Report - 1.winprizes401.monster/blue/index.php

Report Overview

Submitted URL
1.winprizes401.monster/blue/index.php
IP
217.69.14.8
ASN
#20473 AS-CHOOPA
Submitted
2023-05-29 00:56:59
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
shaumtol.com	258042	2021-09-14	2021-09-14	2023-05-28	1.0 kB	43 kB	139.45.197.250
1.winprizes401.monster	unknown	2023-04-22	2023-04-23	2023-05-28	4.0 kB	13 kB	217.69.14.8

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-05-29	medium	1.winprizes401.monster/blue/index.php

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	1.winprizes401.monster/blue/index.php	0 B	2023-03-07	2024-04-20
Pretty URL 1.winprizes401.monster/blue/index.php IP 217.69.14.8 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-20 03:09:56 Times Seen36969315 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	shaumtol.com/pfe/current/micro.tag.min.js?z=5765224&sw=/sw-check-permissions-5c340.js	42 kB	2023-05-11	2023-05-29
Pretty URL shaumtol.com/pfe/current/micro.tag.min.js?z=5765224&sw=/sw-check-permissions-5c340.js IP 139.45.197.250 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-11 16:26:45 Last Seen2023-05-29 09:32:34 Times Seen6742 Hash d44fd7b96fceca8f81b472766025d0d2 237541097413baf5cd3e703413f8bc9ea538a4db b6c7c1e7fb1a437f100bdcb253df8b0468f130835fbb82c5687505a099997d16 Loading...

	1.winprizes401.monster/blue/index.php	0 B	2023-03-07	2024-04-20
Pretty URL 1.winprizes401.monster/blue/index.php IP 217.69.14.8 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-20 03:09:56 Times Seen36969315 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	1.winprizes401.monster/blue/index.php	0 B	2023-03-07	2024-04-20
Pretty URL 1.winprizes401.monster/blue/index.php IP 217.69.14.8 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-20 03:09:56 Times Seen36969315 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	1.winprizes401.monster/blue/index.php	40 B	2023-03-07	2024-03-04
Pretty URL 1.winprizes401.monster/blue/index.php IP 217.69.14.8 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:23 Last Seen2024-03-04 23:18:15 Times Seen644 Hash 50eaa2abd67b14498300e5cf7e5414aa 30100d0bd4e12d9f37a73617b9803d6af099665d 5bba57e493fc08650dc37bf183e17f40ee561f28af111dda29652557c398225b Loading...

	1.winprizes401.monster/blue/index.php	39 B	2023-03-07	2024-03-04
Pretty URL 1.winprizes401.monster/blue/index.php IP 217.69.14.8 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:23 Last Seen2024-03-04 23:18:15 Times Seen643 Hash 6fe28684aa1b4170dc67e4e7835ff8f7 a676d956dfa8379a6df3853f1214cc4f969db9d4 d016b91784284a8f3df06166c90cf316ea35305a901d71e05ee3b5c2f0baa6c8 Loading...

	1.winprizes401.monster/blue/index.php	39 B	2023-03-07	2024-03-04
Pretty URL 1.winprizes401.monster/blue/index.php IP 217.69.14.8 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:23 Last Seen2024-03-04 23:18:15 Times Seen642 Hash 6ba9e0b2b267d1d15464cd1621cbf2f2 613b71978b7100bf0be030c5485a48ec95636432 8e4a8d8f5bd6ff6b7fb2faa27ff3403c39146a2cc6bcb2d11b9e2182792e5564 Loading...

	1.winprizes401.monster/blue/index.php	39 B	2023-03-07	2024-03-04
Pretty URL 1.winprizes401.monster/blue/index.php IP 217.69.14.8 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:23 Last Seen2024-03-04 23:18:15 Times Seen639 Hash 345003b4f7904fd414be807e40fe76b0 d8cf1cd1e2b601c036afc9c7467582f144d77428 9d22ed45aee42ccd455838765e97d9162e26592480783a9b67986e0b7ae738a5 Loading...

	1.winprizes401.monster/blue/index.php	40 B	2023-03-07	2024-03-04
Pretty URL 1.winprizes401.monster/blue/index.php IP 217.69.14.8 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:23 Last Seen2024-03-04 23:18:15 Times Seen628 Hash 408e713b2f8c03864c5b323e4984c51b 41035ec5b14bda17818bcdd4a6bb701b54acd31c 06398c7056b858349137c9bf9b0d9eba70ea1b545db40f5062286f1ab9c0c89d Loading...

	1.winprizes401.monster/blue/index.php	0 B	2023-03-07	2024-04-20
Pretty URL 1.winprizes401.monster/blue/index.php IP 217.69.14.8 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-20 03:09:56 Times Seen36969315 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (10)

URL IP Response Size

shaumtol.com/zone?&pub=0&zone_id=5765224&is_mobile=false&domain=1.winprizes401.monster&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest

139.45.197.250

200 OK

0 B

URL POST HTTP/2
shaumtol.com/zone?&pub=0&zone_id=5765224&is_mobile=false&domain=1.winprizes401.monster&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest
IP
139.45.197.250:443
ASN
#9002 RETN Limited

Requested by
https://1.winprizes401.monster/blue/index.php
Certificate
IssuerLet's Encrypt
Subjectshaumtol.com
Fingerprint3D:28:65:9F:5C:2E:4A:22:3F:26:07:4D:E6:74:32:55:A2:0A:3F:DB
ValidityFri, 07 Apr 2023 05:19:52 GMT - Thu, 06 Jul 2023 05:19:51 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /zone?&pub=0&zone_id=5765224&is_mobile=false&domain=1.winprizes401.monster&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest HTTP/1.1
Host: shaumtol.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1.winprizes401.monster
DNT: 1
Connection: keep-alive
Referer: https://1.winprizes401.monster/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 00:56:43 GMT
content-length: 0
x-trace-id: c4a815e112bd378978b9cbc0c1047a41
access-control-allow-origin: https://1.winprizes401.monster
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

1.winprizes401.monster/blue/language-switch-base.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F

217.69.14.8

404 Not Found

371 B

URL GET HTTP/2
1.winprizes401.monster/blue/language-switch-base.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP
217.69.14.8:443
ASN
#20473 AS-CHOOPA

Requested by
https://1.winprizes401.monster/blue/index.php
Certificate
IssuerLet's Encrypt
Subject1.winprizes401.monster
Fingerprint95:39:2E:C0:D8:EC:74:8D:A6:F7:DE:44:A4:D6:C8:AE:5F:70:89:B7
ValidityTue, 23 May 2023 02:54:13 GMT - Mon, 21 Aug 2023 02:54:12 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (386), with no line terminators
Size
371 B (371 bytes)
Hash
ee38251b54e4a0a06ddf5b91e8338c17
7ac6a8c5c99acc67beb6ba6a44b8f004736b7c6f
f177fb69c123c5d7ab569cf61efe23fcdf9c4149018640699fd87821ea751b74

HTTP Headers

GET /blue/language-switch-base.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: 1.winprizes401.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.winprizes401.monster/blue/index.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Mon, 29 May 2023 00:56:43 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2

shaumtol.com/pfe/current/micro.tag.min.js?z=5765224&sw=/sw-check-permissions-5c340.js

139.45.197.250

200 OK

42 kB

URL GET HTTP/2
shaumtol.com/pfe/current/micro.tag.min.js?z=5765224&sw=/sw-check-permissions-5c340.js
IP
139.45.197.250:443
ASN
#9002 RETN Limited

Requested by
https://1.winprizes401.monster/blue/index.php
Certificate
IssuerLet's Encrypt
Subjectshaumtol.com
Fingerprint3D:28:65:9F:5C:2E:4A:22:3F:26:07:4D:E6:74:32:55:A2:0A:3F:DB
ValidityFri, 07 Apr 2023 05:19:52 GMT - Thu, 06 Jul 2023 05:19:51 GMT

File type
C source, ASCII text, with very long lines (41979), with no line terminators
Size
42 kB (41979 bytes)
Hash
d44fd7b96fceca8f81b472766025d0d2
237541097413baf5cd3e703413f8bc9ea538a4db
b6c7c1e7fb1a437f100bdcb253df8b0468f130835fbb82c5687505a099997d16

HTTP Headers

GET /pfe/current/micro.tag.min.js?z=5765224&sw=/sw-check-permissions-5c340.js HTTP/1.1
Host: shaumtol.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.winprizes401.monster/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 00:56:43 GMT
content-type: application/javascript
last-modified: Thu, 11 May 2023 14:20:13 GMT
etag: W/"645cf99d-a3fb"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

1.winprizes401.monster/favicon.ico

217.69.14.8

404 Not Found

371 B

URL GET HTTP/2
1.winprizes401.monster/favicon.ico
IP
217.69.14.8:443
ASN
#20473 AS-CHOOPA

Requested by
https://1.winprizes401.monster/blue/index.php
Certificate
IssuerLet's Encrypt
Subject1.winprizes401.monster
Fingerprint95:39:2E:C0:D8:EC:74:8D:A6:F7:DE:44:A4:D6:C8:AE:5F:70:89:B7
ValidityTue, 23 May 2023 02:54:13 GMT - Mon, 21 Aug 2023 02:54:12 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (386), with no line terminators
Size
371 B (371 bytes)
Hash
ee38251b54e4a0a06ddf5b91e8338c17
7ac6a8c5c99acc67beb6ba6a44b8f004736b7c6f
f177fb69c123c5d7ab569cf61efe23fcdf9c4149018640699fd87821ea751b74

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 1.winprizes401.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.winprizes401.monster/blue/index.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Mon, 29 May 2023 00:56:43 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2

1.winprizes401.monster/sw-check-permissions-5c340.js

217.69.14.8

200 OK

566 B

URL GET HTTP/2
1.winprizes401.monster/sw-check-permissions-5c340.js
IP
217.69.14.8:443
ASN
#20473 AS-CHOOPA

Requested by
https://1.winprizes401.monster/blue/index.php
Certificate
IssuerLet's Encrypt
Subject1.winprizes401.monster
Fingerprint95:39:2E:C0:D8:EC:74:8D:A6:F7:DE:44:A4:D6:C8:AE:5F:70:89:B7
ValidityTue, 23 May 2023 02:54:13 GMT - Mon, 21 Aug 2023 02:54:12 GMT

File type
ASCII text, with very long lines (605), with no line terminators
Size
566 B (566 bytes)
Hash
264491bb75f2dbce492df085f056e847
7f030be8d78f8ccb4ba4ccd5f5ffb458e80bafdb
b3faf3f3244bbb9cbcf50b6c12d19a161ac07fc8fbef4420951b6a1df760b428

HTTP Headers

GET /sw-check-permissions-5c340.js HTTP/1.1
Host: 1.winprizes401.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://1.winprizes401.monster/blue/index.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 00:56:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 24 May 2023 00:49:21 GMT
etag: W/"236-5fc65dfe5fe7a"
content-encoding: br
X-Firefox-Spdy: h2

1.winprizes401.monster/blue/index.php

217.69.14.8

200 OK

9.0 kB

URL User Request GET HTTP/2
1.winprizes401.monster/blue/index.php
IP
217.69.14.8:443
ASN
#20473 AS-CHOOPA

Certificate
IssuerLet's Encrypt
Subject1.winprizes401.monster
Fingerprint95:39:2E:C0:D8:EC:74:8D:A6:F7:DE:44:A4:D6:C8:AE:5F:70:89:B7
ValidityTue, 23 May 2023 02:54:13 GMT - Mon, 21 Aug 2023 02:54:12 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9173), with no line terminators
Size
9.0 kB (9036 bytes)
Hash
ff3fc750e7beb7670b12bc42e63aeeb0
cace11e6dc814b891d88e5a458c2eaf600d0dd44
c4106f9e3feeb3289d25ed16d60109e8cb5a9f7784a0197ce465d3221d666522

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /blue/index.php HTTP/1.1
Host: 1.winprizes401.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 00:56:42 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2

1.winprizes401.monster/blue/jquery-1.11.3.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F

217.69.14.8

404 Not Found

371 B

URL GET HTTP/2
1.winprizes401.monster/blue/jquery-1.11.3.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP
217.69.14.8:443
ASN
#20473 AS-CHOOPA

Requested by
https://1.winprizes401.monster/blue/index.php
Certificate
IssuerLet's Encrypt
Subject1.winprizes401.monster
Fingerprint95:39:2E:C0:D8:EC:74:8D:A6:F7:DE:44:A4:D6:C8:AE:5F:70:89:B7
ValidityTue, 23 May 2023 02:54:13 GMT - Mon, 21 Aug 2023 02:54:12 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (386), with no line terminators
Size
371 B (371 bytes)
Hash
ee38251b54e4a0a06ddf5b91e8338c17
7ac6a8c5c99acc67beb6ba6a44b8f004736b7c6f
f177fb69c123c5d7ab569cf61efe23fcdf9c4149018640699fd87821ea751b74

HTTP Headers

GET /blue/jquery-1.11.3.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: 1.winprizes401.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.winprizes401.monster/blue/index.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Mon, 29 May 2023 00:56:43 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2

1.winprizes401.monster/blue/language-switch-base.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F

217.69.14.8

404 Not Found

371 B

URL GET HTTP/2
1.winprizes401.monster/blue/language-switch-base.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP
217.69.14.8:443
ASN
#20473 AS-CHOOPA

Requested by
https://1.winprizes401.monster/blue/index.php
Certificate
IssuerLet's Encrypt
Subject1.winprizes401.monster
Fingerprint95:39:2E:C0:D8:EC:74:8D:A6:F7:DE:44:A4:D6:C8:AE:5F:70:89:B7
ValidityTue, 23 May 2023 02:54:13 GMT - Mon, 21 Aug 2023 02:54:12 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (386), with no line terminators
Size
371 B (371 bytes)
Hash
ee38251b54e4a0a06ddf5b91e8338c17
7ac6a8c5c99acc67beb6ba6a44b8f004736b7c6f
f177fb69c123c5d7ab569cf61efe23fcdf9c4149018640699fd87821ea751b74

HTTP Headers

GET /blue/language-switch-base.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: 1.winprizes401.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.winprizes401.monster/blue/index.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Mon, 29 May 2023 00:56:43 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2

1.winprizes401.monster/blue/language-switch-set.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F

217.69.14.8

404 Not Found

371 B

URL GET HTTP/2
1.winprizes401.monster/blue/language-switch-set.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP
217.69.14.8:443
ASN
#20473 AS-CHOOPA

Requested by
https://1.winprizes401.monster/blue/index.php
Certificate
IssuerLet's Encrypt
Subject1.winprizes401.monster
Fingerprint95:39:2E:C0:D8:EC:74:8D:A6:F7:DE:44:A4:D6:C8:AE:5F:70:89:B7
ValidityTue, 23 May 2023 02:54:13 GMT - Mon, 21 Aug 2023 02:54:12 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (386), with no line terminators
Size
371 B (371 bytes)
Hash
ee38251b54e4a0a06ddf5b91e8338c17
7ac6a8c5c99acc67beb6ba6a44b8f004736b7c6f
f177fb69c123c5d7ab569cf61efe23fcdf9c4149018640699fd87821ea751b74

HTTP Headers

GET /blue/language-switch-set.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: 1.winprizes401.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.winprizes401.monster/blue/index.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Mon, 29 May 2023 00:56:43 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2

1.winprizes401.monster/blue/language-switch-set.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F

217.69.14.8

404 Not Found

371 B

URL GET HTTP/2
1.winprizes401.monster/blue/language-switch-set.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP
217.69.14.8:443
ASN
#20473 AS-CHOOPA

Requested by
https://1.winprizes401.monster/blue/index.php
Certificate
IssuerLet's Encrypt
Subject1.winprizes401.monster
Fingerprint95:39:2E:C0:D8:EC:74:8D:A6:F7:DE:44:A4:D6:C8:AE:5F:70:89:B7
ValidityTue, 23 May 2023 02:54:13 GMT - Mon, 21 Aug 2023 02:54:12 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (386), with no line terminators
Size
371 B (371 bytes)
Hash
ee38251b54e4a0a06ddf5b91e8338c17
7ac6a8c5c99acc67beb6ba6a44b8f004736b7c6f
f177fb69c123c5d7ab569cf61efe23fcdf9c4149018640699fd87821ea751b74

HTTP Headers

GET /blue/language-switch-set.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: 1.winprizes401.monster
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1.winprizes401.monster/blue/index.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Mon, 29 May 2023 00:56:43 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML