| haydennick.morgankennedy.shop/theme.css |  104.21.56.39 | 200 OK | 20 kB |
URL GET HTTP/3haydennick.morgankennedy.shop/theme.css IP104.21.56.39:443
Requested byhttps://haydennick.morgankennedy.shop/ CertificateIssuerLet's Encrypt Subjectmorgankennedy.shop Fingerprint23:32:61:38:27:8D:6F:65:7D:2D:AE:2D:B2:60:3C:5F:04:40:7F:7C ValidityTue, 02 Apr 2024 02:55:02 GMT - Mon, 01 Jul 2024 02:55:01 GMT
File typeHTML document, Unicode text, UTF-8 text Hashcc966a2c1c5b7beb0d5219bb0e1b7da9 f60312b78565e8b8936677152ff95bd8e0a8b459 0f371210142e1c0071595621fd43dfb6e5ea1b191672f8444ffca717ddcfb326
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme.css HTTP/1.1
Host: haydennick.morgankennedy.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://haydennick.morgankennedy.shop/
Cookie: PHPSESSID=c33876b612cbee6e2f487fa9f64e3d4b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 19:00:23 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
execution-time: 0.0065441132
trace_id: 6745B8EF-AB51-EFF7-7D40-879C4C1C8C99
cf-cache-status: BYPASS
set-cookie: PHPSESSID=c33876b612cbee6e2f487fa9f64e3d4b; path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6z87A2KLI411WpCMmKoDpeA769xU9LYLgEMADQMHv7JtV687qiiiBRmvbMrIrLRHNIu1oueMgkc6EavIcfZyCeXBDaOpx3r70L9%2BxzMDi%2FTgIQRfx2FroloinrBYPNizYZwZOnPlL8BqE61XIIeuzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881c2bfd0b1d7127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
| haydennick.morgankennedy.shop/ | 104.21.56.39 | 200 OK | 28 kB |
URL User Request GET HTTP/2haydennick.morgankennedy.shop/ IP104.21.56.39:443
CertificateIssuerLet's Encrypt Subjectmorgankennedy.shop Fingerprint23:32:61:38:27:8D:6F:65:7D:2D:AE:2D:B2:60:3C:5F:04:40:7F:7C ValidityTue, 02 Apr 2024 02:55:02 GMT - Mon, 01 Jul 2024 02:55:01 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: haydennick.morgankennedy.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 19:00:23 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
execution-time: 0.0069150925
trace_id: 6780BA89-0EB9-F980-12D8-621E6A03D714
set-cookie: PHPSESSID=c33876b612cbee6e2f487fa9f64e3d4b; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fUkKdM7nG52RlgfSLtMl8GDwcv2eDFA8kWgfciv9nwteb0PI7TY04mfuAykjWirv2wqjydrcEFc%2FjXDB0xKQuaZt%2FBNJ9GWJgv4MsYZezh5g%2FUZbaRmgBHEyLdDk386ymzhUOYI1uXk9pXq7PH28Gw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881c2bf98d4256bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
| haydennick.morgankennedy.shop/favicon.ico | 104.21.56.39 | 200 OK | 70 B |
URL GET HTTP/3haydennick.morgankennedy.shop/favicon.ico IP104.21.56.39:443
Requested byhttps://haydennick.morgankennedy.shop/ CertificateIssuerLet's Encrypt Subjectmorgankennedy.shop Fingerprint23:32:61:38:27:8D:6F:65:7D:2D:AE:2D:B2:60:3C:5F:04:40:7F:7C ValidityTue, 02 Apr 2024 02:55:02 GMT - Mon, 01 Jul 2024 02:55:01 GMT
File typeMS Windows icon resource - 1 icon, 1x1, 32 bits/pixel Hash735ddbd8a50494b34bbed5fe68727c42 ab6c96f55f6f9383c8c73f2838d07398529a4b8f 23d7bcc5e68b94d6e03382ac1d9a14ab2d0134772682ae0dd1b2e8b4c85afc51
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: haydennick.morgankennedy.shop
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://haydennick.morgankennedy.shop/
Cookie: PHPSESSID=c33876b612cbee6e2f487fa9f64e3d4b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 19:00:23 GMT
content-type: image/x-icon
last-modified: Sat, 12 Feb 2022 05:23:27 GMT
etag: W/"6207444f-46"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q%2BxDSbm1IUw5rftQRt1RN4BCKSjg%2F%2BOVyzwBw%2FBwnBixyhYCaZuaBWGyv3SOOVP4%2FsI13XWLCoNTVFy0mbKc2ME5oCbEUPoEdUQ6cAP6Czh5iZSjWmfqflqNtq5Jkc8hX5shmhZrHvwNb4Sko92FNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881c2bff8dcf7127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|