Report - 39999rg.in/

Report Overview

Submitted URL
39999rg.in/
IP
103.188.120.114
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist
Submitted
2024-05-02 06:05:54
Access
public
Website Title
Welcome
Final URL
39999rg.in/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
52

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
39999rg.in	unknown	unknown	No data	No data	11 kB	454 kB	103.188.120.114
web.cdn.openinstall.io	104753	2016-10-20	2019-08-29	2024-04-12	406 B	18 kB	43.152.140.54

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed
2024-05-02	medium	39999rg.in	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	39999rg.in/js/rem.js	840 B	2023-03-07	2024-05-16
Pretty URL 39999rg.in/js/rem.js IP 103.188.120.114 ASN #7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:23:57 Last Seen2024-05-16 13:21:35 Times Seen840 Hash e74e945fcc19cbd1d5276e5d4548d525 8236e3f3fc64916f9f7f65e8aa2680c9302f0858 33442081f56c808935dba715de506e29ebf99eea4d997a64818edb9081369fa5 Loading...

	39999rg.in/js/jquery-2.2.4.min.js	86 kB	2023-03-07	2024-05-17
Pretty URL 39999rg.in/js/jquery-2.2.4.min.js IP 103.188.120.114 ASN #7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:20:21 Last Seen2024-05-17 04:51:26 Times Seen3103 Hash adb784ef9dc257b32965a5da7ee82a8b 7a41c488d820ea08231d1d393e5f4daed4d25041 8e09aa31f396ea41d698f437dc5fc7125e931d400eb2873f5b68ef78c1e6f3a6 Loading...

	39999rg.in/js/swiper-4.2.0.min.js	120 kB	2023-03-11	2024-05-02
Pretty URL 39999rg.in/js/swiper-4.2.0.min.js IP 103.188.120.114 ASN #7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 10:08:47 Last Seen2024-05-02 08:06:02 Times Seen14 Hash 07d2dfa95329b636a9c1675ab6f27beb 69e919c593c82f07c19f4e37c6a06a48abef814b 9c1556dd8cf7adf50c362fd6c73844fb8cad45117eaf727c224c2007831735ba Loading...

	39999rg.in/js/MobEpp-1.1.1.js	25 kB	2023-04-06	2024-05-16
Pretty URL 39999rg.in/js/MobEpp-1.1.1.js IP 103.188.120.114 ASN #7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-06 18:33:51 Last Seen2024-05-16 13:21:35 Times Seen382 Hash b4cd45273f059ebff2ac2185efd52bf9 fe2cca20ad99606127aa64fe74059f4dfd6dad60 3816789af95bb9ed6245bab40c8a8aa56082819801a93d4a79ff9599bd7dc68c Loading...

	web.cdn.openinstall.io/openinstall.js	47 kB	2024-04-30	2024-05-07
Pretty URL web.cdn.openinstall.io/openinstall.js IP 43.152.140.54 ASN #139341 ACE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-30 10:09:17 Last Seen2024-05-07 18:49:03 Times Seen22 Hash 3e27b22e91b4c1f72a3ddb9073eacca6 0838aa98ac6df1e3a009fa83b5a0f82ca1b59e37 f7028becf6fbf4219ab85e5765c7be34bdc81bd8fc1874ed563a9b8ed03d97c6 Loading...

	39999rg.in/	0 B	2023-03-07	2024-05-17
Pretty URL 39999rg.in/ IP 103.188.120.114 ASN #7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-17 13:04:05 Times Seen37740041 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	39999rg.in/	0 B	2023-03-07	2024-05-17
Pretty URL 39999rg.in/ IP 103.188.120.114 ASN #7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-17 13:04:05 Times Seen37740041 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (27)

URL IP Response Size

39999rg.in/

103.188.120.114

200 OK

1.7 kB

URL User Request GET HTTP/1.1
39999rg.in/
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
HTML document, Unicode text, UTF-8 text
Size
1.7 kB (1662 bytes)
Hash
ffdb48ad5e36632826e4259b07988274
31f1be136ab12ee7d1acbb559efcb727136ce9f7
cc22122bb9bd0d0da509f5641617f2c111be74f1190561209a5df93f8a2701e6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: W/"66161757-1788"
Server: nginx
Date: Thu, 02 May 2024 06:05:29 GMT
Content-Type: text/html
Last-Modified: Wed, 10 Apr 2024 04:36:39 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
X-Cache: MISS from megai-cdn120-104
Transfer-Encoding: chunked

39999rg.in/css/Swiper.css

103.188.120.114

200 OK

4.5 kB

URL GET HTTP/1.1
39999rg.in/css/Swiper.css
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
ASCII text, with very long lines (13412), with CR line terminators
Size
4.5 kB (4454 bytes)
Hash
e0e19842a8a58777639a1789ec59a93a
dfac837d4e000bf5664cadd8f91dc58f4d796ea5
c5384c86bac6125246858a3dd42d1db56344da40db5793759eb4d15f816b4101

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/Swiper.css HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: W/"63e9ea03-3564"
Server: nginx
Date: Thu, 02 May 2024 06:05:30 GMT
Content-Type: text/css
Last-Modified: Mon, 13 Feb 2023 07:42:59 GMT
Vary: Accept-Encoding
Expires: Thu, 02 May 2024 18:05:30 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
X-Cache: MISS from megai-cdn120-104
Transfer-Encoding: chunked

39999rg.in/css/style.min.css

103.188.120.114

200 OK

2.4 kB

URL GET HTTP/1.1
39999rg.in/css/style.min.css
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
ASCII text, with very long lines (7701), with no line terminators
Size
2.4 kB (2361 bytes)
Hash
cb6d2f05dcccb08253e6b5d54c97b142
e2272af8c954c30cb7407b6e866d2462d32500b1
d5edd7964755a9b56a1827acb1fb22f817b3c2915fbfd83941105b656df172f2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/style.min.css HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: W/"63e9ec84-1e15"
Server: nginx
Date: Thu, 02 May 2024 06:05:30 GMT
Content-Type: text/css
Last-Modified: Mon, 13 Feb 2023 07:53:40 GMT
Vary: Accept-Encoding
Expires: Thu, 02 May 2024 18:05:30 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
X-Cache: MISS from megai-cdn120-104
Transfer-Encoding: chunked

39999rg.in/js/MobEpp-1.1.1.js

103.188.120.114

200 OK

8.2 kB

URL GET HTTP/1.1
39999rg.in/js/MobEpp-1.1.1.js
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators
Size
8.2 kB (8186 bytes)
Hash
f01dc4f7b5545c644a23e994b90f79a8
677fbec5177090d91c8bf52fb867563a0a90bb07
ac95fc0c65ee824399cd0ff56706a45d5b240baeda65a1c151db91bfdc79d695

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/MobEpp-1.1.1.js HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: W/"63e9e9ed-6278"
Server: nginx
Date: Thu, 02 May 2024 06:05:30 GMT
Content-Type: application/javascript
Last-Modified: Mon, 13 Feb 2023 07:42:37 GMT
Vary: Accept-Encoding
Expires: Thu, 02 May 2024 18:05:30 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
X-Cache: MISS from megai-cdn120-104
Transfer-Encoding: chunked

web.cdn.openinstall.io/openinstall.js

43.152.140.54

200 OK

17 kB

URL GET HTTP/2
web.cdn.openinstall.io/openinstall.js
IP
43.152.140.54:443
ASN
#139341 ACE

Requested by
https://39999rg.in/
Certificate
IssuerDigiCert Inc
Subject*.cdn.openinstall.io
FingerprintA8:1F:A2:F5:B6:BC:85:4E:71:E5:0F:92:A3:49:83:5C:39:5A:FE:E4
ValidityMon, 11 Sep 2023 00:00:00 GMT - Tue, 10 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (47257), with no line terminators
Size
17 kB (16985 bytes)
Hash
3e27b22e91b4c1f72a3ddb9073eacca6
0838aa98ac6df1e3a009fa83b5a0f82ca1b59e37
f7028becf6fbf4219ab85e5765c7be34bdc81bd8fc1874ed563a9b8ed03d97c6

HTTP Headers

GET /openinstall.js HTTP/1.1
Host: web.cdn.openinstall.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Fri, 26 Apr 2024 10:14:55 GMT
content-encoding: gzip
etag: "3e27b22e91b4c1f72a3ddb9073eacca6"
content-type: application/javascript
date: Thu, 02 May 2024 02:03:23 GMT
server: tencent-cos
x-cos-hash-crc64ecma: 16352518748770619748
x-cos-request-id: NjYzMmY0NmJfOTM0ZjQ0MGJfMjY0MTBfMTcyNTFkNQ==
content-length: 16985
accept-ranges: bytes
x-nws-log-uuid: 14595488691895550037
x-cache-lookup: Cache Hit
cache-control: max-age=7200
X-Firefox-Spdy: h2

39999rg.in/css/animate.min.css

103.188.120.114

200 OK

6.7 kB

URL GET HTTP/1.1
39999rg.in/css/animate.min.css
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
ASCII text, with very long lines (460)
Size
6.7 kB (6709 bytes)
Hash
9d99b1c597a52a1a68d063308f1de662
90dc56142980365936e75aa7c32faf92930694cc
764287c1363d6895c6e4dbabaa80ddba43f68dfe8557e6fe9b6c7767b4db1eec

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/animate.min.css HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: W/"63e9ea06-12a90"
Server: nginx
Date: Thu, 02 May 2024 06:05:30 GMT
Content-Type: text/css
Last-Modified: Mon, 13 Feb 2023 07:43:02 GMT
Vary: Accept-Encoding
Expires: Thu, 02 May 2024 18:05:30 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
X-Cache: MISS from megai-cdn120-104
Transfer-Encoding: chunked

39999rg.in/js/rem.js

103.188.120.114

200 OK

840 B

URL GET HTTP/1.1
39999rg.in/js/rem.js
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
ASCII text, with CRLF line terminators
Size
840 B (840 bytes)
Hash
e74e945fcc19cbd1d5276e5d4548d525
8236e3f3fc64916f9f7f65e8aa2680c9302f0858
33442081f56c808935dba715de506e29ebf99eea4d997a64818edb9081369fa5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/rem.js HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e9f4-348"
Server: nginx
Date: Thu, 02 May 2024 06:05:30 GMT
Content-Type: application/javascript
Last-Modified: Mon, 13 Feb 2023 07:42:44 GMT
Expires: Thu, 02 May 2024 18:05:30 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 840

39999rg.in/js/jquery-2.2.4.min.js

103.188.120.114

200 OK

34 kB

URL GET HTTP/1.1
39999rg.in/js/jquery-2.2.4.min.js
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
JavaScript source, ASCII text, with very long lines (32065), with CRLF line terminators
Size
34 kB (33582 bytes)
Hash
adb784ef9dc257b32965a5da7ee82a8b
7a41c488d820ea08231d1d393e5f4daed4d25041
8e09aa31f396ea41d698f437dc5fc7125e931d400eb2873f5b68ef78c1e6f3a6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/jquery-2.2.4.min.js HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: W/"63e9e9f0-14e4c"
Server: nginx
Date: Thu, 02 May 2024 06:05:30 GMT
Content-Type: application/javascript
Last-Modified: Mon, 13 Feb 2023 07:42:40 GMT
Vary: Accept-Encoding
Expires: Thu, 02 May 2024 18:05:30 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
X-Cache: MISS from megai-cdn120-104
Transfer-Encoding: chunked

39999rg.in/js/swiper-4.2.0.min.js

103.188.120.114

200 OK

36 kB

URL GET HTTP/1.1
39999rg.in/js/swiper-4.2.0.min.js
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
JavaScript source, ASCII text, with very long lines (65262), with CRLF line terminators
Size
36 kB (35611 bytes)
Hash
07d2dfa95329b636a9c1675ab6f27beb
69e919c593c82f07c19f4e37c6a06a48abef814b
9c1556dd8cf7adf50c362fd6c73844fb8cad45117eaf727c224c2007831735ba

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/swiper-4.2.0.min.js HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: W/"63e9e9f7-1d2dd"
Server: nginx
Date: Thu, 02 May 2024 06:05:30 GMT
Content-Type: application/javascript
Last-Modified: Mon, 13 Feb 2023 07:42:47 GMT
Vary: Accept-Encoding
Expires: Thu, 02 May 2024 18:05:30 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
X-Cache: MISS from megai-cdn120-104
Transfer-Encoding: chunked

39999rg.in/images/kf.png.webp

103.188.120.114

200 OK

6.3 kB

URL GET HTTP/1.1
39999rg.in/images/kf.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
6.3 kB (6340 bytes)
Hash
24b3675f16c2bd3de9bff6c9200d15fc
1d7f71614082d8984438cbbb2e6a641e7adb58c9
b24dbe403d423a2bb5a2c185d98e280793321fb1e2b43e89516dd5bfbaedde83

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/kf.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e955-18c4"
Server: nginx
Date: Thu, 02 May 2024 06:05:31 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:05 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 6340

39999rg.in/images/274585_750x56.png.webp

103.188.120.114

200 OK

4.0 kB

URL GET HTTP/1.1
39999rg.in/images/274585_750x56.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
4.0 kB (4028 bytes)
Hash
e0b7f8b2d10a711b096d5695e4c74b0e
5bfadcddde58f3f58389233da387a214b57e8b65
ffde835fe5a7da5282f12107ed4101edc0383178c3595044eaf6b0af22cbebff

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/274585_750x56.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e954-fbc"
Server: nginx
Date: Thu, 02 May 2024 06:05:31 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:04 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 4028

39999rg.in/images/6825c1_308x26.png.webp

103.188.120.114

200 OK

5.9 kB

URL GET HTTP/1.1
39999rg.in/images/6825c1_308x26.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
5.9 kB (5942 bytes)
Hash
2497f8e925fefa93fd7936a9e8de9c5f
4b847050e7afa53599044eff035107e603c004d6
a90b3fe9bb2af770f241e8d4a214b4056dc494213e5178e987669200ce5ce107

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/6825c1_308x26.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e954-1736"
Server: nginx
Date: Thu, 02 May 2024 06:05:31 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:04 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 5942

39999rg.in/images/c775ff_750x143.jpg.webp

103.188.120.114

200 OK

12 kB

URL GET HTTP/1.1
39999rg.in/images/c775ff_750x143.jpg.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 750x143, Scaling: [none]x[none], YUV color, decoders should clamp
Size
12 kB (12050 bytes)
Hash
cc9d16e7807e544939eb372486a2e1f1
5f48b0b11006def50cc0a4651a68d48008807391
dc9b11be4be86508ca1b3f746f1f016716e745de85c4954dd12956d24069f182

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/c775ff_750x143.jpg.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e955-2f12"
Server: nginx
Date: Thu, 02 May 2024 06:05:31 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:05 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 12050

39999rg.in/images/btns.png.webp

103.188.120.114

200 OK

4.5 kB

URL GET HTTP/1.1
39999rg.in/images/btns.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
4.5 kB (4548 bytes)
Hash
06fc6c871164ddc0ef542fa97edd679b
b32e26186acb90ba07f08cddd1ef28181545cd01
f142f19bbce73c63e4a835c21d71565fe715bdc43154ab2f681312c312773dcb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/btns.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e955-11c4"
Server: nginx
Date: Thu, 02 May 2024 06:05:31 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:05 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 4548

39999rg.in/images/btnh1.png.webp

103.188.120.114

200 OK

4.6 kB

URL GET HTTP/1.1
39999rg.in/images/btnh1.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
4.6 kB (4606 bytes)
Hash
bc0941c8464ffe84dc9d1068d642252d
a1cec9a07c60da9ac09c5735059cca0c1a5f06bc
08290380338460dd34ce0c621b5be3025725a13fd843c545d75a301af2765551

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/btnh1.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e955-11fe"
Server: nginx
Date: Thu, 02 May 2024 06:05:31 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:05 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 4606

39999rg.in/images/btnpc.png.webp

103.188.120.114

200 OK

4.5 kB

URL GET HTTP/1.1
39999rg.in/images/btnpc.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
4.5 kB (4498 bytes)
Hash
e8ea5b2f6df0b98deb9d8537f4b8e0f9
59efec7fcc2a6944e7f3d8a1c65a54f3583b26a5
d22b8ff8fda8786ce3bb5e7b7a3e66b52db3e3194880b171bc19037524d03dc8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/btnpc.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e955-1192"
Server: nginx
Date: Thu, 02 May 2024 06:05:31 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:05 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 4498

39999rg.in/images/0a8739_692x180.png.webp

103.188.120.114

200 OK

39 kB

URL GET HTTP/1.1
39999rg.in/images/0a8739_692x180.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
39 kB (38798 bytes)
Hash
7c090f7a915aa8e010f642648bf82d6a
d471e68402aa1c503fb351be183a0b41a6b97b11
fae478f566ba543f28d489146c759238a73e09340ac394a7973daac14f41edb0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/0a8739_692x180.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e954-978e"
Server: nginx
Date: Thu, 02 May 2024 06:05:31 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:04 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 38798

39999rg.in/images/84264c_750x2771.jpg.webp

103.188.120.114

200 OK

24 kB

URL GET HTTP/1.1
39999rg.in/images/84264c_750x2771.jpg.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 750x2771, Scaling: [none]x[none], YUV color, decoders should clamp
Size
24 kB (23732 bytes)
Hash
a02e75f69237108bca531e5b8b251738
1a42ffaf27c43dddc0099fb4111dcf8df08dd4c6
e897025070914fb7c278899a1a1ca35d0a41dc3a9150925a19b5c635020e2f63

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/84264c_750x2771.jpg.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/css/style.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e955-5cb4"
Server: nginx
Date: Thu, 02 May 2024 06:05:31 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:05 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 23732

39999rg.in/images/15f15b_24x60.png.webp

103.188.120.114

200 OK

438 B

URL GET HTTP/1.1
39999rg.in/images/15f15b_24x60.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
438 B (438 bytes)
Hash
daf72e4f2c6451da5d4933439a797628
e691eb76e86f896b13a72ede0e6f4f1ffc051950
abaeee6a2ba149956783f117ff2259cb8f4795125701bb826ed9ffc9d48dc7cc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/15f15b_24x60.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/css/style.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e954-1b6"
Server: nginx
Date: Thu, 02 May 2024 06:05:32 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:04 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 438

39999rg.in/images/38e598_24x60.png.webp

103.188.120.114

200 OK

438 B

URL GET HTTP/1.1
39999rg.in/images/38e598_24x60.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
438 B (438 bytes)
Hash
dd15471fa646828ee1ee39309f966b91
f52e0567acb62f4b067f8fdf5b6328acccaa6780
79154fc29de46502b5de020c0c18d1e8f4a0621daa42f3e11433a4a3eea9eb9c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/38e598_24x60.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/css/style.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e954-1b6"
Server: nginx
Date: Thu, 02 May 2024 06:05:32 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:04 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 438

39999rg.in/images/5df4b3_238x66.png.webp

103.188.120.114

200 OK

4.2 kB

URL GET HTTP/1.1
39999rg.in/images/5df4b3_238x66.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
4.2 kB (4248 bytes)
Hash
75d0b3c93879b35437b32c9d61bdfae3
bdfaa25684022dbe45324e9dbc5819d1a180c38d
64eec1c7e0afad565891faba0c1e9fdc7c3e31b377174ecbf6e9d0a874868533

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/5df4b3_238x66.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/css/style.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e954-1098"
Server: nginx
Date: Thu, 02 May 2024 06:05:32 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:04 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 4248

39999rg.in/images/da6192_193x59.png.webp

103.188.120.114

200 OK

8.9 kB

URL GET HTTP/1.1
39999rg.in/images/da6192_193x59.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
8.9 kB (8886 bytes)
Hash
e22ea2640db265a34d4bb71cf94c6280
bb87bd960a71b3264877fcb5cb0f33bf7da59bf6
05c0c41ab4a0d0d461da98801663b6c19c7fddea929d4559868f817d9949eebe

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/da6192_193x59.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e955-22b6"
Server: nginx
Date: Thu, 02 May 2024 06:05:32 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:05 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 8886

39999rg.in/images/fa8e62_148x36.png.webp

103.188.120.114

200 OK

1.7 kB

URL GET HTTP/1.1
39999rg.in/images/fa8e62_148x36.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
1.7 kB (1656 bytes)
Hash
2e4d43af63c161c003d9fc480c8bb9dd
535bd82d06ffacbfab75bb448d16611380ef6aa0
28cdb947fe7da4d80165de0b1b8100737ae51e9c98982fb2ff072840c76476a9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/fa8e62_148x36.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e955-678"
Server: nginx
Date: Thu, 02 May 2024 06:05:32 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:05 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 1656

39999rg.in/images/d0a37b_750x629.png.webp

103.188.120.114

200 OK

87 kB

URL GET HTTP/1.1
39999rg.in/images/d0a37b_750x629.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
87 kB (87240 bytes)
Hash
eee68b0feb2eea7e22f9349a1e5eb2bc
fbbf35d413c04f44a030e05ed5d550204f7ce4d1
c2fe4948cd3b9fc8c1ac13b9d7562432bed6d5202d13c1ce88d2200645ce3243

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/d0a37b_750x629.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e955-154c8"
Server: nginx
Date: Thu, 02 May 2024 06:05:31 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:05 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 87240

39999rg.in/images/d655b6_750x720.png.webp

103.188.120.114

200 OK

72 kB

URL GET HTTP/1.1
39999rg.in/images/d655b6_750x720.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
72 kB (72360 bytes)
Hash
08fc9a305893f1407e32a717c356d433
2e9cd0415dd2c26187978f980fd9f401f9c87d99
fbe9b7a85d2a240f1c340ff6aac8c86e3bd1b2caf6a3ae58a225126f702d6369

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/d655b6_750x720.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e955-11aa8"
Server: nginx
Date: Thu, 02 May 2024 06:05:32 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:05 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 72360

39999rg.in/favicon.ico

103.188.120.114

404 Not Found

146 B

URL GET HTTP/1.1
39999rg.in/favicon.ico
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 02 May 2024 06:05:33 GMT
Content-Type: text/html
X-Cache: MISS from megai-cdn120-104
Content-Length: 146

39999rg.in/images/dd91dd_750x720.png.webp

103.188.120.114

200 OK

74 kB

URL GET HTTP/1.1
39999rg.in/images/dd91dd_750x720.png.webp
IP
103.188.120.114:443
ASN
#7538 10F No 33 Sec 2 Zhongshan Rd Zhonghe Dist

Requested by
https://39999rg.in/
Certificate
IssuerLet's Encrypt
Subject39999rg.in
Fingerprint0F:C0:FF:4D:B1:C5:EA:CB:9A:E3:38:6C:B5:94:49:FB:32:3B:E4:EF
ValidityFri, 19 Apr 2024 22:53:27 GMT - Thu, 18 Jul 2024 22:53:26 GMT

File type
RIFF (little-endian) data, Web/P image
Size
74 kB (73864 bytes)
Hash
37f14cf739481dda88d4583b87f6892c
bda81fce536befce82a56b6bdcc4d77d00c42422
c3e4e18b2780234ec5ff885588faf0fc98065ebf81883853f72cfdc05716d176

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/dd91dd_750x720.png.webp HTTP/1.1
Host: 39999rg.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39999rg.in/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
ETag: "63e9e955-12088"
Server: nginx
Date: Thu, 02 May 2024 06:05:32 GMT
Content-Type: image/webp
Last-Modified: Mon, 13 Feb 2023 07:40:05 GMT
Accept-Ranges: bytes
X-Cache: MISS from megai-cdn120-104
Content-Length: 73864

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (27)

URL User Request GET HTTP/1.1

IP

ASN

Certificate