a3a266d2d77f67c4491589ecc39712c078ce89cb37e360e8a7c88c68ef82
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/coins/solana.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:57 GMT
Content-Type: image/png
Content-Length: 1568
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-620"
Accept-Ranges: bytes
|
|
| fore-mining.top/img/coins/bnb.png | 91.212.166.23 | 200 OK | 1.4 kB |
URL GET HTTP/1.1fore-mining.top/img/coins/bnb.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashaef8727bea8367cd9fd252c025b45887 c2ab9d909455bff35181dfd92bcc7baba930867f ce5a07d36768bcb5524044a9e92a606ae6effe1cb0913dfa418703461db62fe3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/coins/bnb.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:57 GMT
Content-Type: image/png
Content-Length: 1387
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-56b"
Accept-Ranges: bytes
|
|
| fore-mining.top/img/coins/ada.png | 91.212.166.23 | 200 OK | 2.8 kB |
URL GET HTTP/1.1fore-mining.top/img/coins/ada.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 64 x 64, 8-bit colormap, non-interlaced Hash2b4047ef139810f5403fe2987bd2dc9e 529276c43a521743eb53df1cfe8bc8ffff220dfa 38c163ecba73c000df0abfe2ad5c4f941164909f8078e8a304dba4db696bc709
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/coins/ada.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:57 GMT
Content-Type: image/png
Content-Length: 2790
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-ae6"
Accept-Ranges: bytes
|
|
| fore-mining.top/img/coins/matic.png | 91.212.166.23 | 200 OK | 2.7 kB |
URL GET HTTP/1.1fore-mining.top/img/coins/matic.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashe52d4c5303ae23b87eafcba68fec13f0 d62532d0d8b480481e825e43dad042bba1b34905 6b6a7ed2702dc19ede76fa573dcadbf7cd0680eeb320a1650b2ee0061135ba93
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/coins/matic.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:57 GMT
Content-Type: image/png
Content-Length: 2668
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-a6c"
Accept-Ranges: bytes
|
|
| fore-mining.top/img/coins/dot.png | 91.212.166.23 | 200 OK | 2.6 kB |
URL GET HTTP/1.1fore-mining.top/img/coins/dot.png IP91.212.166.23:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectfore-mining.top Fingerprint69:CE:BA:E3:D2:78:09:49:0B:7D:17:55:3E:7C:C3:E8:41:D8:1A:52 ValiditySun, 28 Jul 2024 09:08:17 GMT - Sat, 26 Oct 2024 09:08:16 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashab2bbbdbe07a46e0e047850c62301f0b 01c54ef9fe29c5ca43e457c5cb4cae52ffccda40 3418e6d1452040dfb46794119972418cdae99ff6535915c79714fda227b0e677
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/coins/dot.png HTTP/1.1
Host: fore-mining.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fore-mining.top/payouts/
Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A804%3Bs%3A4%3A%22nopd%22%3Bs%3A15%3A%22redlinkbits.top%22%3Bs%3A1%3A%22o%22%3Bi%3A1%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Thu, 05 Sep 2024 04:25:57 GMT
Content-Type: image/png
Content-Length: 2613
Last-Modified: Fri, 02 Aug 2024 05:19:31 GMT
Connection: keep-alive
ETag: "66ac6c63-a35"
Accept-Ranges: bytes
|
|
| api.coingecko.com/api/v3/simple/price?ids=bitcoin%2Cethereum%2Ccardano%2Cbitcoin-cash%2Clitecoin%2Cdogecoin%2Cripple%2Cmatic-network%2Cpolkadot%2Cbinancecoin%2Ctether%2Csolana&vs_currencies=usd&include_24hr_change=true&precision=2&1725510356793 | 172.67.12.83 | 200 OK | 742 B |
URL GET HTTP/2api.coingecko.com/api/v3/simple/price?ids=bitcoin%2Cethereum%2Ccardano%2Cbitcoin-cash%2Clitecoin%2Cdogecoin%2Cripple%2Cmatic-network%2Cpolkadot%2Cbinancecoin%2Ctether%2Csolana&vs_currencies=usd&include_24hr_change=true&precision=2&1725510356793 IP172.67.12.83:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectapi.coingecko.com Fingerprint9F:48:FF:F1:7A:D8:CE:A4:91:91:27:22:01:10:04:A6:00:A2:AD:F6 ValidityWed, 28 Aug 2024 21:54:05 GMT - Tue, 26 Nov 2024 21:54:04 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (814), with no line terminators Hash429804f50d01166cd73b685b16f8f5de b68085c30f195242fdb6c9579f2496076f627e55 11b5220f8f5e98ed11c4c502231c22d8903a247ee0c77103431c359a9365e1f1
GET /api/v3/simple/price?ids=bitcoin%2Cethereum%2Ccardano%2Cbitcoin-cash%2Clitecoin%2Cdogecoin%2Cripple%2Cmatic-network%2Cpolkadot%2Cbinancecoin%2Ctether%2Csolana&vs_currencies=usd&include_24hr_change=true&precision=2&1725510356793 HTTP/1.1
Host: api.coingecko.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fore-mining.top/
Origin: https://fore-mining.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 05 Sep 2024 04:25:57 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS
access-control-expose-headers: link, per-page, total
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=30, public, must-revalidate, s-maxage=60
access-control-request-method: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
vary: Accept-Encoding, Origin
content-encoding: gzip
etag: W/"a54e74d7fb42e70d673657a65e1141cb"
x-request-id: 0148b718-cc4d-40ba-a0a8-33ed987220e3
x-runtime: 0.003805
alternate-protocol: 443:npn-spdy/2
strict-transport-security: max-age=15724800; includeSubdomains
cf-cache-status: MISS
set-cookie: __cf_bm=ywKg9IANRrUGSKpUQlOlALD3QktHdi73PLDq1khG6_s-1725510357-1.0.1.1-fBS2ttbGfYfYJ9jh07Y_Yqg69xPXJrpBASeC8ABEA1eT8hlP_lcrtVqMmy9RcYw6u7RJkBtsQ544QztbvYS2hA; path=/; expires=Thu, 05-Sep-24 04:55:57 GMT; domain=.api.coingecko.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8be375529bc0b511-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.coingecko.com/api/v3/simple/price?ids=bitcoin%2Cethereum%2Ccardano%2Cbitcoin-cash%2Clitecoin%2Cdogecoin%2Cripple%2Cmatic-network%2Cpolkadot%2Cbinancecoin%2Ctether%2Csolana&vs_currencies=usd&include_24hr_change=true&precision=2&1725510372344 | 172.67.12.83 | 200 OK | 740 B |
URL GET HTTP/2api.coingecko.com/api/v3/simple/price?ids=bitcoin%2Cethereum%2Ccardano%2Cbitcoin-cash%2Clitecoin%2Cdogecoin%2Cripple%2Cmatic-network%2Cpolkadot%2Cbinancecoin%2Ctether%2Csolana&vs_currencies=usd&include_24hr_change=true&precision=2&1725510372344 IP172.67.12.83:443
Requested byhttps://fore-mining.top/payouts/ CertificateIssuerLet's Encrypt Subjectapi.coingecko.com Fingerprint9F:48:FF:F1:7A:D8:CE:A4:91:91:27:22:01:10:04:A6:00:A2:AD:F6 ValidityWed, 28 Aug 2024 21:54:05 GMT - Tue, 26 Nov 2024 21:54:04 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (812), with no line terminators Hash83be4017cff04c49e1cfed27735ef844 b233c7b147cc1e01cfe4fd17fc1ab106dfdd7eef e7f3fdd75fd6ca4fa8408377aa30e41eb626b59abe7903280502fdda0dae6b48
GET /api/v3/simple/price?ids=bitcoin%2Cethereum%2Ccardano%2Cbitcoin-cash%2Clitecoin%2Cdogecoin%2Cripple%2Cmatic-network%2Cpolkadot%2Cbinancecoin%2Ctether%2Csolana&vs_currencies=usd&include_24hr_change=true&precision=2&1725510372344 HTTP/1.1
Host: api.coingecko.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fore-mining.top/
Origin: https://fore-mining.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 05 Sep 2024 04:26:12 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS
access-control-expose-headers: link, per-page, total
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=30, public, must-revalidate, s-maxage=60
access-control-request-method: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
vary: Accept-Encoding, Origin
content-encoding: gzip
etag: W/"99e76a6d4b045b83cf540228f89998ea"
x-request-id: 8b1320df-c335-48ba-8ccd-84662187bc8a
x-runtime: 0.003909
alternate-protocol: 443:npn-spdy/2
strict-transport-security: max-age=15724800; includeSubdomains
cf-cache-status: MISS
set-cookie: __cf_bm=VAUEqF_F0pIkxCh0SEi4QvBdn2yt81nZpKnxTDT6BMw-1725510372-1.0.1.1-UGzGTjhJzsHfoc6WBsRq0QZ.UwKzZnKPizsxwFOvKuPEUg5sfgohPVm6N1Au4uiB.vqqzh4WZDSL.95E5HBPAQ; path=/; expires=Thu, 05-Sep-24 04:56:12 GMT; domain=.api.coingecko.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8be375b33a88b511-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|