www.circulation.edirecttransfer.com/bb/VF1cIGNgaVJfX1YxWGNWUmVaX1wfVGBeICInJSInICYlIiUpKR4jISkmKSgeIiEqISMiHiclISMmHiEeISBGQz0hVSYqIyMoKCYkUiYqVFVSVyUlV1QiVyMiJSMpUicnIyIgXVJfVVpfWFRdWlRcLiIdZ1ZjWldqWl9lLiEdZGZTW1ZUZV9mXlNWYy4qHVVSZVYuISYkIiMkHVRSXmFSWlhfWlUuJiUiJSkpHVRjVlJlWmdWWlUuJyUhIyYdVVJlUl1aZGVaVS4iJyQqJyYdVl9lWmVqVGBVVi4hIiggX2BlVh9UWVJfVFYeWl5hY1ZkZFpgXx9UYF4=
45.145.176.76200 OK 1.8 kB URL User Request GET HTTP/1.1 www.circulation.edirecttransfer.com/bb/VF1cIGNgaVJfX1YxWGNWUmVaX1wfVGBeICInJSInICYlIiUpKR4jISkmKSgeIiEqISMiHiclISMmHiEeISBGQz0hVSYqIyMoKCYkUiYqVFVSVyUlV1QiVyMiJSMpUicnIyIgXVJfVVpfWFRdWlRcLiIdZ1ZjWldqWl9lLiEdZGZTW1ZUZV9mXlNWYy4qHVVSZVYuISYkIiMkHVRSXmFSWlhfWlUuJiUiJSkpHVRjVlJlWmdWWlUuJyUhIyYdVVJlUl1aZGVaVS4iJyQqJyYdVl9lWmVqVGBVVi4hIiggX2BlVh9UWVJfVFYeWl5hY1ZkZFpgXx9UYF4=
IP 45.145.176.76:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (415), with CRLF, LF line terminators
Hash 629e868e53a5c99bc1a75ea810802e92
a6437d5f33d99fe4538c9d71f1186a96e11f857e
a9e8bc236b089a9e0bc2eaa635cbcd3f68dee05d286f9e03c4b69cec4cf78e82
Analyzer Verdict Alert quad9 Sinkholed
GET /bb/VF1cIGNgaVJfX1YxWGNWUmVaX1wfVGBeICInJSInICYlIiUpKR4jISkmKSgeIiEqISMiHiclISMmHiEeISBGQz0hVSYqIyMoKCYkUiYqVFVSVyUlV1QiVyMiJSMpUicnIyIgXVJfVVpfWFRdWlRcLiIdZ1ZjWldqWl9lLiEdZGZTW1ZUZV9mXlNWYy4qHVVSZVYuISYkIiMkHVRSXmFSWlhfWlUuJiUiJSkpHVRjVlJlWmdWWlUuJyUhIyYdVVJlUl1aZGVaVS4iJyQqJyYdVl9lWmVqVGBVVi4hIiggX2BlVh9UWVJfVFYeWl5hY1ZkZFpgXx9UYF4= HTTP/1.1
Host: www.circulation.edirecttransfer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 31 May 2023 18:45:34 GMT
Server: Microsoft-IIS/10.0
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 1805
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
www.circulation.edirecttransfer.com/bb/loading.gif
45.145.176.76200 OK 1.3 kB URL GET HTTP/1.1 www.circulation.edirecttransfer.com/bb/loading.gif
IP 45.145.176.76:80
Requested by http://www.circulation.edirecttransfer.com/bb/VF1cIGNgaVJfX1YxWGNWUmVaX1wfVGBeICInJSInICYlIiUpKR4jISkmKSgeIiEqISMiHiclISMmHiEeISBGQz0hVSYqIyMoKCYkUiYqVFVSVyUlV1QiVyMiJSMpUicnIyIgXVJfVVpfWFRdWlRcLiIdZ1ZjWldqWl9lLiEdZGZTW1ZUZV9mXlNWYy4qHVVSZVYuISYkIiMkHVRSXmFSWlhfWlUuJiUiJSkpHVRjVlJlWmdWWlUuJyUhIyYdVVJlUl1aZGVaVS4iJyQqJyYdVl9lWmVqVGBVVi4hIiggX2BlVh9UWVJfVFYeWl5hY1ZkZFpgXx9UYF4=
File type GIF image data, version 89a, 680 x 300\012- data
Hash 72701b8902ab70dd58ae7d5f660dd58d
88207799a6af18c92a2fa87aca6e693f795f9158
e1c9f4c66e06ad7aa169dc42e420abe6f097111e9d98cf35dfc162bb41ffffe1
Analyzer Verdict Alert quad9 Sinkholed
GET /bb/loading.gif HTTP/1.1
Host: www.circulation.edirecttransfer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.circulation.edirecttransfer.com/bb/VF1cIGNgaVJfX1YxWGNWUmVaX1wfVGBeICInJSInICYlIiUpKR4jISkmKSgeIiEqISMiHiclISMmHiEeISBGQz0hVSYqIyMoKCYkUiYqVFVSVyUlV1QiVyMiJSMpUicnIyIgXVJfVVpfWFRdWlRcLiIdZ1ZjWldqWl9lLiEdZGZTW1ZUZV9mXlNWYy4qHVVSZVYuISYkIiMkHVRSXmFSWlhfWlUuJiUiJSkpHVRjVlJlWmdWWlUuJyUhIyYdVVJlUl1aZGVaVS4iJyQqJyYdVl9lWmVqVGBVVi4hIiggX2BlVh9UWVJfVFYeWl5hY1ZkZFpgXx9UYF4=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 31 May 2023 18:45:34 GMT
Server: Microsoft-IIS/10.0
Content-Type: image/gif
Last-Modified: Wed, 24 May 2023 15:50:52 GMT
Accept-Ranges: bytes
ETag: "efcdca84578ed91:0"
X-Powered-By: ASP.NET
Content-Length: 1298
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
www.circulation.edirecttransfer.com/favicon.ico
45.145.176.76404 Not Found 209 B URL GET HTTP/1.1 www.circulation.edirecttransfer.com/favicon.ico
IP 45.145.176.76:80
Requested by http://www.circulation.edirecttransfer.com/bb/VF1cIGNgaVJfX1YxWGNWUmVaX1wfVGBeICInJSInICYlIiUpKR4jISkmKSgeIiEqISMiHiclISMmHiEeISBGQz0hVSYqIyMoKCYkUiYqVFVSVyUlV1QiVyMiJSMpUicnIyIgXVJfVVpfWFRdWlRcLiIdZ1ZjWldqWl9lLiEdZGZTW1ZUZV9mXlNWYy4qHVVSZVYuISYkIiMkHVRSXmFSWlhfWlUuJiUiJSkpHVRjVlJlWmdWWlUuJyUhIyYdVVJlUl1aZGVaVS4iJyQqJyYdVl9lWmVqVGBVVi4hIiggX2BlVh9UWVJfVFYeWl5hY1ZkZFpgXx9UYF4=
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 18ffb59b61525f781cf9251045be575d
bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: www.circulation.edirecttransfer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.circulation.edirecttransfer.com/bb/VF1cIGNgaVJfX1YxWGNWUmVaX1wfVGBeICInJSInICYlIiUpKR4jISkmKSgeIiEqISMiHiclISMmHiEeISBGQz0hVSYqIyMoKCYkUiYqVFVSVyUlV1QiVyMiJSMpUicnIyIgXVJfVVpfWFRdWlRcLiIdZ1ZjWldqWl9lLiEdZGZTW1ZUZV9mXlNWYy4qHVVSZVYuISYkIiMkHVRSXmFSWlhfWlUuJiUiJSkpHVRjVlJlWmdWWlUuJyUhIyYdVVJlUl1aZGVaVS4iJyQqJyYdVl9lWmVqVGBVVi4hIiggX2BlVh9UWVJfVFYeWl5hY1ZkZFpgXx9UYF4=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Wed, 31 May 2023 18:45:34 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips
Content-Length: 209
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1