w0yxe2.webwave.dev/
185.73.228.142 31 kB IP 185.73.228.142:0
ASN #20853 eTOP sp. z o.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (51243)
Hash da2dd9575b8c195e318ae4c328010db5
c10f60aa79086210aaf6c41c7de84e6c8be31887
993aa9d1c7fc2aa93c9cee03ac21e65463c5bbe75117d15e9ff8728c3bb9e311
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: w0yxe2.webwave.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 15:45:53 GMT
server: Apache/2.4.58 (Unix) OpenSSL/3.0.11
content-security-policy: frame-ancestors 'self' webwavecms.com webwave.me ro.webwave.me webwave.ro webwave.com.au szablony.webwavecms.com templates.webwave.me templates.webwave.com.au sabloane.webwave.ro ;
x-application-context: application:production
content-type: text/html;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cacheable: true
x-varnish: 235031999 247956240
age: 3
via: 1.1 varnish (Varnish/6.1)
set-cookie: cache-with-varnish=true
accept-ranges: bytes
content-length: 31179
X-Firefox-Spdy: h2
w0yxe2.webwave.dev/files/dynamicContent/sites/w0yxe2/css/webpage_1/lpr2eyce.css
185.73.228.142200 OK 790 B URL GET HTTP/2 w0yxe2.webwave.dev/files/dynamicContent/sites/w0yxe2/css/webpage_1/lpr2eyce.css
IP 185.73.228.142:443
ASN #20853 eTOP sp. z o.o.
Requested by https://w0yxe2.webwave.dev/
Certificate IssuerLet's Encrypt
Subjectwebwave.dev
Fingerprint4D:F6:FF:A1:FD:67:1A:76:E7:44:89:6A:0B:55:10:3F:EF:A9:F2:C3
ValiditySat, 11 Nov 2023 01:27:10 GMT - Fri, 09 Feb 2024 01:27:09 GMT
File type ASCII text, with very long lines (6579), with no line terminators
Hash 762bb02213a8fb3b9af9325b8eeb22f9
0ce2d215de96f0ce35e0370f5ed823ccc1487e56
f96c3826ec5fe5e8abd67b0048ce42f4a82fb97872865189fc0bb9c966472f11
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /files/dynamicContent/sites/w0yxe2/css/webpage_1/lpr2eyce.css HTTP/1.1
Host: w0yxe2.webwave.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w0yxe2.webwave.dev/
Cookie: cache-with-varnish=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 15:45:57 GMT
server: Apache/2.4.58 (Unix) OpenSSL/3.0.11
content-security-policy: frame-ancestors 'self' webwavecms.com webwave.me ro.webwave.me webwave.ro webwave.com.au szablony.webwavecms.com templates.webwave.me templates.webwave.com.au sabloane.webwave.ro ;
last-modified: Mon, 04 Dec 2023 15:27:28 GMT
etag: "19b3-60bb0c1756700-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
content-length: 790
content-type: text/css
X-Firefox-Spdy: h2
w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/websitesResources/i18nModule-08eb1fcda769abdfc7045170141767c9.js
185.73.228.142200 OK 11 kB URL GET HTTP/2 w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/websitesResources/i18nModule-08eb1fcda769abdfc7045170141767c9.js
IP 185.73.228.142:443
ASN #20853 eTOP sp. z o.o.
Requested by https://w0yxe2.webwave.dev/
Certificate IssuerLet's Encrypt
Subjectwebwave.dev
Fingerprint4D:F6:FF:A1:FD:67:1A:76:E7:44:89:6A:0B:55:10:3F:EF:A9:F2:C3
ValiditySat, 11 Nov 2023 01:27:10 GMT - Fri, 09 Feb 2024 01:27:09 GMT
File type ASCII text, with very long lines (656)
Hash 837796cdff6a704db2b14f230f6707fb
6a98cced1e751f93ee5e4808764a82cfffe19d1c
ed5dba42cc82983ce0b05cc938ad20580fdac69ff37a6952169be070c4ab746d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /files/staticContent/5.68/websitesResources/websitesResources/i18nModule-08eb1fcda769abdfc7045170141767c9.js HTTP/1.1
Host: w0yxe2.webwave.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w0yxe2.webwave.dev/
Cookie: cache-with-varnish=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 15:45:57 GMT
server: Apache/2.4.58 (Unix) OpenSSL/3.0.11
content-security-policy: frame-ancestors 'self' webwavecms.com webwave.me ro.webwave.me webwave.ro webwave.com.au szablony.webwavecms.com templates.webwave.me templates.webwave.com.au sabloane.webwave.ro ;
last-modified: Fri, 01 Dec 2023 14:23:25 GMT
etag: "91ca-60b7382de1140-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
content-length: 11043
content-type: application/javascript
X-Firefox-Spdy: h2
w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/websitesResources/jQueryLibrariesModule-0cdf62eb56e3f08e21bca4b25474afb2.js
185.73.228.142 35 kB URL w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/websitesResources/jQueryLibrariesModule-0cdf62eb56e3f08e21bca4b25474afb2.js
IP 185.73.228.142:0
ASN #20853 eTOP sp. z o.o.
File type ASCII text, with very long lines (696)
Hash 891590f6f6aa1d1f620a31e015839480
be0476cd0c18343566b54df6fbfa5dc5f8822ff9
30c3960f6ae4b9710c830c357d0934683c05a0930f7a7279d8323bdfa9881217
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /files/staticContent/5.68/websitesResources/websitesResources/jQueryLibrariesModule-0cdf62eb56e3f08e21bca4b25474afb2.js HTTP/1.1
Host: w0yxe2.webwave.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w0yxe2.webwave.dev/
Cookie: cache-with-varnish=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 15:45:57 GMT
server: Apache/2.4.58 (Unix) OpenSSL/3.0.11
content-security-policy: frame-ancestors 'self' webwavecms.com webwave.me ro.webwave.me webwave.ro webwave.com.au szablony.webwavecms.com templates.webwave.me templates.webwave.com.au sabloane.webwave.ro ;
last-modified: Fri, 01 Dec 2023 14:24:42 GMT
etag: "17dcd-60b738774fe80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
content-length: 35009
content-type: application/javascript
X-Firefox-Spdy: h2
w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/websitesResources/photoswipeModule-4fe5dd38bc53c9f28519ace591ca4e61.js
185.73.228.142 17 kB URL w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/websitesResources/photoswipeModule-4fe5dd38bc53c9f28519ace591ca4e61.js
IP 185.73.228.142:0
ASN #20853 eTOP sp. z o.o.
File type ASCII text, with very long lines (539)
Hash 8460377c1a9d928e4737f9f1eec19cc1
5ebba8c81860f0e699461657a47419fde4da2cc0
f3a9169f5c02515f91bf557a3b373c4a0e117ce27a38a08ec2ec620a2298f45e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /files/staticContent/5.68/websitesResources/websitesResources/photoswipeModule-4fe5dd38bc53c9f28519ace591ca4e61.js HTTP/1.1
Host: w0yxe2.webwave.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w0yxe2.webwave.dev/
Cookie: cache-with-varnish=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 15:45:57 GMT
server: Apache/2.4.58 (Unix) OpenSSL/3.0.11
content-security-policy: frame-ancestors 'self' webwavecms.com webwave.me ro.webwave.me webwave.ro webwave.com.au szablony.webwavecms.com templates.webwave.me templates.webwave.com.au sabloane.webwave.ro ;
last-modified: Fri, 01 Dec 2023 14:24:09 GMT
etag: "acca-60b73857d7440-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
content-length: 16550
content-type: application/javascript
X-Firefox-Spdy: h2
w0yxe2.webwave.dev/files/dynamicContent/sites/w0yxe2/js/webpage_1/objectsStore/lpr2eych.js
185.73.228.142200 OK 1.4 kB URL GET HTTP/2 w0yxe2.webwave.dev/files/dynamicContent/sites/w0yxe2/js/webpage_1/objectsStore/lpr2eych.js
IP 185.73.228.142:443
ASN #20853 eTOP sp. z o.o.
Requested by https://w0yxe2.webwave.dev/
Certificate IssuerLet's Encrypt
Subjectwebwave.dev
Fingerprint4D:F6:FF:A1:FD:67:1A:76:E7:44:89:6A:0B:55:10:3F:EF:A9:F2:C3
ValiditySat, 11 Nov 2023 01:27:10 GMT - Fri, 09 Feb 2024 01:27:09 GMT
File type ASCII text, with very long lines (20709)
Hash f2e43b6cb6ce6a4a640fe1f50a81e7cd
afaeb4ad75bdac9ae8a49946f7a98055de257d31
24d6618f3015cd0205f09cd487d8ecb223752c82160503e98764b38a1bcd1344
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /files/dynamicContent/sites/w0yxe2/js/webpage_1/objectsStore/lpr2eych.js HTTP/1.1
Host: w0yxe2.webwave.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w0yxe2.webwave.dev/
Cookie: cache-with-varnish=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 15:45:57 GMT
server: Apache/2.4.58 (Unix) OpenSSL/3.0.11
content-security-policy: frame-ancestors 'self' webwavecms.com webwave.me ro.webwave.me webwave.ro webwave.com.au szablony.webwavecms.com templates.webwave.me templates.webwave.com.au sabloane.webwave.ro ;
last-modified: Mon, 04 Dec 2023 15:27:28 GMT
etag: "516d-60bb0c175c4bf-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
content-length: 1439
content-type: application/javascript
X-Firefox-Spdy: h2
w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/websitesResources/galleryModule-5fd1b2337d43b3aad0e78f1288caf5d7.js
185.73.228.142200 OK 26 kB URL GET HTTP/2 w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/websitesResources/galleryModule-5fd1b2337d43b3aad0e78f1288caf5d7.js
IP 185.73.228.142:443
ASN #20853 eTOP sp. z o.o.
Requested by https://w0yxe2.webwave.dev/
Certificate IssuerLet's Encrypt
Subjectwebwave.dev
Fingerprint4D:F6:FF:A1:FD:67:1A:76:E7:44:89:6A:0B:55:10:3F:EF:A9:F2:C3
ValiditySat, 11 Nov 2023 01:27:10 GMT - Fri, 09 Feb 2024 01:27:09 GMT
File type ASCII text, with very long lines (560)
Hash a9e95219784166b0ffc7e4f82e74b4ec
5a247949a91ff6871747f4a94b947edb584f7220
53d3b17a639024c9148532131104816ee54d81a2a793db12568f546daaf53a7f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /files/staticContent/5.68/websitesResources/websitesResources/galleryModule-5fd1b2337d43b3aad0e78f1288caf5d7.js HTTP/1.1
Host: w0yxe2.webwave.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w0yxe2.webwave.dev/
Cookie: cache-with-varnish=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 15:45:57 GMT
server: Apache/2.4.58 (Unix) OpenSSL/3.0.11
content-security-policy: frame-ancestors 'self' webwavecms.com webwave.me ro.webwave.me webwave.ro webwave.com.au szablony.webwavecms.com templates.webwave.me templates.webwave.com.au sabloane.webwave.ro ;
last-modified: Fri, 01 Dec 2023 14:24:04 GMT
etag: "1c3e7-60b7385312900-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
content-length: 26166
content-type: application/javascript
X-Firefox-Spdy: h2
w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/websitesResources/postInitModule-5257ec1422b44d72783f47df71e2ef1b.js
185.73.228.142200 OK 27 kB URL GET HTTP/2 w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/websitesResources/postInitModule-5257ec1422b44d72783f47df71e2ef1b.js
IP 185.73.228.142:443
ASN #20853 eTOP sp. z o.o.
Requested by https://w0yxe2.webwave.dev/
Certificate IssuerLet's Encrypt
Subjectwebwave.dev
Fingerprint4D:F6:FF:A1:FD:67:1A:76:E7:44:89:6A:0B:55:10:3F:EF:A9:F2:C3
ValiditySat, 11 Nov 2023 01:27:10 GMT - Fri, 09 Feb 2024 01:27:09 GMT
File type ASCII text, with very long lines (727)
Hash b8d548295c5827510b8433b5a85715ef
f75df5109b6f687a2f30f2d51d688debb7031434
d39a4be85feeb82bbd6b66ed97fb82e6cbc0070007faf1c86de7c152b7ba3880
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /files/staticContent/5.68/websitesResources/websitesResources/postInitModule-5257ec1422b44d72783f47df71e2ef1b.js HTTP/1.1
Host: w0yxe2.webwave.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w0yxe2.webwave.dev/
Cookie: cache-with-varnish=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 15:45:57 GMT
server: Apache/2.4.58 (Unix) OpenSSL/3.0.11
content-security-policy: frame-ancestors 'self' webwavecms.com webwave.me ro.webwave.me webwave.ro webwave.com.au szablony.webwavecms.com templates.webwave.me templates.webwave.com.au sabloane.webwave.ro ;
last-modified: Fri, 01 Dec 2023 14:20:49 GMT
etag: "1b598-60b737991b240-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
content-length: 27255
content-type: application/javascript
X-Firefox-Spdy: h2
w0yxe2.webwave.dev/files/dynamicContent/sites/w0yxe2/js/layout_1/objectsStore/lpr2690n.js
185.73.228.142200 OK 125 B URL GET HTTP/2 w0yxe2.webwave.dev/files/dynamicContent/sites/w0yxe2/js/layout_1/objectsStore/lpr2690n.js
IP 185.73.228.142:443
ASN #20853 eTOP sp. z o.o.
Requested by https://w0yxe2.webwave.dev/
Certificate IssuerLet's Encrypt
Subjectwebwave.dev
Fingerprint4D:F6:FF:A1:FD:67:1A:76:E7:44:89:6A:0B:55:10:3F:EF:A9:F2:C3
ValiditySat, 11 Nov 2023 01:27:10 GMT - Fri, 09 Feb 2024 01:27:09 GMT
Hash 28190b95f0556371f832610c45550a51
4495baf8f0299be27af1a1f2a3eb5f37de6f6f91
dfa2bade810a1d78db0c95038247e75bb89ba46867f351cb7749526d6942419a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /files/dynamicContent/sites/w0yxe2/js/layout_1/objectsStore/lpr2690n.js HTTP/1.1
Host: w0yxe2.webwave.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w0yxe2.webwave.dev/
Cookie: cache-with-varnish=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 15:45:57 GMT
server: Apache/2.4.58 (Unix) OpenSSL/3.0.11
content-security-policy: frame-ancestors 'self' webwavecms.com webwave.me ro.webwave.me webwave.ro webwave.com.au szablony.webwavecms.com templates.webwave.me templates.webwave.com.au sabloane.webwave.ro ;
last-modified: Mon, 04 Dec 2023 15:20:42 GMT
etag: "bf-60bb0a941294f-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
content-length: 125
content-type: application/javascript
X-Firefox-Spdy: h2
w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/websitesResources/objectAnimationModule-c2528e745f56338d438204f5d8087632.js
185.73.228.142 28 kB URL w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/websitesResources/objectAnimationModule-c2528e745f56338d438204f5d8087632.js
IP 185.73.228.142:0
ASN #20853 eTOP sp. z o.o.
File type ASCII text, with very long lines (628)
Hash 35e5071860c05a1834f361118d8cc945
37041e52bf3472ae4e3c224297bef40279d07f8a
1054ee03788d63ac902a2c4fd6a884bfb0d34aaae5683a7bdfef871d094a7cb3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /files/staticContent/5.68/websitesResources/websitesResources/objectAnimationModule-c2528e745f56338d438204f5d8087632.js HTTP/1.1
Host: w0yxe2.webwave.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w0yxe2.webwave.dev/
Cookie: cache-with-varnish=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 15:45:57 GMT
server: Apache/2.4.58 (Unix) OpenSSL/3.0.11
content-security-policy: frame-ancestors 'self' webwavecms.com webwave.me ro.webwave.me webwave.ro webwave.com.au szablony.webwavecms.com templates.webwave.me templates.webwave.com.au sabloane.webwave.ro ;
last-modified: Fri, 01 Dec 2023 14:20:49 GMT
etag: "20b9a-60b737991b240-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
content-length: 28125
content-type: application/javascript
X-Firefox-Spdy: h2
w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/js/com/webwave/bottomBar/madeByBanner-58b187d65d0e2505a5be783c9b216267.js
185.73.228.142 256 B URL w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/js/com/webwave/bottomBar/madeByBanner-58b187d65d0e2505a5be783c9b216267.js
IP 185.73.228.142:0
ASN #20853 eTOP sp. z o.o.
File type ASCII text, with very long lines (312)
Hash f54c142dcaf5d6d3ddbc53a8135f10b4
7165eb8412a7db3af321e9434ca06c1c3985ba2a
87c481799f72f2c4b0a0a66c9c8740cb11f3904ba86969f6f0f016b5ddfce934
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /files/staticContent/5.68/websitesResources/js/com/webwave/bottomBar/madeByBanner-58b187d65d0e2505a5be783c9b216267.js HTTP/1.1
Host: w0yxe2.webwave.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w0yxe2.webwave.dev/
Cookie: cache-with-varnish=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 15:45:57 GMT
server: Apache/2.4.58 (Unix) OpenSSL/3.0.11
content-security-policy: frame-ancestors 'self' webwavecms.com webwave.me ro.webwave.me webwave.ro webwave.com.au szablony.webwavecms.com templates.webwave.me templates.webwave.com.au sabloane.webwave.ro ;
last-modified: Fri, 01 Dec 2023 14:24:18 GMT
etag: "161-60b738606c880-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
content-length: 256
content-type: application/javascript
X-Firefox-Spdy: h2
w0yxe2.webwave.dev/statistics/saveWebsiteDailyStatistics?websiteId=w0yxe2&pageViewsNumber=1&visitsNumber=1&visitsTime=0&uniqueNumber=1&newUsersNumber=1
185.73.228.142200 OK 29 B URL GET HTTP/2 w0yxe2.webwave.dev/statistics/saveWebsiteDailyStatistics?websiteId=w0yxe2&pageViewsNumber=1&visitsNumber=1&visitsTime=0&uniqueNumber=1&newUsersNumber=1
IP 185.73.228.142:443
ASN #20853 eTOP sp. z o.o.
Requested by https://w0yxe2.webwave.dev/
Certificate IssuerLet's Encrypt
Subjectwebwave.dev
Fingerprint4D:F6:FF:A1:FD:67:1A:76:E7:44:89:6A:0B:55:10:3F:EF:A9:F2:C3
ValiditySat, 11 Nov 2023 01:27:10 GMT - Fri, 09 Feb 2024 01:27:09 GMT
File type ASCII text, with no line terminators
Hash 3644a684f98ea8fe223c713b77189a77
9f9af029585ba014e07cd3910ca976cf56160616
27badc983df1780b60c2b3fa9d3a19a00e46aac798451f0febdca52920faaddf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /statistics/saveWebsiteDailyStatistics?websiteId=w0yxe2&pageViewsNumber=1&visitsNumber=1&visitsTime=0&uniqueNumber=1&newUsersNumber=1 HTTP/1.1
Host: w0yxe2.webwave.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://w0yxe2.webwave.dev/
Cookie: cache-with-varnish=true; _wavera_w0yxe2=w0yxe2.5561704764.1701704764.1701704764; _waverb_w0yxe2=w0yxe2.1701704764; _wavert_w0yxe2=1701704764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 15:45:58 GMT
server: Apache/2.4.58 (Unix) OpenSSL/3.0.11
content-security-policy: frame-ancestors 'self' webwavecms.com webwave.me ro.webwave.me webwave.ro webwave.com.au szablony.webwavecms.com templates.webwave.me templates.webwave.com.au sabloane.webwave.ro ;
x-application-context: application:production
content-type: text/html;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
set-cookie: JSESSIONID=DB61467BFB983125435B8E93DF76C84A.worker1_1; Path=/; Secure; HttpOnly
ww_worker=.worker1_1; path=/
ttl:
x-varnish: 247956250
age: 0
via: 1.1 varnish (Varnish/6.1)
accept-ranges: bytes
content-length: 29
X-Firefox-Spdy: h2
w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/websiteModule-a147a959b96c2eba829a3b2e00a11405.js
185.73.228.142200 OK 769 kB URL GET HTTP/2 w0yxe2.webwave.dev/files/staticContent/5.68/websitesResources/websiteModule-a147a959b96c2eba829a3b2e00a11405.js
IP 185.73.228.142:443
ASN #20853 eTOP sp. z o.o.
Requested by https://w0yxe2.webwave.dev/
Certificate IssuerLet's Encrypt
Subjectwebwave.dev
Fingerprint4D:F6:FF:A1:FD:67:1A:76:E7:44:89:6A:0B:55:10:3F:EF:A9:F2:C3
ValiditySat, 11 Nov 2023 01:27:10 GMT - Fri, 09 Feb 2024 01:27:09 GMT
File type ASCII text, with very long lines (630)
Size 769 kB (768742 bytes)
Hash c4180120f836382d74f0daf8fb025277
6d2ebb620bddd74d9ef856dbe8c49450b0e8cc1a
9ad7079a91530dc4770207c681f28b3c83c46d1bcfd1784259d38674ef29e1f5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /files/staticContent/5.68/websitesResources/websiteModule-a147a959b96c2eba829a3b2e00a11405.js HTTP/1.1
Host: w0yxe2.webwave.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w0yxe2.webwave.dev/
Cookie: cache-with-varnish=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 15:45:57 GMT
server: Apache/2.4.58 (Unix) OpenSSL/3.0.11
content-security-policy: frame-ancestors 'self' webwavecms.com webwave.me ro.webwave.me webwave.ro webwave.com.au szablony.webwavecms.com templates.webwave.me templates.webwave.com.au sabloane.webwave.ro ;
last-modified: Fri, 01 Dec 2023 14:24:42 GMT
etag: "bbae6-60b738774fe80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
content-type: application/javascript
X-Firefox-Spdy: h2
w0yxe2.webwave.dev/statistics/saveVisitorDailyStatistics?websiteId=w0yxe2&uniqueVisitorId=5561704764&creationDate=4-12-2023%2015:46:4
185.73.228.142200 OK 3 B URL GET HTTP/2 w0yxe2.webwave.dev/statistics/saveVisitorDailyStatistics?websiteId=w0yxe2&uniqueVisitorId=5561704764&creationDate=4-12-2023%2015:46:4
IP 185.73.228.142:443
ASN #20853 eTOP sp. z o.o.
Requested by https://w0yxe2.webwave.dev/
Certificate IssuerLet's Encrypt
Subjectwebwave.dev
Fingerprint4D:F6:FF:A1:FD:67:1A:76:E7:44:89:6A:0B:55:10:3F:EF:A9:F2:C3
ValiditySat, 11 Nov 2023 01:27:10 GMT - Fri, 09 Feb 2024 01:27:09 GMT
File type ASCII text, with no line terminators
Hash 3644a684f98ea8fe223c713b77189a77
9f9af029585ba014e07cd3910ca976cf56160616
27badc983df1780b60c2b3fa9d3a19a00e46aac798451f0febdca52920faaddf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /statistics/saveVisitorDailyStatistics?websiteId=w0yxe2&uniqueVisitorId=5561704764&creationDate=4-12-2023%2015:46:4 HTTP/1.1
Host: w0yxe2.webwave.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://w0yxe2.webwave.dev/
Cookie: cache-with-varnish=true; _wavera_w0yxe2=w0yxe2.5561704764.1701704764.1701704764; _waverb_w0yxe2=w0yxe2.1701704764; _wavert_w0yxe2=1701704764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 15:45:58 GMT
server: Apache/2.4.58 (Unix) OpenSSL/3.0.11
content-security-policy: frame-ancestors 'self' webwavecms.com webwave.me ro.webwave.me webwave.ro webwave.com.au szablony.webwavecms.com templates.webwave.me templates.webwave.com.au sabloane.webwave.ro ;
x-application-context: application:production
content-type: text/html;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
set-cookie: JSESSIONID=EB920DA3327AAB68D483E1147F6FD833.worker1_1; Path=/; Secure; HttpOnly
ww_worker=.worker1_1; path=/
ttl:
x-varnish: 247956252
age: 0
via: 1.1 varnish (Varnish/6.1)
accept-ranges: bytes
X-Firefox-Spdy: h2