Report - richainfosys.com/ua/iittiunedtaspc

Report Overview

Submitted URL
richainfosys.com/ua/iittiunedtaspc
IP
111.118.215.174
ASN
#394695 PUBLIC-DOMAIN-REGISTRY
Submitted
2022-10-05 15:02:33
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
178

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	978 B	2.7 kB	23.36.76.226
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	54.230.111.7
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	54.189.157.130
region1.google-analytics.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	732 B	563 B	216.239.32.36
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	54.230.111.118
cdnjs.cloudflare.com	235	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	376 B	29 kB	104.17.24.14
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	662 B	1.4 kB	142.250.74.3
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	329 B	737 B	93.184.220.29
www.googletagmanager.com	75	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	372 B	76 kB	142.250.74.168
richainfosys.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	18 kB	300 kB	111.118.215.174

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-10-05	medium	richainfosys.com/ua/images/video/Untitled.mp4	Phishing
2022-10-05	medium	richainfosys.com/ua/iittiunedtaspc	Malware
2022-10-05	medium	richainfosys.com/ua/js/main.js	Phishing
2022-10-05	medium	richainfosys.com/ua/images/video/techno-video-verticle.mp4	Phishing
2022-10-05	medium	richainfosys.com/ua/images/video/ITP%20VBR2%200.8-4.mp4	Phishing
2022-10-05	medium	richainfosys.com/ua/revolution/js/jquery.themepunch.revolution.min.js	Phishing
2022-10-05	medium	richainfosys.com/ua/js/jquery.min.js	Phishing
2022-10-05	medium	richainfosys.com/ua/images/video/Untitled.mp4	Phishing
2022-10-05	medium	richainfosys.com/ua/js/theme-vendors.min.js	Phishing
2022-10-05	medium	richainfosys.com/ua/images/video/techno-video-verticle.ogg	Phishing
2022-10-05	medium	richainfosys.com/ua/revolution/js/jquery.themepunch.tools.min.js	Phishing

mnemonic secure dns

Scan Date	Severity	Indicator	Alert
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed
2022-10-05	medium	richainfosys.com	Sinkholed

JavaScript (8)

	URL	Size	First Seen	Last Seen
	richainfosys.com/ua/iittiunedtaspc	95 B	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/iittiunedtaspc IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash 986b30a62a1f044d580dec48d6e1dd58 3d055e39bf49eb807020b0d6d2eea3170be1e085 f7e04a873ae58a43f26bbecea47ac109a3d64aa8e434ea91211ace82dc3830d3 Loading...

	www.googletagmanager.com/gtag/js?id=G-T09TWMJ58F	214 kB	2023-03-08	2023-03-08
Pretty URL www.googletagmanager.com/gtag/js?id=G-T09TWMJ58F IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:38 Last Seen2023-03-08 06:12:53 Times Seen1 Hash fe875e3da8ab69359c9e4aedd7f614cc faeba55b6a1ac60db837c8958a563500fe99a9d8 e161afd552a090df0d096fe2d28bf7661e378afcaf99a6f9ba2d1c394f01ea02 Loading...

	richainfosys.com/ua/revolution/js/jquery.themepunch.revolution.min.js	75 kB	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/revolution/js/jquery.themepunch.revolution.min.js IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash 3ca7b9580089ed0d26e2c0c633736f1d c9cf34f6c4a9036efeb8adea23bc221f2371507a 86b2269045aae509b0b6f965e020b031c6cec426ec386d9f45c4591129a552bb Loading...

	richainfosys.com/ua/iittiunedtaspc	4.6 kB	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/iittiunedtaspc IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash ba78ec7fc5fb4172eb9a371c72c464b0 1a0315848dca56a9d2dcd11af353360f08b6d4b1 b0a346fad15655b19b27d966133ba7d241f5baa296991f2d16c5dacacd0cbc59 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js	90 kB	2023-03-07	2024-04-26
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-04-26 14:47:20 Times Seen261625 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	richainfosys.com/ua/iittiunedtaspc	153 B	2023-03-08	2023-03-10
Pretty URL richainfosys.com/ua/iittiunedtaspc IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-10 08:54:44 Times Seen1 Hash 9ed9fe3cd901f2399b165e4dcfe6ff92 18ae3093a7fb517761aa80092f011b412805276c d4b6c397e2516ed6aed96b7bbe89cbd9dc46b68af08c9e30b88996d99a39bda4 Loading...

	richainfosys.com/ua/iittiunedtaspc	94 B	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/iittiunedtaspc IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash 312214c25f8762899a2108fd1db60b68 3c8502d018bd8e06d54adffd986c3d20386c82ba f645900a4eab85f3666934af59cf600d39fcf96de6c821dae27d7176f4863085 Loading...

	richainfosys.com/ua/iittiunedtaspc	95 B	2023-03-08	2023-03-08
Pretty URL richainfosys.com/ua/iittiunedtaspc IP 111.118.215.174 ASN #394695 PUBLIC-DOMAIN-REGISTRY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:12:37 Last Seen2023-03-08 06:12:53 Times Seen1 Hash c3bdf7cc77ac2a2162fa25942106c736 cb52bcded0c689649db423445e2715c429bcf3bf f441e6806259fc37bd2c3feb32c9da4a1a32c5f77adfcfa49cf0d73dfbdaf7af Loading...

HTTP Transactions (55)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

54.230.111.118

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
54.230.111.118:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 14:47:16 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BB-16l2N3xwzOI8xoJAT1UWk2EoFC6epus4qATXRFP4H7ZShTyAMuw==
Age: 907

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7951
Expires: Wed, 05 Oct 2022 17:14:54 GMT
Date: Wed, 05 Oct 2022 15:02:23 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

54.230.111.7

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
54.230.111.7:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 05 Oct 2022 04:02:33 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dqkz8Kd9GQQSg8qfKvAVNOEiXh2jhs76FNyDhL1yMnKAQsG3I5G8fQ==
age: 39591
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 05 Oct 2022 15:02:23 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7b5fcdb0a228e4ee14e60a2d3b829476
d26c2f288818832734127cf90c1d30ac919d0532
cffd5a99d85b854ae3f14600835492f4a8e7b9f6128970f95874fec7f19b3986

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFFD5A99D85B854AE3F14600835492F4A8E7B9F6128970F95874FEC7F19B3986"
Last-Modified: Wed, 05 Oct 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21521
Expires: Wed, 05 Oct 2022 21:01:04 GMT
Date: Wed, 05 Oct 2022 15:02:23 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

54.230.111.118

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
54.230.111.118:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Wed, 05 Oct 2022 14:29:33 GMT
Expires: Wed, 05 Oct 2022 14:35:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tl9p8_UGd30GL9rgiKtlsyydUS6lv4-UCQyBrkZs1zvPwl9m84KQNw==
Age: 1970

cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js

104.17.24.14

200 OK

28 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65447)
Size
28 kB (27938 bytes)
Hash
d900ca08873ee57d40616d39a44cc0aa
7ab3ac8b1504b7b914a6e94c979b8390bb492f6a
1eea479cc0abe04a0846f41031207f9511f12ffef017a6109d4efb6f5523465b

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://richainfosys.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 05 Oct 2022 15:02:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 6027365
expires: Mon, 25 Sep 2023 15:02:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8HpaFQZROjN%2Bn%2FOB%2FEEIXJBI8Y3ges%2FeYQ9C5IO1nGT%2FekRcHMpAVvuKO66Z5kKPyxdpXjbqBUDCWJguZopDe2qH4hessiqd9EGYCmc0l%2BKrcoH7jkkcRACMfVUvRwHYhvHfrQVS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 755709c029dc0b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
60dea52abe2437132a0387ad8becc0ac
61e9fb41f1fc795ef7204b8948621d4dbc6d3052
ac998fb48810aeb183ec2d19cfd58b81f2243207add4c553e1e87f00fa6d5f3f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 15:02:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
1561c6be7c89d1357a80d12de47b6e74
9a705277922ecca583c867af58b3efce099f83bd
e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4233
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 15:02:24 GMT
Last-Modified: Wed, 05 Oct 2022 13:51:51 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

www.googletagmanager.com/gtag/js?id=G-T09TWMJ58F

142.250.74.168

200 OK

75 kB

URL HTTP/2
www.googletagmanager.com/gtag/js?id=G-T09TWMJ58F
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (18991)
Size
75 kB (75002 bytes)
Hash
9619b7ccaa3b764e34617e3b662e26e4
412ad93173e59c977b8525473c1e1d6ec992e134
2df3e7356dfee46af83c14fad8bd912881ba3d59c10980e24f75ceed5257c1ab

HTTP Headers

GET /gtag/js?id=G-T09TWMJ58F HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 05 Oct 2022 15:02:24 GMT
expires: Wed, 05 Oct 2022 15:02:24 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75002
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
60dea52abe2437132a0387ad8becc0ac
61e9fb41f1fc795ef7204b8948621d4dbc6d3052
ac998fb48810aeb183ec2d19cfd58b81f2243207add4c553e1e87f00fa6d5f3f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 15:02:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

push.services.mozilla.com/

54.189.157.130

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.189.157.130:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: tEwyft4b/2oC5rHUjaca7Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: LvHEPJCY8ZI4LewXZ9l5e9VyG90=

richainfosys.com/ua/images/video/Untitled.mp4

111.118.215.174

200 OK

8.2 kB

URL HTTP/2
richainfosys.com/ua/images/video/Untitled.mp4
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
8.2 kB (8249 bytes)
Hash
d2a5bc8acfdb9759bc53209a82d76ac9
1c7b2c8fe4cd3787ad47712e81d4ff362d1ba14d
58e3c3d883196bd843feb55e3c1e6aaa43d839b1a257129ed3107dd2c2d88881

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/video/Untitled.mp4 HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:25 GMT
server: Apache
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6930
Expires: Wed, 05 Oct 2022 16:57:55 GMT
Date: Wed, 05 Oct 2022 15:02:25 GMT
Connection: keep-alive

richainfosys.com/ua/images/Home-security1.jpg

111.118.215.174

200 OK

3.1 kB

URL HTTP/2
richainfosys.com/ua/images/Home-security1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
3.1 kB (3085 bytes)
Hash
0d3e86cb8d1cdd274e825b7120bdae6f
fd9e63d971812119b3b25eb20a9c8a3c3368eb58
6b940cb87e1ae254d7a90848af6bb67639e869d8207a89be96c627d7e218a18e

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/Home-security1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/iittiunedtaspc

111.118.215.174

200 OK

22 kB

URL HTTP/2
richainfosys.com/ua/iittiunedtaspc
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
22 kB (22313 bytes)
Hash
0239d96b9f3f438aa45ca6c3e58b0d5e
50c64e3e296e944fa6c84c137596a80d802ec62e
99abd8242472b0c74b3ad3b94c91cb7839c71ccfd9aa1bc7f1003d030f56c139

Detections

Analyzer	Verdict	Alert
fortinet	Malware
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/iittiunedtaspc HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:23 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/revolution/css/navigation.css

111.118.215.174

200 OK

21 kB

URL HTTP/2
richainfosys.com/ua/revolution/css/navigation.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
21 kB (21022 bytes)
Hash
7e571da415d16b15fc8870924e6c4fc4
b557b6723fe1db2544a82682601d0103349a3205
e486b5f05a36585b7350cb27c41fad355933196bdc981e8ff926284705177b30

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/revolution/css/navigation.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-podium-image.jpg

111.118.215.174

200 OK

4.9 kB

URL HTTP/2
richainfosys.com/ua/images/home-podium-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
4.9 kB (4876 bytes)
Hash
86f972faa4fb2cee4845dd1c3156f0d1
47b7e7b9508c83ddfefb4e4cbf0fcb2034b5199d
fd7e297914ca060294dc77f4750216ad37641c8bbab5b08e53815178f4751697

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-podium-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-education-images2.jpg

111.118.215.174

200 OK

10 kB

URL HTTP/2
richainfosys.com/ua/images/home-education-images2.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
10 kB (10217 bytes)
Hash
a8bf977a2d1bb9240bc0aff3a95fa7cf
80302c9f3cc250bc965ca6529f162f42e53b3ec3
279d2b288eb374836ede14e3b41b355b8be386d64389e4bffd23edfef1b33c50

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-education-images2.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/js/main.js

111.118.215.174

200 OK

29 kB

URL HTTP/2
richainfosys.com/ua/js/main.js
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
29 kB (29335 bytes)
Hash
eb7e37f3b390399ae0984b4c6724c6e6
917ad72afb262858a7a24895132b7726e835bbfb
e531cb5c658242b9adb15b761f90b6649e896273852ed2b6b2d96381dd3a1591

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/js/main.js HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/logo-green-dark@2x.png

111.118.215.174

200 OK

28 kB

URL HTTP/2
richainfosys.com/ua/images/logo-green-dark@2x.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
data
Size
28 kB (27540 bytes)
Hash
ea448e213b31094b9450c6ca14533bd6
3739c12c98ae9a65beb43290a3bf5c3c75c4c403
ee25e56e33907bb461976b5961cf41f6b70eb3950051ac6f734127c4d8c2e666

HTTP Headers

GET /ua/images/logo-green-dark@2x.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/video/techno-video-verticle.mp4

111.118.215.174

200 OK

85 kB

URL HTTP/2
richainfosys.com/ua/images/video/techno-video-verticle.mp4
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (406), with CRLF, LF line terminators
Size
85 kB (85144 bytes)
Hash
d104d9d586eaf68d1773c236d1eeac60
2eec6429ca4f281e73cdef44a745b09db8af5b7a
bf3bb9500121f41526ec62be074b02a172df07705e32ce1a94ca4067839d0de4

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/video/techno-video-verticle.mp4 HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:25 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/video/ITP%20VBR2%200.8-4.mp4

111.118.215.174

200 OK

81 kB

URL HTTP/2
richainfosys.com/ua/images/video/ITP%20VBR2%200.8-4.mp4
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (406), with CRLF, LF line terminators
Size
81 kB (80818 bytes)
Hash
a1e653b0f0ebb7ccd3f8d75917b46d4e
5b751c4cd1066c8c2354e2eafdecc7298ef23300
825cf07055d57ade9af4ac1842fba56b07a4660e1a6a3d9935a4048e83777c4e

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/video/ITP%20VBR2%200.8-4.mp4 HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:25 GMT
server: Apache
X-Firefox-Spdy: h2

region1.google-analytics.com/g/collect?v=2&tid=G-T09TWMJ58F&gtm=2oea30&_p=1424546024&cid=2028479872.1664982145&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664982145&sct=1&seg=0&dl=https%3A%2F%2Frichainfosys.com%2Fua%2Fiittiunedtaspc&dt=Techno%20-%20Innovative%20company%20in%20the%20field%20of%20Education%20Technology&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1

216.239.32.36

204 No Content

0 B

URL HTTP/2
region1.google-analytics.com/g/collect?v=2&tid=G-T09TWMJ58F&gtm=2oea30&_p=1424546024&cid=2028479872.1664982145&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664982145&sct=1&seg=0&dl=https%3A%2F%2Frichainfosys.com%2Fua%2Fiittiunedtaspc&dt=Techno%20-%20Innovative%20company%20in%20the%20field%20of%20Education%20Technology&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
216.239.32.36:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-T09TWMJ58F&gtm=2oea30&_p=1424546024&cid=2028479872.1664982145&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664982145&sct=1&seg=0&dl=https%3A%2F%2Frichainfosys.com%2Fua%2Fiittiunedtaspc&dt=Techno%20-%20Innovative%20company%20in%20the%20field%20of%20Education%20Technology&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://richainfosys.com
Connection: keep-alive
Referer: https://richainfosys.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 204 No Content
access-control-allow-origin: https://richainfosys.com
date: Wed, 05 Oct 2022 15:02:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-security-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-security-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-security-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/css/theme-vendors.min.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/css/theme-vendors.min.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/css/theme-vendors.min.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/dtd-cabinate.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/dtd-cabinate.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/dtd-cabinate.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/revolution/js/jquery.themepunch.revolution.min.js

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/revolution/js/jquery.themepunch.revolution.min.js
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/revolution/js/jquery.themepunch.revolution.min.js HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/js/jquery.min.js

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/js/jquery.min.js
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/js/jquery.min.js HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/background-video-bg.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/background-video-bg.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/background-video-bg.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-tab-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-tab-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-tab-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/video/Untitled.mp4

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/video/Untitled.mp4
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/video/Untitled.mp4 HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:25 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/pdf/Government_e_Marketplace_Logo.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/pdf/Government_e_Marketplace_Logo.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/pdf/Government_e_Marketplace_Logo.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/revolution/css/layers.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/revolution/css/layers.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/revolution/css/layers.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/logo-green-dark@2x.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/logo-green-dark@2x.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /ua/images/logo-green-dark@2x.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-ab1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-ab1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-ab1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-interactive-flat-panel.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-interactive-flat-panel.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-interactive-flat-panel.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/richa-logo.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/richa-logo.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/richa-logo.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-flate-panel-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-flate-panel-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-flate-panel-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/js/theme-vendors.min.js

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/js/theme-vendors.min.js
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/js/theme-vendors.min.js HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-dtd-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-dtd-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-dtd-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/video/techno-video-verticle.ogg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/video/techno-video-verticle.ogg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/video/techno-video-verticle.ogg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Cookie: _ga_T09TWMJ58F=GS1.1.1664982145.1.0.1664982145.0.0.0; _ga=GA1.1.2028479872.1664982145
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:25 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-conf-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-conf-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-conf-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/css/style.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/css/style.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/css/style.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/css/font-icons.min.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/css/font-icons.min.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/css/font-icons.min.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/revolution/js/jquery.themepunch.tools.min.js

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/revolution/js/jquery.themepunch.tools.min.js
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/revolution/js/jquery.themepunch.tools.min.js HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-make-in-india1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-make-in-india1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-make-in-india1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/revolution/css/settings.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/revolution/css/settings.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/revolution/css/settings.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/menu-camera1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/menu-camera1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/menu-camera1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/pdf/Make_In_India.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/pdf/Make_In_India.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/pdf/Make_In_India.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/home-podium-ser-image.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/home-podium-ser-image.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/home-podium-ser-image.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/css/responsive.css

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/css/responsive.css
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/css/responsive.css HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/jj1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/jj1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/jj1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/tab-menu-image1.jpg

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/tab-menu-image1.jpg
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/tab-menu-image1.jpg HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

richainfosys.com/ua/images/ripl-limited.png

111.118.215.174

200 OK

0 B

URL HTTP/2
richainfosys.com/ua/images/ripl-limited.png
IP
111.118.215.174:0
ASN
#394695 PUBLIC-DOMAIN-REGISTRY

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
mnemonic_dns	Sinkholed
quad9	Sinkholed

HTTP Headers

GET /ua/images/ripl-limited.png HTTP/1.1
Host: richainfosys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://richainfosys.com/ua/iittiunedtaspc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Wed, 05 Oct 2022 15:02:24 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations