code.jquery.com/jquery-3.5.1.min.js
69.16.175.10200 OK 31 kB URL GET HTTP/2 code.jquery.com/jquery-3.5.1.min.js
IP 69.16.175.10:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerSectigo Limited
Subject*.jquery.com
Fingerprint64:50:4C:BB:DF:F3:1D:70:CC:5D:9E:B7:BE:80:91:84:03:C1:D1:83
ValidityWed, 03 Aug 2022 00:00:00 GMT - Fri, 14 Jul 2023 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /jquery-3.5.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://baneasaparc.ro
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 May 2023 12:13:17 GMT
content-encoding: gzip
content-length: 30879
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d84"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1683807197.dop003.sk1.t,1683807197.cds206.sk1.hn,1683807197.cds208.sk1.c
X-Firefox-Spdy: h2
baneasaparc.ro/dist/dhl.css
89.36.25.41200 OK 360 kB URL GET HTTP/2 baneasaparc.ro/dist/dhl.css
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
File type gzip compressed data, from Unix\012- data
Size 360 kB (359667 bytes)
Hash 547f52fc020ab592f3bf7b86fe2a54d5
0b5cbcb842fdec3a86cccd945522d201d54b8506
d991870992ce04238675c4a2d04238e61fab89d10c7df6a61167f88546b6a606
GET /dist/dhl.css HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/home.html/autoload.html?c=info
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:17 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Thu, 19 Jan 2023 17:42:44 GMT
expires: Sat, 10 Jun 2023 12:13:17 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
baneasaparc.ro/dist/fonts/iconfont-e7bece496cd0e6d60e456bc2b48c9446.woff
89.36.25.41200 OK 9.3 kB URL GET HTTP/2 baneasaparc.ro/dist/fonts/iconfont-e7bece496cd0e6d60e456bc2b48c9446.woff
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
File type Web Open Font Format, TrueType, length 9316, version 1.0\012- data
Hash 9355df62a665ef9249036bbccad8c54c
6b7779a10187a1a7473f604fbe3db96350868c6a
6d051536af97fbd33fae0683a1b6ce3749757ab43c8ee8c89295755fd4595807
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /dist/fonts/iconfont-e7bece496cd0e6d60e456bc2b48c9446.woff HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/dist/dhl.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:18 GMT
content-type: font/woff
content-length: 9316
last-modified: Mon, 25 Jul 2022 17:59:54 GMT
expires: Mon, 10 Jul 2023 12:13:18 GMT
cache-control: max-age=5184000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
accept-ranges: bytes
X-Firefox-Spdy: h2
baneasaparc.ro/dist/fonts/default-815fcbb4d2c57901701125d768f09d67.woff
89.36.25.41200 OK 41 kB URL GET HTTP/2 baneasaparc.ro/dist/fonts/default-815fcbb4d2c57901701125d768f09d67.woff
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
File type Web Open Font Format, TrueType, length 41328, version 1.66\012- data
Hash e39bd2e2657ce5dd6f9c33df18529233
6db81ebb91bfa67cef8f2f870f03046150568799
19d0bda83ecbc986620468801adf000c77c3c38398650903c63fac8dcbac4383
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /dist/fonts/default-815fcbb4d2c57901701125d768f09d67.woff HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/dist/dhl.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:18 GMT
content-type: font/woff
content-length: 41328
last-modified: Mon, 25 Jul 2022 17:59:54 GMT
expires: Mon, 10 Jul 2023 12:13:18 GMT
cache-control: max-age=5184000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
accept-ranges: bytes
X-Firefox-Spdy: h2
baneasaparc.ro/dist/fonts/default-3e828e80f6e985c352eba4474518978d.woff
89.36.25.41200 OK 44 kB URL GET HTTP/2 baneasaparc.ro/dist/fonts/default-3e828e80f6e985c352eba4474518978d.woff
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
File type Web Open Font Format, TrueType, length 44260, version 1.66\012- data
Hash 4a350e02a03ac62e72e9ea575b31ce84
d47b03b96b6e7034a1473a293bb594e597a41dc2
87c40e3961e21f759770615ae67568a3de3ec6e0735f1238a6aae062f4ea15d5
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /dist/fonts/default-3e828e80f6e985c352eba4474518978d.woff HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/dist/dhl.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:18 GMT
content-type: font/woff
content-length: 44260
last-modified: Mon, 25 Jul 2022 17:59:54 GMT
expires: Mon, 10 Jul 2023 12:13:18 GMT
cache-control: max-age=5184000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
accept-ranges: bytes
X-Firefox-Spdy: h2
baneasaparc.ro/dist/fonts/default-5a6dd86f272b304a8b83f7df61f11c2f.woff
89.36.25.41200 OK 41 kB URL GET HTTP/2 baneasaparc.ro/dist/fonts/default-5a6dd86f272b304a8b83f7df61f11c2f.woff
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
File type Web Open Font Format, TrueType, length 41352, version 1.66\012- data
Hash 4e23ecf085132857bdb54b4da7373151
a50215c22a591536b21e509100d1707c6886ffd6
b033eff45e6e8ecd5c5bccd8ef9a96c4dc37325adc64c5aed8b1d909b24c4eb4
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /dist/fonts/default-5a6dd86f272b304a8b83f7df61f11c2f.woff HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/dist/dhl.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:20 GMT
content-type: font/woff
content-length: 41352
last-modified: Mon, 25 Jul 2022 17:59:54 GMT
expires: Mon, 10 Jul 2023 12:13:20 GMT
cache-control: max-age=5184000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
accept-ranges: bytes
X-Firefox-Spdy: h2
baneasaparc.ro/home.html/autoload.html?c=info
89.36.25.41200 OK 8.3 kB URL User Request GET HTTP/2 baneasaparc.ro/home.html/autoload.html?c=info
IP 89.36.25.41:443
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8859), with no line terminators
Hash 0b2d876b7ce81c7f8723020f525a83c7
f9f99ec1f940a172ba18d29f83082a686636f86d
081a2575c952f4e3e4b532c9cc8ad2703550dd57d1fb97c48eed4199e4df4020
GET /home.html/autoload.html?c=info HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:17 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Sat, 04 Feb 2023 14:38:22 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
baneasaparc.ro/dist/fonts/default-274a65bae9742377aaf010bb1a7de971.woff
89.36.25.41200 OK 41 kB URL GET HTTP/2 baneasaparc.ro/dist/fonts/default-274a65bae9742377aaf010bb1a7de971.woff
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
File type Web Open Font Format, TrueType, length 41084, version 1.66\012- data
Hash 03f859bf58e4d37841070de34be7d978
3436d4fa17e7ee470c3d62b08787cfa7de408408
5af5c3746b03792640b9cafdabddfb2c5407f72988e128541a88fa439607d940
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /dist/fonts/default-274a65bae9742377aaf010bb1a7de971.woff HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/dist/dhl.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:18 GMT
content-type: font/woff
content-length: 41084
last-modified: Mon, 25 Jul 2022 17:59:54 GMT
expires: Mon, 10 Jul 2023 12:13:18 GMT
cache-control: max-age=5184000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
accept-ranges: bytes
X-Firefox-Spdy: h2
baneasaparc.ro/dist/jquery.validate.min.js
89.36.25.41200 OK 24 kB URL GET HTTP/2 baneasaparc.ro/dist/jquery.validate.min.js
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /dist/jquery.validate.min.js HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/home.html/autoload.html?c=info
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:20 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 25 Jul 2022 17:59:54 GMT
expires: Sat, 10 Jun 2023 12:13:20 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
baneasaparc.ro/dist/js.cookie.js
89.36.25.41200 OK 3.4 kB URL GET HTTP/2 baneasaparc.ro/dist/js.cookie.js
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
File type ASCII text, with very long lines (3973), with no line terminators
Hash daf4a2d058146ce02c558d43889147bf
6ddaadd7e15d3ac47b111b3f369ac7f907399304
167092a7a1343dc3c48e3334cbcb2072d5b4b124131bef13f5d138f4c39dcf0c
GET /dist/js.cookie.js HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/home.html/autoload.html?c=info
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:17 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 25 Jul 2022 17:59:54 GMT
expires: Sat, 10 Jun 2023 12:13:17 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
baneasaparc.ro/dist/footer.php
89.36.25.41200 OK 15 kB URL GET HTTP/2 baneasaparc.ro/dist/footer.php
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /dist/footer.php HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/home.html/autoload.html?c=info
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:18 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
baneasaparc.ro/dist/info.php
89.36.25.41200 OK 12 kB URL GET HTTP/2 baneasaparc.ro/dist/info.php
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /dist/info.php HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/home.html/autoload.html?c=info
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:20 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
baneasaparc.ro/dist/jquery-lang.js
89.36.25.41200 OK 28 kB URL GET HTTP/2 baneasaparc.ro/dist/jquery-lang.js
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
Hash 1062fb1e2ffb1b8b6c596da423b9aef6
e0f54f2cdfce6d3861506744d6c52fbc23f612e9
67829a15eafd08a53376a78dc3574724e4bf87455bdc7b52c9b01828df272ca2
GET /dist/jquery-lang.js HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/home.html/autoload.html?c=info
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:17 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Sat, 21 Jan 2023 16:03:52 GMT
expires: Sat, 10 Jun 2023 12:13:17 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
baneasaparc.ro/dist/load.php
89.36.25.41200 OK 4.8 kB URL GET HTTP/2 baneasaparc.ro/dist/load.php
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
File type HTML document, ASCII text, with very long lines (5322), with no line terminators
Hash 974f28f6916629f737253ab4efd66b43
281839b19bd43e268e347019e2631b0e7306a51c
438900e97f779cfc0a0c24952e6748e96277d8759a68afa3925fda85ec4e879b
GET /dist/load.php HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/home.html/autoload.html?c=info
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:18 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
baneasaparc.ro/dist/favicon.ico
89.36.25.41200 OK 1.2 kB URL GET HTTP/2 baneasaparc.ro/dist/favicon.ico
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash d8106bf3a1d00ab43b01e6e3c92500eb
202b5e8654ab1b28351378293bca3b9d844cc29b
9ada5709e264c31b04a05bd85448a9bd5e91925e8d83df5cef0762ec97cc283e
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /dist/favicon.ico HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/home.html/autoload.html?c=info
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:18 GMT
content-type: image/x-icon
vary: Accept-Encoding
last-modified: Mon, 25 Jul 2022 17:59:54 GMT
expires: Mon, 10 Jul 2023 12:13:18 GMT
cache-control: max-age=5184000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
baneasaparc.ro/dist/floating-label.js
89.36.25.41200 OK 3.4 kB URL GET HTTP/2 baneasaparc.ro/dist/floating-label.js
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
File type ASCII text, with very long lines (3571), with no line terminators
Hash 2580a5d1222cd5a2533108b154cc5160
58bc7f540b9d460f50108865c274f0e91143e5b6
2ae3fc26739fc4341c90aa2223e075158e1dab5ee1806d6c0fef0dd788865777
GET /dist/floating-label.js HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/home.html/autoload.html?c=info
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:20 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 25 Jul 2022 17:59:54 GMT
expires: Sat, 10 Jun 2023 12:13:20 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: STALE
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
baneasaparc.ro/home.html/autoload.html?c=info../dist/langpack/en.json
89.36.25.41200 OK 8.3 kB URL GET HTTP/2 baneasaparc.ro/home.html/autoload.html?c=info../dist/langpack/en.json
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8859), with no line terminators
Hash 0b2d876b7ce81c7f8723020f525a83c7
f9f99ec1f940a172ba18d29f83082a686636f86d
081a2575c952f4e3e4b532c9cc8ad2703550dd57d1fb97c48eed4199e4df4020
GET /home.html/autoload.html?c=info../dist/langpack/en.json HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/home.html/autoload.html?c=info
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:20 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Sat, 04 Feb 2023 14:38:22 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
baneasaparc.ro/dist/head.php
89.36.25.41200 OK 11 kB URL GET HTTP/2 baneasaparc.ro/dist/head.php
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /dist/head.php HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/home.html/autoload.html?c=info
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:18 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2
baneasaparc.ro/home.html/autoload.html?c=info../dist/langpack/en.json
89.36.25.41200 OK 8.3 kB URL GET HTTP/2 baneasaparc.ro/home.html/autoload.html?c=info../dist/langpack/en.json
IP 89.36.25.41:443
Requested by https://baneasaparc.ro/home.html/autoload.html?c=info
Certificate IssuerLet's Encrypt
Subject*.baneasaparc.ro
Fingerprint09:0A:F3:F1:08:65:A9:73:3B:78:67:BF:58:B8:DE:DD:07:F7:D9:90
ValidityFri, 24 Mar 2023 03:36:14 GMT - Thu, 22 Jun 2023 03:36:13 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8859), with no line terminators
Hash 0b2d876b7ce81c7f8723020f525a83c7
f9f99ec1f940a172ba18d29f83082a686636f86d
081a2575c952f4e3e4b532c9cc8ad2703550dd57d1fb97c48eed4199e4df4020
GET /home.html/autoload.html?c=info../dist/langpack/en.json HTTP/1.1
Host: baneasaparc.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://baneasaparc.ro/home.html/autoload.html?c=info
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 12:13:20 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Sat, 04 Feb 2023 14:38:22 GMT
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
x-server-powered-by: Engintron
content-encoding: gzip
X-Firefox-Spdy: h2