Report - fitnessmentor.org/whitelist

Report Overview

Visitedpublic

2023-10-21 14:35:56

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
fitnessmentor.org	unknown	2021-12-02	2015-06-18 23:41:02	2023-09-15 22:40:44	935 B	27 kB	161.35.59.170
west.statisticplatform.com	unknown	2023-10-06	2023-10-06 23:18:06	2023-10-21 13:13:19	511 B	672 B	80.66.79.248

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-10-21	medium	statisticplatform.com	Sinkholed

ThreatFox

Scan Date	Severity	Indicator	Alert
2023-10-09	medium	west.statisticplatform.com	Unknown malware

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	fitnessmentor.org/whitelist	ScriptElement	42 kB	2023-10-13	2024-08-21
URL fitnessmentor.org/whitelist IP / ASN 161.35.59.170 #14061 DIGITALOCEAN-ASN Introduced by ScriptElement Embedded true Resource Info First Seen 2023-10-13 Last Seen 2024-08-21 Times Seen 175 Size 42 kB (42236 bytes) MD5 8e321cfd69d0fddbcf049d2cdf9f6bb8 SHA1 cd23c82438750c78f4289b48ebec9cd7f5ea365b SHA256 9d1c6b181a74d0276c277899ef06e618bb0b5eaea44a63181d69e9035fef7cb4 Format Code Loading...

	unknown	ScriptElement	524 B	2023-10-09	2024-08-21
URL IP / ASN 0.0.0.0 #0 Introduced by ScriptElement Embedded false Resource Info First Seen 2023-10-09 Last Seen 2024-08-21 Times Seen 984 Size 524 B (524 bytes) MD5 35e9af47976a8b3228b9bcb4830bdace SHA1 81528b96c3b13adbc56fb7fae4cd1284899659f0 SHA256 b87ca7bb1a4064a241c0828ecababb7e74dfe763720f4c165f14bff8ddd6ed26 Format Code Loading...

HTTP Transactions (3)

URL IP Response Size

GET fitnessmentor.org/whitelist

161.35.59.170

200 OK

13 kB

URL

fitnessmentor.org/whitelist

IP / ASN

161.35.59.170

#14061 DIGITALOCEAN-ASN

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (42669)

First Seen2023-10-21

Last Seen2023-11-01

Times Seen18

Size13 kB (13392 bytes)

MD56579d1ec5bd19278738e7793420419fc

SHA1f4c94c980c30ebe2188dfa73da55c161a7ee55dc

SHA256afe8051a89b5fb43ff4aa4b85a07ecd90a2a259667017f7e3354c6f13ef20ac4

Certificate Info

IssuerLet's Encrypt

Subjectfitnessmentor.org

FingerprintA6:19:16:A8:3A:1A:C3:1C:EC:41:B0:2E:E5:C6:DA:0D:8B:8E:E7:9F

ValidityTue, 01 Aug 2023 15:20:38 GMT - Mon, 30 Oct 2023 15:20:37 GMT

HTTP Headers

GET /whitelist HTTP/1.1
Host: fitnessmentor.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 21 Oct 2023 14:35:38 GMT
content-type: text/html; charset=UTF-8
content-length: 13392
cache-control: max-age=0, s-maxage=2592000
expires: Sat, 21 Oct 2023 14:27:38 GMT
vary: Accept-Encoding
content-encoding: gzip
age: 479
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

POST west.statisticplatform.com/stats

80.66.79.248

200 OK

1 B

URL

west.statisticplatform.com/stats

IP / ASN

80.66.79.248

#20803 LLC Siberian Telecommunications Company

Requested byhttps://fitnessmentor.org/whitelist

Resource Info

File typevery short file (no magic)

First Seen2023-03-07

Last Seen2025-08-02

Times Seen75691

Size1 B (1 bytes)

MD568b329da9893e34099c7d8ad5cb9c940

SHA1adc83b19e793491b1c6ea0fd8b46cd9f32e592fc

SHA25601ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b

Certificate Info

IssuerLet's Encrypt

Subjectwest.statisticplatform.com

Fingerprint9C:9E:3E:AF:C9:BA:4A:49:EA:E0:FF:EE:69:C3:22:81:48:A2:99:97

ValidityFri, 06 Oct 2023 09:04:08 GMT - Thu, 04 Jan 2024 09:04:07 GMT

Detections

Analyzer	Verdict	Alert
ThreatFox	malicious	Unknown malware
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /stats HTTP/1.1
Host: west.statisticplatform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 22
Origin: https://fitnessmentor.org
DNT: 1
Connection: keep-alive
Referer: https://fitnessmentor.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 21 Oct 2023 14:35:39 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 21 Oct 2023 14:35:39 GMT
Set-Cookie: _subid=1sisi1a6bkav9; expires=Tue, 21 Nov 2023 14:35:39 GMT; path=/
bfd2a=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI2XCI6MTY5Nzg5ODkzOX0sXCJjYW1wYWlnbnNcIjp7XCI5XCI6MTY5Nzg5ODkzOX0sXCJ0aW1lXCI6MTY5Nzg5ODkzOX0ifQ.fUf2rEsKWlkObikuLsOIZMZnSvw1PnCO7TP73-Mw8K4; expires=Wed, 11 Aug 2077 05:11:18 GMT; path=/
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.33
Access-Control-Allow-Origin: *

GET fitnessmentor.org/favicon.ico

161.35.59.170

200 OK

13 kB

URL

fitnessmentor.org/favicon.ico

IP / ASN

161.35.59.170

#14061 DIGITALOCEAN-ASN

Requested byhttps://fitnessmentor.org/whitelist

Resource Info

File typeHTML document, ASCII text, with very long lines (42669)

First Seen2023-10-21

Last Seen2023-11-01

Times Seen18

Size13 kB (13392 bytes)

MD56579d1ec5bd19278738e7793420419fc

SHA1f4c94c980c30ebe2188dfa73da55c161a7ee55dc

SHA256afe8051a89b5fb43ff4aa4b85a07ecd90a2a259667017f7e3354c6f13ef20ac4

Certificate Info

IssuerLet's Encrypt

Subjectfitnessmentor.org

FingerprintA6:19:16:A8:3A:1A:C3:1C:EC:41:B0:2E:E5:C6:DA:0D:8B:8E:E7:9F

ValidityTue, 01 Aug 2023 15:20:38 GMT - Mon, 30 Oct 2023 15:20:37 GMT

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: fitnessmentor.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fitnessmentor.org/whitelist
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sat, 21 Oct 2023 14:35:40 GMT
content-type: text/html; charset=UTF-8
content-length: 13392
cache-control: max-age=0, s-maxage=2592000
expires: Sat, 21 Oct 2023 10:48:35 GMT
vary: Accept-Encoding
content-encoding: gzip
age: 13623
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2