Report - auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=

Report Overview

Visited public
2023-10-20 12:54:37
Tags
Submit Tags
URL
auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Finishing URL
auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
IP / ASN
172.67.210.244
#13335 CLOUDFLARENET
Title
Facebook - zaloguj się lub zarejestruj

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.pki.goog	175	2016-06-13	2018-07-01 08:43:07	2023-10-19 18:12:01	2.3 kB	4.9 kB	142.250.74.131
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-10-20 01:12:37	3.3 kB	256 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-10-20 02:01:44	474 B	18 kB	142.250.74.106
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-10-19 18:34:08	462 B	6.6 kB	104.17.24.14
auta-dawid.pl	unknown	2023-10-18	2023-10-19 20:21:22	2023-10-20 14:54:18	4.2 kB	40 kB	172.67.210.244
cdn.jsdelivr.net	439	2012-05-16	2012-09-30 02:15:09	2023-10-19 18:12:08	479 B	27 kB	151.101.1.229

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-10-19	medium	auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-10-20	medium	auta-dawid.pl	Sinkholed
2023-10-20	medium	auta-dawid.pl	Sinkholed
2023-10-20	medium	auta-dawid.pl	Sinkholed
2023-10-20	medium	auta-dawid.pl	Sinkholed
2023-10-20	medium	auta-dawid.pl	Sinkholed
2023-10-20	medium	auta-dawid.pl	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=	ScriptElement	0 B	0001-01-01	2025-06-27
Pretty URL auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU= IP 172.67.210.244 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-06-27 05:03 Times Seen5153338 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (22)

URL IP Response Size

GET cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css

104.17.24.14

200 OK

5.6 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (30837)
Size
5.6 kB (5631 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auta-dawid.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 20 Oct 2023 12:54:19 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 154496
expires: Wed, 09 Oct 2024 12:54:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B41LpkeHoWQgBV4IsLtkkr%2B4BZBTXDiG0Q5zVj0SZ0GXuip5n42r7cOO%2BO0hQuA5d9JgkFmvsepAVMZUhlqYPNt8vUoxcYm4bbVJOVwgUsBjxIke1QoZ0B2ZDoQNFbNeFAq71TNN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 819168a2cbe6569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET auta-dawid.pl/img/logo-fb.png

172.67.210.244

200 OK

7.8 kB

URL GET HTTP/3
auta-dawid.pl/img/logo-fb.png
IP
172.67.210.244:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Certificate
IssuerGoogle Trust Services LLC
Subjectauta-dawid.pl
Fingerprint8C:73:C5:6B:36:0D:C5:51:5E:AC:59:9C:EB:FE:AA:3A:12:D2:37:AC
ValidityWed, 18 Oct 2023 18:28:00 GMT - Tue, 16 Jan 2024 18:27:59 GMT

File type
PNG image data, 1400 x 500, 4-bit colormap, non-interlaced\012- data
Size
7.8 kB (7819 bytes)
Hash
770903af55b441a80601647cd0899567
cef75ba5c49eaee8e8b84574a96c264704e61004
1ac597dbaa79fd673f48f88e0a3f8f86f322655f7371bab07be3ec043dac8e59

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/logo-fb.png HTTP/1.1
Host: auta-dawid.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 20 Oct 2023 12:54:19 GMT
content-type: image/png
content-length: 7819
last-modified: Sat, 05 Nov 2022 22:21:36 GMT
etag: "1e8b-5ecc09d085c00"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=otxMvf79jh2qsx%2FYAH2PVv6uvAcJd0TzWiABXOVTCYktjGFHdOQhFEXc4bI8lt31X7Q%2FOg9tUHKezhP9IMHOjpDQyWD2B9OCKSFqPJHchXIUpEUKhCss%2B2ALyVo8t%2Bzf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 819168a2bdbcb51e-OSL
alt-svc: h3=":443"; ma=86400

GET cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css

151.101.1.229

200 OK

26 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
Unicode text, UTF-8 text, with very long lines (65306)
Size
26 kB (26333 bytes)
Hash
94994c66fec8c3468b269dc0cc242151
ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad
62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab

HTTP Headers

GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://auta-dawid.pl
DNT: 1
Connection: keep-alive
Referer: https://auta-dawid.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0"
content-encoding: br
accept-ranges: bytes
date: Fri, 20 Oct 2023 12:54:19 GMT
age: 13302849
x-served-by: cache-fra-eddf8230037-FRA, cache-bma1643-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26333
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
3895902232873523b65c8aa05f18dbc1
be3bd10926941837473ec8e1bbb2bf5916e19b2f
3d7490cc2fefaa77130f16c74c832b663fba2be545716be365639491257498f5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Oct 2023 12:54:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
3895902232873523b65c8aa05f18dbc1
be3bd10926941837473ec8e1bbb2bf5916e19b2f
3d7490cc2fefaa77130f16c74c832b663fba2be545716be365639491257498f5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Oct 2023 12:54:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
9aeafc6b4c4a8842f1cabf163037419f
9ac77b28b8b7b9f8c037d3d3828fd6785b995e9e
cc618c86994722a3280828049ae8f23d4f83a3f1866fed0bce3234dd34621fa7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Oct 2023 12:54:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
9aeafc6b4c4a8842f1cabf163037419f
9ac77b28b8b7b9f8c037d3d3828fd6785b995e9e
cc618c86994722a3280828049ae8f23d4f83a3f1866fed0bce3234dd34621fa7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Oct 2023 12:54:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
9aeafc6b4c4a8842f1cabf163037419f
9ac77b28b8b7b9f8c037d3d3828fd6785b995e9e
cc618c86994722a3280828049ae8f23d4f83a3f1866fed0bce3234dd34621fa7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Oct 2023 12:54:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
9aeafc6b4c4a8842f1cabf163037419f
9ac77b28b8b7b9f8c037d3d3828fd6785b995e9e
cc618c86994722a3280828049ae8f23d4f83a3f1866fed0bce3234dd34621fa7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Oct 2023 12:54:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
ValidityMon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Size
48 kB (48432 bytes)
Hash
e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5

HTTP Headers

GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auta-dawid.pl
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Oct 2023 09:00:39 GMT
expires: Wed, 16 Oct 2024 09:00:39 GMT
cache-control: public, max-age=31536000
age: 273220
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2

216.58.207.227

200 OK

35 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
ValidityMon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT

File type
Web Open Font Format (Version 2), TrueType, length 35120, version 1.0\012- data
Size
35 kB (35120 bytes)
Hash
dd986ff1050050613be051863773d677
51a12487fd51cc02ca54a984f82d63318807ca2e
d9784dbf11886ea032ffbd00f499d333519babe001eacc19df7ab89de17bec47

HTTP Headers

GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auta-dawid.pl
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Oct 2023 14:07:59 GMT
expires: Sat, 12 Oct 2024 14:07:59 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 01:03:47 GMT
content-type: font/woff2
age: 600380
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2

216.58.207.227

200 OK

35 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
ValidityMon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT

File type
Web Open Font Format (Version 2), TrueType, length 35120, version 1.0\012- data
Size
35 kB (35120 bytes)
Hash
dd986ff1050050613be051863773d677
51a12487fd51cc02ca54a984f82d63318807ca2e
d9784dbf11886ea032ffbd00f499d333519babe001eacc19df7ab89de17bec47

HTTP Headers

GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auta-dawid.pl
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Oct 2023 14:07:59 GMT
expires: Sat, 12 Oct 2024 14:07:59 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 01:03:47 GMT
content-type: font/woff2
age: 600380
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2

216.58.207.227

200 OK

35 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
ValidityMon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT

File type
Web Open Font Format (Version 2), TrueType, length 35120, version 1.0\012- data
Size
35 kB (35120 bytes)
Hash
dd986ff1050050613be051863773d677
51a12487fd51cc02ca54a984f82d63318807ca2e
d9784dbf11886ea032ffbd00f499d333519babe001eacc19df7ab89de17bec47

HTTP Headers

GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auta-dawid.pl
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Oct 2023 14:07:59 GMT
expires: Sat, 12 Oct 2024 14:07:59 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 01:03:47 GMT
content-type: font/woff2
age: 600380
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
ValidityMon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Size
48 kB (48432 bytes)
Hash
e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5

HTTP Headers

GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auta-dawid.pl
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Oct 2023 09:00:39 GMT
expires: Wed, 16 Oct 2024 09:00:39 GMT
cache-control: public, max-age=31536000
age: 273220
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint24:E0:20:DC:DE:E3:A8:D9:A8:17:BA:26:F5:41:32:19:98:D0:30:F3
ValidityMon, 18 Sep 2023 08:25:05 GMT - Mon, 11 Dec 2023 08:25:04 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Size
48 kB (48432 bytes)
Hash
e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5

HTTP Headers

GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://auta-dawid.pl
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Oct 2023 09:00:39 GMT
expires: Wed, 16 Oct 2024 09:00:39 GMT
cache-control: public, max-age=31536000
age: 273220
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
9aeafc6b4c4a8842f1cabf163037419f
9ac77b28b8b7b9f8c037d3d3828fd6785b995e9e
cc618c86994722a3280828049ae8f23d4f83a3f1866fed0bce3234dd34621fa7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 20 Oct 2023 12:54:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET auta-dawid.pl/apple-touch-icon.png

172.67.210.244

200 OK

9.4 kB

URL GET HTTP/3
auta-dawid.pl/apple-touch-icon.png
IP
172.67.210.244:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Certificate
IssuerGoogle Trust Services LLC
Subjectauta-dawid.pl
Fingerprint8C:73:C5:6B:36:0D:C5:51:5E:AC:59:9C:EB:FE:AA:3A:12:D2:37:AC
ValidityWed, 18 Oct 2023 18:28:00 GMT - Tue, 16 Jan 2024 18:27:59 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size
9.4 kB (9405 bytes)
Hash
46fdc9fe95ddfe2841c264f5980f0713
0906572b21fbc6e78488f2d896fcb131d9ec3faa
d7b8b2d258301afb544f09e0b8078c8b44f96d65dde6a57ab48d2aba2943306d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /apple-touch-icon.png HTTP/1.1
Host: auta-dawid.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 20 Oct 2023 12:54:19 GMT
content-type: image/png
content-length: 9405
last-modified: Sat, 05 Nov 2022 22:21:28 GMT
etag: "24bd-5ecc09c8e4a00"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nnFw%2BMRNIWazx1qCwNkYK7FDki7RWM5VXo7nMDdHBFLRiKiHwFGeYb8nVnPfNC2adssBcek21slDEoaSbSEvhraaDfh%2BiU1jXr3Tp8a3em6eg%2BR3exs%2F9Tb3aby0A1R4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 819168a65932b51e-OSL
alt-svc: h3=":443"; ma=86400

GET auta-dawid.pl/favicon-16x16.png

172.67.210.244

404 Not Found

275 B

URL GET HTTP/3
auta-dawid.pl/favicon-16x16.png
IP
172.67.210.244:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Certificate
IssuerGoogle Trust Services LLC
Subjectauta-dawid.pl
Fingerprint8C:73:C5:6B:36:0D:C5:51:5E:AC:59:9C:EB:FE:AA:3A:12:D2:37:AC
ValidityWed, 18 Oct 2023 18:28:00 GMT - Tue, 16 Jan 2024 18:27:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size
275 B (275 bytes)
Hash
c109c399eb9820ea7e473b96abb5b3a2
0bde1757b52a9dc0b4433c9ae807bcb41e1e8c77
1fed836b0a221a586f9b3dd3b5efe593a7a3c00a2e17bd320947885f2241b560

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon-16x16.png HTTP/1.1
Host: auta-dawid.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Fri, 20 Oct 2023 12:54:19 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TU0XAt3iOywkfz2%2FjPI8BkJ7r02h7Gp9HPpRIUHw9wf8vR3bMuvKn0iqkCOzTjxyxQF%2FH%2BI3R60XKVfKF8DWLr7T8DRJXuNGBoTJyi4WvJrWcNVntssf%2BlkXlxupHSyE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 819168a65934b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=

172.67.210.244

200 OK

5.4 kB

URL User Request GET HTTP/2
auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
IP
172.67.210.244:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectauta-dawid.pl
Fingerprint8C:73:C5:6B:36:0D:C5:51:5E:AC:59:9C:EB:FE:AA:3A:12:D2:37:AC
ValidityWed, 18 Oct 2023 18:28:00 GMT - Tue, 16 Jan 2024 18:27:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5683), with no line terminators
Size
5.4 kB (5369 bytes)
Hash
818354be1019a2c4148f1f4b0ab0e77b
b7578f405df57a24785c8d5b13582045bb01366b
243c440ff5d3cb3ee81c163a3aa381b84ea915e43a29129191607da647266144

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU= HTTP/1.1
Host: auta-dawid.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 20 Oct 2023 12:54:18 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZIlaG%2FN5zgxOKNwonF5UitdW%2BufuswY0pUF%2FsM%2FuXAa9tUpjkyS4I92jgEyo0cWPVwLmQhP%2Bj7hCK0PVt2I9sHCrlmy%2F4d4XQsLrNBJefM9qICW%2FROYbfYFNT%2Bw1c75m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 819168a00c34b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;500;600;700;800&display=swap

142.250.74.106

200 OK

18 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;500;600;700;800&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint73:C0:B4:AB:41:0A:6A:68:D4:AE:EE:E2:11:A4:38:23:EF:D2:86:B7
ValidityMon, 18 Sep 2023 08:25:07 GMT - Mon, 11 Dec 2023 08:25:06 GMT

File type
ASCII text
Size
18 kB (17568 bytes)
Hash
65b6a348d17e61e1d0b231ec63dcdc00
1540990ffe1f5d41a8a04db962950cb09d985798
170d329a585de03caa379e0e068e08b529ba2d693608db4166c3996328185c06

HTTP Headers

GET /css2?family=Open+Sans:wght@300;400;500;600;700;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auta-dawid.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 20 Oct 2023 12:54:19 GMT
date: Fri, 20 Oct 2023 12:54:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET auta-dawid.pl/style.css

172.67.210.244

200 OK

12 kB

URL GET HTTP/3
auta-dawid.pl/style.css
IP
172.67.210.244:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Certificate
IssuerGoogle Trust Services LLC
Subjectauta-dawid.pl
Fingerprint8C:73:C5:6B:36:0D:C5:51:5E:AC:59:9C:EB:FE:AA:3A:12:D2:37:AC
ValidityWed, 18 Oct 2023 18:28:00 GMT - Tue, 16 Jan 2024 18:27:59 GMT

File type
ASCII text, with CRLF line terminators
Size
12 kB (12443 bytes)
Hash
ba2fc3eb5a1e0dc58c4543767abf6900
4c4e43872839902162b97a449ce1daa274b304fd
17c212c146fcd8aab640d40717850c3c579e73151c7318f51e1d0717a68d9c52

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /style.css HTTP/1.1
Host: auta-dawid.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 20 Oct 2023 12:54:19 GMT
content-type: text/css
last-modified: Sat, 05 Nov 2022 22:21:27 GMT
etag: W/"309b-5ecc09c7f07c0-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DWdeXYtE9Ut%2FOoueVJAmicgqcsez8dmeBOxPTYJljlsg9zwWQAJhatvICuVOMFahzcXA%2BDgr9KwOINcY0wz3CD38yf4l0KNsgTQUl6%2FSFd3rtvIz%2FGfCddora3WKr7o1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 819168a2bdb8b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET auta-dawid.pl/mobile.css

172.67.210.244

200 OK

1.3 kB

URL GET HTTP/3
auta-dawid.pl/mobile.css
IP
172.67.210.244:443
ASN
#13335 CLOUDFLARENET

Requested by
https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Certificate
IssuerGoogle Trust Services LLC
Subjectauta-dawid.pl
Fingerprint8C:73:C5:6B:36:0D:C5:51:5E:AC:59:9C:EB:FE:AA:3A:12:D2:37:AC
ValidityWed, 18 Oct 2023 18:28:00 GMT - Tue, 16 Jan 2024 18:27:59 GMT

File type
ASCII text, with very long lines (1486), with no line terminators
Size
1.3 kB (1298 bytes)
Hash
be5bd876cc9094b1de5a757611a82580
9a200bffde96bcbfd3260d2ee38f25e2c1403a83
fc8b7a8039dbd0ac4c18c5df82d0cb72e4317f0d068c2c45b20fee941be30158

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /mobile.css HTTP/1.1
Host: auta-dawid.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://auta-dawid.pl/authorize.php?Ekr8x0NiyEFeSdmAkppr4WMW90PfpfPszUIdahso51pypsdfCkIzj4pNsDQ704EqQE71dXz1aXSCgfE1EsWaEQ8DS2AtqAXgoWzD1MSyKlz3hksgwy7wsaIlzpxyVDq0XARtIqZWpqnCj8Vw9vSMfxDuD2wCQMxJdW6NpHsRI27tYE5eJra8i35lPYQjJBo7095EL4UQRU5756CQtmBHx3plGYNWnkMFYC8yKu8Pzb7hkvJjpgifgdonymkDPyYU=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 20 Oct 2023 12:54:19 GMT
content-type: text/css
last-modified: Sat, 05 Nov 2022 22:21:27 GMT
etag: W/"512-5ecc09c7f07c0-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qCk4aTj7iWBSwIjpWf5221M60hijMsmC6e2qVBcwhcID%2BhUxIBor0iBChzqMRVSaAu5AUbXU9%2BjetVyxuDJ6vyO87fEBgXhfCaHh3YNzX9gM1mmuK9gozaa6G%2BeW7f8x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 819168a2bdbbb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (22)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN