IP 38.11.163.195:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: jhlnfb.irish
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 302 Temporary Redirect
Connection: close
Content-Type: text/html;charset=utf-8
Content-Length: 442
|
| GET 38.11.163.195:8818/dT0vaHNpcmklMkViZm5saGovLzpwdHRoJnA9Lw==.js | 38.11.163.195 | 200 OK | 2.1 kB |
URL GET 38.11.163.195:8818/dT0vaHNpcmklMkViZm5saGovLzpwdHRoJnA9Lw==.js IP38.11.163.195:8818
File typeHTML document, Unicode text, UTF-8 text Hash0afc9b14158ff76310806fabd675f6a9 a71b6b7e2e6f6b3dd430612e02fe9d8d4408d633 cb434a76618617d9ad17a2bd24508964d377780ddfd8c598f378b5bc68344eaf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /dT0vaHNpcmklMkViZm5saGovLzpwdHRoJnA9Lw==.js HTTP/1.1
Host: 38.11.163.195:8818
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://jhlnfb.irish/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Apr 2025 09:37:07 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: close
|
| GET jhlnfb.irish/favicon.ico | 38.11.163.195 | 302 Temporary Redirect | 442 B |
IP38.11.163.195:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: jhlnfb.irish
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://jhlnfb.irish/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.0 302 Temporary Redirect
Connection: close
Content-Type: text/html;charset=utf-8
Content-Length: 442
|
IP 0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: jhlnfb.irish
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|