email.mail1.onesignal.os.tc/c/eJwcz72u2zAMQOGnsTYG1K_JwUOX9DEKSpRqoY5sxMIt7tsX6X6G88l1_eq6ucZFQw6AEgIEjwEyk4fV5myTKislo1sKkbWZutlEkeOKKZp9E4uaCmaUaMVVr9ZWK8V74rUyJ9M39VRVpUFLliEUZmDPAYgQ0TVqUvhx1DnfdQl4nEWO_bynObZ9zute_I_FPRf3PMfRR71r1TvL-PMo52txz78XiL76WNzz9f3z_LKPfb4OM87ZWy8y-zn-I6PNSesKzZcCgVoGailBKSSREtngvLkO-a7vT64YGR2twEkcBOsi5FIRUqHYVmyEZM17u3cZ9fFbvvpYAvZ3ve_P1r8AAAD__93EZ0Q
34.102.239.211 446 B URL email.mail1.onesignal.os.tc/c/eJwcz72u2zAMQOGnsTYG1K_JwUOX9DEKSpRqoY5sxMIt7tsX6X6G88l1_eq6ucZFQw6AEgIEjwEyk4fV5myTKislo1sKkbWZutlEkeOKKZp9E4uaCmaUaMVVr9ZWK8V74rUyJ9M39VRVpUFLliEUZmDPAYgQ0TVqUvhx1DnfdQl4nEWO_bynObZ9zute_I_FPRf3PMfRR71r1TvL-PMo52txz78XiL76WNzz9f3z_LKPfb4OM87ZWy8y-zn-I6PNSesKzZcCgVoGailBKSSREtngvLkO-a7vT64YGR2twEkcBOsi5FIRUqHYVmyEZM17u3cZ9fFbvvpYAvZ3ve_P1r8AAAD__93EZ0Q
IP 34.102.239.211:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bbfd7990f2d3018301d8b7badfa741e7
c57fb644edb9ec27f68723d8b969de39bb8371c1
9c9b4efe9db3e6f60f4c251ac2ac636cc50ba4a11c50c1be061b6dfb56af016b
Analyzer Verdict Alert openphish Australian Government
GET /c/eJwcz72u2zAMQOGnsTYG1K_JwUOX9DEKSpRqoY5sxMIt7tsX6X6G88l1_eq6ucZFQw6AEgIEjwEyk4fV5myTKislo1sKkbWZutlEkeOKKZp9E4uaCmaUaMVVr9ZWK8V74rUyJ9M39VRVpUFLliEUZmDPAYgQ0TVqUvhx1DnfdQl4nEWO_bynObZ9zute_I_FPRf3PMfRR71r1TvL-PMo52txz78XiL76WNzz9f3z_LKPfb4OM87ZWy8y-zn-I6PNSesKzZcCgVoGailBKSSREtngvLkO-a7vT64YGR2twEkcBOsi5FIRUqHYVmyEZM17u3cZ9fFbvvpYAvZ3ve_P1r8AAAD__93EZ0Q HTTP/1.1
Host: email.mail1.onesignal.os.tc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-store
content-type: text/html
date: Mon, 05 Jun 2023 23:00:48 GMT
location: https://onlineseedsbank.com/wp-admin/myGov1.html
x-robots-tag: noindex
x-xss-protection: 1; mode=block
content-length: 446
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
104.17.25.14 5.9 kB URL cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
IP 104.17.25.14:0
File type troff or preprocessor input, ASCII text, with very long lines (372)
Hash c495654869785bc3df60216616814ad1
0140952c64e3f2b74ef64e050f2fe86eab6624c8
36e0a7e08bee65774168528938072c536437669c1b7458ac77976ec788e4439c
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 23:00:49 GMT
content-type: text/css; charset=utf-8
content-length: 5884
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-9226"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 9428381
expires: Sat, 25 May 2024 23:00:49 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o3b0KwE41w9Zi3qbxH%2BsqAducBpNwDM%2FAugc1FAa9QVv4%2FP1TeVhq%2BspGxyWogEd8MRGDPNfqJo5%2FDlRHiSP8X1rPZ97hPpFP79h2qDh9Owx3NfUq%2BFqYx5SxM%2BuB%2BIEao4J5x10"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d2c08b4082eb4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/css-social-buttons/1.2.0/css/zocial.css
104.17.25.14200 OK 22 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/css-social-buttons/1.2.0/css/zocial.css
IP 104.17.25.14:443
Requested by https://rootxone.org/d845e/1/08d2f/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (24194)
Hash 11cb6e84ea92cdd2fb69596b7314ec7d
5a39ebdf2a4232161b55ef2d67cb20fda3dab304
bf8d41c2e2250b2f0b431531871178d57cd9af1f42bbe121c90b51fd66a1dff2
GET /ajax/libs/css-social-buttons/1.2.0/css/zocial.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 23:00:49 GMT
content-type: text/css; charset=utf-8
content-length: 21543
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e2d-ae99"
last-modified: Mon, 04 May 2020 16:09:17 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 122780
expires: Sat, 25 May 2024 23:00:49 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nSnSceUk8nmaGBR54NzlaqYEbCkKnaiUK4wufj61TZ40dlg55aP4mvusy9f6LLu1FAzQmKP%2BVYlQXLHNIXrVLTpJXnlnm7rSdryBM7nqm%2FXXuaKIuWBnELEK%2F0jklv%2FMIs5dTNJQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d2c08b41831b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash f6e0fad54cb828605d258b3a3fc3494d
1998f119ae42787f25cac22435e05b7d8a7ecbcc
fdde19b20684979988b4db7567fdb883ef8cd0438f4c4ef053bdd058011f1dbc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 23:00:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash e658f45faae0edd26f5908c922167f73
33e4e65ccf9cb9b15a7a9f5fd0083f1cebfa7064
5cc8bb25c78320b6cafdc4a6a017081a2c953cb86e1a1dc45c8f8811798adbc5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 23:00:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash f6e0fad54cb828605d258b3a3fc3494d
1998f119ae42787f25cac22435e05b7d8a7ecbcc
fdde19b20684979988b4db7567fdb883ef8cd0438f4c4ef053bdd058011f1dbc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Jun 2023 23:00:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rootxone.org/d845e/sourcexone/xonecss/stepbar.css
104.21.56.166 78 kB URL rootxone.org/d845e/sourcexone/xonecss/stepbar.css
IP 104.21.56.166:0
File type gzip compressed data, max compression, from Unix\012- data
Hash ac426abbe3ef051861a69a9f40f8634b
61d038717343f0d45f04e19e1d5557bbecaf9549
3f912d00d067fdf122ed82704dc19557342d6302d354b34caf90b5d4eea0a65e
GET /d845e/sourcexone/xonecss/stepbar.css HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/d845e/1/08d2f/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 05 Jun 2023 23:00:49 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 31 May 2023 05:18:45 GMT
etag: W/"db8-5fcf67435a273"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 395
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rTjI04DxSul1rfmWfufkFq%2F%2FgIXVivX%2BhrdDC3fygfVDWSTL6pQNHdmH3sELE%2BLOp7ZKnLd4%2F0XRVEM6vS6N%2Fq%2FA%2FgmzXVUL0JPAq5CjvvwWp6EBE0aR2o9Z2bJSQVw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2c08b3e80ab4ee-OSL
alt-svc: h3=":443"; ma=86400
rootxone.org/d845e/1/08d2f/
104.21.56.166200 OK 4.8 kB URL GET HTTP/3 rootxone.org/d845e/1/08d2f/
IP 104.21.56.166:443
Requested by https://onlineseedsbank.com/wp-admin/myGov1.html
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
File type gzip compressed data, from Unix\012- data
Hash cc3f96cd12046e6b6544c850de93893a
f6c17d12fcaf87e01a1d28763170445bdd65cf43
85d37b11353765dc9507efbec731c9e7b4492df738d8b149b14030eb5e147612
GET /d845e/1/08d2f/ HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onlineseedsbank.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 05 Jun 2023 23:00:49 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.1.14RC1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TrM0Ur2kB5Kjahccfx3%2Bd22l1z19oN85x2nh3p3%2BLhjrhYCeWV3TGoQ8qrB0JExwfH%2B7p079SBerpY8xBenDmHMMK1I6tlOMeihvJC5A6DXsP%2B%2FG5NansPqW%2BMbz66k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2c08b24e8fb4ee-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
rootxone.org/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
104.21.56.166200 OK 3.9 kB URL GET HTTP/3 rootxone.org/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP 104.21.56.166:443
Requested by https://rootxone.org/d845e/1/08d2f/
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
File type ASCII text, with very long lines (12331)
Hash 88a769d2fe35899fd45a332a0a032cc0
514c6c1d8475d17e412849a4c90159517d0fa10a
ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/d845e/1/08d2f/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 05 Jun 2023 23:00:49 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2023 15:21:01 GMT
etag: W/"6476145d-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vF6lHXzOpe27BUaghJ9zXDIDgK1HTXqNmnakACcCZ4tZ7UDRYZxbCd9s5HtI3XQSAaP0ovPUZV9%2F6nPvnPl7715cl3VYnLmTcchTFtTUxkEXZZf0LoqG3M1r0Tabd3U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d2c08b3f81cb4ee-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 07 Jun 2023 23:00:49 GMT
cache-control: max-age=172800, public
content-encoding: gzip
rootxone.org/d845e/sourcexone/xonecss/style.css
104.21.56.166200 OK 18 kB URL GET HTTP/3 rootxone.org/d845e/sourcexone/xonecss/style.css
IP 104.21.56.166:443
Requested by https://rootxone.org/d845e/1/08d2f/
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
File type ASCII text, with very long lines (618)
Hash 80c528a617b78c6f3e5ce8878d30a042
8ee753b43bc1b75c0587093d8fce961a8c2029d5
a34fb4112dac269525802264dfe989c4bfce795635799fcc2f8726c0e2fb496f
GET /d845e/sourcexone/xonecss/style.css HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/d845e/1/08d2f/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 Jun 2023 23:00:49 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 31 May 2023 05:18:45 GMT
etag: W/"4771-5fcf674359e8b"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 395
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B%2FYiPnLeXw%2BAL%2Bw%2B5h1LqMcx8lyMwA4Ph738B7F6MzR15jhhxUKxU7AeBHjSXdxHLqntBiVKoDWmgun%2FjocThfpg9mOh%2Byy0QSPQOYB2usMgvQTNRIqwVryx0%2BvgfgA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2c08b3e808b4ee-OSL
alt-svc: h3=":443"; ma=86400
rootxone.org/d845e/index.php
104.21.56.166302 Found 17 kB URL GET HTTP/2 rootxone.org/d845e/index.php
IP 104.21.56.166:443
Requested by https://onlineseedsbank.com/wp-admin/myGov1.html
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d845e/index.php HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://onlineseedsbank.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 05 Jun 2023 23:00:49 GMT
content-type: text/html; charset=UTF-8
location: ./1/index.php
x-powered-by: PHP/8.1.14RC1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IYVEoBZPdofmiqsgWCxUpM3xjQsf%2BjqfcosloSjqlx4THfBHY15D%2BTgNQc%2FrGpMH%2BdOC1kdvmjIgFegxIwn7CuMroaExr6E0KTKg6rgVvIH4g1G%2Fmr9K04EYTitjDyk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2c08afba78b512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:400,100,300
142.250.74.74200 OK 2.2 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Lato:400,100,300
IP 142.250.74.74:443
Requested by https://rootxone.org/d845e/1/08d2f/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint3F:94:23:08:F7:DB:8B:36:93:90:93:F4:9E:46:A6:6A:93:75:15:C0
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (2212), with no line terminators
Hash c1816f74999d0b496675b0880007b37b
8032f871c7165040f75ca71e40ca4ecb875b5f82
50c975ce65465a31e9128ee32073cf78d6fe9b07dea491b15f11c56081ffee7e
GET /css?family=Lato:400,100,300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Jun 2023 23:00:50 GMT
date: Mon, 05 Jun 2023 23:00:50 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rootxone.org/d845e/1/index.php
104.21.56.166302 Found 17 kB URL GET HTTP/2 rootxone.org/d845e/1/index.php
IP 104.21.56.166:443
Requested by https://onlineseedsbank.com/wp-admin/myGov1.html
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d845e/1/index.php HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onlineseedsbank.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 05 Jun 2023 23:00:49 GMT
content-type: text/html; charset=UTF-8
location: https://rootxone.org/d845e/1/08d2f/
x-powered-by: PHP/8.1.14RC1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FlJx59ROR0dQJSBHigs65Eb93lRRXI8emWT0j%2FnuhLRqDvOSskc5FtwPbYMsbrT0KcBlB%2BBY056Ogll1v4zBA6zgTflo5DekjlTlJjswTQZYd9OMY%2Bb12lKwAOJfNZQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2c08b01adbb512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
rootxone.me/pixel/wz3xIB32v8DPajHZ
103.224.212.221302 Found 0 B URL GET HTTP/1.1 rootxone.me/pixel/wz3xIB32v8DPajHZ
IP 103.224.212.221:443
ASN #133618 Trellian Pty. Limited
Requested by https://rootxone.org/d845e/1/08d2f/
Certificate IssuerLet's Encrypt
Subject123phim.info
FingerprintB4:31:19:96:2A:FE:CF:4C:8E:77:CB:EC:B2:E3:4D:5A:0C:D1:27:9B
ValidityThu, 11 May 2023 14:33:32 GMT - Wed, 09 Aug 2023 14:33:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/wz3xIB32v8DPajHZ HTTP/1.1
Host: rootxone.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Mon, 05 Jun 2023 23:00:50 GMT
server: Apache
set-cookie: __tad=1686006050.8062811; expires=Thu, 02-Jun-2033 23:00:50 GMT; Max-Age=315360000
location: http://ww25.rootxone.me/pixel/wz3xIB32v8DPajHZ?subid1=20230606-0900-5086-a0a3-74d956057ada
content-length: 0
content-type: text/html; charset=UTF-8
connection: close
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
104.17.25.14200 OK 77 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 104.17.25.14:443
Requested by https://rootxone.org/d845e/1/08d2f/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rootxone.org
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 05 Jun 2023 23:00:50 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1716873
expires: Sat, 25 May 2024 23:00:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8qcrN44LHWKMMJLqZvx0KxLXT2zioc5M9tcmn2jjEc%2BiP50lo70nXpEUk5OyqZjimYtrG7d5Fmq37EMmNiZLQ%2Beyj8n44atHT5Gi4%2FnUSygYHy2H4awoK6vroI13j8ZE8%2Fr23mU9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d2c08b5a8fdb4f7-OSL
alt-svc: h3=":443"; ma=86400
onlineseedsbank.com/wp-admin/myGov1.html
104.21.31.186200 OK 2.8 MB URL User Request GET HTTP/2 onlineseedsbank.com/wp-admin/myGov1.html
IP 104.21.31.186:443
Certificate IssuerGoogle Trust Services LLC
Subjectonlineseedsbank.com
Fingerprint05:44:19:F6:E7:A2:13:38:16:96:60:26:0B:05:30:CD:D2:07:96:88
ValidityWed, 17 May 2023 16:46:59 GMT - Tue, 15 Aug 2023 16:46:58 GMT
Size 2.8 MB (2822453 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert openphish Australian Government
quad9 Sinkholed
GET /wp-admin/myGov1.html HTTP/1.1
Host: onlineseedsbank.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 23:00:48 GMT
content-type: text/html
cf-ray: 7d2c08a9bdafb4f9-OSL
cf-cache-status: BYPASS
last-modified: Mon, 05 Jun 2023 04:55:53 GMT
vary: Accept-Encoding
cf-apo-via: origin,no-cache
x-powered-by: EasyEngine v4.0.14
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zHlPUCr6LN2DUQJE16jfGpA0POS75KE%2FNpA3bT%2FV22i5nnWaXrLblzLVcZD4jTxp%2BcncgXxj0yE3ZUtSrb6CX7zo5avbeLwfqX8ShN32fCn7h%2Bux5k4isRCocnLuUZKYEmN3lmQ4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2