| |  142.250.178.78 | 404 Not Found | 1.6 kB |
IP142.250.178.78:443
CertificateIssuerGoogle Trust Services Subject*.google.com Fingerprint09:73:D4:56:AF:03:7E:40:3B:60:95:56:66:8D:E9:27:E0:DA:EC:DA ValidityMon, 19 May 2025 08:41:43 GMT - Mon, 11 Aug 2025 08:41:42 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hashbc0ad2db3272298238c3933ea0d944d1 ccb1767caf616c73513dc921cd3f5da072582a77 0a6ad5109827eff80f61f2106f29d9fb38ce486fa397551e506bf5b6ed861f36
GET /404/ HTTP/1.1
Host: google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://rpdschoolekauni.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
referrer-policy: no-referrer
content-length: 1565
date: Mon, 16 Jun 2025 13:33:18 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png | 142.250.178.100 | 200 OK | 3.2 kB |
URL GET www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png IP142.250.178.100:443
CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint5F:D0:77:0B:35:28:63:FA:F1:E5:B7:91:23:84:B9:89:D3:5B:66:F3 ValidityMon, 19 May 2025 08:43:37 GMT - Mon, 11 Aug 2025 08:43:36 GMT
File typePNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced Hash9d73b3aa30bce9d8f166de5178ae4338 d0cbc46850d8ed54625a3b2b01a2c31f37977e75 dbef5e5530003b7233e944856c23d1437902a2d3568cdfd2beaf2166e9ca9139
GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 3170
date: Mon, 16 Jun 2025 13:33:18 GMT
expires: Mon, 16 Jun 2025 13:33:18 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET rpdschoolekauni.com/o/?c3Y9bzM2NV8xX29uZSZtPWxoJnVpZD1VU0VSMjgwNTIwMjVVMTQwNTI4NDgmdD1mWg==N0123N |  209.182.232.81 | 200 OK | 2.9 kB |
URL User Request GET rpdschoolekauni.com/o/?c3Y9bzM2NV8xX29uZSZtPWxoJnVpZD1VU0VSMjgwNTIwMjVVMTQwNTI4NDgmdD1mWg==N0123N IP209.182.232.81:443
CertificateIssuerLet's Encrypt Subject*.rpdschoolekauni.com Fingerprint90:50:D0:A7:A2:A5:AF:21:3D:DE:42:C0:3C:FA:FA:5E:B1:42:7A:36 ValidityMon, 12 May 2025 14:58:31 GMT - Sun, 10 Aug 2025 14:58:30 GMT
File typeHTML document, ASCII text, with very long lines (2606) Hash8465cecd5bc2324d9f842c2b21b7fdf4 a166f57cc184756953a253d5d4c7ff2bc6abae2a 127a21653010daf5d532892ffa127eaab1f895eaf99f51b8af84a4df270cc270
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - Anti-debugging code | | urlquery | phishing | Phishing - Mamba Phishing Kit |
GET /o/?c3Y9bzM2NV8xX29uZSZtPWxoJnVpZD1VU0VSMjgwNTIwMjVVMTQwNTI4NDgmdD1mWg==N0123N HTTP/1.1
Host: rpdschoolekauni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/8.1.26
cache-control: no-store
set-cookie: _cid=7042635bec0e64ee5c9e70c4883ee920; expires=Mon, 16-Jun-2025 13:34:15 GMT; Max-Age=60; secure
content-type: text/html; charset=UTF-8
content-length: 1586
content-encoding: br
vary: Accept-Encoding
date: Mon, 16 Jun 2025 13:33:15 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| GET rpdschoolekauni.com/favicon.ico | 209.182.232.81 | 404 Not Found | 1.3 kB |
URL GET rpdschoolekauni.com/favicon.ico IP209.182.232.81:443
Requested byhttps://rpdschoolekauni.com/o/?c3Y9bzM2NV8xX29uZSZtPWxoJnVpZD1VU0VSMjgwNTIwMjVVMTQwNTI4NDgmdD1mWg==N0123N CertificateIssuerLet's Encrypt Subject*.rpdschoolekauni.com Fingerprint90:50:D0:A7:A2:A5:AF:21:3D:DE:42:C0:3C:FA:FA:5E:B1:42:7A:36 ValidityMon, 12 May 2025 14:58:31 GMT - Sun, 10 Aug 2025 14:58:30 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash8150f458ed6fb9b1db4e5cfa57a1a281 6e5726854d28687b560d7fdcb5c782c425c7dfb9 4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Mamba Phishing Kit |
GET /favicon.ico HTTP/1.1
Host: rpdschoolekauni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rpdschoolekauni.com/o/?c3Y9bzM2NV8xX29uZSZtPWxoJnVpZD1VU0VSMjgwNTIwMjVVMTQwNTI4NDgmdD1mWg==N0123N
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Mon, 16 Jun 2025 13:33:15 GMT
server: LiteSpeed
|
|
| POST rpdschoolekauni.com/o/?c3Y9bzM2NV8xX29uZSZtPWxoJnVpZD1VU0VSMjgwNTIwMjVVMTQwNTI4NDgmdD1mWg==N0123N | 209.182.232.81 | 301 Moved Permanently | 1.6 kB |
URL User Request POST rpdschoolekauni.com/o/?c3Y9bzM2NV8xX29uZSZtPWxoJnVpZD1VU0VSMjgwNTIwMjVVMTQwNTI4NDgmdD1mWg==N0123N IP209.182.232.81:443
CertificateIssuerLet's Encrypt Subject*.rpdschoolekauni.com Fingerprint90:50:D0:A7:A2:A5:AF:21:3D:DE:42:C0:3C:FA:FA:5E:B1:42:7A:36 ValidityMon, 12 May 2025 14:58:31 GMT - Sun, 10 Aug 2025 14:58:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - Anti-debugging code | | urlquery | phishing | Phishing - Mamba Phishing Kit |
POST /o/?c3Y9bzM2NV8xX29uZSZtPWxoJnVpZD1VU0VSMjgwNTIwMjVVMTQwNTI4NDgmdD1mWg==N0123N HTTP/1.1
Host: rpdschoolekauni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 111577
Origin: https://rpdschoolekauni.com
DNT: 1
Connection: keep-alive
Referer: https://rpdschoolekauni.com/o/?c3Y9bzM2NV8xX29uZSZtPWxoJnVpZD1VU0VSMjgwNTIwMjVVMTQwNTI4NDgmdD1mWg==N0123N
Cookie: _cid=7042635bec0e64ee5c9e70c4883ee920; ci_session=jct4nb5r5a5jp5r6o5koh5ut2n10cg3u
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
x-powered-by: PHP/8.1.26
cache-control: no-store
location: https://google.com/404/
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 16 Jun 2025 13:33:17 GMT
server: LiteSpeed
|
|
| GET www.google.com/images/errors/robot.png | 142.250.178.100 | 200 OK | 6.3 kB |
URL GET www.google.com/images/errors/robot.png IP142.250.178.100:443
CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint5F:D0:77:0B:35:28:63:FA:F1:E5:B7:91:23:84:B9:89:D3:5B:66:F3 ValidityMon, 19 May 2025 08:43:37 GMT - Mon, 11 Aug 2025 08:43:36 GMT
File typePNG image data, 171 x 213, 8-bit colormap, non-interlaced Hash4c9acf280b47cef7def3fc91a34c7ffe c32bb847daf52117ab93b723d7c57d8b1e75d36b 5f9fc5b3fbddf0e72c5c56cdcfc81c6e10c617d70b1b93fbe1e4679a8797bff7
GET /images/errors/robot.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 6327
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 16 Jun 2025 13:19:02 GMT
expires: Tue, 16 Jun 2026 13:19:02 GMT
cache-control: public, max-age=31536000
age: 856
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET rpdschoolekauni.com/files/images/Logo.png | 209.182.232.81 | 200 OK | 1 B |
URL GET rpdschoolekauni.com/files/images/Logo.png IP209.182.232.81:443
Requested byhttps://rpdschoolekauni.com/o/?c3Y9bzM2NV8xX29uZSZtPWxoJnVpZD1VU0VSMjgwNTIwMjVVMTQwNTI4NDgmdD1mWg==N0123N CertificateIssuerLet's Encrypt Subject*.rpdschoolekauni.com Fingerprint90:50:D0:A7:A2:A5:AF:21:3D:DE:42:C0:3C:FA:FA:5E:B1:42:7A:36 ValidityMon, 12 May 2025 14:58:31 GMT - Sun, 10 Aug 2025 14:58:30 GMT
File typevery short file (no magic) Hash7215ee9c7d9dc229d2921a40e899ec5f b858cb282617fb0956d960215c8e84d1ccf909c6 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Mamba Phishing Kit |
GET /files/images/Logo.png HTTP/1.1
Host: rpdschoolekauni.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rpdschoolekauni.com/o/?c3Y9bzM2NV8xX29uZSZtPWxoJnVpZD1VU0VSMjgwNTIwMjVVMTQwNTI4NDgmdD1mWg==N0123N
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
x-powered-by: PHP/8.1.26
set-cookie: ci_session=jct4nb5r5a5jp5r6o5koh5ut2n10cg3u; expires=Mon, 16-Jun-2025 15:33:15 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
refresh: 0;url=https://rpdschoolekauni.com/page/404-page
content-type: text/html; charset=UTF-8
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Mon, 16 Jun 2025 13:33:16 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
|
|