| xodaywfaxt.agbeautythailand.com/xwogrpczcb/c2hhbm5haC5zdHVhcnRAaW5zdXJpY2EuY29t |  192.254.236.4 | 200 OK | 877 B |
URL User Request GET HTTP/2xodaywfaxt.agbeautythailand.com/xwogrpczcb/c2hhbm5haC5zdHVhcnRAaW5zdXJpY2EuY29t IP192.254.236.4:443 ASN#46606 UNIFIEDLAYER-AS-1
CertificateIssuerLet's Encrypt Subjectwww.new.agbeautythailand.com Fingerprint58:FA:16:14:FA:5D:C5:9F:C7:73:54:57:86:AD:E4:DC:D2:F2:92:C9 ValidityFri, 20 Sep 2024 10:13:45 GMT - Thu, 19 Dec 2024 10:13:44 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash0e4e8db1b2704f7e7100fa23f88087db 1e7b00f3be42c937d3d58e84b09c4dfca1be67d7 d1476bc095e1550a99d6d9da079c5701b374a0c23c769d61aeed914175e17ad7
GET /xwogrpczcb/c2hhbm5haC5zdHVhcnRAaW5zdXJpY2EuY29t HTTP/1.1
Host: xodaywfaxt.agbeautythailand.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=35cb287e063c71b954757c15301578cf; path=/
vary: Accept-Encoding
content-encoding: gzip
content-length: 877
content-type: text/html; charset=UTF-8
date: Wed, 06 Nov 2024 23:27:36 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xodaywfaxt.agbeautythailand.com/xwogrpczcb/index.php?captcha=generate&rand=1975683687 | 192.254.236.4 | 200 OK | 4.3 kB |
URL GET HTTP/2xodaywfaxt.agbeautythailand.com/xwogrpczcb/index.php?captcha=generate&rand=1975683687 IP192.254.236.4:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xodaywfaxt.agbeautythailand.com/xwogrpczcb/c2hhbm5haC5zdHVhcnRAaW5zdXJpY2EuY29t CertificateIssuerLet's Encrypt Subjectwww.new.agbeautythailand.com Fingerprint58:FA:16:14:FA:5D:C5:9F:C7:73:54:57:86:AD:E4:DC:D2:F2:92:C9 ValidityFri, 20 Sep 2024 10:13:45 GMT - Thu, 19 Dec 2024 10:13:44 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 130x50, components 3 Hash16d45b482a7eb3b22c8252cf1074d9bd 524b26ba0e46a9b70eefe68bbf65b034a27b7ac4 da719dfd4263804e70eef930c5445cee08b7e36b01ddf2bc7cbe434589e0634f
GET /xwogrpczcb/index.php?captcha=generate&rand=1975683687 HTTP/1.1
Host: xodaywfaxt.agbeautythailand.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xodaywfaxt.agbeautythailand.com/xwogrpczcb/c2hhbm5haC5zdHVhcnRAaW5zdXJpY2EuY29t
Cookie: PHPSESSID=35cb287e063c71b954757c15301578cf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
content-length: 4300
content-type: image/jpeg
date: Wed, 06 Nov 2024 23:27:36 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| xodaywfaxt.agbeautythailand.com/favicon.ico | 192.254.236.4 | 200 OK | 842 B |
URL GET HTTP/2xodaywfaxt.agbeautythailand.com/favicon.ico IP192.254.236.4:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://xodaywfaxt.agbeautythailand.com/xwogrpczcb/c2hhbm5haC5zdHVhcnRAaW5zdXJpY2EuY29t CertificateIssuerLet's Encrypt Subjectwww.new.agbeautythailand.com Fingerprint58:FA:16:14:FA:5D:C5:9F:C7:73:54:57:86:AD:E4:DC:D2:F2:92:C9 ValidityFri, 20 Sep 2024 10:13:45 GMT - Thu, 19 Dec 2024 10:13:44 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash43655df9054719b0ab137b156b88adf8 41241338615c3bad7084c06fa0722be4bd8c4b69 54cd0043840036c6ed4f324f61340f4ed11047f2d18654d44fd2f8aadab78f80
GET /favicon.ico HTTP/1.1
Host: xodaywfaxt.agbeautythailand.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xodaywfaxt.agbeautythailand.com/xwogrpczcb/c2hhbm5haC5zdHVhcnRAaW5zdXJpY2EuY29t
Cookie: PHPSESSID=35cb287e063c71b954757c15301578cf
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
content-length: 842
content-type: text/html; charset=UTF-8
date: Wed, 06 Nov 2024 23:27:36 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| 1337.pk/off/style.css?v=10 |  0.0.0.0 | | 0 B |
URL GET 1337.pk/off/style.css?v=10 IP0.0.0.0:0
Requested byhttps://xodaywfaxt.agbeautythailand.com/xwogrpczcb/c2hhbm5haC5zdHVhcnRAaW5zdXJpY2EuY29t
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /off/style.css?v=10 HTTP/1.1
Host: 1337.pk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xodaywfaxt.agbeautythailand.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| 1337.pk/off/new_logo.png | 0.0.0.0 | | 0 B |
IP0.0.0.0:0
Requested byhttps://xodaywfaxt.agbeautythailand.com/xwogrpczcb/c2hhbm5haC5zdHVhcnRAaW5zdXJpY2EuY29t
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /off/new_logo.png HTTP/1.1
Host: 1337.pk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xodaywfaxt.agbeautythailand.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| 1337.pk/off/type.png | 0.0.0.0 | | 0 B |
IP0.0.0.0:0
Requested byhttps://xodaywfaxt.agbeautythailand.com/xwogrpczcb/c2hhbm5haC5zdHVhcnRAaW5zdXJpY2EuY29t
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /off/type.png HTTP/1.1
Host: 1337.pk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xodaywfaxt.agbeautythailand.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|