support.nationwidelegal.com/gnome2/rentfree.zip
104.194.11.114 245 B URL support.nationwidelegal.com/gnome2/rentfree.zip
IP 104.194.11.114:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 480ecafa15ce652bb10bda1e0cec64fd
6df15272a94b17a0f018e81ef009931904fb8f0e
88565be5c8c82cf14beb752f5348daf067ec94c684bf314b610a58ee873f4a7b
Analyzer Verdict Alert threatfox QakBot
GET /gnome2/rentfree.zip HTTP/1.1
Host: support.nationwidelegal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Fri, 02 Jun 2023 20:15:02 GMT
Server: Apache
Location: https://support.nationwidelegal.com/cgi-sys/suspendedpage.cgi
Content-Length: 245
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
support.nationwidelegal.com/cgi-sys/suspendedpage.cgi
104.194.11.114200 OK 7.6 kB URL User Request GET HTTP/1.1 support.nationwidelegal.com/cgi-sys/suspendedpage.cgi
IP 104.194.11.114:443
Certificate IssuercPanel, Inc.
Subjectsupport.nationwidelegal.com
Fingerprint3D:F5:F7:A4:50:33:61:B3:76:E6:F7:16:F8:D3:95:35:CD:39:40:B6
ValidityTue, 18 Apr 2023 00:00:00 GMT - Mon, 17 Jul 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4070)
Hash 74eee42fab49cc6890317e60c534e1b0
b99323f8a84daadee7727cb998093b537c7dafa6
7c6e98e6b380c411bebddfb1cb94baac6c44ecf17435ccf34e006ab59d36dcb2
GET /cgi-sys/suspendedpage.cgi HTTP/1.1
Host: support.nationwidelegal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Jun 2023 20:15:02 GMT
Server: Apache
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html
support.nationwidelegal.com/favicon.ico
104.194.11.114 245 B URL support.nationwidelegal.com/favicon.ico
IP 104.194.11.114:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 480ecafa15ce652bb10bda1e0cec64fd
6df15272a94b17a0f018e81ef009931904fb8f0e
88565be5c8c82cf14beb752f5348daf067ec94c684bf314b610a58ee873f4a7b
GET /favicon.ico HTTP/1.1
Host: support.nationwidelegal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://support.nationwidelegal.com/cgi-sys/suspendedpage.cgi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Fri, 02 Jun 2023 20:15:02 GMT
Server: Apache
Location: https://support.nationwidelegal.com/cgi-sys/suspendedpage.cgi
Content-Length: 245
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
use.fontawesome.com/releases/v5.0.6/webfonts/fa-solid-900.woff2
172.64.132.15 39 kB URL use.fontawesome.com/releases/v5.0.6/webfonts/fa-solid-900.woff2
IP 172.64.132.15:0
File type Web Open Font Format (Version 2), TrueType, length 38784, version 1.0\012- data
Hash f9b85c9463af7103b9b24bbbf09a06ed
d28d7222bcbeb8ea701a771e85f7efe006e62fb1
62554277d07b20c6bfae7c6267b3198b4846f604a37d4085bf9f54c392210b56
GET /releases/v5.0.6/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://support.nationwidelegal.com
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 20:15:03 GMT
content-type: application/font-woff2
content-length: 38784
x-amz-id-2: Wdtqxgycs3am1/D/5YZMhv9lrjyfpOUo5yEzd+MVK2ALaMHRv/clJCe6BYkCh47L/c9fuOC/X8U=
x-amz-request-id: S864H09P35V0HZG2
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:27:50 GMT
etag: "f9b85c9463af7103b9b24bbbf09a06ed"
cache-control: max-age=31556926
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dNTtWqtbRjUKZzdkFq%2FIiaf8j01Wt72lmRmsmtjVPV0G1cO9JEE0bIKGb4hR1703hHKwEUspiQBl5iIVgZcW7F8pgsB3k0ToU9L%2FhEkhoQjWV59RXVTUmdm3ZTuhk1Gkn0RnRVwE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d125dbb6c313859-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
support.nationwidelegal.com/cgi-sys/suspendedpage.cgi
104.194.11.114200 OK 7.6 kB URL User Request GET HTTP/1.1 support.nationwidelegal.com/cgi-sys/suspendedpage.cgi
IP 104.194.11.114:443
Certificate IssuercPanel, Inc.
Subjectsupport.nationwidelegal.com
Fingerprint3D:F5:F7:A4:50:33:61:B3:76:E6:F7:16:F8:D3:95:35:CD:39:40:B6
ValidityTue, 18 Apr 2023 00:00:00 GMT - Mon, 17 Jul 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4070)
Hash 74eee42fab49cc6890317e60c534e1b0
b99323f8a84daadee7727cb998093b537c7dafa6
7c6e98e6b380c411bebddfb1cb94baac6c44ecf17435ccf34e006ab59d36dcb2
GET /cgi-sys/suspendedpage.cgi HTTP/1.1
Host: support.nationwidelegal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://support.nationwidelegal.com/cgi-sys/suspendedpage.cgi
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Jun 2023 20:15:03 GMT
Server: Apache
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html