Report - lysyvan.com/login.php

Report Overview

Submitted URL
lysyvan.com/login.php
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 01:27:19
Access
public
Website Title
Page not found -
Final URL
lysyvan.com/login.php
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
34

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-18	785 B	51 kB	142.250.74.170
lysyvan.com	unknown	2011-08-15	2013-02-07	2024-04-18	8.0 kB	406 kB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed
2024-04-19	medium	lysyvan.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	lysyvan.com/login.php	3.2 kB	2024-04-10	2024-04-25
Pretty URL lysyvan.com/login.php IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-10 21:57:56 Last Seen2024-04-25 22:27:14 Times Seen12 Hash 30a8e1a31d5e5e410f1e018e93d2a1d5 81ac7af67e37f1ee7da02eafe6f23958813dec71 aa96c143f54c2c7b1ffb7286b4c83b60d1713ee94bfe902a732d179c583a8603 Loading...

	lysyvan.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	88 kB	2023-11-03	2024-05-02
Pretty URL lysyvan.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-03 09:26:43 Last Seen2024-05-02 01:41:42 Times Seen43339 Hash 826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf Loading...

	lysyvan.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	14 kB	2023-05-09	2024-05-02
Pretty URL lysyvan.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-09 19:21:05 Last Seen2024-05-02 01:41:42 Times Seen81818 Hash 9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89 Loading...

	lysyvan.com/login.php	6.0 kB	2023-03-07	2024-05-02
Pretty URL lysyvan.com/login.php IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:10:27 Last Seen2024-05-02 01:34:36 Times Seen742 Hash 36bb41434655cf561f77987b521868e4 859b75d2e2e6eb0ff665e4ce3c3aa4d0f26d45ba 7853623597c83d5420b041e662614eddbe69a1f978214d7f4f90fcf27f8248b4 Loading...

	lysyvan.com/login.php	135 B	2023-03-07	2024-05-02
Pretty URL lysyvan.com/login.php IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:10:28 Last Seen2024-05-02 01:34:36 Times Seen955 Hash 6d370053752bcccfea3a05ed1f958f00 dc27a1f8c079d10b6bcb12d934690d5ac13b8245 712b83e1fb7bba23edc0cad83735386653ae53ac4751130d8a1a32340eced84b Loading...

	lysyvan.com/login.php	99 B	2023-03-07	2024-05-02
Pretty URL lysyvan.com/login.php IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:41:55 Last Seen2024-05-02 01:34:36 Times Seen853 Hash 7fa1ae65f342c116b15cb8e4af3f0db8 eef8afe088ef947cdf027cc5e95619e91e025ce1 d71dbeef81cdfc763b21dbcb6060476a2ae8b4582d84f9742add5dd68f6c3f8f Loading...

	lysyvan.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2	19 kB	2024-03-13	2024-05-02
Pretty URL lysyvan.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-13 16:02:37 Last Seen2024-05-02 01:41:43 Times Seen2348 Hash b976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3 Loading...

HTTP Transactions (18)

URL IP Response Size

lysyvan.com/login.php

188.114.97.1

301 Moved Permanently

162 B

URL User Request GET HTTP/1.1
lysyvan.com/login.php
IP
188.114.97.1:80
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /login.php HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Fri, 19 Apr 2024 01:26:55 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://lysyvan.com/login.php
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SZDDyvchfQJuTxSVge%2F%2Bayq7LdH4PdxRrxc9grL%2BnJHcFhptkVEjKmghVBbOLe6DaQnkS0HS3hyC%2Bh5IZDLdfBXf%2BodkV0K%2BdgtdzTRCo%2FiSNkK4Fzf8bWij3tpohQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87691bf2393b56c0-OSL
alt-svc: h2=":443"; ma=60

lysyvan.com/wp-content/themes/neve/style-main-new.min.css?ver=3.8.3

188.114.97.1

200 OK

9.1 kB

URL GET HTTP/3
lysyvan.com/wp-content/themes/neve/style-main-new.min.css?ver=3.8.3
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
ASCII text, with very long lines (39013), with no line terminators
Size
9.1 kB (9095 bytes)
Hash
20ac7966f6cea2b533bf8aa5c54dfda5
6193b4c82bef495d512ece6b38176e327fbde5c6
f3954f68a37b99d294258ba83caad8941974dd00af2a86ea9928615aff110232

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/themes/neve/style-main-new.min.css?ver=3.8.3 HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: text/css
last-modified: Fri, 22 Mar 2024 13:44:41 GMT
vary: Accept-Encoding
etag: W/"65fd8b49-9865"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 2310391
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mIIYwFyDMx1pNR%2FLcRW5QF%2FtAT51kRXhCbNI%2BV6rom%2BuQMqVrLX%2Bk7H8bH5PrvVGYEIilTAwtnkzUtULC2VOul83MACg2gB3VVuRmFu7OcPKo1T3W6ShJrrT3F%2FXLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87691bff8bd656ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lysyvan.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2

188.114.97.1

200 OK

16 kB

URL GET HTTP/3
lysyvan.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
ASCII text, with very long lines (59701)
Size
16 kB (15716 bytes)
Hash
51a8390b47aa0582cf2d9c96c5addee2
b16a640874025d085c38119a1a02a3460f83f2de
98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: text/css
last-modified: Wed, 03 Apr 2024 03:24:39 GMT
vary: Accept-Encoding
etag: W/"660ccbf7-1bae5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 710963
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=48ZGtE5LnD7n4Ya3oTPYSsmBy%2BTVFrID6OOYeLrj75Y1j1aGLBSilp05f27z1IvjuvdKPTvCT8wooOp3O9vIwX51%2Bd69lJyu3bbMRYb1mCgoraR8cBNzNcDI8VSLWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87691bff7bcd56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lysyvan.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2

188.114.97.1

200 OK

30 kB

URL GET HTTP/3
lysyvan.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
JavaScript source, ASCII text, with very long lines (15752)
Size
30 kB (29509 bytes)
Hash
b976b651932bfd25b9ddb5b7693d88a7
7fcb7cb5c11227f9213b1e08a07d0212209e1432
4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 03 Apr 2024 03:24:39 GMT
vary: Accept-Encoding
etag: W/"660ccbf7-4926"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 710963
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tngzcmGdgfA5X7coUBgnqxeIepy%2FwzHIkHTklwIAmzAPGVN6xXr6Dzky6OkYV2oedlveGM269enl7ifwnWbPQhwJrlI8YwLZL%2F4mbUHfKTP3cAtiMSWDo4TIai06yw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87691c010c5056ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lysyvan.com/wp-content/plugins/royal-elementor-addons/assets/css/frontend.min.css?ver=1.3.95

188.114.97.1

200 OK

49 kB

URL GET HTTP/3
lysyvan.com/wp-content/plugins/royal-elementor-addons/assets/css/frontend.min.css?ver=1.3.95
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
49 kB (48924 bytes)
Hash
751bcb5b51ceeba5a44a609e15de4769
7bb5871f53720ad501fdc44c1a06b307d2b93435
527d8e72bbe62904b3e2dcde00e0b1966370f0432d84f3544b92b535cfffc1e2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/royal-elementor-addons/assets/css/frontend.min.css?ver=1.3.95 HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: text/css
last-modified: Fri, 22 Mar 2024 13:41:21 GMT
vary: Accept-Encoding
etag: W/"65fd8a81-5f763"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 182164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8ykdONa2wL7I1QPmPkXndDqQfYuiKbM1Dxd0mU93XwOmJptE3LVuMt6zGimAnjqWNcQnfpTNfncgJn95K%2BiN1d293xf7lWa1oo274Rsra35Zo%2FUea%2FCHaJLUFV6v5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87691bff8bd856ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lysyvan.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.29.0

188.114.97.1

200 OK

4.4 kB

URL GET HTTP/3
lysyvan.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.29.0
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
ASCII text, with very long lines (19732)
Size
4.4 kB (4384 bytes)
Hash
45f978120a537b249dfac36306ed5471
9eebc1e6fe55d9737d0e91bdfa3976b344ea2a09
67ac597bed179b5842d996fad80472c6b9514edde408ade8b892161bcf9e9c88

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.29.0 HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: text/css
last-modified: Fri, 22 Mar 2024 13:41:10 GMT
vary: Accept-Encoding
etag: W/"65fd8a76-4d42"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 628093
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C9%2FeSQXiVJGzgraeCUss90TTpIgpK5o3i0te1W1Krii91BNOMEflOZu8ovuMsYeE7jx4DWwAncheH22s93D9so0%2BZ1tH5RUovj0uaKcVP6jek7XmsaIIhf%2F8w108ww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87691bff7bce56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lysyvan.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.20.2

188.114.97.1

200 OK

19 kB

URL GET HTTP/3
lysyvan.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.20.2
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
ASCII text, with very long lines (65496)
Size
19 kB (18877 bytes)
Hash
ee98b54b83bbd498b818221ba56be3e2
e21a89511c6d461319caed6457b2d3d41562bf51
05d90bdf73b8b395f1689b0735cc048e96950c31c0afa3c2c34f93cb6793f477

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.20.2 HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: text/css
last-modified: Fri, 22 Mar 2024 13:41:10 GMT
vary: Accept-Encoding
etag: W/"65fd8a76-1cf66"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 2310390
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mqGO25ZPiEKCtc1svv1lGmXzD7GwPPx%2Fk6G%2FYXw7yB1%2FjRRBF9wDMeTCmrQdTDjVPlRk9M5fvxin01MWuQl7%2BhwQeHmGMiM8D9JhyeKXxUQBYKv6ss8CkgQEjR53AQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87691bff7bcf56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lysyvan.com/wp-content/plugins/royal-elementor-addons/assets/css/lib/animations/text-animations.min.css?ver=1.3.95

188.114.97.1

200 OK

10 kB

URL GET HTTP/3
lysyvan.com/wp-content/plugins/royal-elementor-addons/assets/css/lib/animations/text-animations.min.css?ver=1.3.95
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
ASCII text, with very long lines (14235), with no line terminators
Size
10 kB (10363 bytes)
Hash
be772e0853f97a3f9fa7a81000820d07
bbbd67b2745e0c9130fe6ff4d031f5c3126787ec
346722bc13d0c169275c62d4642f968f5d7c1b639b842778c48df558d8954e17

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/royal-elementor-addons/assets/css/lib/animations/text-animations.min.css?ver=1.3.95 HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: text/css
last-modified: Fri, 22 Mar 2024 13:41:21 GMT
vary: Accept-Encoding
etag: W/"65fd8a81-379b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 1417583
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nfWdVwWKIXg%2BIPbRJofJhRfWpNEUesKfZTS8Hp4iKx0hK4aKyC76ZBX772cSZAIuBhkoGnVOB1vcOK45PrpOFp%2BtSQC28px8E31bADLZHu0g%2FNl2RemVzuE%2Ba75pJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87691bff8bd756ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lysyvan.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1

188.114.97.1

200 OK

14 kB

URL GET HTTP/3
lysyvan.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
JavaScript source, ASCII text, with very long lines (13479)
Size
14 kB (13577 bytes)
Hash
9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 26 Sep 2023 15:24:08 GMT
vary: Accept-Encoding
etag: W/"6512f798-3509"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 6716322
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gJSsZTBggowNn29vB6v%2BgmV%2FlkCRnAGM6bPJ1zea4pXtejm64Pp7h7pNfQxMh9NOsLU8tuhCVgg6%2F%2FH%2FiZvFR2ZKtL7NCaYR4Msnl%2BLtPTf7r11Nm6ZiNtJnFuOHAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87691bff9be056ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lysyvan.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1

188.114.97.1

200 OK

88 kB

URL GET HTTP/3
lysyvan.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
88 kB (87553 bytes)
Hash
826eb77e86b02ab7724fe3d0141ff87c
79cd3587d565afe290076a8d36c31c305a573d18
cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 08 Nov 2023 03:24:31 GMT
vary: Accept-Encoding
etag: W/"654aff6f-15601"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 12566448
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L3cjRpLcB%2B2lyVaUiuxH5dVZmp5CgNtwJUbRuOL40Z8aNYC6KTev3t3jscyTGmo0mYec33kaNTf4qfpYwB01QYy3Tkbywi4aIg2BqUBMbpijAXLrHUOugfYhso7cVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87691bff9bdf56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lysyvan.com/wp-content/uploads/elementor/css/post-7.css?ver=1702360130

188.114.97.1

200 OK

1.2 kB

URL GET HTTP/3
lysyvan.com/wp-content/uploads/elementor/css/post-7.css?ver=1702360130
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
ASCII text, with very long lines (1176), with no line terminators
Size
1.2 kB (1168 bytes)
Hash
f2c653cc2533fa0dbcdbd1f6f8b3594b
a85cec9342a683aba1484b7fe92ec76e040d7b15
a95047b7aeb7fd56cc59c20b68cb7c693d848018665e8cfc6d8b1557cdbb1178

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/elementor/css/post-7.css?ver=1702360130 HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: text/css
last-modified: Tue, 12 Dec 2023 05:48:50 GMT
vary: Accept-Encoding
etag: W/"6577f442-490"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 11121920
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y1xuvXQmPsCQxeWuAvsbpjrcaXLBcUgn6AjtlxS%2BhlDK0pgIkaJXU0ET5GZGhtXnIZPWNd6dl0ZSRtvfXy%2F491bgyDLoUKMzlkdD5Qp1Z1fiFUZZXgC0waztda8p4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87691bff7bd256ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lysyvan.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.3.95

188.114.97.1

200 OK

59 kB

URL GET HTTP/3
lysyvan.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.3.95
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
ASCII text, with very long lines (59158)
Size
59 kB (59344 bytes)
Hash
74bab4578692993514e7f882cc15c218
b6293bcfd851f963edbe859498570c4c0c7eaae4
d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.3.95 HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: text/css
last-modified: Fri, 22 Mar 2024 13:41:10 GMT
vary: Accept-Encoding
etag: W/"65fd8a76-e7d0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 1417582
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JTGyHantBUUu6RYaWpZdcSSTlVJJsfijtZLJFBkfHxaSm6dHAqjK8BQpQDsL5dzz%2Bscu6U8pLERELccBfOn0jgHjoNH4RgyTtm6tBAsvVkpL8ipTwWSjjk73M%2F0Pkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87691bff8bd956ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.5.2

142.250.74.170

200 OK

50 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.5.2
IP
142.250.74.170:443
ASN
#15169 GOOGLE

Requested by
https://lysyvan.com/login.php
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
ASCII text
Size
50 kB (50030 bytes)
Hash
313a6232699b2f02296b5be9f4a0a5f8
d9aa6f8de96b123ea9f0546e062e340657ef0191
94f0cb222975e7939a4b4c283376fc06fbcdfcfced990a4cfbb37bf74a29567f

HTTP Headers

GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.5.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Apr 2024 01:26:57 GMT
date: Fri, 19 Apr 2024 01:26:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

lysyvan.com/wp-content/uploads/2023/12/cropped-Sukses-Favicon-32x32.png

188.114.97.1

200 OK

2.1 kB

URL GET HTTP/3
lysyvan.com/wp-content/uploads/2023/12/cropped-Sukses-Favicon-32x32.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
2.1 kB (2114 bytes)
Hash
f6a6647446afe48454f751d3a542a4d2
0facbec7dfe3b1c5b66306f13c2fd2728532a8f3
9f4664a29d0267976a69855551eeae242921c5cd6172f20a37658ab765182084

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2023/12/cropped-Sukses-Favicon-32x32.png HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: image/png
content-length: 2114
last-modified: Thu, 21 Dec 2023 15:51:09 GMT
etag: "65845eed-842"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 10309387
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qwvMjQWHjhuBJfvGEIngnqitAQYYXTOaSgG4pa5h%2BBEtZnIrc5b90bw6N%2FHdgKYvHsIkSJtach275zcHi%2BNQC6mZVMud%2FmdU8UcKRpX8K%2FBNgZxQN53aUJcnzM%2FcBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87691c012c5756ba-OSL
alt-svc: h3=":443"; ma=86400

lysyvan.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5

188.114.97.1

200 OK

16 kB

URL GET HTTP/3
lysyvan.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
ASCII text, with very long lines (16214)
Size
16 kB (16471 bytes)
Hash
a2431bc290cf34e330e11ec4cfce1247
32a53342901fef5f4f4dbb26a555e730f84437a4
c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: text/css
last-modified: Thu, 12 Oct 2023 13:22:33 GMT
vary: Accept-Encoding
etag: W/"6527f319-4057"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 12726872
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nDjNh5oElEysvgsXlTiZDvdYT07p%2FHkkIow5urLFUIhhtH1wVy8tTpqMP%2F2h9syqCu%2BwIIz%2FwOe6rWT1BXvW9wncjgjgXc%2FvJctaXcsOFlLk5mSwrG1brhitZnpOxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87691bff7bd156ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lysyvan.com/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.13.2

188.114.97.1

200 OK

11 kB

URL GET HTTP/3
lysyvan.com/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.13.2
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
ASCII text, with very long lines (11295)
Size
11 kB (11339 bytes)
Hash
be26862b0eba3fe2336d8a390293fca1
0c052b533df3bae64da1e70629f0722917c2b871
f5df288275b5f604b05fec06b5b90ee3e2eee656a3157c65d099be04a941ad73

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.13.2 HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: text/css
last-modified: Tue, 26 Sep 2023 15:29:54 GMT
vary: Accept-Encoding
etag: W/"6512f8f2-2c4b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 6830028
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nw93%2F%2B8Y2bqn4OQk3b4lavW3eKOx3oIwahfLjeh%2Bj2tqN4JsOxRJ0r%2FLE%2BJo8MBISIyEWiDNsJOZIlZkNyFc14s4iqb8rHFMqcXg0fVxZs0wPq5zzycJ0OIwcZSmeg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87691bff8bd456ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lysyvan.com/wp-content/uploads/elementor/css/global.css?ver=1702360133

188.114.97.1

200 OK

40 kB

URL GET HTTP/3
lysyvan.com/wp-content/uploads/elementor/css/global.css?ver=1702360133
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
ASCII text, with very long lines (15296)
Size
40 kB (40376 bytes)
Hash
2805e1c517e5439475d4e7784f15eea2
525d1b29cdf12d00becc13c37babfb48e675c20c
58b812f2ee80d7718cd23b6a5c3dd505a19dda8ef81ef1961e5585b47b66344e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/elementor/css/global.css?ver=1702360133 HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: text/css
last-modified: Tue, 12 Dec 2023 05:48:53 GMT
vary: Accept-Encoding
etag: W/"6577f445-9db8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 3608761
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y9aUfo8eTUDtag6YXXtf3VCYzScbJ9gDtFboCZIbsDfRe6zVwoeHquaXPDYigOKCqjXhi%2B3LQcThW8K5Wj5R%2F397uI2e47cdpbeYiqlWL%2FYpeWPhQW4Tv8wsNfqVlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87691bff8bd556ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lysyvan.com/wp-content/uploads/2023/12/cropped-Sukses-Favicon-192x192.png

188.114.97.1

200 OK

25 kB

URL GET HTTP/3
lysyvan.com/wp-content/uploads/2023/12/cropped-Sukses-Favicon-192x192.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lysyvan.com/login.php
Certificate
IssuerLet's Encrypt
Subjectlysyvan.com
Fingerprint9D:A3:A9:0B:E0:14:2F:8A:28:F6:CA:D2:6E:30:0F:FE:E8:40:A1:11
ValidityThu, 21 Mar 2024 07:30:44 GMT - Wed, 19 Jun 2024 07:30:43 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
25 kB (24569 bytes)
Hash
4a072595bbc3902910b4a3c3c093611e
24effcc5ec791cc721ed38194d6fa6f870caf8e4
8255536f9c9eafadef7570a6f0d4ae7fb4ec4fb96d098647d9098240566555af

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /wp-content/uploads/2023/12/cropped-Sukses-Favicon-192x192.png HTTP/1.1
Host: lysyvan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lysyvan.com/login.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 01:26:57 GMT
content-type: image/png
content-length: 24569
last-modified: Thu, 21 Dec 2023 15:51:09 GMT
etag: "65845eed-5ff9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 1198130
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5XeLW%2BfRPDDS1Jyb06rfrPRGZ8VNe8eIgJKsw6QPCPFlyFuuRapJnCAQF2lnaOdstHPsS0CQIqiyfWljgHPgiM9%2FZ0B%2FmA%2FS3n39t1r68CBXhm087eevbUb2xzSQiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87691c012c5656ba-OSL
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (18)

URL User Request GET HTTP/1.1

IP

ASN

File type