Report - euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist

Report Overview

Submitted URL
euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
IP
154.82.100.163
ASN
#399077 TERAEXCH
Submitted
2024-04-26 03:08:09
Access
public
Website Title
EU ETS
Final URL
euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
122

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-04-25	1.5 kB	143 kB	151.101.129.229
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	454 B	108 kB	142.250.74.106
euets-uk.icu	unknown	2024-03-16	2024-03-17	2024-04-18	68 kB	2.3 MB	154.82.100.163
cdn.staticfile.org	46426	2013-03-29	2013-08-23	2024-04-23	837 B	179 kB	104.18.52.201

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed
2024-04-26	medium	euets-uk.icu	Sinkholed

ThreatFox

No alerts detected

JavaScript (23)

	URL	Size	First Seen	Last Seen
	unknown	1.6 kB	2024-04-24	2024-04-26
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2024-04-24 07:39:10 Last Seen2024-04-26 05:08:12 Times Seen4 Hash 4bbdf91d7ec4c7d411c3401442d4f4eb d38450f556dfd80889a43a309d281a4ede5ff405 f31b3860d2626555ddd3681e5030e4a6a395566bd833d01d663e96a1a089c33d Loading...

	unknown	1.6 kB	2024-04-24	2024-04-26
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2024-04-24 07:39:10 Last Seen2024-04-26 05:08:12 Times Seen4 Hash 1ec9ef3e9442ecf33db927d2e62ef32c d7c1ad876c71467dc4aee0c6ee572c42d35c5fb1 bf8078474f63a07ecd9d0db1466f0810943cebb40826b5abfe969c049f653c3c Loading...

	unknown	1.6 kB	2024-04-24	2024-04-26
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2024-04-24 07:39:10 Last Seen2024-04-26 05:08:12 Times Seen4 Hash cad3948fca06008147abb250d162f4cd f860fe88a1f5dd707062eac8f7da134939b932ac 6cce42c76eab39b96ec0ac752f5ad2de510f88693be97c7863bc422320171496 Loading...

	unknown	1.7 kB	2024-04-24	2024-04-26
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2024-04-24 07:39:10 Last Seen2024-04-26 05:08:12 Times Seen4 Hash 75dcb30728dc507ef40c8745ebe8486b a8148813e3b49074f4d1b36272ca9620edfebc56 3253239f13745636232c731718bb35f282af669dc6e3fd0eeb8eb444a284f339 Loading...

	euets-uk.icu/Public/Home/static/js/layer/layer.js	20 kB	2023-04-11	2024-05-05
Pretty URL euets-uk.icu/Public/Home/static/js/layer/layer.js IP 154.82.100.163 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 09:52:52 Last Seen2024-05-05 15:44:13 Times Seen219 Hash 666f4437565d197e9459e19a29f58315 afc5c0a1369137e52b37ad5fb63f48202ce31368 4a49651ad86a83ecbd9c2ad34e7f5c906b46ae2c4c93c1c8585148f936b7e100 Loading...

	euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist	18 kB	2024-04-20	2024-04-26
Pretty URL euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist IP 154.82.100.163 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-20 19:15:18 Last Seen2024-04-26 05:08:12 Times Seen6 Hash d019b77f49b65860a4a39d9c28e7b7c0 4cc8e5e9bffb792a4a24808ab51f4004e6ca3430 20bc1685f39031229e90c7cfdc2414a130f903daa998927ab5257fb518c3cdad Loading...

	euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist	10 kB	2023-04-30	2024-05-03
Pretty URL euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist IP 154.82.100.163 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-30 10:40:57 Last Seen2024-05-03 19:48:21 Times Seen46 Hash 20523e78bae2cebbef388c9ef84ec2f9 29093cf5f97a20d8297b3554d07f2926d8df98d2 8a6cfe4c6857b79cfcf6f200c8d00b064aa443b7e529332cbf064cb183c938cc Loading...

	euets-uk.icu/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js	79 kB	2023-03-07	2024-05-03
Pretty URL euets-uk.icu/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js IP 154.82.100.163 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:34:42 Last Seen2024-05-03 19:48:21 Times Seen762 Hash 8831aa095cdec88f66c2e46c339cf352 5db4c40dbc6bd3d9623ee98a2061dd265885cf2e 79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9 Loading...

	euets-uk.icu/Public/Home/static/js/jquery.SuperSlide.2.1.1.js	11 kB	2023-04-05	2024-05-03
Pretty URL euets-uk.icu/Public/Home/static/js/jquery.SuperSlide.2.1.1.js IP 154.82.100.163 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-05 11:06:31 Last Seen2024-05-03 19:48:21 Times Seen725 Hash 0b9bc63ab05e21e3830da5bbb4ccee67 d162156bdaf14217d76d920e0e57b86d8feb1d97 349e46b2c65028736d0bbff7b829c7fc6fbdebc1fb1e8b12365a0ca2e6e9e848 Loading...

	unknown	1.6 kB	2024-04-24	2024-04-26
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2024-04-24 07:39:10 Last Seen2024-04-26 05:08:12 Times Seen4 Hash fd33d32720190ff23a98ed0773eb4673 8a5f830a52fdaf4b715f7513e3ad038df71416ca ce10855e06e410eac9d1691f6cc19dc9d6167514d91d028e58e58f16e8b62516 Loading...

	unknown	1.7 kB	2024-04-24	2024-04-26
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2024-04-24 07:39:10 Last Seen2024-04-26 05:08:12 Times Seen4 Hash ebf5c2e8f2a05167ab118dc685c16d7c 5f3be544745c3efb545d5138464808267533b9cd 0d57f857065257ad1321b5d44f08eb7d901e87405938ba55c1adcfcf139ff195 Loading...

	unknown	1.7 kB	2024-04-24	2024-04-26
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2024-04-24 07:39:10 Last Seen2024-04-26 05:08:12 Times Seen4 Hash 491839902be7a0ce7a714c756637d9a7 7abfe48fe329243e80ef73f2cb54931deee45db4 2087c3d0220be317062634ea6f24d263cc87953a55542cf514ce0f4305853fe3 Loading...

	cdn.staticfile.org/jquery/1.10.2/jquery.min.js	93 kB	2023-03-07	2024-05-05
Pretty URL cdn.staticfile.org/jquery/1.10.2/jquery.min.js IP 104.18.52.201 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-05-05 01:03:24 Times Seen16880 Hash e0e0559014b222245deb26b6ae8bd940 e2f3603e23711f6446f278a411d905623d65201e 89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e Loading...

	euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist	1.1 kB	2023-04-30	2024-05-03
Pretty URL euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist IP 154.82.100.163 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-30 10:40:57 Last Seen2024-05-03 06:16:14 Times Seen28 Hash 39d4f19f9c0926dc38317fdf3f7b8fde 128672a3e06b80d958284f3cb65a4fba41776c7b 9edfe06057d81559a8045e1fdca8bbd51d78fb238d39e50a42e0e70182b45918 Loading...

	unknown	1.6 kB	2024-04-24	2024-04-26
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2024-04-24 07:39:10 Last Seen2024-04-26 05:08:12 Times Seen4 Hash ad58c0ec4a29efa0c4704edda8e67eed 0cc62ce97775029d3a98ea0d5ecce5db6fd178db 747e83d6447bca5f8a75f9d36494c38ec8a8766772d8ea2adec2f7637759dfd9 Loading...

	unknown	1.7 kB	2024-04-24	2024-04-26
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2024-04-24 07:39:10 Last Seen2024-04-26 05:08:12 Times Seen4 Hash 28ea5e9b3e9903dcc08bca4f01e6d0ff b3be8d5da6f06a4c5f4b6c9c42149940856c90d4 d80e8d43b0c112e3dc8b465034539da72b372962cc43fc5a6c7a72c0121194bb Loading...

	unknown	1.6 kB	2024-04-24	2024-04-26
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2024-04-24 07:39:10 Last Seen2024-04-26 05:08:12 Times Seen4 Hash d32d01cd82be526fa6555c97b755d018 5b1713dddfcb3f0ec05a7b52b25dd265a64be6d1 345bca5cc8d8dfa068685a701097af6b4d4e1a1766ee0a8c6aeb5ac4c227c0a4 Loading...

	cdn.staticfile.org/jquery/2.1.1/jquery.min.js	84 kB	2023-03-07	2024-05-03
Pretty URL cdn.staticfile.org/jquery/2.1.1/jquery.min.js IP 104.18.52.201 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:01:55 Last Seen2024-05-03 19:48:21 Times Seen2025 Hash d021c983bd6e7291b43a5cc1fb2ebe99 ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079 Loading...

	euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist	527 B	2023-04-25	2024-05-03
Pretty URL euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist IP 154.82.100.163 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-25 18:57:28 Last Seen2024-05-03 19:48:21 Times Seen80 Hash fbbb012e519b910a02da83ac6d3112da a03af70ac8200203516bb605834e1e3a1a061948 b3f004b5887b020f0abc7d1046d655e1b275a9eb354f05212175561521105a47 Loading...

	euets-uk.icu/Public/Static/bootstrap5Slide/scripts.js	298 B	2023-04-25	2024-05-03
Pretty URL euets-uk.icu/Public/Static/bootstrap5Slide/scripts.js IP 154.82.100.163 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-25 18:57:28 Last Seen2024-05-03 19:48:21 Times Seen143 Hash 48477ea73f8709a6c29d7cde0cc83e55 5dc30fab107725dd71ab343d70b9e6267ea68cf1 fd67e1f083236a6c171d2275401174ea62a6f24fc81193d55653080a236a209a Loading...

	euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist	1.8 kB	2024-04-24	2024-04-26
Pretty URL euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist IP 154.82.100.163 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-24 07:39:10 Last Seen2024-04-26 05:08:12 Times Seen4 Hash c282ac8b758014bb380c943aa6028370 e9537954e29a145f5e95c744fd84d3ee63f39097 978560ec6ff4d6a4eb6fd365e3bd1969149f95fe0e5ea93905da6959acbfd057 Loading...

	unknown	1.7 kB	2024-04-24	2024-04-26
Pretty Introduced by domTimer Embedded in HTML false Observations First Seen2024-04-24 07:39:10 Last Seen2024-04-26 05:08:11 Times Seen3 Hash 95a48a254f3ad00a27ef6c11dc714e63 7653911112aaa31fd094ccad98f5adf482a92350 d55586589d28cae1ffc73d37053aab6b54310fbfab0c52ad72f01a42acc57ab5 Loading...

	euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist	255 B	2023-04-25	2024-05-03
Pretty URL euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist IP 154.82.100.163 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-25 18:57:28 Last Seen2024-05-03 19:48:21 Times Seen71 Hash 3141c18a9605b1422295c9e48d668c9d 0e035fdbc893334e85d674527229f5d2fd9c8036 1c439327512b5147799af88283ca39d0f13d331bea70d2ec3e479177c6c595c9 Loading...

HTTP Transactions (67)

URL IP Response Size

cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css

151.101.129.229

200 OK

8.0 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text
Size
8.0 kB (8017 bytes)
Hash
dbf1248779dc682a91ba529b5efe0ffc
0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152
32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70

HTTP Headers

GET /npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.3.0
x-jsd-version-type: version
etag: W/"edbb-Du3MPQ7GnRobCfGvnAP4Uqb5QVI"
content-encoding: br
accept-ranges: bytes
date: Fri, 26 Apr 2024 03:07:41 GMT
age: 1431935
x-served-by: cache-fra-etou8220059-FRA, cache-hel1410026-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 8017
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css

151.101.129.229

200 OK

26 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.5.0/dist/css/bootstrap.min.css
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text, with very long lines (65324)
Size
26 kB (26144 bytes)
Hash
3afe15e976734d9daac26310110c4594
4f14a09a606c99a11f8fda15564ef66f70402826
680af6669abc319f9803f0fa26d443df1b6bc29133d88a8e4bea560ffed7288c

HTTP Headers

GET /npm/bootstrap@4.5.0/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.5.0
x-jsd-version-type: version
etag: W/"27293-TxSgmmBsmaEfj9oVVk72b3BAKCY"
content-encoding: br
accept-ranges: bytes
date: Fri, 26 Apr 2024 03:07:41 GMT
age: 4388790
x-served-by: cache-fra-eddf8230133-FRA, cache-hel1410031-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26144
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Nunito:wght@400;600;700&display=swap

142.250.74.106

200 OK

107 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Nunito:wght@400;600;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
107 kB (107399 bytes)
Hash
1b355829c90d24d64854ab59e7db5e6e
02d83db931b90cd6b454384a1c2c86b5610047ca
8ed7e7f7ceaf0a57cddf736c5084a36bbb971eb2229be6fc1a211192fe30d701

HTTP Headers

GET /css2?family=Nunito:wght@400;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 03:07:42 GMT
date: Fri, 26 Apr 2024 03:07:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

euets-uk.icu/Public/Home/static/imgs/photo_2024-01-12_22-49-57.jpg

154.82.100.163

200 OK

59 kB

URL GET HTTP/2
euets-uk.icu/Public/Home/static/imgs/photo_2024-01-12_22-49-57.jpg
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1097x1097, components 3
Size
59 kB (58611 bytes)
Hash
95a8036a3736f5f65232f726a1d44c50
08dd3b4d5c1434fa8aa29a538408f5e3929532a7
f8bb07ea72c8991e4a0c2eccd1328c4a7115c8ece306a5fd65c7c768f1fd90e5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Home/static/imgs/photo_2024-01-12_22-49-57.jpg HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:41 GMT
content-type: image/jpeg
content-length: 58611
last-modified: Sat, 13 Jan 2024 05:34:13 GMT
etag: "65a220d5-e4f3"
expires: Sat, 25 May 2024 21:06:13 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

euets-uk.icu/Public/Static/qrcode/FanamLa.png

154.82.100.163

200 OK

30 kB

URL GET HTTP/2
euets-uk.icu/Public/Static/qrcode/FanamLa.png
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 400x400, components 3
Size
30 kB (29708 bytes)
Hash
5bd352fa88cb90701291e3b9fe742643
23b5a6c3907f6383fc3bf9829539bd3ae297a578
1ca94904b88920762445e572adf4fe8886508da51839152ed5bc7f45a1831687

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Static/qrcode/FanamLa.png HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:41 GMT
content-type: image/png
content-length: 29708
last-modified: Sat, 13 Jan 2024 14:27:30 GMT
etag: "65a29dd2-740c"
expires: Sat, 25 May 2024 21:06:13 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

euets-uk.icu/Upload/public/650693f6784b5.jpg

154.82.100.163

200 OK

43 kB

URL GET HTTP/2
euets-uk.icu/Upload/public/650693f6784b5.jpg
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
Size
43 kB (42915 bytes)
Hash
c918c8b1a0aeaeb872c275c5d7e0c88a
482e1d1df1901f7324b212cd65545d6c0813acd6
8374278f27ae786ee3c10717a61172655b2795538a6dd02c9b650c3d1d96778b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Upload/public/650693f6784b5.jpg HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:41 GMT
content-type: image/jpeg
content-length: 42915
last-modified: Sun, 17 Sep 2023 05:51:50 GMT
etag: "650693f6-a7a3"
expires: Sat, 25 May 2024 21:18:12 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

euets-uk.icu/Upload/public/650693fd2a882.jpg

154.82.100.163

200 OK

39 kB

URL GET HTTP/2
euets-uk.icu/Upload/public/650693fd2a882.jpg
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
Size
39 kB (38853 bytes)
Hash
f27898fdc8ec22b035c4f70e14fc41f5
e4aa614ff2a5c10f63dce77d49f2dfc5c5c3c7a1
92431b067a1e56ab577d41c7413f0e2b298e2cd7c609c4a0bb3ba19e8d3e5e5f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Upload/public/650693fd2a882.jpg HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:41 GMT
content-type: image/jpeg
content-length: 38853
last-modified: Sun, 17 Sep 2023 05:51:57 GMT
etag: "650693fd-97c5"
expires: Sat, 25 May 2024 21:18:12 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

euets-uk.icu/Upload/public/6506940273313.jpg

154.82.100.163

200 OK

42 kB

URL GET HTTP/2
euets-uk.icu/Upload/public/6506940273313.jpg
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
Size
42 kB (42106 bytes)
Hash
6878901d510d59b6490f504f89313cab
c92c2326ab65cfe0b5272a0b94aa4efd19caf204
2d49fbed8fc7e0b9e909508c7528712f62f97dbb8cde593434cf9a8fccf69347

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Upload/public/6506940273313.jpg HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:41 GMT
content-type: image/jpeg
content-length: 42106
last-modified: Sun, 17 Sep 2023 05:52:02 GMT
etag: "65069402-a47a"
expires: Sat, 25 May 2024 21:18:12 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

euets-uk.icu/Upload/public/65069406c3df2.jpg

154.82.100.163

200 OK

51 kB

URL GET HTTP/2
euets-uk.icu/Upload/public/65069406c3df2.jpg
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 600x400, components 3
Size
51 kB (50626 bytes)
Hash
ae9f4aa37ca98bd4ad0252f21591de1d
a209f75a9037283914c70d886b6e3fb3287f6b9b
a4d6d9b81ae8287c0e885cd3fb880f2f1ec5e0c0866e0c9db9a4e54806c25328

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Upload/public/65069406c3df2.jpg HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:41 GMT
content-type: image/jpeg
content-length: 50626
last-modified: Sun, 17 Sep 2023 05:52:06 GMT
etag: "65069406-c5c2"
expires: Sat, 25 May 2024 21:18:12 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

euets-uk.icu/Public/Home/static/imgs/home_head_bg.png

154.82.100.163

200 OK

146 kB

URL GET HTTP/2
euets-uk.icu/Public/Home/static/imgs/home_head_bg.png
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 1921x481, components 3
Size
146 kB (145986 bytes)
Hash
25689a692b2ba8055de2fcc4dab25616
a9410c11b0827a03e527c9a22d415bc3f0ec2b3e
c50739c2dbc0b2ae156daef1737d28543f1a3f1f19e16dac04970065db7cd6a7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Home/static/imgs/home_head_bg.png HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/Public/Home/static/css/base.css
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:42 GMT
content-type: image/png
content-length: 145986
last-modified: Mon, 18 Sep 2023 07:36:11 GMT
etag: "6507fdeb-23a42"
expires: Sat, 25 May 2024 21:18:12 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

euets-uk.icu/Upload/public/65068450867ec.png

154.82.100.163

200 OK

564 kB

URL GET HTTP/2
euets-uk.icu/Upload/public/65068450867ec.png
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
PNG image data, 782 x 783, 8-bit/color RGBA, non-interlaced
Size
564 kB (563652 bytes)
Hash
bb84cd7425cf3c55abbb5fb10ab94ebc
e4abf52c14d27eee0b1de3d6e3dec06e806196f7
db843a19862284519dfb0105b03efd904ccef3831086efb81c221fe05153497d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Upload/public/65068450867ec.png HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:41 GMT
content-type: image/png
content-length: 563652
last-modified: Sun, 17 Sep 2023 04:45:04 GMT
etag: "65068450-899c4"
expires: Sat, 25 May 2024 21:06:13 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

euets-uk.icu/Public/Home/static/imgs/community_bg.png

154.82.100.163

200 OK

248 kB

URL GET HTTP/2
euets-uk.icu/Public/Home/static/imgs/community_bg.png
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
PNG image data, 2892 x 936, 8-bit/color RGBA, non-interlaced
Size
248 kB (248220 bytes)
Hash
3107a5d7de66ac526ba295a6ccb85e2f
7ca2f1ffe3ed6dfd6260e8a47643d30d6223aeb9
1021f5b23b901a121fcf0f78866fb66c978411d309aef421c54af4cb09ff1b6f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Home/static/imgs/community_bg.png HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/Public/Home/static/css/base.css
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:42 GMT
content-type: image/png
content-length: 248220
last-modified: Mon, 04 Jul 2022 17:20:12 GMT
etag: "62c3214c-3c99c"
expires: Sat, 25 May 2024 21:18:12 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

euets-uk.icu/xm/6850bf2aadb02ad02d81cf87487a1323.png

154.82.100.163

200 OK

631 kB

URL GET HTTP/2
euets-uk.icu/xm/6850bf2aadb02ad02d81cf87487a1323.png
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
PNG image data, 813 x 831, 8-bit/color RGBA, non-interlaced
Size
631 kB (631278 bytes)
Hash
1f583f3436e6877b6ec03a8d89385095
9ee86ecadcad1314560e343bc2cebf0ded86f03e
8fadd669139c9ae32d2e70d731d245016f64085a77e70a09160f3a31e46014c0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /xm/6850bf2aadb02ad02d81cf87487a1323.png HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:42 GMT
content-type: image/png
content-length: 631278
last-modified: Sat, 16 Sep 2023 13:26:25 GMT
etag: "6505ad01-9a1ee"
expires: Sat, 25 May 2024 21:18:13 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_itc

154.82.100.163

200 OK

8.4 kB

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_itc
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
JSON text data
Size
8.4 kB (8448 bytes)
Hash
68ac40a84898f40747d958e0c0941c75
a033ad6d2dddc4dcbabdf38740c1a8cd192dcf0d
232ef71afd2e2d3a4a886bd164ac9ae400955e7f71505d3570e31635b2ecc00e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_itc HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:45 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Public/Home/static/js/layer/skin/layer.css

154.82.100.163

200 OK

8.1 kB

URL GET HTTP/2
euets-uk.icu/Public/Home/static/js/layer/skin/layer.css
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
gzip compressed data, from Unix
Size
8.1 kB (8136 bytes)
Hash
99dca467b5440538f97ea4f3e28d7aa7
b250685051bf4d89bc13297a92194da331fbd986
4014b55b6fca471b194dd1f7569248c5752e705b17b05597ecb29e8eb4cde8a1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Home/static/js/layer/skin/layer.css HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:43 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 17:20:12 GMT
vary: Accept-Encoding
etag: W/"62c3214c-36e0"
expires: Fri, 26 Apr 2024 09:06:13 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: gzip
x-cache: HIT
X-Firefox-Spdy: h2

euets-uk.icu/Public/Home/static/js/layer/layer.js

154.82.100.163

200 OK

14 kB

URL GET HTTP/2
euets-uk.icu/Public/Home/static/js/layer/layer.js
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
gzip compressed data, from Unix
Size
14 kB (14051 bytes)
Hash
9e98db929aaf4c8668de6fe6e230adb8
55de471e4fd613c2c4f64620678c7fe10f552741
e4e9c0a1e5ae7e3f4cee5c58c1b9c8de87814cc91380779864bf6b76aa582b63

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Home/static/js/layer/layer.js HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:43 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 17:20:12 GMT
vary: Accept-Encoding
etag: W/"62c3214c-4d83"
expires: Fri, 26 Apr 2024 08:59:43 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: gzip
x-cache: HIT
X-Firefox-Spdy: h2

euets-uk.icu/Public/Home/static/imgs/icon_margin.svg

154.82.100.163

200 OK

1.6 kB

URL GET HTTP/2
euets-uk.icu/Public/Home/static/imgs/icon_margin.svg
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
SVG Scalable Vector Graphics image
Size
1.6 kB (1620 bytes)
Hash
8487cce1f5bfe0dd721f0e6832f523fe
7a67fc1371f9f5a4706e9d25498dfaf266d70008
6d43491d30f0956c9be4e7ec3ead0c6334b4c4f443204dfe325094c553ee4f46

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Home/static/imgs/icon_margin.svg HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:42 GMT
content-type: image/svg+xml
last-modified: Mon, 04 Jul 2022 17:20:12 GMT
etag: W/"62c3214c-654"
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_btc

154.82.100.163

200 OK

213 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_btc
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
213 B (213 bytes)
Hash
1361a563aae2e59cecceab410c41d33a
65fb1c763078d3c1eab4af63a66d89eee74517f8
b91e5ff262dff1083206483698abba01885408b9e9fe54d51c254fda6b08406e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_btc HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:50 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Public/Home/static/imgs/icon_etf.svg

154.82.100.163

200 OK

1.4 kB

URL GET HTTP/2
euets-uk.icu/Public/Home/static/imgs/icon_etf.svg
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
SVG Scalable Vector Graphics image
Size
1.4 kB (1375 bytes)
Hash
b68d2085ef62e0247ec621764408dd0b
dd1dd732dd511fb75ec4f7ec87020869114e0407
89180b53115f59e1a870ab6b1dd09abf80ffa091eab8a10f1422fdf097e457c6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Home/static/imgs/icon_etf.svg HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:42 GMT
content-type: image/svg+xml
last-modified: Mon, 04 Jul 2022 17:20:12 GMT
etag: W/"62c3214c-55f"
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/favicon.ico

154.82.100.163

200 OK

8.7 kB

URL GET HTTP/2
euets-uk.icu/favicon.ico
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 514x336, components 3
Size
8.7 kB (8690 bytes)
Hash
ee7b5088a0763445a91812eedc280ad9
29c1e5a624b0e83940219e4fa708db0e5a58d0b2
981be7eaf60ec5a5042e271dae3c2f5cefa703645ac03c3074733eb32de3f9da

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:44 GMT
content-type: image/x-icon
last-modified: Sun, 17 Sep 2023 13:57:49 GMT
etag: W/"650705dd-21f2"
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_btc

154.82.100.163

200 OK

213 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_btc
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
213 B (213 bytes)
Hash
90b3231c861553dd9f9e3ee2f2cf0a00
96d5a19a7022d7174b5ee29b05edd4e93b58d68d
576fac16ebd276fd95f56daed60f7a00be8caa302e4e95d478d5682a37898a49

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_btc HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:54 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_eth

154.82.100.163

200 OK

206 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_eth
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
206 B (206 bytes)
Hash
3c4a94415ce816b1e8d2c3b473123a69
6f15bc8b7a9efcf5f2da1c469d8edc961389744c
bddfec0bd2125ff6eda8b1270e83805925584499a8a1b583de48224d6b77e9c1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_eth HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:56 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_btc

154.82.100.163

200 OK

213 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_btc
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
213 B (213 bytes)
Hash
90b3231c861553dd9f9e3ee2f2cf0a00
96d5a19a7022d7174b5ee29b05edd4e93b58d68d
576fac16ebd276fd95f56daed60f7a00be8caa302e4e95d478d5682a37898a49

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_btc HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:56 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_btc

154.82.100.163

200 OK

213 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_btc
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
213 B (213 bytes)
Hash
bad4003d3c46b3b7746b7795a9331870
7c23307862ecb1dca3e4cf469ce56f4ba87ed2b4
ccf8ab83ec211dcb8ca4c254a9e5fe8fd61384961cb3ea2ec9b0d40c99f3bbd0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_btc HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:58 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist

154.82.100.163

200 OK

90 kB

URL User Request GET HTTP/2
euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type

Size
90 kB (89531 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:41 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
set-cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
cache-control: private
x-powered-by: ThinkPHP
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: gzip
x-cache: DYNAMIC
X-Firefox-Spdy: h2

euets-uk.icu/Public/Home/static/css/base.css

154.82.100.163

200 OK

26 kB

URL GET HTTP/2
euets-uk.icu/Public/Home/static/css/base.css
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type

Size
26 kB (25765 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Home/static/css/base.css HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:41 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 17:20:12 GMT
vary: Accept-Encoding
etag: W/"62c3214c-64a5"
expires: Fri, 26 Apr 2024 09:06:12 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: gzip
x-cache: HIT
X-Firefox-Spdy: h2

cdn.staticfile.org/jquery/2.1.1/jquery.min.js

104.18.52.201

200 OK

84 kB

URL GET HTTP/2
cdn.staticfile.org/jquery/2.1.1/jquery.min.js
IP
104.18.52.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerGoogle Trust Services LLC
Subjectcdn.staticfile.org
Fingerprint13:7C:E5:1B:86:D1:10:4A:B0:8D:70:4A:75:D6:29:72:5A:12:CC:80
ValidityFri, 12 Apr 2024 08:18:39 GMT - Thu, 11 Jul 2024 08:18:38 GMT

File type
JavaScript source, ASCII text, with very long lines (32061)
Size
84 kB (84280 bytes)
Hash
d021c983bd6e7291b43a5cc1fb2ebe99
ffe47a16e4b1550ddfba3577cc9cc9fdc8643aff
c0d4098bc8b34c6f87a3d7723988ae81214a53a0bb4a1d4d36a67640f98ed079

HTTP Headers

GET /jquery/2.1.1/jquery.min.js HTTP/1.1
Host: cdn.staticfile.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 03:07:41 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodifed-Since, X-CSRF-TOKEN, X-Requested-With,token
cache-control: public, max-age=14400
x-cloud-cdn: true
content-encoding: gzip
last-modified: Fri, 12 Apr 2024 12:31:47 GMT
cf-cache-status: HIT
age: 1174448
expires: Fri, 26 Apr 2024 07:07:41 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a35d326a84b517-OSL
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_ltc

154.82.100.163

200 OK

203 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_ltc
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
203 B (203 bytes)
Hash
c88087056d40675c9efa56a0a7cf58d2
71831748777da70f19d874b74cbef5929db15720
f3c58c59b65dcc1fcfc7d327e4a8755c99b9e8ec5574e6ded517de4b686e468d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_ltc HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:55 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_btc

154.82.100.163

200 OK

213 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_btc
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
213 B (213 bytes)
Hash
bad4003d3c46b3b7746b7795a9331870
7c23307862ecb1dca3e4cf469ce56f4ba87ed2b4
ccf8ab83ec211dcb8ca4c254a9e5fe8fd61384961cb3ea2ec9b0d40c99f3bbd0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_btc HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:08:02 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_doge

154.82.100.163

200 OK

209 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_doge
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
209 B (209 bytes)
Hash
d471b409d9586ace35c24dc23d942f70
3e0bdec1bfc197c19eb5432928722f3955d5cff8
49c82dc743c5a28fe69c333629ad922a2922c7987cc11a57f4f582e4d6bca713

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_doge HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 9
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:44 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_usdz

154.82.100.163

200 OK

175 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_usdz
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
175 B (175 bytes)
Hash
b176c1f7f4f205158fcc689bf988ed85
cc446600168367c9311d6876129db776201229ac
f7628924e88a3417249d981aa4f7eb2a2b00a4924719b86544c1f5d406119f41

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_usdz HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 9
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:45 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_eth

154.82.100.163

200 OK

206 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_eth
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
206 B (206 bytes)
Hash
3c4a94415ce816b1e8d2c3b473123a69
6f15bc8b7a9efcf5f2da1c469d8edc961389744c
bddfec0bd2125ff6eda8b1270e83805925584499a8a1b583de48224d6b77e9c1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_eth HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:59 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_iota

154.82.100.163

200 OK

201 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_iota
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
201 B (201 bytes)
Hash
a25a2817da65abadc8fffbbd35c05037
24dd33f6a73bd0ad4ec9d8770962b9a55253d28a
29315b1d8ba330a2feda1aa98e5c3915bed9e5e286ad1253b9eb75b89083d768

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_iota HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 9
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:44 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_btc

154.82.100.163

200 OK

212 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_btc
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
212 B (212 bytes)
Hash
8b04482c6c02a3dfe675f6a1785f4e67
1bf8bd3b05456fbe01993ecab59ca6afcc454e42
c76dcbdbd12e38e382b672b093da935a5c9e5d317677f692cdbd0d1601c2cd5f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_btc HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:48 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_doge

154.82.100.163

200 OK

209 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_doge
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
209 B (209 bytes)
Hash
e8f8c8ecd42bbabb89e1660ad0f75015
e0a6e9bfc63b3270cc55718c94591a4e875f3b53
885e97a6203b5a5babce757ef677517b2af1929af213bda0f56a0d11715b710a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_doge HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 9
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:51 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_eos

154.82.100.163

200 OK

203 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_eos
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
203 B (203 bytes)
Hash
0f1257f10b5f8987d93aa3c6b3cc3857
7dcde92137eedf5bb300193c6a60c51fd1ef919d
d8560537f1876fc2edd9808bfa4f94afbfaffbab9cf74c3deeac335a509d5867

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_eos HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:59 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_fil

154.82.100.163

200 OK

201 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_fil
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
201 B (201 bytes)
Hash
61671c823f2f08bae13cb92a38d2d9e2
5eafb63bfdbcffb195f1df73103223a41bbdde79
e8db2bd186eb0bae0b915b8f9ae76d468db7cc4092276ab6508028ecf099cde9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_fil HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:59 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Public/Home/static/imgs/icon_contract.svg

154.82.100.163

200 OK

1.2 kB

URL GET HTTP/2
euets-uk.icu/Public/Home/static/imgs/icon_contract.svg
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
SVG Scalable Vector Graphics image
Size
1.2 kB (1159 bytes)
Hash
3e565b2794cb2f98569651d4dd8585de
aa184c7cdc1c32aa2293d0b0744181d35b41ed11
97871dc0b4dbaf6072ffef5b478065e8bb329a3d5a73d9e151f6bd2c30e8e737

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Home/static/imgs/icon_contract.svg HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:42 GMT
content-type: image/svg+xml
last-modified: Mon, 04 Jul 2022 17:20:12 GMT
etag: W/"62c3214c-487"
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c

151.101.129.229

200 OK

107 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
Web Open Font Format, TrueType, length 106812, version 1.0
Size
107 kB (106812 bytes)
Hash
df7de9fe96a30f78c7f652f5b00ae016
1b10ce080e2562a8b7e8395044d3ca83dc112999
011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b

HTTP Headers

GET /npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://cdn.jsdelivr.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: font/woff
x-jsd-version: 1.3.0
x-jsd-version-type: version
etag: W/"1a13c-GxDOCA4lYqi36DlQRNPKg9wRKZk"
accept-ranges: bytes
date: Fri, 26 Apr 2024 03:07:42 GMT
age: 3881719
x-served-by: cache-fra-etou8220031-FRA, cache-hel1410031-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 106812
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_bch

154.82.100.163

200 OK

203 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_bch
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
203 B (203 bytes)
Hash
8fbc6b6e5c22a1f1fc7690ebfec2284b
d940082f86193ff6cbc3a78b5219a3c7abb5211f
02efffea200ced8c06e32d068a78a5210d1c423d62435b10bc0db9ff5ae8b1f4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_bch HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:44 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_eth

154.82.100.163

200 OK

206 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_eth
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
206 B (206 bytes)
Hash
3c4a94415ce816b1e8d2c3b473123a69
6f15bc8b7a9efcf5f2da1c469d8edc961389744c
bddfec0bd2125ff6eda8b1270e83805925584499a8a1b583de48224d6b77e9c1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_eth HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:50 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_btc

154.82.100.163

200 OK

213 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_btc
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
213 B (213 bytes)
Hash
90b3231c861553dd9f9e3ee2f2cf0a00
96d5a19a7022d7174b5ee29b05edd4e93b58d68d
576fac16ebd276fd95f56daed60f7a00be8caa302e4e95d478d5682a37898a49

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_btc HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:52 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_flow

154.82.100.163

200 OK

203 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_flow
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
203 B (203 bytes)
Hash
82b8410020f1a7d3631357ed4fe70aec
58fd17ff2e527b8a1964ad4ae8ae693c592d6c04
9b80d4a33452df09f5b51f6b4f3e14da21807c8f01875b05ca3e66606791596e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_flow HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 9
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:44 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Public/Static/bootstrap5Slide/style.css

154.82.100.163

200 OK

589 B

URL GET HTTP/2
euets-uk.icu/Public/Static/bootstrap5Slide/style.css
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
ASCII text, with very long lines (589), with no line terminators
Size
589 B (589 bytes)
Hash
df62cb99d119a66bcd5f06547d96ecb7
a6d0e097db0919f47977c33510359bc08ec88a9c
afca52e1c0203f27bf8165e8fcf92b2674f084f6372f12cc1e7bb3edaee35f03

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Static/bootstrap5Slide/style.css HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:41 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 17:20:12 GMT
etag: W/"62c3214c-24d"
expires: Fri, 26 Apr 2024 09:18:12 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Public/Static/bootstrap5Slide/scripts.js

154.82.100.163

200 OK

298 B

URL GET HTTP/2
euets-uk.icu/Public/Static/bootstrap5Slide/scripts.js
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
ASCII text, with very long lines (304), with no line terminators
Size
298 B (298 bytes)
Hash
e948a4dc089eb5f7cc77910914ea3ac9
8da55cd021dc7839d3f6de37683ce5959ae564be
1142b650058fff04dff1cd3a4d7e0117c19d0fcc490bc5c99219020f95581f60

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Static/bootstrap5Slide/scripts.js HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:42 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 17:20:12 GMT
etag: W/"62c3214c-12a"
expires: Fri, 26 Apr 2024 09:17:19 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_ht

154.82.100.163

200 OK

25 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_ht
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
25 B (25 bytes)
Hash
5009a876ea27b4881816b8881cca2707
ef898e0d368958f748ee7dcb65dd1cde8f772b79
5c7061ec8a910c701bd1540fa55762769756e8eb2f49fea93e3c910419484989

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_ht HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 7
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:44 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_eos

154.82.100.163

200 OK

203 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_eos
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
203 B (203 bytes)
Hash
8ba4c84593fec539ed1cf2ce12af0de2
070319e6cac4777a623714936066f3831f2e42ab
ca97b3a0073f3fc1b3016a1abcf54cfe2b2fd2b64074d26857556e9454fde137

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_eos HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:49 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_doge

154.82.100.163

200 OK

209 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_doge
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
209 B (209 bytes)
Hash
03028b67f60f5e46fbb2105de6a666af
bfee5348a9eba3661306e4134766ec7fd7fbc0a1
51e0a3a4bf230a128b78a524c780bc8d10bc06118bef9f1f84f363b31246afe6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_doge HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 9
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:58 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_jst

154.82.100.163

200 OK

209 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_jst
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
209 B (209 bytes)
Hash
318d033574302d3b171e29120f8360c4
a470bbade3b8fcb907311b61084c151204aa716b
211641ddcaf30caf8a2a4b413556ce370e8354510887f1d6e231b79ee9e230d0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_jst HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:45 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_btc

154.82.100.163

200 OK

213 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_btc
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
213 B (213 bytes)
Hash
bad4003d3c46b3b7746b7795a9331870
7c23307862ecb1dca3e4cf469ce56f4ba87ed2b4
ccf8ab83ec211dcb8ca4c254a9e5fe8fd61384961cb3ea2ec9b0d40c99f3bbd0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_btc HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:08:00 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_ltc

154.82.100.163

200 OK

203 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_ltc
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
203 B (203 bytes)
Hash
24da3e671cfe94b58b53e2f8ab4a7d87
d6fbbbf6261e290e3e74eacfcb9b1b9e87f31181
005270474a7ba45d279bd6c036cfb7ae9af84169ffa9c01b0e5417533ea0c741

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_ltc HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:44 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_eos

154.82.100.163

200 OK

203 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_eos
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
203 B (203 bytes)
Hash
51c4f84c7fb81d59743013ffadc0fbca
3faf6fea46165e1570e275adf5ec722b19838202
a8bde0fd4d6d997bd79480a34c6fb9ebe756f1f181cef2290c3f326b9e874376

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_eos HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:54 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_iota

154.82.100.163

200 OK

201 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_iota
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
201 B (201 bytes)
Hash
f753bf4515d861067522690dd3df4986
ebab63c30d3c78efd6ca1a6b62a8c449a25b9481
2e335b16c1b35e7e93833db0ef42f64448aaf4b2f9ff79bd2e5cfeaf628393de

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_iota HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 9
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:57 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Public/Static/bootstrap5Slide/bootstrap.min.css

154.82.100.163

200 OK

193 kB

URL GET HTTP/2
euets-uk.icu/Public/Static/bootstrap5Slide/bootstrap.min.css
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
ASCII text, with very long lines (65184)
Size
193 kB (192762 bytes)
Hash
cb46b85888b78de64c1f51bc7797aacb
e57147e69810b9ee63af657969ddfd6c456957e3
652650f2c09a63e822932e07d79583c64a996e44ff680e2a9183c2a7c5b2531e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Static/bootstrap5Slide/bootstrap.min.css HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:41 GMT
content-type: text/css
last-modified: Mon, 04 Jul 2022 17:20:12 GMT
vary: Accept-Encoding
etag: W/"62c3214c-2f0fa"
expires: Fri, 26 Apr 2024 09:18:12 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: gzip
x-cache: HIT
X-Firefox-Spdy: h2

euets-uk.icu/Public/Home/static/js/jquery.SuperSlide.2.1.1.js

154.82.100.163

200 OK

11 kB

URL GET HTTP/2
euets-uk.icu/Public/Home/static/js/jquery.SuperSlide.2.1.1.js
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type

Size
11 kB (11422 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Home/static/js/jquery.SuperSlide.2.1.1.js HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:42 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 17:20:12 GMT
vary: Accept-Encoding
etag: W/"62c3214c-2c9e"
expires: Fri, 26 Apr 2024 08:59:43 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: gzip
x-cache: HIT
X-Firefox-Spdy: h2

euets-uk.icu/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js

154.82.100.163

200 OK

79 kB

URL GET HTTP/2
euets-uk.icu/Public/Static/bootstrap5Slide/bootstrap.bundle.min.js
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
JavaScript source, ASCII text, with very long lines (65299)
Size
79 kB (78748 bytes)
Hash
8831aa095cdec88f66c2e46c339cf352
5db4c40dbc6bd3d9623ee98a2061dd265885cf2e
79d443b15f542c8a8acca8e937f2a3c90ecba78bd49fdbac6c9b878c7f1293e9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Public/Static/bootstrap5Slide/bootstrap.bundle.min.js HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:42 GMT
content-type: application/javascript
last-modified: Mon, 04 Jul 2022 17:20:12 GMT
vary: Accept-Encoding
etag: W/"62c3214c-1339c"
expires: Fri, 26 Apr 2024 09:18:13 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: gzip
x-cache: HIT
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_fil

154.82.100.163

200 OK

202 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_fil
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
202 B (202 bytes)
Hash
51459fd505f5ac621f78d9170154261e
1fb9d8e71f874fccfc4b02a7dcafc146a2517347
61d444593aca3e1d5602b59bf770294869511cadb977f270b349df93dec601c4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_fil HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:45 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_eth

154.82.100.163

200 OK

206 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_eth
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
206 B (206 bytes)
Hash
3c4a94415ce816b1e8d2c3b473123a69
6f15bc8b7a9efcf5f2da1c469d8edc961389744c
bddfec0bd2125ff6eda8b1270e83805925584499a8a1b583de48224d6b77e9c1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_eth HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:53 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_bch

154.82.100.163

200 OK

203 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_bch
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
203 B (203 bytes)
Hash
402b4e0110477a00e6080189dedb51b6
ba266b2891e65387997502033fcc88eabcc0a3c5
e0af94e127a1dfd34bd474cb173a7cfd0d5e711bc88e8de0e8130d5e18593f83

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_bch HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:08:02 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_jst

0.0.0.0

209 B

URL POST
euets-uk.icu/Ajaxtrade/obtain_jst
IP
0.0.0.0:0
ASN
#0

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
209 B (209 bytes)
Hash
c07e77a2c5c0b4e4c453f8f8a89a7100
da79011bcfeb28bd44dda7fcec1271e709bbb11d
ac2caf54d1d912a4ccac88d15f3efc8a163d76d01f65da5367c024e27eacaba4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_jst HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:08:03 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_btc

0.0.0.0

0 B

URL POST
euets-uk.icu/Ajaxtrade/obtain_btc
IP
0.0.0.0:0
ASN
#0

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_btc HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

euets-uk.icu/Ajaxtrade/obtain_btc

154.82.100.163

200 OK

212 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_btc
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
212 B (212 bytes)
Hash
8b04482c6c02a3dfe675f6a1785f4e67
1bf8bd3b05456fbe01993ecab59ca6afcc454e42
c76dcbdbd12e38e382b672b093da935a5c9e5d317677f692cdbd0d1601c2cd5f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_btc HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:46 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_bch

154.82.100.163

200 OK

203 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_bch
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
203 B (203 bytes)
Hash
97e974228e2c532e6e3551601ea4fc89
a30a150f679a680f437b1e565bde12ef57107d0e
d33bfef738beaeec8d2977a5dd6e3f3cb3db4182c4f8005fc17beed444b53368

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_bch HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:53 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_eth

154.82.100.163

200 OK

205 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_eth
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
205 B (205 bytes)
Hash
0d9e297a198ccdf48932aebaacfd002d
a8a7d59785a22589de37aad425a2cee2a1dde654
b5705753696fc50d32d9ffe501f51b63569cd3be779f12dcbd55f42809034ea2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_eth HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:08:02 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

cdn.staticfile.org/jquery/1.10.2/jquery.min.js

104.18.52.201

200 OK

93 kB

URL GET HTTP/2
cdn.staticfile.org/jquery/1.10.2/jquery.min.js
IP
104.18.52.201:443
ASN
#13335 CLOUDFLARENET

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerGoogle Trust Services LLC
Subjectcdn.staticfile.org
Fingerprint13:7C:E5:1B:86:D1:10:4A:B0:8D:70:4A:75:D6:29:72:5A:12:CC:80
ValidityFri, 12 Apr 2024 08:18:39 GMT - Thu, 11 Jul 2024 08:18:38 GMT

File type
JavaScript source, ASCII text, with very long lines (32072)
Size
93 kB (93100 bytes)
Hash
e0e0559014b222245deb26b6ae8bd940
e2f3603e23711f6446f278a411d905623d65201e
89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e

HTTP Headers

GET /jquery/1.10.2/jquery.min.js HTTP/1.1
Host: cdn.staticfile.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 03:07:41 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodifed-Since, X-CSRF-TOKEN, X-Requested-With,token
cache-control: public, max-age=14400
x-cloud-cdn: true
content-encoding: gzip
last-modified: Fri, 12 Apr 2024 12:28:45 GMT
cf-cache-status: HIT
age: 1174475
expires: Fri, 26 Apr 2024 07:07:41 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a35d326a83b517-OSL
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_eth

154.82.100.163

200 OK

206 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_eth
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
206 B (206 bytes)
Hash
3c4a94415ce816b1e8d2c3b473123a69
6f15bc8b7a9efcf5f2da1c469d8edc961389744c
bddfec0bd2125ff6eda8b1270e83805925584499a8a1b583de48224d6b77e9c1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_eth HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 8
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:07:47 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

euets-uk.icu/Ajaxtrade/obtain_flow

154.82.100.163

200 OK

203 B

URL POST HTTP/2
euets-uk.icu/Ajaxtrade/obtain_flow
IP
154.82.100.163:443
ASN
#399077 TERAEXCH

Requested by
https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Certificate
IssuerLet's Encrypt
Subjecteuets-uk.icu
FingerprintB0:53:13:F5:EE:ED:FC:B7:A6:25:54:B6:71:84:55:E9:7F:EF:71:56
ValidityTue, 23 Apr 2024 00:32:29 GMT - Mon, 22 Jul 2024 00:32:28 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
203 B (203 bytes)
Hash
c9acd934bb69d92dd38cd8be29107811
5390b6aee35f55bfcc45a9daa045b80e95dd208c
0bbd87353e25fd226d1000d56cfac3189127a096723d80a11df6c237fcf731b7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /Ajaxtrade/obtain_flow HTTP/1.1
Host: euets-uk.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 9
Origin: https://euets-uk.icu
DNT: 1
Connection: keep-alive
Referer: https://euets-uk.icu/index/index/lang/en-us/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist/Trade/tradelist
Cookie: PHPSESSID=b4n9h6kvmhqc94p34bjspj5ql2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: NgxFence
date: Fri, 26 Apr 2024 03:08:01 GMT
content-type: application/json; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (23)

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations