| whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== |  207.55.255.20 | 200 OK | 848 kB |
URL User Request GET HTTP/1.1whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== IP207.55.255.20:443 ASN#9115 Internet Names for Business Inc
CertificateIssuercPanel, Inc. Subjectwhattosaybooks.com FingerprintF8:FA:83:8E:F8:19:27:55:F3:7D:1F:2D:49:5F:48:CB:6C:47:3B:D1 ValidityFri, 16 Feb 2024 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (13529), with CRLF line terminators Size848 kB (847890 bytes) Hash03d45013c46e51ec93adb163debfcb1d ee0b07f8ce3aa240c2db516638035c9748742462 53aca69595068b0d38f5db6aae23d1e1775fd80c5bda54ecca1fc5b225e9270f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== HTTP/1.1
Host: whattosaybooks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 13:53:56 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/1.6.1/jquery.min.js |  104.17.25.14 | 200 OK | 28 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/1.6.1/jquery.min.js IP104.17.25.14:443
Requested byhttps://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (32764) Hasha34f78c3aecd182144818eb4b7303fda 6fca78dac2797c02d86a4bf6514eda398b7dbe62 c784376960f3163dc760bc019e72e5fed78203745a5510c69992a39d1d8fe776
GET /ajax/libs/jquery/1.6.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whattosaybooks.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 28 Mar 2024 13:53:56 GMT
content-type: application/javascript; charset=utf-8
content-length: 28293
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-164ce"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3087081
expires: Tue, 18 Mar 2025 13:53:56 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Am6f%2BcmGeanPWknVXXsGQpHRal1c2BMuBcEHrhBVRP9bNBW8boluwBU%2FWsVkMCNx2T3lY4Jjlg7LGuXoA%2BUhF1FVZasu%2BMxdAdrc%2BzdiowkgYJiSz6kOqRGasTDHA5C%2B0bW4Q1Gw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 86b81bfa8c3f56cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| whattosaybooks.com/Fy6Ws/assets/styles.c058735894c258ba9f74.bundle.css | 207.55.255.20 | 404 Not Found | 315 B |
URL GET HTTP/1.1whattosaybooks.com/Fy6Ws/assets/styles.c058735894c258ba9f74.bundle.css IP207.55.255.20:443 ASN#9115 Internet Names for Business Inc
Requested byhttps://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== CertificateIssuercPanel, Inc. Subjectwhattosaybooks.com FingerprintF8:FA:83:8E:F8:19:27:55:F3:7D:1F:2D:49:5F:48:CB:6C:47:3B:D1 ValidityFri, 16 Feb 2024 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Fy6Ws/assets/styles.c058735894c258ba9f74.bundle.css HTTP/1.1
Host: whattosaybooks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 28 Mar 2024 13:53:57 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| whattosaybooks.com/Fy6Ws/Resources/images/keyboardLowerCaseLowContrast.png | 207.55.255.20 | 404 Not Found | 315 B |
URL GET HTTP/1.1whattosaybooks.com/Fy6Ws/Resources/images/keyboardLowerCaseLowContrast.png IP207.55.255.20:443 ASN#9115 Internet Names for Business Inc
Requested byhttps://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== CertificateIssuercPanel, Inc. Subjectwhattosaybooks.com FingerprintF8:FA:83:8E:F8:19:27:55:F3:7D:1F:2D:49:5F:48:CB:6C:47:3B:D1 ValidityFri, 16 Feb 2024 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Fy6Ws/Resources/images/keyboardLowerCaseLowContrast.png HTTP/1.1
Host: whattosaybooks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 28 Mar 2024 13:53:57 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| whattosaybooks.com/Fy6Ws/Resources/images/SecondAuthenticationMethod/cellphone@2x.png | 207.55.255.20 | 404 Not Found | 315 B |
URL GET HTTP/1.1whattosaybooks.com/Fy6Ws/Resources/images/SecondAuthenticationMethod/cellphone@2x.png IP207.55.255.20:443 ASN#9115 Internet Names for Business Inc
Requested byhttps://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== CertificateIssuercPanel, Inc. Subjectwhattosaybooks.com FingerprintF8:FA:83:8E:F8:19:27:55:F3:7D:1F:2D:49:5F:48:CB:6C:47:3B:D1 ValidityFri, 16 Feb 2024 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Fy6Ws/Resources/images/SecondAuthenticationMethod/cellphone@2x.png HTTP/1.1
Host: whattosaybooks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 28 Mar 2024 13:53:57 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| whattosaybooks.com/Fy6Ws/assets/login_background.90c27ececc146068428f.jpg | 207.55.255.20 | 404 Not Found | 315 B |
URL GET HTTP/1.1whattosaybooks.com/Fy6Ws/assets/login_background.90c27ececc146068428f.jpg IP207.55.255.20:443 ASN#9115 Internet Names for Business Inc
Requested byhttps://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== CertificateIssuercPanel, Inc. Subjectwhattosaybooks.com FingerprintF8:FA:83:8E:F8:19:27:55:F3:7D:1F:2D:49:5F:48:CB:6C:47:3B:D1 ValidityFri, 16 Feb 2024 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Fy6Ws/assets/login_background.90c27ececc146068428f.jpg HTTP/1.1
Host: whattosaybooks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 28 Mar 2024 13:53:57 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| whattosaybooks.com/Fy6Ws/assets/logo_positivo_login-big.d0676c56ea8632b469ad.png | 207.55.255.20 | 404 Not Found | 315 B |
URL GET HTTP/1.1whattosaybooks.com/Fy6Ws/assets/logo_positivo_login-big.d0676c56ea8632b469ad.png IP207.55.255.20:443 ASN#9115 Internet Names for Business Inc
Requested byhttps://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== CertificateIssuercPanel, Inc. Subjectwhattosaybooks.com FingerprintF8:FA:83:8E:F8:19:27:55:F3:7D:1F:2D:49:5F:48:CB:6C:47:3B:D1 ValidityFri, 16 Feb 2024 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Fy6Ws/assets/logo_positivo_login-big.d0676c56ea8632b469ad.png HTTP/1.1
Host: whattosaybooks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 28 Mar 2024 13:53:57 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| whattosaybooks.com/Fy6Ws/assets/icbankingicon.ico | 207.55.255.20 | 404 Not Found | 315 B |
URL GET HTTP/1.1whattosaybooks.com/Fy6Ws/assets/icbankingicon.ico IP207.55.255.20:443 ASN#9115 Internet Names for Business Inc
Requested byhttps://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== CertificateIssuercPanel, Inc. Subjectwhattosaybooks.com FingerprintF8:FA:83:8E:F8:19:27:55:F3:7D:1F:2D:49:5F:48:CB:6C:47:3B:D1 ValidityFri, 16 Feb 2024 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Fy6Ws/assets/icbankingicon.ico HTTP/1.1
Host: whattosaybooks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 28 Mar 2024 13:53:57 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
|
| whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== | 207.55.255.20 | 200 OK | 409 kB |
URL User Request GET HTTP/1.1whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== IP207.55.255.20:443 ASN#9115 Internet Names for Business Inc
CertificateIssuercPanel, Inc. Subjectwhattosaybooks.com FingerprintF8:FA:83:8E:F8:19:27:55:F3:7D:1F:2D:49:5F:48:CB:6C:47:3B:D1 ValidityFri, 16 Feb 2024 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (13529), with CRLF line terminators Size409 kB (408639 bytes) Hash457fdbb89c3f951e717be33268e324a1 aa22934c8f77d74497133e3675a6131e93dad98b af71440e56587baaeabd859ff668f2c075b5f8c441230055fc358e1d8b0986d1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== HTTP/1.1
Host: whattosaybooks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 13:53:57 GMT
Server: Apache
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== | 207.55.255.20 | 200 OK | 408 kB |
URL GET HTTP/1.1whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== IP207.55.255.20:443 ASN#9115 Internet Names for Business Inc
Requested byhttps://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== CertificateIssuercPanel, Inc. Subjectwhattosaybooks.com FingerprintF8:FA:83:8E:F8:19:27:55:F3:7D:1F:2D:49:5F:48:CB:6C:47:3B:D1 ValidityFri, 16 Feb 2024 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (13529), with CRLF line terminators Size408 kB (408136 bytes) Hash61cd3cf15d58274dda6c371019dfdccf 11ba6bb5cc93c34bfd60d913e832a6f981b43b24 65d134d98b15aae461d51f9bd9efdf787a36123728f77a4d794983302e77cb73
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ== HTTP/1.1
Host: whattosaybooks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whattosaybooks.com/Fy6Ws/YXRsYW50YXNlcnZpY2VAYXNwcG9vbGNvLmNvbQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 13:53:57 GMT
Server: Apache
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|