| visit.bbbmwe.com/Admin/UrlCallbacks/commonLink/u/2422/urlId/89/rcpt/cmVzZXJ2YXRpb25AdmVyYWhvdGVsc2VhZ2F0ZS5jb20= |  45.147.51.191 | 302 Found | 0 B |
URL User Request GET HTTP/1.1visit.bbbmwe.com/Admin/UrlCallbacks/commonLink/u/2422/urlId/89/rcpt/cmVzZXJ2YXRpb25AdmVyYWhvdGVsc2VhZ2F0ZS5jb20= IP45.147.51.191:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /Admin/UrlCallbacks/commonLink/u/2422/urlId/89/rcpt/cmVzZXJ2YXRpb25AdmVyYWhvdGVsc2VhZ2F0ZS5jb20= HTTP/1.1
Host: visit.bbbmwe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 28 Mar 2024 10:11:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Location: http://cb.bossedm.com/Admin/UrlCallbacks/rejectMail
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: frame-ancestors 'self'; default-src 'self' www.bossedm.com 'unsafe-inline' 'unsafe-eval' blob: data: ;
X-Xss-Protection: 1;mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: origin
X-Cache-Status: MISS
|
| cb.bossedm.com/Admin/UrlCallbacks/rejectMail | 45.147.51.191 | 200 OK | 460 B |
URL User Request GET HTTP/1.1cb.bossedm.com/Admin/UrlCallbacks/rejectMail IP45.147.51.191:80
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hashe76b418690e16d5ab7d3b7671d748ed6 4a10e3f7257043fd9960da8b08cd935e4201723a 7f85ba6a3151e7cdc4cf667e8cae0d8bd70c297512061c57406ced88d2cade7a
GET /Admin/UrlCallbacks/rejectMail HTTP/1.1
Host: cb.bossedm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 28 Mar 2024 10:12:02 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: frame-ancestors 'self'; default-src 'self' www.bossedm.com 'unsafe-inline' 'unsafe-eval' blob: data: ;
X-Xss-Protection: 1;mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: origin
X-Cache-Status: MISS
Content-Encoding: gzip
|
| cb.bossedm.com/Admin/images/yes-v.png |  108.181.73.44 | 200 OK | 5.8 kB |
URL GET HTTP/1.1cb.bossedm.com/Admin/images/yes-v.png IP108.181.73.44:80
Requested byhttp://cb.bossedm.com/Admin/UrlCallbacks/rejectMail
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced Hashcec5d418654a1c696f741207d5234bce 9c0cf8f87f5b5695918530d9b8155b415b9f0484 1dfb5367a457e1ce40296fc939da9601b21ad869c03e25634535733b191ce6c6
GET /Admin/images/yes-v.png HTTP/1.1
Host: cb.bossedm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://cb.bossedm.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 28 Mar 2024 10:05:35 GMT
Content-Type: image/png
Content-Length: 5796
Connection: keep-alive
Last-Modified: Thu, 14 Oct 2021 01:55:34 GMT
ETag: "61678e16-16a4"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
X-Cache-Status: HIT
Accept-Ranges: bytes
|
| cb.bossedm.com/favicon.ico | 45.147.51.191 | 404 Not Found | 20 B |
URL GET HTTP/1.1cb.bossedm.com/favicon.ico IP45.147.51.191:80
Requested byhttp://cb.bossedm.com/Admin/UrlCallbacks/rejectMail
File typegzip compressed data, max speed, from Unix Hasha4745abc5e7fdb89cc6df3069f3c6e69 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /favicon.ico HTTP/1.1
Host: cb.bossedm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://cb.bossedm.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 28 Mar 2024 10:12:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|