Report - allegrosto.xyz/brands

Report Overview

Submitted URL
allegrosto.xyz/brands
IP
20.255.46.211
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2024-04-24 17:28:53
Access
public
Website Title
Allegrosto
Final URL
allegrosto.xyz/brands
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
74

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
allegrosto.xyz	unknown	unknown	No data	No data	20 kB	1.7 MB	20.255.46.211
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-23	2.2 kB	184 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-24	440 B	43 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed
2024-04-24	medium	allegrosto.xyz	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	allegrosto.xyz/brands	1.1 kB	2023-11-23	2024-04-24
Pretty URL allegrosto.xyz/brands IP 20.255.46.211 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-23 18:15:55 Last Seen2024-04-24 19:29:00 Times Seen5 Hash 094e94f136dbe614f2dbe168908bc43c 4786c136f4f4b89fffd0327b46f4367efeb9769a 7f413ddf77c4fb7a9eb19a82ad2c3d206b769929ec0055fa25808ec1972f0abd Loading...

	allegrosto.xyz/brands	205 B	2023-03-07	2024-05-03
Pretty URL allegrosto.xyz/brands IP 20.255.46.211 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:23:24 Last Seen2024-05-03 19:54:27 Times Seen420 Hash 5966646a9c4f85aaae9fc3af30252771 9758c9c9e5cff00863b8539541a1bf75672e2aaf 45c7d025e38021b998df8092f67747fe6e5d68a394009da8b77e1832fb875382 Loading...

	allegrosto.xyz/brands	11 kB	2024-04-24	2024-04-24
Pretty URL allegrosto.xyz/brands IP 20.255.46.211 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 19:29:00 Last Seen2024-04-24 19:29:00 Times Seen1 Hash f872fbaf5fa9951e290ad17c5036a393 db2ac814b1d4cc9188c609393c24b61ba5298e46 67e393f9a5f3442214bc098a5f43c7d75f6f3b5c76bc77a3e7b8dbc555324bf6 Loading...

	allegrosto.xyz/assets/js/vendors.js	1.3 MB	2024-04-24	2024-04-24
Pretty URL allegrosto.xyz/assets/js/vendors.js IP 20.255.46.211 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 01:44:19 Last Seen2024-04-24 19:29:00 Times Seen2 Hash 8ea1fbeb8665aa164760d6068bf7483d 7ab187fe8dac14f335e5bbd660eb161ae8e884cc 223f5b9203590a4b5771ebdd8dfbe2c8574e09d1ed36f45b8e74105998e79f29 Loading...

	allegrosto.xyz/assets/js/aiz-core.js	84 kB	2024-04-24	2024-04-24
Pretty URL allegrosto.xyz/assets/js/aiz-core.js IP 20.255.46.211 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 01:44:18 Last Seen2024-04-24 19:29:01 Times Seen4 Hash f0469f13d8afabb5216a94f86a768f71 97e27b7dff2922b7c173e367f2546b63d67b2a98 6b9b5ceadb9d9d7ce1107363f4a40f73d909a117393d7efc3d6b566384aff5ff Loading...

	allegrosto.xyz/brands	593 B	2024-04-24	2024-04-24
Pretty URL allegrosto.xyz/brands IP 20.255.46.211 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 19:29:00 Last Seen2024-04-24 19:29:01 Times Seen1 Hash d5adfdfe2b0b8bfb7b1fc83063891477 7b28e8015acbb377be4e2674fa80ed8458acd0bb bf747487f1b3e924300c569ccf2078693f0341593471369cd2afe785203febae Loading...

		Size	First Seen	Last Seen
	#1 Eval - f7fef8930207b23ec9c04386f9a02c76	24 B	2023-03-07	2024-05-05
Pretty Observations First Seen2023-03-07 01:02:10 Last Seen2024-05-05 01:41:46 Times Seen9435 Hash f7fef8930207b23ec9c04386f9a02c76 146273d1c716700bb25aaa15e8595624b611ffdf 74867c5a2cf408b090752d3cb8767bb46fdb4a0529bc959d96f51aeb2607d7e3 Loading...

HTTP Transactions (42)

URL IP Response Size

allegrosto.xyz/assets/css/custom-style.css

20.255.46.211

200 OK

29 B

URL GET HTTP/2
allegrosto.xyz/assets/css/custom-style.css
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
ASCII text, with no line terminators
Size
29 B (29 bytes)
Hash
2cc149a2ebd1a4253dc242d54c2dd366
c28a715492b8decb160125ca7ba623e217c733e3
3b6b5f14b03f97ad3a449c30657096210268c8460408a9b77a9b4bdb966e37ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/custom-style.css HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: text/css
content-length: 29
last-modified: Wed, 20 Mar 2024 19:45:50 GMT
etag: "65fb3cee-1d"
expires: Fri, 12 Apr 2024 18:43:15 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/assets/img/placeholder.jpg

20.255.46.211

200 OK

2.5 kB

URL GET HTTP/2
allegrosto.xyz/assets/img/placeholder.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3
Size
2.5 kB (2517 bytes)
Hash
5632598c913a4107afee98e7ce1f9e4a
17398b1ef500f3c736420927da819ec69cd08d5e
b993c5624a17777a296e58d275a775899e72f320f73c254db952dbaa970739ee

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/placeholder.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 2517
last-modified: Wed, 20 Mar 2024 19:45:50 GMT
etag: "65fb3cee-9d5"
expires: Sun, 12 May 2024 06:43:16 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/EuuWodQYUuWSiYaryT1lmju7ay30tdcX6LNLRJLX.png

20.255.46.211

200 OK

3.6 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/EuuWodQYUuWSiYaryT1lmju7ay30tdcX6LNLRJLX.png
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
PNG image data, 217 x 100, 8-bit/color RGBA, non-interlaced
Size
3.6 kB (3607 bytes)
Hash
96af678baf9c5e02a4129e355fd01685
6b80ed070a13c48e8926e8f8c2959d4c2696274c
89e82736701bdcba33a01df6706b268ef2d70f4738e3f8685eed13a513378ee6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/EuuWodQYUuWSiYaryT1lmju7ay30tdcX6LNLRJLX.png HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/png
content-length: 3607
last-modified: Sat, 06 Apr 2024 16:31:54 GMT
etag: "661178fa-e17"
expires: Sun, 12 May 2024 06:43:16 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/Qyu62ZY0ss41fWrfsn7kEDIje6fe37SO7Q8QAjN4.jpg

20.255.46.211

200 OK

2.3 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/Qyu62ZY0ss41fWrfsn7kEDIje6fe37SO7Q8QAjN4.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 120x80, components 3
Size
2.3 kB (2314 bytes)
Hash
c46084f74b556dc10d1ed7146254509f
e237f6559f6dd483b80b777ec728d2d32c04d09c
9272a049ec89e4317856830c95d7792c0defbbd5d28c9731ad0fd9bc2b4ae94e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/Qyu62ZY0ss41fWrfsn7kEDIje6fe37SO7Q8QAjN4.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 2314
last-modified: Sat, 06 Apr 2024 16:31:55 GMT
etag: "661178fb-90a"
expires: Sun, 12 May 2024 10:40:38 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/pnJLUOOCynVS3zcwiKKQaTfoI80XROjVbHb2HkXX.jpg

20.255.46.211

200 OK

4.0 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/pnJLUOOCynVS3zcwiKKQaTfoI80XROjVbHb2HkXX.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 120x80, components 3
Size
4.0 kB (4003 bytes)
Hash
8bc63af89bc0f93f7c302435b7a0bbd9
bf7d82640229270810375713ddabba6f20947fe6
145519c044ac865674f020597cae21fd1c577d796d0448134b6b8d4bbc357daa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/pnJLUOOCynVS3zcwiKKQaTfoI80XROjVbHb2HkXX.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 4003
last-modified: Sat, 06 Apr 2024 16:31:54 GMT
etag: "661178fa-fa3"
expires: Sun, 12 May 2024 10:40:37 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/OORNgOuuK7i6LpaAmneoZ7XJhyXjGhn9oM2C3sHP.jpg

20.255.46.211

200 OK

1.6 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/OORNgOuuK7i6LpaAmneoZ7XJhyXjGhn9oM2C3sHP.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 120x80, components 3
Size
1.6 kB (1557 bytes)
Hash
48a909c200ccde52bdef25d2f2e439f3
45d5494f3b1f6ed144ee6b12baad168e90d35d59
a56306a0c993804bda98120a015f8398ec3fcdd35b5caac82c4933b56eff47a9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/OORNgOuuK7i6LpaAmneoZ7XJhyXjGhn9oM2C3sHP.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 1557
last-modified: Sat, 06 Apr 2024 16:31:55 GMT
etag: "661178fb-615"
expires: Sun, 12 May 2024 10:40:38 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/IhbWqyrbpQUHZd60sqz2ffGIlY5MgdhKHTZrJEVd.jpg

20.255.46.211

200 OK

2.7 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/IhbWqyrbpQUHZd60sqz2ffGIlY5MgdhKHTZrJEVd.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 120x80, components 3
Size
2.7 kB (2716 bytes)
Hash
8e26e6aafe39957fb165d94c4646f3a7
a53e55cd6782786c3643dde818e879066a7049b5
00611c36298267a4724655371249f696a450798971465e142d07c0c5218566d3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/IhbWqyrbpQUHZd60sqz2ffGIlY5MgdhKHTZrJEVd.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 2716
last-modified: Sat, 06 Apr 2024 16:31:54 GMT
etag: "661178fa-a9c"
expires: Sun, 12 May 2024 10:40:38 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/3mL9NlTwr0AdQmdYFXWYljhrNehkski5mjy71kYz.jpg

20.255.46.211

200 OK

3.9 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/3mL9NlTwr0AdQmdYFXWYljhrNehkski5mjy71kYz.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 120x80, components 3
Size
3.9 kB (3889 bytes)
Hash
01127a7b2396f97126ecfbddbc3ac63b
7001c176739fe23d958b8d7fdd1553b2b6708890
48009ef7acbed5828b96f0004094b28ab36e1417a7c080f2f8ce870aba81e686

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/3mL9NlTwr0AdQmdYFXWYljhrNehkski5mjy71kYz.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 3889
last-modified: Sat, 06 Apr 2024 16:31:54 GMT
etag: "661178fa-f31"
expires: Sun, 12 May 2024 10:18:41 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/V9qcS2Y69nRCWO7YsKibtFL1PxOcdYuIYMllM055.jpg

20.255.46.211

200 OK

2.2 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/V9qcS2Y69nRCWO7YsKibtFL1PxOcdYuIYMllM055.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 120x80, components 3
Size
2.2 kB (2221 bytes)
Hash
f265ebf1156f9799efe680a48f7015dd
467ca595585e945b3cc3c9daf3cdc12f0fd32a52
ae20c6eed7d7a9ec8296e6215d188e0e244365433e42d7913dbff3cdcff7c7b0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/V9qcS2Y69nRCWO7YsKibtFL1PxOcdYuIYMllM055.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 2221
last-modified: Sat, 06 Apr 2024 16:31:54 GMT
etag: "661178fa-8ad"
expires: Sun, 12 May 2024 10:40:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/MRrFaDAdrWuhAPUldiaH14t8HZlrbkCmKoUIZRfI.jpg

20.255.46.211

200 OK

2.4 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/MRrFaDAdrWuhAPUldiaH14t8HZlrbkCmKoUIZRfI.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 120x80, components 3
Size
2.4 kB (2373 bytes)
Hash
9bae30f3681feb5fb739a478c3028243
e896c6be81770f3ca6277845c90c6c1b43375682
b65d6c83ce0ad764dd795c40ab2740dfe1b03bd135ee2d14356c7ccfeedf8e25

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/MRrFaDAdrWuhAPUldiaH14t8HZlrbkCmKoUIZRfI.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 2373
last-modified: Sat, 06 Apr 2024 16:31:54 GMT
etag: "661178fa-945"
expires: Sun, 12 May 2024 10:40:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/CHiPPwWsYyBSKA86NensGpbPkF1PujSxg3UjyACn.jpg

20.255.46.211

200 OK

2.7 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/CHiPPwWsYyBSKA86NensGpbPkF1PujSxg3UjyACn.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 120x80, components 3
Size
2.7 kB (2736 bytes)
Hash
3abbb9ba15c49181618dc1a0ce1db3c9
3bb5fa9120186e501805318fd79a05c03ef65bf2
c3a60bcce39c05852b37aa77d3c1bea08e752688164822307b757c3d1e985ebe

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/CHiPPwWsYyBSKA86NensGpbPkF1PujSxg3UjyACn.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 2736
last-modified: Sat, 06 Apr 2024 16:31:54 GMT
etag: "661178fa-ab0"
expires: Sun, 12 May 2024 10:40:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/bfPIXVgrCkICsvbSHLlAZGTdiPJKBACckvsLoBxq.jpg

20.255.46.211

200 OK

3.2 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/bfPIXVgrCkICsvbSHLlAZGTdiPJKBACckvsLoBxq.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 120x80, components 3
Size
3.2 kB (3192 bytes)
Hash
7b3fffe6ef1568bcec9e5d3820c1725c
43d98e785ed6415e2fb9b50c5dc0630722223340
fd212b1b584b19c69279e7a94c10b0232636079464fd9d634757d99c148db492

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/bfPIXVgrCkICsvbSHLlAZGTdiPJKBACckvsLoBxq.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 3192
last-modified: Sat, 06 Apr 2024 16:31:55 GMT
etag: "661178fb-c78"
expires: Sun, 12 May 2024 10:40:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/32t6dhIilYusFyl7qDNolVLppb4v9sUJxF6foHBZ.jpg

20.255.46.211

200 OK

3.0 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/32t6dhIilYusFyl7qDNolVLppb4v9sUJxF6foHBZ.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 120x80, components 3
Size
3.0 kB (2967 bytes)
Hash
b15a08a33959171402c867ca5c65efb9
feef29f55f6f5012b5b0a8d88300dc2af561043f
b908530f7a36145f3970321ef4959006a1bda108213321970fe9e6a4eb215a16

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/32t6dhIilYusFyl7qDNolVLppb4v9sUJxF6foHBZ.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 2967
last-modified: Sat, 06 Apr 2024 16:31:54 GMT
etag: "661178fa-b97"
expires: Sun, 12 May 2024 10:40:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/DHZu4mN6igPh8C5QYJXDmlmY53ybdpHrhveWDzAe.jpg

20.255.46.211

200 OK

2.5 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/DHZu4mN6igPh8C5QYJXDmlmY53ybdpHrhveWDzAe.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 120x80, components 3
Size
2.5 kB (2549 bytes)
Hash
dae33dc64ec91885924c7863c9ec1c29
e48ee313e28878a9fe608d434ffad35fcfb38890
6494956bb301499697eadd6d372adf88ed28948271e335d98702b22c6df693a1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/DHZu4mN6igPh8C5QYJXDmlmY53ybdpHrhveWDzAe.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 2549
last-modified: Sat, 06 Apr 2024 16:31:54 GMT
etag: "661178fa-9f5"
expires: Sun, 12 May 2024 10:40:38 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/hKVK9fJ4AFupftAHV6fCQF3ysYfxlEXCha1NrSEH.jpg

20.255.46.211

200 OK

3.1 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/hKVK9fJ4AFupftAHV6fCQF3ysYfxlEXCha1NrSEH.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 120x80, components 3
Size
3.1 kB (3097 bytes)
Hash
7191d2f77e6ca9bedd7b65ad969cd707
95bf244e0bf40c9962e5ff4ac3a9afb21192f8bb
bcf76009e4de3675bbd31fc1f79064027bbc7d2320c12b3fcac34bdd9e23ecfa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/hKVK9fJ4AFupftAHV6fCQF3ysYfxlEXCha1NrSEH.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 3097
last-modified: Sat, 06 Apr 2024 16:31:54 GMT
etag: "661178fa-c19"
expires: Sun, 12 May 2024 10:40:38 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/vEBIDdc30eGS5qOD6Bdi2Me43FWn6OoWjiWGwbLK.jpg

20.255.46.211

200 OK

4.5 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/vEBIDdc30eGS5qOD6Bdi2Me43FWn6OoWjiWGwbLK.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 120x80, components 3
Size
4.5 kB (4465 bytes)
Hash
e628cbc094ab5266e77a5d0a3dbc8f23
dbea8c6bf87707669cbce8be0adac4b2c476d2a2
0da484c3f364dcf9b1397342732c8f0e53928050f9a4163bb1743b75821ff683

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/vEBIDdc30eGS5qOD6Bdi2Me43FWn6OoWjiWGwbLK.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 4465
last-modified: Sat, 06 Apr 2024 16:31:55 GMT
etag: "661178fb-1171"
expires: Sun, 12 May 2024 10:40:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/zDhMM46GhrJPFvN6L6Ejz0TPUfV69hjGH8AD2Nti.png

20.255.46.211

200 OK

5.8 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/zDhMM46GhrJPFvN6L6Ejz0TPUfV69hjGH8AD2Nti.png
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
PNG image data, 121 x 81, 8-bit/color RGBA, non-interlaced
Size
5.8 kB (5757 bytes)
Hash
a37f1388c6f15c77da62efd9901f9bfd
1c7c282a67e7a6c527f633e77ff0d007eb465a21
8ef6cda20a5bc13fdaa12605886757c443e3c7a954c8235f79760b1719221034

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/zDhMM46GhrJPFvN6L6Ejz0TPUfV69hjGH8AD2Nti.png HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/png
content-length: 5757
last-modified: Sat, 06 Apr 2024 16:31:55 GMT
etag: "661178fb-167d"
expires: Sun, 12 May 2024 10:40:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/o6Za2LmTUa455VkT5AuKkeJh6I52y3s5e6i3mdhe.png

20.255.46.211

200 OK

7.8 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/o6Za2LmTUa455VkT5AuKkeJh6I52y3s5e6i3mdhe.png
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
PNG image data, 121 x 81, 8-bit/color RGBA, non-interlaced
Size
7.8 kB (7793 bytes)
Hash
f1e7d4dcecf22dcab6aa158db51bf6be
30161d07632cd5f0ddb814bac24604f201866e4f
1b733e375cc37f383a6bf295e86e0dc9e411b8ccf6143852b8db03d2cc088ae6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/o6Za2LmTUa455VkT5AuKkeJh6I52y3s5e6i3mdhe.png HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/png
content-length: 7793
last-modified: Sat, 06 Apr 2024 16:31:55 GMT
etag: "661178fb-1e71"
expires: Sun, 12 May 2024 10:40:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/2VrKVP6Ff8JZIHgCvpCIxkjxgEKryUbIyM0ENPBu.png

20.255.46.211

200 OK

4.9 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/2VrKVP6Ff8JZIHgCvpCIxkjxgEKryUbIyM0ENPBu.png
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
PNG image data, 121 x 81, 8-bit/color RGBA, non-interlaced
Size
4.9 kB (4897 bytes)
Hash
bcce306e63dd42a13bac752181a5948f
126de7a4d57300426777eae855d33062ec70876e
624d894e23cd88aaf2c1bc12752bd032e84e34c4354c12a976f05880f42ca919

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/2VrKVP6Ff8JZIHgCvpCIxkjxgEKryUbIyM0ENPBu.png HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/png
content-length: 4897
last-modified: Sat, 06 Apr 2024 16:31:54 GMT
etag: "661178fa-1321"
expires: Sun, 12 May 2024 10:40:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/VMHUou65Rw78hzJtdA9RRzfQ9W3AvPUIf3EPz2dX.png

20.255.46.211

200 OK

10 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/VMHUou65Rw78hzJtdA9RRzfQ9W3AvPUIf3EPz2dX.png
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
PNG image data, 121 x 81, 8-bit/color RGBA, non-interlaced
Size
10 kB (10316 bytes)
Hash
ff3fd217d338f999ff72f2826e4d8863
18154e43753980d9c988b25787d4f548c47b9406
dcc7f0a3eb039405f3b7c5fea5fb6263d2e422a1b65cd1162bf615e9fb0c4453

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/VMHUou65Rw78hzJtdA9RRzfQ9W3AvPUIf3EPz2dX.png HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/png
content-length: 10316
last-modified: Sat, 06 Apr 2024 16:31:54 GMT
etag: "661178fa-284c"
expires: Sun, 12 May 2024 07:59:42 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48432, version 1.0
Size
48 kB (48432 bytes)
Hash
e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5

HTTP Headers

GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://allegrosto.xyz
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:43:57 GMT
expires: Fri, 18 Apr 2025 02:43:57 GMT
cache-control: public, max-age=31536000
age: 571472
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48432, version 1.0
Size
48 kB (48432 bytes)
Hash
e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5

HTTP Headers

GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://allegrosto.xyz
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:43:57 GMT
expires: Fri, 18 Apr 2025 02:43:57 GMT
cache-control: public, max-age=31536000
age: 571472
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2

216.58.207.227

200 OK

35 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 35120, version 1.0
Size
35 kB (35120 bytes)
Hash
dd986ff1050050613be051863773d677
51a12487fd51cc02ca54a984f82d63318807ca2e
d9784dbf11886ea032ffbd00f499d333519babe001eacc19df7ab89de17bec47

HTTP Headers

GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://allegrosto.xyz
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:50:03 GMT
expires: Fri, 18 Apr 2025 02:50:03 GMT
cache-control: public, max-age=31536000
age: 571106
last-modified: Thu, 14 Sep 2023 01:03:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

allegrosto.xyz/assets/img/placeholder-rect.jpg

20.255.46.211

200 OK

6.6 kB

URL GET HTTP/2
allegrosto.xyz/assets/img/placeholder-rect.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x600, components 3
Size
6.6 kB (6591 bytes)
Hash
76891b0b93848682626db79b8d421b8d
f5532d4d9fd281b513922ea75639feb284f24d63
6ce595f5fd220331717134f243812e695141ce3c9925bd4135dae9291228e8a8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/placeholder-rect.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 6591
last-modified: Wed, 20 Mar 2024 19:45:50 GMT
etag: "65fb3cee-19bf"
expires: Sun, 12 May 2024 06:43:16 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/A4exnDZSrAXvDu3OLWe07zbp2XXmwnQXb8iHu7jE.png

20.255.46.211

200 OK

48 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/A4exnDZSrAXvDu3OLWe07zbp2XXmwnQXb8iHu7jE.png
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
PNG image data, 800 x 111, 8-bit/color RGBA, non-interlaced
Size
48 kB (48258 bytes)
Hash
76d2e804b13ae4a73982c3b2d75df903
6747c9c593477ea96a3c96b808f2c93ce1a792ac
dab6d5663f1c13413064c8e61aaa469dee17d921ff466b52380d4ecdacfcba45

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/A4exnDZSrAXvDu3OLWe07zbp2XXmwnQXb8iHu7jE.png HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/png
content-length: 48258
last-modified: Sat, 06 Apr 2024 16:31:54 GMT
etag: "661178fa-bc82"
expires: Sun, 12 May 2024 06:43:16 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/rcpEO7fXVzm4kaejPNwqw6fwyZSwJEx5zyx953QB.jpg

20.255.46.211

200 OK

3.5 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/rcpEO7fXVzm4kaejPNwqw6fwyZSwJEx5zyx953QB.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 120x80, components 3
Size
3.5 kB (3468 bytes)
Hash
fbe8385aa41050aea89f27479a9d3c73
d59fc028082c9b12662eac627a932bc335aed43b
54c61be265e3fb8e7b9793ccd422f621c75a1070dd596dfd33c7d2ca13141e23

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/rcpEO7fXVzm4kaejPNwqw6fwyZSwJEx5zyx953QB.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 3468
last-modified: Sat, 06 Apr 2024 16:31:54 GMT
etag: "661178fa-d8c"
expires: Sun, 12 May 2024 08:00:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/q0LUGrqfNrbV9PwjyBvkLzGgN5tTnmyKYhMffagF.jpg

20.255.46.211

200 OK

6.9 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/q0LUGrqfNrbV9PwjyBvkLzGgN5tTnmyKYhMffagF.jpg
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 290x300, components 3
Size
6.9 kB (6872 bytes)
Hash
e17996b8100bf7a591942289e693541b
494053a10c05b140ec0db5979ab0b67719cd030f
79c14d866ba7608d343b3839d335d40e859e122d5b61db20b50b5227db47beaf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/q0LUGrqfNrbV9PwjyBvkLzGgN5tTnmyKYhMffagF.jpg HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/jpeg
content-length: 6872
last-modified: Sat, 06 Apr 2024 16:31:55 GMT
etag: "661178fb-1ad8"
expires: Sun, 12 May 2024 10:40:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/assets/img/avatar-place.png

20.255.46.211

200 OK

2.2 kB

URL GET HTTP/2
allegrosto.xyz/assets/img/avatar-place.png
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
PNG image data, 200 x 200, 8-bit colormap, non-interlaced
Size
2.2 kB (2193 bytes)
Hash
ef7330479dbe02e220ad6dee9998df64
c433e1915c00ba4693a76958b9f1cc45df4a0bbe
54efe0671051e55fa2622b0bdfdf959389a82840f6a42c06acf99b7f8eb97da8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/avatar-place.png HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: image/png
content-length: 2193
last-modified: Wed, 20 Mar 2024 19:45:50 GMT
etag: "65fb3cee-891"
expires: Sun, 12 May 2024 06:43:16 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/assets/fonts/la-solid-900.woff2

20.255.46.211

200 OK

97 kB

URL GET HTTP/2
allegrosto.xyz/assets/fonts/la-solid-900.woff2
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
Web Open Font Format (Version 2), TrueType, length 96752, version 1.0
Size
97 kB (96752 bytes)
Hash
36fc297902c9a2e857858baa6ac25f2c
89d9531c0c70a8751dff83c1917baab1f16a2071
10a68e01209d939afa9318ee71601b0a6e10f025d4cd6d98a492d340b73941fb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/fonts/la-solid-900.woff2 HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/assets/css/vendors.css
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:29 GMT
content-type: font/woff2
content-length: 96752
last-modified: Wed, 20 Mar 2024 19:45:50 GMT
etag: "65fb3cee-179f0"
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

fonts.googleapis.com/earlyaccess/notosansscsliced.css

142.250.74.106

200 OK

42 kB

URL GET HTTP/2
fonts.googleapis.com/earlyaccess/notosansscsliced.css
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
42 kB (42049 bytes)
Hash
3314266a4989b8e0dafcd2d29f49847f
23bda5dd9bc23dc99653e0553f98cb4c52f948db
c83e13fbe18a2c71001911639b63373498f6132be5c9d3e142053e32570bcc1e

HTTP Headers

GET /earlyaccess/notosansscsliced.css HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
expires: Wed, 24 Apr 2024 17:28:28 GMT
date: Wed, 24 Apr 2024 17:28:28 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

216.58.207.227

200 OK

48 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74
ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT

File type
Web Open Font Format (Version 2), TrueType, length 48432, version 1.0
Size
48 kB (48432 bytes)
Hash
e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5

HTTP Headers

GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://allegrosto.xyz
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:43:57 GMT
expires: Fri, 18 Apr 2025 02:43:57 GMT
cache-control: public, max-age=31536000
age: 571472
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

allegrosto.xyz/assets/js/vendors.js

20.255.46.211

200 OK

429 kB

URL GET HTTP/2
allegrosto.xyz/assets/js/vendors.js
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
gzip compressed data, from Unix
Size
429 kB (428698 bytes)
Hash
fc9ef8b77984d819d5eb153593044f69
28f930d54034f3eba7c75e1450100df4f0217340
56680a1ef21b2ca3f77184141ca4e1b540918f5e76feb99c5e4656829fc6c020

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/vendors.js HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: application/javascript
last-modified: Wed, 20 Mar 2024 19:45:50 GMT
vary: Accept-Encoding
etag: W/"65fb3cee-147f99"
expires: Thu, 25 Apr 2024 05:27:53 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
via: lucky-node26
cdn-cache: HIT
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/wAPQy4aVQmF7N4MUsjj1xrvX0rH5mtp7WSg6rwFk.png

20.255.46.211

200 OK

1.0 kB

URL GET HTTP/2
allegrosto.xyz/uploads/all/wAPQy4aVQmF7N4MUsjj1xrvX0rH5mtp7WSg6rwFk.png
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
1.0 kB (1044 bytes)
Hash
336c13ef8bc7d947d840bee4d3a24270
0bcd8fdc4dc81757fd212dfafe9988e50a2ab142
71fb24d6f5c8a35e901721636bcc7b25fb70be191df9942978404964068f880d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/wAPQy4aVQmF7N4MUsjj1xrvX0rH5mtp7WSg6rwFk.png HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:29 GMT
content-type: image/png
content-length: 1044
last-modified: Sat, 06 Apr 2024 16:31:55 GMT
etag: "661178fb-414"
expires: Sun, 12 May 2024 06:59:46 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/assets/img/flags/cn.png

20.255.46.211

200 OK

472 B

URL GET HTTP/2
allegrosto.xyz/assets/img/flags/cn.png
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced
Size
472 B (472 bytes)
Hash
a82ff00f39eff54062328b4474c33dbc
9c7185e038ea1000382fb1b14b88f3e9f2d99c14
7058233b5bdfdd4279e92e9dfe64bd4a61afd7e76d97dba498ce1d5777b92185

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/flags/cn.png HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:29 GMT
content-type: image/png
content-length: 472
last-modified: Wed, 20 Mar 2024 19:45:50 GMT
etag: "65fb3cee-1d8"
expires: Sun, 12 May 2024 06:43:17 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/uploads/all/izM2N1U8VCX6pB7rLR8hnrmcw0pnq2BBmiXXxPAC.png

20.255.46.211

404 Not Found

146 B

URL GET HTTP/2
allegrosto.xyz/uploads/all/izM2N1U8VCX6pB7rLR8hnrmcw0pnq2BBmiXXxPAC.png
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/all/izM2N1U8VCX6pB7rLR8hnrmcw0pnq2BBmiXXxPAC.png HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: openresty
date: Wed, 24 Apr 2024 17:28:30 GMT
content-type: text/html
content-length: 146
via: lucky-node26
cdn-cache: MISS
X-Firefox-Spdy: h2

allegrosto.xyz/assets/css/vendors.css

20.255.46.211

200 OK

606 kB

URL GET HTTP/2
allegrosto.xyz/assets/css/vendors.css
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
ASCII text, with very long lines (625), with CRLF line terminators
Size
606 kB (605981 bytes)
Hash
f35d5a0fbbf7f414148f6694eb202fa7
77e9227f6879b2dfc17c96c1a8eacb9f995437f4
3e599e3dec4b56fceb8ec7df37e09447bb93bd1687c6306f21c0cea9874c1e8b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/vendors.css HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: text/css
last-modified: Wed, 20 Mar 2024 19:45:50 GMT
vary: Accept-Encoding
etag: W/"65fb3cee-93f1d"
expires: Thu, 25 Apr 2024 05:27:53 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
via: lucky-node26
cdn-cache: HIT
X-Firefox-Spdy: h2

allegrosto.xyz/assets/js/aiz-core.js

20.255.46.211

200 OK

84 kB

URL GET HTTP/2
allegrosto.xyz/assets/js/aiz-core.js
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
84 kB (83917 bytes)
Hash
f0469f13d8afabb5216a94f86a768f71
97e27b7dff2922b7c173e367f2546b63d67b2a98
6b9b5ceadb9d9d7ce1107363f4a40f73d909a117393d7efc3d6b566384aff5ff

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/aiz-core.js HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: application/javascript
last-modified: Wed, 20 Mar 2024 19:45:50 GMT
vary: Accept-Encoding
etag: W/"65fb3cee-147cd"
expires: Thu, 25 Apr 2024 05:27:53 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
via: lucky-node26
cdn-cache: HIT
X-Firefox-Spdy: h2

allegrosto.xyz/assets/css/main.css

20.255.46.211

200 OK

31 kB

URL GET HTTP/2
allegrosto.xyz/assets/css/main.css
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type

Size
31 kB (31440 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/main.css HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: text/css
last-modified: Wed, 20 Mar 2024 19:45:50 GMT
vary: Accept-Encoding
etag: W/"65fb3cee-7ad0"
expires: Tue, 23 Apr 2024 21:52:26 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
via: lucky-node26
cdn-cache: HIT
X-Firefox-Spdy: h2

allegrosto.xyz/brands

20.255.46.211

200 OK

96 kB

URL User Request GET HTTP/2
allegrosto.xyz/brands
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type

Size
96 kB (95680 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /brands HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:27 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache, private
set-cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow; expires=Wed, 24-Apr-2024 19:28:27 GMT; Max-Age=7200; path=/; httponly
strict-transport-security: max-age=31536000
content-encoding: gzip
via: lucky-node26
X-Firefox-Spdy: h2

allegrosto.xyz/assets/css/aiz-core.css

20.255.46.211

200 OK

183 kB

URL GET HTTP/2
allegrosto.xyz/assets/css/aiz-core.css
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
assembler source, ASCII text, with CRLF line terminators
Size
183 kB (182827 bytes)
Hash
4a432579f2d786af87c0d7455ea78b52
e5907fa29809653254741317a675500771780de3
a32fe058058466ec7f30d76c252ea79036a3298ce9cfd3a0c37f0d8169650eba

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/aiz-core.css HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: text/css
last-modified: Mon, 08 Apr 2024 12:33:24 GMT
vary: Accept-Encoding
etag: W/"6613e414-2ca2b"
expires: Thu, 25 Apr 2024 05:27:53 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
via: lucky-node26
cdn-cache: HIT
X-Firefox-Spdy: h2

allegrosto.xyz/assets/fonts/la-regular-400.woff2

20.255.46.211

200 OK

13 kB

URL GET HTTP/2
allegrosto.xyz/assets/fonts/la-regular-400.woff2
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
Web Open Font Format (Version 2), TrueType, length 12900, version 1.0
Size
13 kB (12900 bytes)
Hash
88d9d9416c58bde56378dc4439e3a144
bebed8d7033a4df35bebba69f1fc261a78a4ee22
51ca2c00a3e30945e52227147fed9e296dde03af3c4d7589e8e95ca5740037db

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/fonts/la-regular-400.woff2 HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/assets/css/vendors.css
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:29 GMT
content-type: font/woff2
content-length: 12900
last-modified: Wed, 20 Mar 2024 19:45:50 GMT
etag: "65fb3cee-3264"
strict-transport-security: max-age=31536000
via: lucky-node26
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

allegrosto.xyz/assets/css/google.css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i&display=swap

20.255.46.211

200 OK

31 kB

URL GET HTTP/2
allegrosto.xyz/assets/css/google.css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i&display=swap
IP
20.255.46.211:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://allegrosto.xyz/brands
Certificate
IssuerLet's Encrypt
Subjectallegrosto.xyz
FingerprintED:01:78:D3:83:0C:79:02:DD:BE:B4:44:55:F4:24:DB:4B:9C:B4:4F
ValidityFri, 05 Apr 2024 05:54:36 GMT - Thu, 04 Jul 2024 05:54:35 GMT

File type
ASCII text, with CRLF line terminators
Size
31 kB (31315 bytes)
Hash
0f0181f74dbcdf9ef98ee75c3ae62798
a6ba09c4e6c38fb17225f6bfd4afa7ee1da02c2d
ed89d98058c99e0f944b94856f95927eb04279b4d20cc81c22dd53266a587775

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/google.css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i&display=swap HTTP/1.1
Host: allegrosto.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://allegrosto.xyz/brands
Cookie: allegro_session=TU3YXsf9mIHrBfYdumAV8Gq84XlOJjpfyN3RYdow
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Wed, 24 Apr 2024 17:28:28 GMT
content-type: text/css
last-modified: Wed, 20 Mar 2024 19:45:50 GMT
vary: Accept-Encoding
etag: W/"65fb3cee-7a53"
expires: Thu, 25 Apr 2024 05:27:53 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
via: lucky-node26
cdn-cache: HIT
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (42)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections