email.mail1.onesignal.os.tc/c/eJwUkL2u3SAQhJ8Guj1i-bFN4SKN8xjRArsyCsc4NidX9-2v3IymmGK-j87zTy1r4LygEQMoMoGfZwQiCmBdwWjZLdE6XdbJh1hE84rTEoKd0Hu9r9GRNxQS52JwcnYKJUrkCf28yByTrquYFIXQQhQTwBe0QBwSWHYmJSNzcPOr8RgXK29az9T2fg_d1n2M81bul7Kbsls_Wj34Zi53ouPvK_e3stvXCVTe9VB2y_f9ZG_9ekpqH1Z2e3__7v_xtY9300cfVWqmUfvxoEdiCpQKBCYP3ssC5LiAN8gmO5udoD4bffP1zDMRihCDLGl-SAKkHA0sGSUnI482fa3_6nF9qvJm_9AX1-foTwAAAP__3itvvQ
34.110.180.34302 Found 478 B URL User Request GET HTTP/2 email.mail1.onesignal.os.tc/c/eJwUkL2u3SAQhJ8Guj1i-bFN4SKN8xjRArsyCsc4NidX9-2v3IymmGK-j87zTy1r4LygEQMoMoGfZwQiCmBdwWjZLdE6XdbJh1hE84rTEoKd0Hu9r9GRNxQS52JwcnYKJUrkCf28yByTrquYFIXQQhQTwBe0QBwSWHYmJSNzcPOr8RgXK29az9T2fg_d1n2M81bul7Kbsls_Wj34Zi53ouPvK_e3stvXCVTe9VB2y_f9ZG_9ekpqH1Z2e3__7v_xtY9300cfVWqmUfvxoEdiCpQKBCYP3ssC5LiAN8gmO5udoD4bffP1zDMRihCDLGl-SAKkHA0sGSUnI482fa3_6nF9qvJm_9AX1-foTwAAAP__3itvvQ
IP 34.110.180.34:443
Certificate IssuerLet's Encrypt
Subjectemail.mail1.onesignal.os.tc
Fingerprint66:96:AA:44:2E:73:9E:55:FB:C0:AD:0A:0E:13:70:96:7B:0F:B4:E7
ValidityFri, 26 May 2023 21:05:31 GMT - Thu, 24 Aug 2023 21:05:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ee94458e437da3d89acfaac93569240c
2e5966159acd2dd969b61258ac0ccd134d191dea
f67e32fb4494fd54397211e119f09e708ed149efc97481261915fe721050f27c
Analyzer Verdict Alert openphish Australian Government
GET /c/eJwUkL2u3SAQhJ8Guj1i-bFN4SKN8xjRArsyCsc4NidX9-2v3IymmGK-j87zTy1r4LygEQMoMoGfZwQiCmBdwWjZLdE6XdbJh1hE84rTEoKd0Hu9r9GRNxQS52JwcnYKJUrkCf28yByTrquYFIXQQhQTwBe0QBwSWHYmJSNzcPOr8RgXK29az9T2fg_d1n2M81bul7Kbsls_Wj34Zi53ouPvK_e3stvXCVTe9VB2y_f9ZG_9ekpqH1Z2e3__7v_xtY9300cfVWqmUfvxoEdiCpQKBCYP3ssC5LiAN8gmO5udoD4bffP1zDMRihCDLGl-SAKkHA0sGSUnI482fa3_6nF9qvJm_9AX1-foTwAAAP__3itvvQ HTTP/1.1
Host: email.mail1.onesignal.os.tc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: no-store
content-type: text/html
date: Fri, 02 Jun 2023 01:27:09 GMT
location: https://onlineseedsbank.com/wp-admin/css/colors/blue/myGov1.html
x-robots-tag: noindex
x-xss-protection: 1; mode=block
content-length: 478
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/css-social-buttons/1.2.0/css/zocial.css
104.17.25.14200 OK 22 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/css-social-buttons/1.2.0/css/zocial.css
IP 104.17.25.14:443
Requested by https://rootxone.org/d845e/1/273e7/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (24194)
Hash 11cb6e84ea92cdd2fb69596b7314ec7d
5a39ebdf2a4232161b55ef2d67cb20fda3dab304
bf8d41c2e2250b2f0b431531871178d57cd9af1f42bbe121c90b51fd66a1dff2
GET /ajax/libs/css-social-buttons/1.2.0/css/zocial.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 01:27:11 GMT
content-type: text/css; charset=utf-8
content-length: 21543
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e2d-ae99"
last-modified: Mon, 04 May 2020 16:09:17 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 226417
expires: Wed, 22 May 2024 01:27:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sEfwX6qphW4EMDxAlQYGx7tDXzwtAL0Zj2R77Ys%2BJ3TDcQQIQ9iYpVVAzk%2BIo68lHGLz70R%2Bwi73xO79xzOgYTRbBx%2FqS0GaB%2Fg0lv6q1t6frdVh1XHVhF67Z12Q1cq3G%2BXMwmff"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d0be99738aeb4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
104.17.25.14200 OK 5.9 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
IP 104.17.25.14:443
Requested by https://rootxone.org/d845e/1/273e7/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (372)
Hash c495654869785bc3df60216616814ad1
0140952c64e3f2b74ef64e050f2fe86eab6624c8
36e0a7e08bee65774168528938072c536437669c1b7458ac77976ec788e4439c
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 01:27:11 GMT
content-type: text/css; charset=utf-8
content-length: 5884
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-9226"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 9091563
expires: Wed, 22 May 2024 01:27:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K4zVJ4Sqzd8QaQy%2B8jfIcyhDURz3Q9lWoEz0thmoJCe%2BJc5vRJFf1%2BRxZbM6u%2FQj1hIRlkzN2epg1Lvj3t3Kxz1amIMEOqL8xnzl2jg%2BdpletlVb2srhK62J0ZKwb9OnI%2BZ8g0PK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d0be99748bab4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
rootxone.org/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
172.67.187.45200 OK 4.4 kB URL GET HTTP/3 rootxone.org/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP 172.67.187.45:443
Requested by https://rootxone.org/d845e/1/273e7/
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
File type gzip compressed data, from Unix\012- data
Hash b842993c2aaf0c7edf6d621a7f1db057
d19853858d621f9e396500cffe81a041fa1b0b90
c8a8956afb40fcb059aa55688e22fd487350214d020694bcd6a55209539766ef
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/d845e/1/273e7/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 01:27:11 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2023 15:21:01 GMT
etag: W/"6476145d-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vRmnCntM5NV%2FbtOHg%2FrCQITbORfB%2BWqBBudbRVclinJASBk9RYV0kF2wL3cddhFleayHUB%2FjmwD8%2B3Jj4bDayhmrP1be4YvCmY7lz5G%2BF0CkDRokbhfe4r0oN3UQn%2B4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0be996e8afb4f9-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sun, 04 Jun 2023 01:27:11 GMT
cache-control: max-age=172800, public
content-encoding: gzip
rootxone.org/d845e/sourcexone/xonecss/style.css
172.67.187.45200 OK 5.6 kB URL GET HTTP/3 rootxone.org/d845e/sourcexone/xonecss/style.css
IP 172.67.187.45:443
Requested by https://rootxone.org/d845e/1/273e7/
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
File type gzip compressed data, max compression, from Unix\012- data
Hash 99c73fe7d1ebf3605c0635481503855f
c00f5f758cf758e48edbe1f03db10024785630ce
05eb9f8afc75e30da082be6d72dfd1ade03fb7e5326c0696bfb5f16d4b1dd5e9
GET /d845e/sourcexone/xonecss/style.css HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/d845e/1/273e7/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 01:27:11 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 31 May 2023 05:18:45 GMT
etag: W/"4771-5fcf674359e8b"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aSegcqJQkcW7h7k4G49Zs4WEV98tcErF595AGLiYgH5KnX%2BnJSfKLXRBhUFYf3GZ9%2Ba%2FWma8lvYYmA1LPOHrOQKMVspqL9msOdaT8e32U3IuGuXrlajD1AAySR%2BLcR0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0be996e8acb4f9-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
104.17.25.14200 OK 77 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 104.17.25.14:443
Requested by https://rootxone.org/d845e/1/273e7/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rootxone.org
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 01:27:11 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1380054
expires: Wed, 22 May 2024 01:27:11 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f4OcuBuMP9lGFeD8H%2B4TvmLUNWaSxBYfuRKfOltrTfUMOveDzXF%2BSONat69emWLbRpfKhqavIpDV7pX1OJfc5bry96CEwBB9D8h9f%2Bx6Wrxelb2OGE8tlkFMJAVPFn0OVNXXDPRz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d0be9989d7bb509-OSL
alt-svc: h3=":443"; ma=86400
rootxone.me/pixel/wz3xIB32v8DPajHZ
103.224.212.221302 Found 0 B URL GET HTTP/1.1 rootxone.me/pixel/wz3xIB32v8DPajHZ
IP 103.224.212.221:443
ASN #133618 Trellian Pty. Limited
Requested by https://rootxone.org/d845e/1/273e7/
Certificate IssuerLet's Encrypt
Subject123phim.info
FingerprintB4:31:19:96:2A:FE:CF:4C:8E:77:CB:EC:B2:E3:4D:5A:0C:D1:27:9B
ValidityThu, 11 May 2023 14:33:32 GMT - Wed, 09 Aug 2023 14:33:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/wz3xIB32v8DPajHZ HTTP/1.1
Host: rootxone.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Fri, 02 Jun 2023 01:27:12 GMT
server: Apache
set-cookie: __tad=1685669232.4844606; expires=Mon, 30-May-2033 01:27:12 GMT; Max-Age=315360000
location: http://ww25.rootxone.me/pixel/wz3xIB32v8DPajHZ?subid1=20230602-1127-128d-adff-fe6ac42a7466
content-length: 0
content-type: text/html; charset=UTF-8
connection: close
rootxone.org/d845e/1/index.php
172.67.187.45302 Found 17 kB URL GET HTTP/2 rootxone.org/d845e/1/index.php
IP 172.67.187.45:443
Requested by https://onlineseedsbank.com/wp-admin/css/colors/blue/myGov1.html
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d845e/1/index.php HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onlineseedsbank.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 02 Jun 2023 01:27:10 GMT
content-type: text/html; charset=UTF-8
location: https://rootxone.org/d845e/1/273e7/
x-powered-by: PHP/8.1.14RC1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J6HRVnwC24eBhnfclMAevim3Zy2QQtbwL78muCx6oItd9FMMhnOYfVcelvflOyF%2FyBP1dY%2F9AQmkURM5ozIt1F7T3JVXdvurv%2FMq1JIz7Cf9OsKg9TVLfV%2BXb9oHy0s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0be9937949b50c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Source+Code+Pro:400,500,600,700|Source+Sans+Pro:400,600,700&display=swap
142.250.74.74200 OK 17 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Source+Code+Pro:400,500,600,700|Source+Sans+Pro:400,600,700&display=swap
IP 142.250.74.74:443
Requested by https://rootxone.org/d845e/1/273e7/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
Hash abfd162751e3f57ac78b3a59fa2d2296
b8c8cade006465a56c2eb9b1d92add0c8bdf5dd6
5129bf0820f5e1637b02d8ba44a4e459137d46d1dcd854650a19b631ad2086ec
GET /css?family=Source+Code+Pro:400,500,600,700|Source+Sans+Pro:400,600,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Jun 2023 01:27:11 GMT
date: Fri, 02 Jun 2023 01:27:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
rootxone.org/d845e/1/273e7/
172.67.187.45200 OK 17 kB URL GET HTTP/3 rootxone.org/d845e/1/273e7/
IP 172.67.187.45:443
Requested by https://onlineseedsbank.com/wp-admin/css/colors/blue/myGov1.html
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- assembler source, ASCII text, with very long lines (1608)
Hash a6137dd3055bf917f5d23bbb90bdf5e4
07b76d30c03ca31903009ce9af3a13b5e1a5f711
db6cce47055d75c93fda92ad9d2897f33faa794dcd3aa568b3d6f4f62a51167d
GET /d845e/1/273e7/ HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://onlineseedsbank.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 01:27:11 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.1.14RC1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=La1tH1rZWov198MG7ut%2FV5bBzcjzYoynX3jl%2F7HAD0nsP4axT%2FdChEG%2Bpj7OqKveQQnTY4hErs%2FpX6wuaGceKBZzlM7VVTZ%2BQ4gtE6TQPIcfmwgN1sOg128lQUylN%2FM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0be995981cb4f9-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Lato:400,100,300
142.250.74.74200 OK 2.2 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Lato:400,100,300
IP 142.250.74.74:443
Requested by https://rootxone.org/d845e/1/273e7/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
File type ASCII text, with very long lines (2212), with no line terminators
Hash c1816f74999d0b496675b0880007b37b
8032f871c7165040f75ca71e40ca4ecb875b5f82
50c975ce65465a31e9128ee32073cf78d6fe9b07dea491b15f11c56081ffee7e
GET /css?family=Lato:400,100,300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Jun 2023 01:27:11 GMT
date: Fri, 02 Jun 2023 01:27:11 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
onlineseedsbank.com/wp-admin/css/colors/blue/myGov1.html
104.21.31.186200 OK 2.8 MB URL User Request GET HTTP/2 onlineseedsbank.com/wp-admin/css/colors/blue/myGov1.html
IP 104.21.31.186:443
Certificate IssuerGoogle Trust Services LLC
Subjectonlineseedsbank.com
Fingerprint05:44:19:F6:E7:A2:13:38:16:96:60:26:0B:05:30:CD:D2:07:96:88
ValidityWed, 17 May 2023 16:46:59 GMT - Tue, 15 Aug 2023 16:46:58 GMT
Size 2.8 MB (2822453 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert openphish Australian Government
quad9 Sinkholed
GET /wp-admin/css/colors/blue/myGov1.html HTTP/1.1
Host: onlineseedsbank.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 01:27:09 GMT
content-type: text/html
cf-ray: 7d0be98d5cc2b524-OSL
cf-cache-status: BYPASS
last-modified: Wed, 31 May 2023 05:31:47 GMT
vary: Accept-Encoding
cf-apo-via: origin,no-cache
x-powered-by: EasyEngine v4.0.14
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9%2BRMPgpzLAENhcxN%2BSAEmKQ6cPLsSQLK9Auind7TFGRLvBwN0i3JGBjUkEG2gVbYw1%2FFJwdEOtP7J5YDYCbyDdWnHeYFlI91fHI6mvOPEedjGCX2kFTb8pOllr53hhV2hV5ukRqo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
rootxone.org/d845e/sourcexone/xonecss/stepbar.css
172.67.187.45200 OK 3.5 kB URL GET HTTP/3 rootxone.org/d845e/sourcexone/xonecss/stepbar.css
IP 172.67.187.45:443
Requested by https://rootxone.org/d845e/1/273e7/
Certificate IssuerGoogle Trust Services LLC
Subjectrootxone.org
FingerprintD2:A7:ED:30:94:A1:ED:0F:F2:E2:78:EE:B8:43:46:61:CE:9A:30:18
ValidityThu, 04 May 2023 13:41:09 GMT - Wed, 02 Aug 2023 13:41:08 GMT
File type ASCII text, with very long lines (3740), with no line terminators
Hash 3a9b1f7d547f56d4ff41eb8913687221
d749365d39433ccdd05ba2e6b414c35114a7975a
cc79e9f8f348e3ba6b1517549a864666ec0a580bf506c58419dc793ba42f7d15
GET /d845e/sourcexone/xonecss/stepbar.css HTTP/1.1
Host: rootxone.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rootxone.org/d845e/1/273e7/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 01:27:11 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Wed, 31 May 2023 05:18:45 GMT
etag: W/"db8-5fcf67435a273"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vjSBmVzhTwBS3ea6qEj%2BRxZVIrukJIsBTUJYR7rwWUlPxmUAlKuWMfcxVOAGYD9xjcLBRhcHS2KHU311Veth4Wh9QWf078MDhPHb31z%2FxgiSsN4MeMdtxlAI9t64Hw4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0be996e8adb4f9-OSL
alt-svc: h3=":443"; ma=86400