| | 188.114.97.1 | 301 Moved Permanently | 1.2 kB |
IP 188.114.97.1:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: jhk7ev.radosneoczka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=68es1jnu0n90duoui10hc6hcp5; _csrf=6b292cfd54a8c580faf90461741d5394c8931bad6c3416d5e1dac968cd7ba887a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22xrew1x8io9bluGqLXTMy91P2JOBdaDaf%22%3B%7D
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 06 Jun 2025 19:29:11 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 06 Jun 2025 20:29:11 GMT
Location: https://jhk7ev.radosneoczka.pl/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8g1i0Lc%2BKY2ykjl9GpZNqy32osbH0qgjiUIp0nwUSTaeth%2BfUiKkZz%2BtVE9RYUf8jKJNyKrZeTbirzDhlEnYDSjQN5fA9bcQpXjDS5dTRtuDfs7kpeDcpPevtyKttG5eWdg055KWSM2K"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 94ba512e6f54712e-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=2160&min_rtt=2160&rtt_var=1080&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=627&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| | 188.114.97.1 | 404 Not Found | 1.2 kB |
IP 188.114.97.1:443
CertificateIssuerGoogle Trust Services Subjectradosneoczka.pl FingerprintAB:BB:6F:52:1E:F0:10:04:47:21:F8:BD:76:A4:D4:9B:4A:82:7D:A7 ValidityMon, 02 Jun 2025 14:57:53 GMT - Sun, 31 Aug 2025 15:55:11 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash2d41930e2f8636f93773e6ac93033b1d fdb01f77e11ef30a0bc349d26eea21fa6b2788f7 0e748416aed044155561ab92db17aea0a14d5a5b1984aa1042b4cb3820409d23
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: jhk7ev.radosneoczka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=68es1jnu0n90duoui10hc6hcp5; _csrf=6b292cfd54a8c580faf90461741d5394c8931bad6c3416d5e1dac968cd7ba887a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22xrew1x8io9bluGqLXTMy91P2JOBdaDaf%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 06 Jun 2025 19:29:11 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
priority: u=1,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1B5nKJBD5h2s8OiKxdW7vtkB80M7w9E7tGljouQuCU43fmMbSiUQ6s8UiPCg7CC5IvsqbdgWhvMCYD6uEMx0f8T9QWSdU3eKoW0sO3KT95ZZPD2x"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 94ba512e9b8ab505-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| jhk7ev.radosneoczka.pl/assets/c1bb0ba6/css/bootstrap.css | 188.114.97.1 | 200 OK | 280 kB |
URL GET jhk7ev.radosneoczka.pl/assets/c1bb0ba6/css/bootstrap.css IP 188.114.97.1:443
Requested byhttps://jhk7ev.radosneoczka.pl/ CertificateIssuerGoogle Trust Services Subjectradosneoczka.pl FingerprintAB:BB:6F:52:1E:F0:10:04:47:21:F8:BD:76:A4:D4:9B:4A:82:7D:A7 ValidityMon, 02 Jun 2025 14:57:53 GMT - Sun, 31 Aug 2025 15:55:11 GMT
File typeUnicode text, UTF-8 text, with very long lines (343) Size280 kB (280202 bytes) Hash91faad0b9ca1c5ea54d9a9cddbab9487 209f50ddb283fca65259fc6985268d82e27761c9 1da4b921953cee097fefd2507bf1c77467041d9db28d4003bfc81eca1369a1cf
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/c1bb0ba6/css/bootstrap.css HTTP/1.1
Host: jhk7ev.radosneoczka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jhk7ev.radosneoczka.pl/
Cookie: PHPSESSID=68es1jnu0n90duoui10hc6hcp5; _csrf=6b292cfd54a8c580faf90461741d5394c8931bad6c3416d5e1dac968cd7ba887a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22xrew1x8io9bluGqLXTMy91P2JOBdaDaf%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 06 Jun 2025 19:29:11 GMT
content-type: text/css
server: cloudflare
last-modified: Thu, 29 May 2025 08:17:21 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=XeDgh6G4R13g%2FJnO4gfS%2FipxvMrkxukB5lf%2BHr8Jqt3CyyRe0xinQ14On%2FlTRk1rUgJ8967K084XjArvldpig19daI79F1nbU5SMXI0GvzGoN7F0"}]}
etag: W/"68381811-4468a"
content-encoding: br
cf-ray: 94ba51312ed6b505-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| jhk7ev.radosneoczka.pl/css/site.css | 188.114.97.1 | 200 OK | 1.5 kB |
URL GET jhk7ev.radosneoczka.pl/css/site.css IP 188.114.97.1:443
Requested byhttps://jhk7ev.radosneoczka.pl/ CertificateIssuerGoogle Trust Services Subjectradosneoczka.pl FingerprintAB:BB:6F:52:1E:F0:10:04:47:21:F8:BD:76:A4:D4:9B:4A:82:7D:A7 ValidityMon, 02 Jun 2025 14:57:53 GMT - Sun, 31 Aug 2025 15:55:11 GMT
Hash581727d6ad384b9d56a005bc185179f8 4d60957498105c1773be1d92aa98a03238c5cd7d dd8244db974c7c3dc0abee2bae3d728338a6da160395c7e83b38764da52e4044
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css/site.css HTTP/1.1
Host: jhk7ev.radosneoczka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jhk7ev.radosneoczka.pl/
Cookie: PHPSESSID=68es1jnu0n90duoui10hc6hcp5; _csrf=6b292cfd54a8c580faf90461741d5394c8931bad6c3416d5e1dac968cd7ba887a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22xrew1x8io9bluGqLXTMy91P2JOBdaDaf%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 06 Jun 2025 19:29:11 GMT
content-type: text/css
server: cloudflare
last-modified: Tue, 03 Sep 2024 16:13:50 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=2,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=4YiBpMpO2kgKln%2B8pYuDqaqDfpusGcpEDGh7PGOMmb6fgRePea9C%2Bz92ClpREzHpvDRRfI8dSFCjEtcD6RXqk2sw%2F64PHsAnmAlmGrrEhI%2BOIB9s"}]}
etag: W/"66d735be-5f8"
content-encoding: br
cf-ray: 94ba51312ed8b505-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| jhk7ev.radosneoczka.pl/assets/d3e253e8/jquery.js | 188.114.97.1 | 200 OK | 285 kB |
URL GET jhk7ev.radosneoczka.pl/assets/d3e253e8/jquery.js IP 188.114.97.1:443
Requested byhttps://jhk7ev.radosneoczka.pl/ CertificateIssuerGoogle Trust Services Subjectradosneoczka.pl FingerprintAB:BB:6F:52:1E:F0:10:04:47:21:F8:BD:76:A4:D4:9B:4A:82:7D:A7 ValidityMon, 02 Jun 2025 14:57:53 GMT - Sun, 31 Aug 2025 15:55:11 GMT
File typeJavaScript source, ASCII text Size285 kB (285314 bytes) Hash12e87d2f3a4c8b347ab13a0764d420a3 4be715e11048c057fdf2ee0fbbfad4dbf3504c55 78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/d3e253e8/jquery.js HTTP/1.1
Host: jhk7ev.radosneoczka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jhk7ev.radosneoczka.pl/
Cookie: PHPSESSID=68es1jnu0n90duoui10hc6hcp5; _csrf=6b292cfd54a8c580faf90461741d5394c8931bad6c3416d5e1dac968cd7ba887a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22xrew1x8io9bluGqLXTMy91P2JOBdaDaf%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 06 Jun 2025 19:29:12 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Thu, 29 May 2025 08:17:20 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=NeQ8lHoSqPX7P7U2HNyKxj5N80iCEOu%2FMXa8lzCgAEX4QGnZCxtyE626aM9qQJ7k3ZBgvENA5rrY3TsDQl4SDnWK25H9bgy7B6r68rQHdXI5I%2Fku"}]}
etag: W/"68381810-45a82"
content-encoding: br
cf-ray: 94ba51312ed9b505-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| jhk7ev.radosneoczka.pl/assets/29155ea1/yii.js | 188.114.97.1 | 200 OK | 21 kB |
URL GET jhk7ev.radosneoczka.pl/assets/29155ea1/yii.js IP 188.114.97.1:443
Requested byhttps://jhk7ev.radosneoczka.pl/ CertificateIssuerGoogle Trust Services Subjectradosneoczka.pl FingerprintAB:BB:6F:52:1E:F0:10:04:47:21:F8:BD:76:A4:D4:9B:4A:82:7D:A7 ValidityMon, 02 Jun 2025 14:57:53 GMT - Sun, 31 Aug 2025 15:55:11 GMT
File typeJavaScript source, ASCII text Hashec9e7108bf51e51563c304558acb7962 3665caec6ea103b287a01ee1c8ba5af71ccdfeed ff84f53a41760cf70a6771bf9fe5a67683cc3318cb0bcc7dd0e67b7333431bdd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/29155ea1/yii.js HTTP/1.1
Host: jhk7ev.radosneoczka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jhk7ev.radosneoczka.pl/
Cookie: PHPSESSID=68es1jnu0n90duoui10hc6hcp5; _csrf=6b292cfd54a8c580faf90461741d5394c8931bad6c3416d5e1dac968cd7ba887a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22xrew1x8io9bluGqLXTMy91P2JOBdaDaf%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 06 Jun 2025 19:29:11 GMT
content-type: application/javascript; charset=utf-8
server: cloudflare
last-modified: Thu, 29 May 2025 08:17:20 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=3,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=WhnmaX7gM%2BCH3pPPvi6tgyRTGL7u0UnJ4AOQqkA3odEqP8VX5yJ01VkoiU9qpMrpmJjhuC2aM2m9256QGLn4mZF75TX0zrItMMZvBOoR6bGtKHL0"}]}
etag: W/"68381810-51f5"
content-encoding: br
cf-ray: 94ba51312edbb505-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| jhk7ev.radosneoczka.pl/favicon.ico | 188.114.97.1 | 200 OK | 318 B |
URL GET jhk7ev.radosneoczka.pl/favicon.ico IP 188.114.97.1:443
Requested byhttps://jhk7ev.radosneoczka.pl/ CertificateIssuerGoogle Trust Services Subjectradosneoczka.pl FingerprintAB:BB:6F:52:1E:F0:10:04:47:21:F8:BD:76:A4:D4:9B:4A:82:7D:A7 ValidityMon, 02 Jun 2025 14:57:53 GMT - Sun, 31 Aug 2025 15:55:11 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel Hasha976d227e5d1dcf62f5f7e623211dd1b a2a9dc1abdd3d888484678663928cb024c359ee6 66332859bd8e3441a019e073a318b62a47014ba244121301034b510dc7532271
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: jhk7ev.radosneoczka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jhk7ev.radosneoczka.pl/
Cookie: PHPSESSID=68es1jnu0n90duoui10hc6hcp5; _csrf=6b292cfd54a8c580faf90461741d5394c8931bad6c3416d5e1dac968cd7ba887a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22xrew1x8io9bluGqLXTMy91P2JOBdaDaf%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 06 Jun 2025 19:29:12 GMT
content-type: image/x-icon
server: cloudflare
last-modified: Tue, 03 Sep 2024 16:13:50 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=6,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=jhhI1MqAneCfar%2FZLu90SR0jJk%2B2PSXqqUluZcH2SIgMwlMXE5Z4%2FiaHL4eRMTOCFx5vppsFkUjQsOLTfx6kt6RRwCzX%2BrWRTwdOtWuAkwxJr3VY"}]}
etag: W/"66d735be-13e"
content-encoding: br
cf-ray: 94ba5133497eb505-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| | 188.114.97.1 | 404 Not Found | 1.2 kB |
IP 188.114.97.1:443
CertificateIssuerGoogle Trust Services Subjectradosneoczka.pl FingerprintAB:BB:6F:52:1E:F0:10:04:47:21:F8:BD:76:A4:D4:9B:4A:82:7D:A7 ValidityMon, 02 Jun 2025 14:57:53 GMT - Sun, 31 Aug 2025 15:55:11 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash781d6e6f41b64617cab665595aa4a235 4df47d74b17353363848d5b465a69ce238d27e81 e9dad598cf3d71d336d5d3047ba533973b334ce19906eba8306baf8a4a158133
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: jhk7ev.radosneoczka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Fri, 06 Jun 2025 19:29:11 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=BJyaaUOIicSF%2Bj%2FNgN0aJkJc4MSCCRj7MD5LoLw51YvDupwn0JVjv%2B6Tp16eYH9WbNMtTtGWBuYuGbFGvEpB2swmMQjI%2BLJS78xNzzYLLzS0JmZt"}]}
cf-cache-status: DYNAMIC
content-encoding: br
set-cookie: PHPSESSID=68es1jnu0n90duoui10hc6hcp5; HttpOnly; Path=/
_csrf=6b292cfd54a8c580faf90461741d5394c8931bad6c3416d5e1dac968cd7ba887a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22xrew1x8io9bluGqLXTMy91P2JOBdaDaf%22%3B%7D; HttpOnly; SameSite=Lax; Path=/
cf-ray: 94ba5128cd1756b7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|