Report - halle.klecksquadrat.eu/

Report Overview

Visited public
2023-12-09 01:49:02
Tags
URL
halle.klecksquadrat.eu/
Finishing URL
halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F
IP / ASN
46.163.78.127
#8972 Host Europe GmbH
Title
Anmelden ‹ Klecksquadrat Halle — WordPress

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
halle.klecksquadrat.eu	unknown	unknown	No data	No data	6.9 kB	191 kB	46.163.78.127
dl.dropboxusercontent.com	12831	2012-01-13	2019-02-11 02:24:40	2019-03-28 09:18:21	469 B	11 kB	162.125.71.15

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-09 01:48:52	low	Client IP	162.125.71.15	ET INFO DropBox User Content Domain (dl .dropboxusercontent .com in TLS SNI)
2023-12-09 01:48:52	low	162.125.71.15	Client IP	ET INFO DropBox User Content Download Access over SSL M2

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	halle.klecksquadrat.eu/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp	ScriptElement	97 kB	2023-03-07	2025-05-08
Pretty URL halle.klecksquadrat.eu/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp IP 46.163.78.127 ASN #8972 Host Europe GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-08 21:34 Times Seen6494 Hash 49edccea2e7ba985cadc9ba0531cbed1 f8747f8ee704d9af31d0950015e01d3f9635b070 1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df Loading...

	halle.klecksquadrat.eu/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1	ScriptElement	10 kB	2023-03-07	2025-05-09
Pretty URL halle.klecksquadrat.eu/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 IP 46.163.78.127 ASN #8972 Host Europe GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 07:28 Times Seen15126 Hash 7121994eec5320fbe6586463bf9651c2 90532aff6d4121954254cdf04994d834f7ec169b 48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d Loading...

	halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F	ScriptElement	0 B	0001-01-01	2025-05-09
Pretty URL halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F IP 46.163.78.127 ASN #8972 Host Europe GmbH Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-09 08:37 Times Seen4634918 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	dl.dropboxusercontent.com/s/pxxqg90g7zxtt8n/q67JXA0dJ1dt.js?ver=1702086525	ScriptElement	10 kB	2023-03-29	2024-08-21
Pretty URL dl.dropboxusercontent.com/s/pxxqg90g7zxtt8n/q67JXA0dJ1dt.js?ver=1702086525 IP 162.125.71.15 ASN #19679 DROPBOX Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 23:27 Last Seen2024-08-21 09:37 Times Seen212 Hash 7c473f21c4682d9970c71f4fb5355c83 2b4c5340d7e09236513afcbb70b58bf51f0bc812 33c9136445ec8660003870768940e5ec57dfc7fc91a22b9ff095bf7dbde7bbef Loading...

HTTP Transactions (12)

	URL	IP	Response	Size
	halle.klecksquadrat.eu/	46.163.78.127	302 Found	0 B
URL User Request GET HTTP/2 halle.klecksquadrat.eu/ IP 46.163.78.127:443 ASN #8972 Host Europe GmbH Certificate IssuerLet's Encrypt Subjecthalle.klecksquadrat.eu Fingerprint71:C7:9E:8D:4A:5D:DF:5E:DF:F9:74:44:8E:94:7A:50:08:B5:37:52 ValidityWed, 25 Oct 2023 15:20:19 GMT - Tue, 23 Jan 2024 15:20:18 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: halle.klecksquadrat.eu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found server: nginx date: Sat, 09 Dec 2023 01:48:45 GMT content-type: text/html; charset=UTF-8 content-length: 0 pragma: no-cache expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 x-redirect-by: WordPress set-cookie: cf7msm_check=1; path=/; domain=.klecksquadrat.eu PHPSESSID=12dv7oocb0j4dt0n8qhs8dvbtu; path=/ location: https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F x-powered-by: PHP/7.4.33, PleskLin X-Firefox-Spdy: h2

	halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F	46.163.78.127	200 OK	1.3 kB
URL User Request GET HTTP/2 halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F IP 46.163.78.127:443 ASN #8972 Host Europe GmbH Certificate IssuerLet's Encrypt Subjecthalle.klecksquadrat.eu Fingerprint71:C7:9E:8D:4A:5D:DF:5E:DF:F9:74:44:8E:94:7A:50:08:B5:37:52 ValidityWed, 25 Oct 2023 15:20:19 GMT - Tue, 23 Jan 2024 15:20:18 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text Size 1.3 kB (1273 bytes) Hash 36804a8d20dc4c334a6a5a69edfb8059 c70077520da1e71a59318f8d29293bc2d90b6a39 78424a559ebc13cfcf56987278a3c521f755a8a3348dc211a2a89e6110c4c617 HTTP Headers GET /wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F HTTP/1.1 Host: halle.klecksquadrat.eu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: cf7msm_check=1; PHPSESSID=12dv7oocb0j4dt0n8qhs8dvbtu Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Sat, 09 Dec 2023 01:48:45 GMT content-type: text/html; charset=UTF-8 content-length: 1273 expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 x-frame-options: SAMEORIGIN set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/; domain=.klecksquadrat.eu; secure vary: Accept-Encoding content-encoding: gzip x-powered-by: PHP/7.4.33, PleskLin X-Firefox-Spdy: h2`

	halle.klecksquadrat.eu/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1	46.163.78.127	200 OK	5.3 kB
URL GET HTTP/2 halle.klecksquadrat.eu/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 IP 46.163.78.127:443 ASN #8972 Host Europe GmbH Requested by https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Certificate IssuerLet's Encrypt Subjecthalle.klecksquadrat.eu Fingerprint71:C7:9E:8D:4A:5D:DF:5E:DF:F9:74:44:8E:94:7A:50:08:B5:37:52 ValidityWed, 25 Oct 2023 15:20:19 GMT - Tue, 23 Jan 2024 15:20:18 GMT File type ASCII text, with very long lines (9959) Size 5.3 kB (5346 bytes) Hash 7121994eec5320fbe6586463bf9651c2 90532aff6d4121954254cdf04994d834f7ec169b 48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d HTTP Headers GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 Host: halle.klecksquadrat.eu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Cookie: cf7msm_check=1; PHPSESSID=12dv7oocb0j4dt0n8qhs8dvbtu; wordpress_test_cookie=WP%20Cookie%20check Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Sat, 09 Dec 2023 01:48:45 GMT content-type: application/javascript last-modified: Fri, 20 May 2016 04:11:28 GMT etag: W/"573e8e70-2748" x-powered-by: PleskLin content-encoding: br X-Firefox-Spdy: h2`

	halle.klecksquadrat.eu/favicon.ico	46.163.78.127	200 OK	0 B
URL GET HTTP/2 halle.klecksquadrat.eu/favicon.ico IP 46.163.78.127:443 ASN #8972 Host Europe GmbH Requested by https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Certificate IssuerLet's Encrypt Subjecthalle.klecksquadrat.eu Fingerprint71:C7:9E:8D:4A:5D:DF:5E:DF:F9:74:44:8E:94:7A:50:08:B5:37:52 ValidityWed, 25 Oct 2023 15:20:19 GMT - Tue, 23 Jan 2024 15:20:18 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /favicon.ico HTTP/1.1 Host: halle.klecksquadrat.eu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F DNT: 1 Connection: keep-alive Cookie: cf7msm_check=1; PHPSESSID=12dv7oocb0j4dt0n8qhs8dvbtu; wordpress_test_cookie=WP%20Cookie%20check Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK server: nginx date: Sat, 09 Dec 2023 01:48:46 GMT content-type: image/vnd.microsoft.icon content-length: 0 x-powered-by: PHP/7.4.33, PleskLin X-Firefox-Spdy: h2`

	halle.klecksquadrat.eu/wp-admin/css/login.min.css?ver=5.2.4	46.163.78.127	200 OK	4.0 kB
URL GET HTTP/2 halle.klecksquadrat.eu/wp-admin/css/login.min.css?ver=5.2.4 IP 46.163.78.127:443 ASN #8972 Host Europe GmbH Requested by https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Certificate IssuerLet's Encrypt Subjecthalle.klecksquadrat.eu Fingerprint71:C7:9E:8D:4A:5D:DF:5E:DF:F9:74:44:8E:94:7A:50:08:B5:37:52 ValidityWed, 25 Oct 2023 15:20:19 GMT - Tue, 23 Jan 2024 15:20:18 GMT File type ASCII text, with very long lines (3969), with no line terminators Size 4.0 kB (3964 bytes) Hash e8c2abefe432c913c7cd4dcecdc71299 9574f37035f20e6a910de94ca928e2557fe10202 1464079d66d59b1c07d281f36ea7853da5d057d4a05244195a50ffeac6cf74f2 HTTP Headers GET /wp-admin/css/login.min.css?ver=5.2.4 HTTP/1.1 Host: halle.klecksquadrat.eu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Cookie: cf7msm_check=1; PHPSESSID=12dv7oocb0j4dt0n8qhs8dvbtu; wordpress_test_cookie=WP%20Cookie%20check Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Sat, 09 Dec 2023 01:48:45 GMT content-type: text/css last-modified: Mon, 19 Aug 2019 02:44:54 GMT etag: W/"5d5a0d26-f7c" x-powered-by: PleskLin content-encoding: br X-Firefox-Spdy: h2`

	halle.klecksquadrat.eu/wp-admin/images/wordpress-logo.svg?ver=20131107	46.163.78.127	200 OK	1.5 kB
URL GET HTTP/2 halle.klecksquadrat.eu/wp-admin/images/wordpress-logo.svg?ver=20131107 IP 46.163.78.127:443 ASN #8972 Host Europe GmbH Requested by https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Certificate IssuerLet's Encrypt Subjecthalle.klecksquadrat.eu Fingerprint71:C7:9E:8D:4A:5D:DF:5E:DF:F9:74:44:8E:94:7A:50:08:B5:37:52 ValidityWed, 25 Oct 2023 15:20:19 GMT - Tue, 23 Jan 2024 15:20:18 GMT File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1548), with no line terminators Size 1.5 kB (1521 bytes) Hash 081b483f7d84aa4844e5067c31caaeae 399dbb1b2bf9a8b8a6c33c3d5792a607aeefb0e4 32db6804c1f555ea35f14a71a68ae8a2df719d63d5362431a6438d0891a8ebba HTTP Headers GET /wp-admin/images/wordpress-logo.svg?ver=20131107 HTTP/1.1 Host: halle.klecksquadrat.eu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://halle.klecksquadrat.eu/wp-admin/css/login.min.css?ver=5.2.4 Cookie: cf7msm_check=1; PHPSESSID=12dv7oocb0j4dt0n8qhs8dvbtu; wordpress_test_cookie=WP%20Cookie%20check Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Sat, 09 Dec 2023 01:48:46 GMT content-type: image/svg+xml content-length: 1521 last-modified: Sun, 05 Apr 2015 19:20:28 GMT etag: "55218afc-5f1" x-powered-by: PleskLin accept-ranges: bytes X-Firefox-Spdy: h2`

	halle.klecksquadrat.eu/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp	46.163.78.127	200 OK	97 kB
URL GET HTTP/2 halle.klecksquadrat.eu/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp IP 46.163.78.127:443 ASN #8972 Host Europe GmbH Requested by https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Certificate IssuerLet's Encrypt Subjecthalle.klecksquadrat.eu Fingerprint71:C7:9E:8D:4A:5D:DF:5E:DF:F9:74:44:8E:94:7A:50:08:B5:37:52 ValidityWed, 25 Oct 2023 15:20:19 GMT - Tue, 23 Jan 2024 15:20:18 GMT File type ASCII text, with very long lines (31997) Size 97 kB (96873 bytes) Hash 49edccea2e7ba985cadc9ba0531cbed1 f8747f8ee704d9af31d0950015e01d3f9635b070 1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df HTTP Headers GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1 Host: halle.klecksquadrat.eu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Cookie: cf7msm_check=1; PHPSESSID=12dv7oocb0j4dt0n8qhs8dvbtu; wordpress_test_cookie=WP%20Cookie%20check Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Sat, 09 Dec 2023 01:48:45 GMT content-type: application/javascript last-modified: Fri, 17 May 2019 15:08:54 GMT etag: W/"5cdece86-17a69" x-powered-by: PleskLin content-encoding: br X-Firefox-Spdy: h2`

	halle.klecksquadrat.eu/wp-admin/css/forms.min.css?ver=5.2.4	46.163.78.127	200 OK	22 kB
URL GET HTTP/2 halle.klecksquadrat.eu/wp-admin/css/forms.min.css?ver=5.2.4 IP 46.163.78.127:443 ASN #8972 Host Europe GmbH Requested by https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Certificate IssuerLet's Encrypt Subjecthalle.klecksquadrat.eu Fingerprint71:C7:9E:8D:4A:5D:DF:5E:DF:F9:74:44:8E:94:7A:50:08:B5:37:52 ValidityWed, 25 Oct 2023 15:20:19 GMT - Tue, 23 Jan 2024 15:20:18 GMT File type ASCII text, with very long lines (22139) Size 22 kB (22174 bytes) Hash e358104efa34b7f5f6026d9dcaa746ae 317b6baa95facabc2d32285ae4346f0053460f1a 50daf5ae43de031a57ad729bf664489e6e6955f32138a0d0da0b25ffe477c478 HTTP Headers GET /wp-admin/css/forms.min.css?ver=5.2.4 HTTP/1.1 Host: halle.klecksquadrat.eu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Cookie: cf7msm_check=1; PHPSESSID=12dv7oocb0j4dt0n8qhs8dvbtu; wordpress_test_cookie=WP%20Cookie%20check Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Sat, 09 Dec 2023 01:48:45 GMT content-type: text/css last-modified: Mon, 19 Aug 2019 02:44:54 GMT etag: W/"5d5a0d26-569e" x-powered-by: PleskLin content-encoding: br X-Firefox-Spdy: h2`

	halle.klecksquadrat.eu/wp-admin/css/l10n.min.css?ver=5.2.4	46.163.78.127	200 OK	2.5 kB
URL GET HTTP/2 halle.klecksquadrat.eu/wp-admin/css/l10n.min.css?ver=5.2.4 IP 46.163.78.127:443 ASN #8972 Host Europe GmbH Requested by https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Certificate IssuerLet's Encrypt Subjecthalle.klecksquadrat.eu Fingerprint71:C7:9E:8D:4A:5D:DF:5E:DF:F9:74:44:8E:94:7A:50:08:B5:37:52 ValidityWed, 25 Oct 2023 15:20:19 GMT - Tue, 23 Jan 2024 15:20:18 GMT File type ASCII text, with very long lines (2478), with no line terminators Size 2.5 kB (2477 bytes) Hash 83b9d96a3486ba7e68530653baf20340 564787bf07903ef637f8de6803ccda39abd2b419 ea4c50037812e4c4a828ecea4c49f6df7e56a9ca04faeae32fe093e58f04b105 HTTP Headers GET /wp-admin/css/l10n.min.css?ver=5.2.4 HTTP/1.1 Host: halle.klecksquadrat.eu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Cookie: cf7msm_check=1; PHPSESSID=12dv7oocb0j4dt0n8qhs8dvbtu; wordpress_test_cookie=WP%20Cookie%20check Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Sat, 09 Dec 2023 01:48:45 GMT content-type: text/css last-modified: Tue, 11 Dec 2018 15:13:26 GMT etag: W/"5c0fd416-9ad" x-powered-by: PleskLin content-encoding: br X-Firefox-Spdy: h2`

	dl.dropboxusercontent.com/s/pxxqg90g7zxtt8n/q67JXA0dJ1dt.js?ver=1702086525	162.125.71.15	200 OK	10 kB
URL GET HTTP/2 dl.dropboxusercontent.com/s/pxxqg90g7zxtt8n/q67JXA0dJ1dt.js?ver=1702086525 IP 162.125.71.15:443 ASN #19679 DROPBOX Requested by https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Certificate IssuerDigiCert Inc Subjectdl.dropbox.com FingerprintF7:BA:5F:D1:73:A5:04:E6:AC:52:C4:92:6F:20:23:8D:FD:B3:3F:D0 ValidityTue, 14 Feb 2023 00:00:00 GMT - Sat, 16 Mar 2024 23:59:59 GMT File type ASCII text, with very long lines (10121), with no line terminators Size 10 kB (10121 bytes) Hash 7c473f21c4682d9970c71f4fb5355c83 2b4c5340d7e09236513afcbb70b58bf51f0bc812 33c9136445ec8660003870768940e5ec57dfc7fc91a22b9ff095bf7dbde7bbef HTTP Headers `GET /s/pxxqg90g7zxtt8n/q67JXA0dJ1dt.js?ver=1702086525 HTTP/1.1 Host: dl.dropboxusercontent.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://halle.klecksquadrat.eu/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes cache-control: max-age=60 content-disposition: inline; filename="q67JXA0dJ1dt.js"; filename*=UTF-8''q67JXA0dJ1dt.js content-security-policy: report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-usercontent ; sandbox allow-forms allow-scripts allow-top-navigation allow-popups, form-action 'none' ; report-uri https://www.dropbox.com/csp_log?policy_name=blockserver-noscript ; script-src 'none' pragma: public set-cookie: uc_session=AmBA1sT0ZVnUUV45NFQE7dwpRDZjAhPpcr4mGoOxpHhgZC7FIC8PCPCl3vdHBbLz; Domain=dropboxusercontent.com; HttpOnly; Path=/; SameSite=None; Secure x-content-type-options: nosniff x-server-response-time: 390 content-type: application/javascript date: Sat, 09 Dec 2023 01:48:45 GMT server: envoy strict-transport-security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex, nofollow, noimageindex content-encoding: gzip vary: Accept-Encoding x-dropbox-response-origin: far_remote x-dropbox-request-id: ab75826ed8be4ba2b7bc57112ab6b592 X-Firefox-Spdy: h2

	halle.klecksquadrat.eu/wp-includes/css/dashicons.min.css?ver=5.2.4	46.163.78.127	200 OK	48 kB
URL GET HTTP/2 halle.klecksquadrat.eu/wp-includes/css/dashicons.min.css?ver=5.2.4 IP 46.163.78.127:443 ASN #8972 Host Europe GmbH Requested by https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Certificate IssuerLet's Encrypt Subjecthalle.klecksquadrat.eu Fingerprint71:C7:9E:8D:4A:5D:DF:5E:DF:F9:74:44:8E:94:7A:50:08:B5:37:52 ValidityWed, 25 Oct 2023 15:20:19 GMT - Tue, 23 Jan 2024 15:20:18 GMT File type ASCII text, with very long lines (47523) Size 48 kB (47558 bytes) Hash c8956481e00463f838b45364f45756df 256d7293ac07bb9b43a9757ba11057cad148818c 18aa66c192cbef43a61b1398c292ae5c6c1d40d679428ee998b1c6bfaf61d75a HTTP Headers GET /wp-includes/css/dashicons.min.css?ver=5.2.4 HTTP/1.1 Host: halle.klecksquadrat.eu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Cookie: cf7msm_check=1; PHPSESSID=12dv7oocb0j4dt0n8qhs8dvbtu; wordpress_test_cookie=WP%20Cookie%20check Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Sat, 09 Dec 2023 01:48:45 GMT content-type: text/css last-modified: Wed, 15 May 2019 17:47:56 GMT etag: W/"5cdc50cc-b9c6" x-powered-by: PleskLin content-encoding: br X-Firefox-Spdy: h2`

	halle.klecksquadrat.eu/wp-includes/css/buttons.min.css?ver=5.2.4	46.163.78.127	200 OK	6.3 kB
URL GET HTTP/2 halle.klecksquadrat.eu/wp-includes/css/buttons.min.css?ver=5.2.4 IP 46.163.78.127:443 ASN #8972 Host Europe GmbH Requested by https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Certificate IssuerLet's Encrypt Subjecthalle.klecksquadrat.eu Fingerprint71:C7:9E:8D:4A:5D:DF:5E:DF:F9:74:44:8E:94:7A:50:08:B5:37:52 ValidityWed, 25 Oct 2023 15:20:19 GMT - Tue, 23 Jan 2024 15:20:18 GMT File type ASCII text, with very long lines (6313), with no line terminators Size 6.3 kB (6312 bytes) Hash 92f340537bce7cd5096e4416872dddfa f36ed125fa797c1c3b38d5190ec2f2be499e0141 8d84d50f0489c44f0af09492b3fba5be277d8078133227112770c3842aaa703b HTTP Headers GET /wp-includes/css/buttons.min.css?ver=5.2.4 HTTP/1.1 Host: halle.klecksquadrat.eu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://halle.klecksquadrat.eu/wp-login.php?redirect_to=https%3A%2F%2Fhalle.klecksquadrat.eu%2F Cookie: cf7msm_check=1; PHPSESSID=12dv7oocb0j4dt0n8qhs8dvbtu; wordpress_test_cookie=WP%20Cookie%20check Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Sat, 09 Dec 2023 01:48:45 GMT content-type: text/css last-modified: Mon, 19 Aug 2019 02:34:52 GMT etag: W/"5d5a0acc-18a8" x-powered-by: PleskLin content-encoding: br X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by