Report - f-3ru.xyz/f/VNXv/?id=57025

Report Overview

Submitted URL
f-3ru.xyz/f/VNXv/?id=57025
IP
185.178.208.130
ASN
#57724 Ddos-guard Ltd
Submitted
2023-01-04 08:46:40
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
32

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	341 B	737 B	93.184.220.29
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	34.214.236.46
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	60 kB	34.120.237.76
f-3ru.xyz	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	7.9 kB	555 kB	185.178.208.130
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.0 kB	8.0 kB	23.36.76.226
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed
2023-01-04	medium	f-3ru.xyz	Sinkholed

JavaScript (2)

	URL	Size	First Seen	Last Seen
	f-3ru.xyz/f/VNXv/?	55 B	2023-03-07	2023-03-14
Pretty URL f-3ru.xyz/f/VNXv/? IP 185.178.208.130 ASN #57724 Ddos-guard Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:52:01 Last Seen2023-03-14 11:06:48 Times Seen1 Hash f66781043004313994a2f4c793a2ddb8 401b6581a196070b7d26af66a110fcd27e3149e8 1d3697f780043edfbdded276fa17422470f120c5493ceab4661f240fa84da00b Loading...

	f-3ru.xyz/f/VNXv/?	2.1 kB	2023-03-12	2023-03-12
Pretty URL f-3ru.xyz/f/VNXv/? IP 185.178.208.130 ASN #57724 Ddos-guard Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 13:56:51 Last Seen2023-03-12 13:56:51 Times Seen1 Hash 5aabc0d085a7008da10deb6e79e7a595 5b6ac6d24ed9ec251bf2ac225afff1b36e339ecd 224e7d02761702e26abf24604a8f132ac685fdf06361c37fc8f503be6875c914 Loading...

HTTP Transactions (37)

URL IP Response Size

f-3ru.xyz/f/VNXv/?id=57025

185.178.208.130

301 Moved Permanently

568 B

URL HTTP/1.1
f-3ru.xyz/f/VNXv/?id=57025
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (564), with no line terminators
Size
568 B (568 bytes)
Hash
2761b98db33884ab29711096ab315edb
8cea6e53464aea178b72e06a906205d040f14ca5
9f7a07f69d9b9a5af186a79159ccea18935ab4103128ca967e3f3f8ae45fb3ee

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/?id=57025 HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Server: ddos-guard
Date: Wed, 04 Jan 2023 08:46:29 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://f-3ru.xyz/f/VNXv/?id=57025
Content-Type: text/html; charset=utf8
Content-Length: 568

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
16803ffa29e10ee999c43eb4e4acfe92
a5ede865a388fa440f20994b43c417d403e9a493
08de8f6abb622e84d2cb6e88dee8fc7c408147ac43da9c24d4cde510ed36b53a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08DE8F6ABB622E84D2CB6E88DEE8FC7C408147AC43DA9C24D4CDE510ED36B53A"
Last-Modified: Mon, 02 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20232
Expires: Wed, 04 Jan 2023 14:23:41 GMT
Date: Wed, 04 Jan 2023 08:46:29 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b5997a492d3d161c9009d95add566733
9db765ae549ebe4aa859ca27abe365cf7f62dc4d
1ec0de25b0afd3b402c728b9c6b47c4fcf25fb989052427886841a3f52510a0e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1EC0DE25B0AFD3B402C728B9C6B47C4FCF25FB989052427886841A3F52510A0E"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8244
Expires: Wed, 04 Jan 2023 11:03:53 GMT
Date: Wed, 04 Jan 2023 08:46:29 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 04 Jan 2023 07:47:41 GMT
content-type: application/json
age: 3528
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
225d42543c0190cdb3686bf236533f4f
13a0940800fce078487372b6b3ca614dd1ab6c31
766bbe15eb1642ac39e9b71669fbb44252471c8de5adb555cd1a76db44fbe7bc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "766BBE15EB1642AC39E9B71669FBB44252471C8DE5ADB555CD1A76DB44FBE7BC"
Last-Modified: Mon, 02 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16916
Expires: Wed, 04 Jan 2023 13:28:25 GMT
Date: Wed, 04 Jan 2023 08:46:29 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: ZJf7IdjlKL8p+ITbRs15Jd8h6hfK9VMstYEW4flro7nZvbuh+rPbjLJqz8WGNQ9eI11SRpCt54c=
x-amz-request-id: Q0FVWPC2CZKBWKYK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 04 Jan 2023 07:59:02 GMT
age: 2847
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 04 Jan 2023 08:46:29 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6b760a3dc1d6dc7fb9c74297521344de
e61d2b5d8c4d8e202278e9fe0db5c20deba39e9a
2982be3ecb11b3861171e70ae18b4449e0fd307e82695b2861ff962c84b94733

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2982BE3ECB11B3861171E70AE18B4449E0FD307E82695B2861FF962C84B94733"
Last-Modified: Tue, 03 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21549
Expires: Wed, 04 Jan 2023 14:45:39 GMT
Date: Wed, 04 Jan 2023 08:46:30 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Pragma, Last-Modified, Expires, Alert, Content-Type, Retry-After, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 04 Jan 2023 08:08:11 GMT
age: 2299
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
49d6e3cef8f01f0261ff5644001d652b
03eca12234d73b1f3e8489939e4f6551914d29b2
bb680ef4d4989e9e1147da3a7d5ccc518f63108b4ed1f2367a2793db0f740f21

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3765
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 08:46:30 GMT
Last-Modified: Wed, 04 Jan 2023 07:43:45 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

34.214.236.46

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.214.236.46:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: I6G08iBzEOc19GUaoNsC0Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 5bWxWAnig+Vc3DavRrcsOAZzfgU=

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
06df5289bf33faf0b87af8ed2b337be4
0006bf96bfe53c68f3c414e3507f8a8ce9698d0a
f42cf618d71efffa435090795cd04205693063a17f8e44854845a2515aab0fdd

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F42CF618D71EFFFA435090795CD04205693063A17F8E44854845A2515AAB0FDD"
Last-Modified: Sun, 01 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9012
Expires: Wed, 04 Jan 2023 11:16:44 GMT
Date: Wed, 04 Jan 2023 08:46:32 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
06df5289bf33faf0b87af8ed2b337be4
0006bf96bfe53c68f3c414e3507f8a8ce9698d0a
f42cf618d71efffa435090795cd04205693063a17f8e44854845a2515aab0fdd

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F42CF618D71EFFFA435090795CD04205693063A17F8E44854845A2515AAB0FDD"
Last-Modified: Sun, 01 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9012
Expires: Wed, 04 Jan 2023 11:16:44 GMT
Date: Wed, 04 Jan 2023 08:46:32 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
06df5289bf33faf0b87af8ed2b337be4
0006bf96bfe53c68f3c414e3507f8a8ce9698d0a
f42cf618d71efffa435090795cd04205693063a17f8e44854845a2515aab0fdd

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F42CF618D71EFFFA435090795CD04205693063A17F8E44854845A2515AAB0FDD"
Last-Modified: Sun, 01 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9012
Expires: Wed, 04 Jan 2023 11:16:44 GMT
Date: Wed, 04 Jan 2023 08:46:32 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
06df5289bf33faf0b87af8ed2b337be4
0006bf96bfe53c68f3c414e3507f8a8ce9698d0a
f42cf618d71efffa435090795cd04205693063a17f8e44854845a2515aab0fdd

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F42CF618D71EFFFA435090795CD04205693063A17F8E44854845A2515AAB0FDD"
Last-Modified: Sun, 01 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9012
Expires: Wed, 04 Jan 2023 11:16:44 GMT
Date: Wed, 04 Jan 2023 08:46:32 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
06df5289bf33faf0b87af8ed2b337be4
0006bf96bfe53c68f3c414e3507f8a8ce9698d0a
f42cf618d71efffa435090795cd04205693063a17f8e44854845a2515aab0fdd

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F42CF618D71EFFFA435090795CD04205693063A17F8E44854845A2515AAB0FDD"
Last-Modified: Sun, 01 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9012
Expires: Wed, 04 Jan 2023 11:16:44 GMT
Date: Wed, 04 Jan 2023 08:46:32 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg

34.120.237.76

200 OK

5.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.6 kB (5578 bytes)
Hash
e832123ea0c92a446b5894e75efc86ae
bb438ca635b43819701067ef07a3d910ad29a0c7
e1b0c6cd873f304de15664f96af6b6914e13fbbfb3e2179ba43369e116446773

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5578
x-amzn-requestid: 93353c3e-1b26-424c-b4c6-0d113703edd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFvpBFGvIAMFobw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b22c9f-1d07cff31ae39320693642f0;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 01:00:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: V8_4JXT2EDqqzVxBjZK7SUVVS9Pez_EbpGP8BCMX0FrS2x2srUr2Ug==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 22:11:09 GMT
age: 38123
etag: "bb438ca635b43819701067ef07a3d910ad29a0c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68ecb4b1-cd89-45e3-ae9d-b225ccd2e379.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.6 kB (6620 bytes)
Hash
a3688d2e4e22bd8da693034332f90571
5864cbe9905bc35f9b6e708c969a342aa2fd5e4f
20caefb9ce8efe17d568f631f5d11edd76a6e6fc6d60f7a01475151ad93b118e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68ecb4b1-cd89-45e3-ae9d-b225ccd2e379.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6620
x-amzn-requestid: 448c830d-5388-4ad4-9374-7dafcba6b40e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eJ3_2F2lIAMFawQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b3d398-79b3fdba5af7be120453d42d;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 07:04:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: LBNdrwSINMazhuFz4VatYsSwc-aSkNQyspK9DiB16ivp-KuGtWkKTA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 07:31:24 GMT
age: 4508
etag: "5864cbe9905bc35f9b6e708c969a342aa2fd5e4f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b11930d-f72d-464d-8f7d-bbd0bb247c74.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (13546 bytes)
Hash
235b1a6e2b61b3068bf7a8e7a2607634
0df6f090574996e472064765c6f27b6b8e012414
6e6061581018dc0ec494631e7861cf2e44f82ac94d1b0056679555ff6dae5f8e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b11930d-f72d-464d-8f7d-bbd0bb247c74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13546
x-amzn-requestid: 6758cca7-bc06-43dd-8545-3e05aa760218
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL3p7GYjIAMFw7A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b49fd8-038317190f3df26f13c9d961;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:36:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Pmw35oCAPfvYxFowD4CDyUUrQI_V69MOGrpK55fUcvU2aoA1G19P3g==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:49:21 GMT
age: 39431
etag: "0df6f090574996e472064765c6f27b6b8e012414"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd778a59b-6bc4-4e21-bec7-38d1b87be05b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12254 bytes)
Hash
fdda07f757a2d7f87e34e168f8dcdf1d
861b6c16e2a034b9793dde7a6898cbf485c4b6e1
21a043424ce5469863e0208d1de4a1927d0ca44b9d1a6d8cc627d44dd9eadad6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd778a59b-6bc4-4e21-bec7-38d1b87be05b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12254
x-amzn-requestid: f38b287f-1426-4fd8-8608-72a72778a939
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL3pVHPKIAMF7AA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b49fd5-1a67e1244d14cbac5f03a8d7;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:36:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: cWXYmrpcCmufg0dFPyV9jhe8n5dMr_oFEFJ6vhIF_kFikH5BEqHOsA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:51:57 GMT
age: 39275
etag: "861b6c16e2a034b9793dde7a6898cbf485c4b6e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9ecc719-60f0-4a52-b964-f7ba1917dff9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.2 kB (7165 bytes)
Hash
48315ea620c3dc9697a816f0f9354052
62d5ba126490fb38ed2a8f6ea0fe43b0b4302fc4
6b37b106c6b1cc612a3704a99223bab98123da3031f8967f92a06f243b05da3a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9ecc719-60f0-4a52-b964-f7ba1917dff9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7165
x-amzn-requestid: b1b9736b-f624-44e0-81ae-89b67b1888b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eDR3EFT4IAMFwzg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b1302d-0143e93a6ae1b1636a9d0450;Sampled=0
x-amzn-remapped-date: Sun, 01 Jan 2023 07:03:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: q1Fen2wQXb-lXjOQMO1NXd4F6g_KUHiL4vGJUxAbO9m-rPlWYyzokg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 05:01:13 GMT
age: 13519
etag: "62d5ba126490fb38ed2a8f6ea0fe43b0b4302fc4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddefc5f-f18f-4fa5-8a85-2901ccb91df8.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8894 bytes)
Hash
7c7c14fa7fe29c36e5bd58a3860ee09f
0347e99565ad7ed28c6eefa4169efa4730430766
de81626ffc61c8058735aa5041d24058af5f0c173fffecb632ad96848fa13f84

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddefc5f-f18f-4fa5-8a85-2901ccb91df8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8894
x-amzn-requestid: 30a8d308-21e3-4801-8b7f-929335ccd0a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL3HtHYSoAMFgYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b49efd-1712690766a0c610426f735b;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:32:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6WI2ulAitm0_VgJakPgD90pNFz-BJFRdQBjZru-UGdSliw6eLG52pw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:51:33 GMT
age: 39299
etag: "0347e99565ad7ed28c6eefa4169efa4730430766"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

f-3ru.xyz/f/VNXv/css/base.946e16181022949f5f64.css

185.178.208.130

200 OK

19 kB

URL HTTP/2
f-3ru.xyz/f/VNXv/css/base.946e16181022949f5f64.css
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type
Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size
19 kB (19157 bytes)
Hash
5f249e9c19ce48b49429ba5cd2db6433
0d852e013a49abcd97edcad85863e7236cdc1d25
d039a8b0d5bfcf94aae6761c4df215294597e5db5a09e2438f62e03ba4830a3f

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/css/base.946e16181022949f5f64.css HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f-3ru.xyz/f/VNXv/?
Cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 02 Jan 2023 12:00:33 GMT
content-type: text/css
last-modified: Mon, 26 Dec 2022 20:25:20 GMT
vary: Accept-Encoding
etag: W/"63aa0330-1adbd"
expires: Thu, 16 Feb 2023 12:00:33 GMT
cache-control: max-age=3888000
content-encoding: gzip
age: 161160
content-length: 19157
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

f-3ru.xyz/f/VNXv/css/fonts_cnt.3be257f36d69fd8507c4.css

185.178.208.130

200 OK

363 kB

URL HTTP/2
f-3ru.xyz/f/VNXv/css/fonts_cnt.3be257f36d69fd8507c4.css
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type
ASCII text, with very long lines (65536), with no line terminators
Size
363 kB (362796 bytes)
Hash
da6a3ab26e7e067b3b2470b7bf19bf41
8fec6d861a6dd8fe3976a5e891ec603a1d558345
9e6d8523feb86e8c3f686153e09c344acddcb46b382cf189e73ae6bfc9c629f1

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/css/fonts_cnt.3be257f36d69fd8507c4.css HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f-3ru.xyz/f/VNXv/?
Cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 02 Jan 2023 12:00:33 GMT
content-type: text/css
last-modified: Mon, 26 Dec 2022 20:25:20 GMT
vary: Accept-Encoding
etag: W/"63aa0330-75812"
expires: Thu, 16 Feb 2023 12:00:33 GMT
cache-control: max-age=3888000
content-encoding: gzip
age: 161160
content-length: 362796
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

f-3ru.xyz/f/VNXv/css/fonts_utf.15d6f42d79fd5c9fb64e.css

185.178.208.130

200 OK

1.2 kB

URL HTTP/2
f-3ru.xyz/f/VNXv/css/fonts_utf.15d6f42d79fd5c9fb64e.css
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type
ASCII text, with very long lines (4344), with no line terminators
Size
1.2 kB (1169 bytes)
Hash
44937ff92773855c73aeb04416ac8d2f
f0372909922c41a4030d3647e9ac700fb21be65d
ee26bc4856442be7d8185d4a7b3c3cb9b1a961cb1b260031d0333fb77a19e1b6

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/css/fonts_utf.15d6f42d79fd5c9fb64e.css HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f-3ru.xyz/f/VNXv/?
Cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 02 Jan 2023 12:00:33 GMT
content-type: text/css
last-modified: Mon, 26 Dec 2022 20:25:20 GMT
vary: Accept-Encoding
etag: W/"63aa0330-10f8"
expires: Thu, 16 Feb 2023 12:00:33 GMT
cache-control: max-age=3888000
content-encoding: gzip
age: 161160
content-length: 1169
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

f-3ru.xyz/f/VNXv/css/join.7670bee16440efebebcc.css

185.178.208.130

200 OK

6.9 kB

URL HTTP/2
f-3ru.xyz/f/VNXv/css/join.7670bee16440efebebcc.css
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type
ASCII text, with very long lines (26811), with no line terminators
Size
6.9 kB (6909 bytes)
Hash
2bd47618a31e77aa63044a6dca19e033
074b9c14d21d9af25590d731a2579d8544143ff1
99b1d0314bde4a3f311e0af20c1cc5c016777741ea10a773b32d61874e58c4b8

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/css/join.7670bee16440efebebcc.css HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f-3ru.xyz/f/VNXv/?
Cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 02 Jan 2023 12:00:33 GMT
content-type: text/css
last-modified: Mon, 26 Dec 2022 20:25:20 GMT
vary: Accept-Encoding
etag: W/"63aa0330-68bb"
expires: Thu, 16 Feb 2023 12:00:33 GMT
cache-control: max-age=3888000
content-encoding: gzip
age: 161160
content-length: 6909
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

f-3ru.xyz/f/VNXv/css/index.c5be8c0e3c9122ee3fae.css

185.178.208.130

200 OK

3.3 kB

URL HTTP/2
f-3ru.xyz/f/VNXv/css/index.c5be8c0e3c9122ee3fae.css
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type
ASCII text, with very long lines (13339), with no line terminators
Size
3.3 kB (3312 bytes)
Hash
0d979f2ab7b63b1e9016901d464586be
4ea97acb9f1d348ae9f5e088b986145a98508bab
edfefb9c5468999476490c81a218e02abb598f39fabb31f73b4e9531f982867f

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/css/index.c5be8c0e3c9122ee3fae.css HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f-3ru.xyz/f/VNXv/?
Cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 02 Jan 2023 12:00:33 GMT
content-type: text/css
last-modified: Mon, 26 Dec 2022 20:25:20 GMT
vary: Accept-Encoding
etag: W/"63aa0330-341b"
expires: Thu, 16 Feb 2023 12:00:33 GMT
cache-control: max-age=3888000
content-encoding: gzip
age: 161160
content-length: 3312
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

f-3ru.xyz/f/VNXv/css/login.3f85d2eaa2916e3f45b0.css

185.178.208.130

200 OK

8.3 kB

URL HTTP/2
f-3ru.xyz/f/VNXv/css/login.3f85d2eaa2916e3f45b0.css
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type
ASCII text, with very long lines (47134), with no line terminators
Size
8.3 kB (8297 bytes)
Hash
a3e95ae106dbe82f0afa1560f55db661
d1f19f68cbca5e30399cac6b408626c2b9317450
3585f3b0caae45be257a0713d5c72eeeb50eabbd934cbda29dd5579af5f6890a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/css/login.3f85d2eaa2916e3f45b0.css HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f-3ru.xyz/f/VNXv/?
Cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 02 Jan 2023 12:00:33 GMT
content-type: text/css
last-modified: Mon, 26 Dec 2022 20:25:20 GMT
vary: Accept-Encoding
etag: W/"63aa0330-b81e"
expires: Thu, 16 Feb 2023 12:00:33 GMT
cache-control: max-age=3888000
content-encoding: gzip
age: 161160
content-length: 8297
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

f-3ru.xyz/f/VNXv/?

185.178.208.130

200 OK

13 kB

URL HTTP/2
f-3ru.xyz/f/VNXv/?
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type
data
Size
13 kB (12863 bytes)
Hash
3a037bdf654f6fac52add434eeea2d7f
3a7603fda98399cbe01934d0d817f9f5c04f9ee9
b9d0d3a03a694d3d6b1c6c32994378145daabf1ac9d68451918b32d16f613cf4

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/? HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://f-3ru.xyz/f/VNXv/?
Connection: keep-alive
Cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 04 Jan 2023 08:46:33 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.36
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

f-3ru.xyz/f/VNXv/reg_android_ru.png

185.178.208.130

200 OK

27 kB

URL HTTP/2
f-3ru.xyz/f/VNXv/reg_android_ru.png
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type
PNG image data, 183 x 384, 8-bit colormap, non-interlaced\012- data
Size
27 kB (26678 bytes)
Hash
1be684d98fea1c3cc7f8d41c9fe25d76
5f0e52d008fa484a782e2daf1dd09b5b221d55f1
21f740ac4fb0b9c1dfb78210b16d949744c1ac781106316169826d1bb836e136

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/reg_android_ru.png HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f-3ru.xyz/f/VNXv/?
Cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 02 Jan 2023 12:00:34 GMT
content-type: image/png
content-length: 26678
last-modified: Mon, 26 Dec 2022 20:24:32 GMT
etag: "63aa0300-6836"
expires: Thu, 16 Feb 2023 12:00:34 GMT
cache-control: max-age=3888000
accept-ranges: bytes
age: 161159
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

f-3ru.xyz/f/VNXv/reg_iphone_ru.png

185.178.208.130

200 OK

27 kB

URL HTTP/2
f-3ru.xyz/f/VNXv/reg_iphone_ru.png
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type
PNG image data, 198 x 396, 8-bit colormap, non-interlaced\012- data
Size
27 kB (27275 bytes)
Hash
3bb7a2b8918d1c4f2627212696d9dbd3
c5707405d87851c5d74bcfc0a9df96d1463c4cfb
fc71564b7d25aba5ccbb19c54af8d378a9ac77dccbc9dbfc79ec50087f309ff9

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/reg_iphone_ru.png HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f-3ru.xyz/f/VNXv/?
Cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 02 Jan 2023 12:00:34 GMT
content-type: image/png
content-length: 27275
last-modified: Mon, 26 Dec 2022 20:24:32 GMT
etag: "63aa0300-6a8b"
expires: Thu, 16 Feb 2023 12:00:34 GMT
cache-control: max-age=3888000
accept-ranges: bytes
age: 161159
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

f-3ru.xyz/f/VNXv/css/common.7cedae26d34fff68ae8c.css

185.178.208.130

200 OK

76 kB

URL HTTP/2
f-3ru.xyz/f/VNXv/css/common.7cedae26d34fff68ae8c.css
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type
ASCII text, with very long lines (65536), with no line terminators
Size
76 kB (75651 bytes)
Hash
165e193be16a473715fbf6061af6af2e
a793f3089e817f0da7f32b8d8d8a40d571929375
f45ced3308065b52ea313735e386667d004763da51db6e71714f60052cde021f

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/css/common.7cedae26d34fff68ae8c.css HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f-3ru.xyz/f/VNXv/?
Cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 02 Jan 2023 12:00:33 GMT
content-type: text/css
last-modified: Mon, 26 Dec 2022 20:25:20 GMT
vary: Accept-Encoding
etag: W/"63aa0330-71b46"
expires: Thu, 16 Feb 2023 12:00:33 GMT
cache-control: max-age=3888000
content-encoding: gzip
age: 161160
content-length: 75651
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

f-3ru.xyz/f/VNXv/fav_logo.ico?6

185.178.208.130

200 OK

313 B

URL HTTP/2
f-3ru.xyz/f/VNXv/fav_logo.ico?6
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size
313 B (313 bytes)
Hash
4466f62702a81e310debec3404630df4
85bf242412c5588f544e669d6850a95b8e4b2fc7
6942cd46e5b62591f413fc4ff863b60b79a51ad03739d23d0487c0e0f29116fc

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/fav_logo.ico?6 HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f-3ru.xyz/f/VNXv/?
Cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 04 Jan 2023 06:43:26 GMT
content-type: image/vnd.microsoft.icon
content-length: 313
last-modified: Mon, 26 Dec 2022 20:24:31 GMT
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "139-5f0c0ec4391bb"
age: 7387
X-Firefox-Spdy: h2

f-3ru.xyz/f/VNXv/default.png?11

185.178.208.130

200 OK

3.9 kB

URL HTTP/2
f-3ru.xyz/f/VNXv/default.png?11
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type
PNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data
Size
3.9 kB (3916 bytes)
Hash
1b5346ad0f1cb807b71d2f8bc58f5715
9cb9a88102fdab6cf110b0038b3834b52b25aefa
342d5c3c56565b798ec93869282108574afdf41dadcdedf08ab9b2a1a64feac1

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/default.png?11 HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f-3ru.xyz/f/VNXv/?
Cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 04 Jan 2023 08:46:33 GMT
content-type: image/png
content-length: 3916
last-modified: Mon, 26 Dec 2022 20:24:31 GMT
etag: "63aa02ff-f4c"
expires: Sat, 18 Feb 2023 08:46:33 GMT
cache-control: max-age=3888000
accept-ranges: bytes
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

f-3ru.xyz/f/VNXv/?id=57025

185.178.208.130

302 Found

0 B

URL HTTP/2
f-3ru.xyz/f/VNXv/?id=57025
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/?id=57025 HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 302 Found
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 04 Jan 2023 08:46:30 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/5.6.36
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; Domain=.f-3ru.xyz; HttpOnly; Path=/; Expires=Thu, 04-Jan-2024 08:46:30 GMT
PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1; path=/
location: ?
content-encoding: br
vary: Accept-Encoding
X-Firefox-Spdy: h2

f-3ru.xyz/images/svg_icons/login_all_products_arrow.svg

185.178.208.130

404 Not Found

0 B

URL HTTP/2
f-3ru.xyz/images/svg_icons/login_all_products_arrow.svg
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /images/svg_icons/login_all_products_arrow.svg HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f-3ru.xyz/f/VNXv/css/login.3f85d2eaa2916e3f45b0.css
Cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 04 Jan 2023 08:46:33 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.36
content-encoding: gzip
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

f-3ru.xyz/f/VNXv/?

185.178.208.130

200 OK

0 B

URL HTTP/2
f-3ru.xyz/f/VNXv/?
IP
185.178.208.130:0
ASN
#57724 Ddos-guard Ltd

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /f/VNXv/? HTTP/1.1
Host: f-3ru.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=lEv99Q5a8wZypyGaSykc; PHPSESSID=c79ac5432569f3c76f2a4fd9270921d1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 04 Jan 2023 08:46:30 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.36
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (37)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type