Overview

URLcleancraftscleaners.com/wp/
IP 198.54.114.202 (United States)
ASN#22612 NAMECHEAP-NET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-05-26 14:55:26 UTC
StatusLoading report..
IDS alerts0
Blocklist alert14
urlquery alerts No alerts detected
Tags None

Domain Summary (3)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
ar-flux.com (16) 0 2021-01-28 05:28:40 2023-05-15 13:49:20 11282 87759 162.241.69.148
ocsp.sectigo.com (1) 487 2019-11-29 12:50:24 2023-05-26 10:07:58 330 964 104.18.14.101
cleancraftscleaners.com (1) 0 No data No data 399 372 198.54.114.202

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-05-26 medium ar-flux.com/online/ Malware
2023-05-26 medium ar-flux.com/online/Sign%20in%20Scotiabank_files/7c428f63a00e5bd025fa159e8c9 (...) Malware
2023-05-26 medium ar-flux.com/online/assets/8fd30bd010d9e2c7677ec339685f958b.woff Malware
2023-05-26 medium ar-flux.com/online/assets/50805f331bb1b697aafb6f0c28b09212.woff2 Malware
2023-05-26 medium ar-flux.com/online/assets/00cecde981e3ef7491eba946f4b95fe0.woff Malware
2023-05-26 medium ar-flux.com/online/assets/15243e297f5364bd59f4088a864abbf7.woff Malware
2023-05-26 medium ar-flux.com/online/assets/8424a042624210828b0fbe7a8c533b2a.woff2 Malware
2023-05-26 medium ar-flux.com/online/assets/1e98970fd9c76545bbf1e1a377f4f3c2.woff2 Malware
2023-05-26 medium ar-flux.com/online/assets/64a8523319c68ca5e492309a68af4a9e.woff2 Malware
2023-05-26 medium ar-flux.com/online/assets/3ca6c3facf3966b88b55118f7821ee72.woff2 Malware
2023-05-26 medium ar-flux.com/online/assets/0a9f36f23c26fbad0827f0a8ec86c908.woff Malware
2023-05-26 medium ar-flux.com/online/assets/7e2a698e9980c7ba52f69a2717e97b86.woff Malware
2023-05-26 medium ar-flux.com/online/assets/811a29d581fc684aa63616499cad4782.ttf Malware
2023-05-26 medium ar-flux.com/online/assets/12b6c5fcbc2e61c7ba17f51cd9c2b8c0.ttf Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 198.54.114.202
Date UQ / IDS / BL URL IP
2023-05-26 14:55:26 UTC 0 - 0 - 14 cleancraftscleaners.com/wp/ 198.54.114.202
2023-04-12 18:03:18 UTC 0 - 0 - 4 tm.rcm.edu.ng/or/or.php 198.54.114.202
2023-04-12 14:11:30 UTC 0 - 0 - 4 tmportal.rcm.edu.ng/plru/plru.php 198.54.114.202
2023-04-12 10:23:54 UTC 0 - 0 - 4 tmportal.rcm.edu.ng/plru/plru.php 198.54.114.202
2022-09-16 20:47:41 UTC 0 - 0 - 8 mps14-filiale72.com/ 198.54.114.202


Last 5 reports on ASN: NAMECHEAP-NET
Date UQ / IDS / BL URL IP
2023-06-06 06:13:45 UTC 0 - 2 - 0 asl-express.com/tmp/wp-admin/js/dll/view-item (...) 192.64.119.185
2023-06-06 06:05:55 UTC 8 - 0 - 0 nazmus-sakibb.com/email/verification/s8lwhq/a (...) 162.213.251.230
2023-06-06 05:46:38 UTC 0 - 1 - 1 milewoy.com/ 198.54.117.242
2023-06-06 05:31:58 UTC 0 - 0 - 1 8564522.mellowavecapital.com/MviH22BU/amFzb24 (...) 198.187.29.22
2023-06-06 04:53:16 UTC 0 - 2 - 0 top-66.com/ 162.255.119.118


Last 1 reports on domain: cleancraftscleaners.com
Date UQ / IDS / BL URL IP
2023-05-26 14:55:26 UTC 0 - 0 - 14 cleancraftscleaners.com/wp/ 198.54.114.202


No other reports with similar screenshot

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (18)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.14.101
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 14:55:09 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 25 May 2023 15:36:31 GMT
Expires: Thu, 01 Jun 2023 15:36:30 GMT
Etag: "5dc667fa95d26183cfaacc7601f51075a7253c5b"
Cache-Control: max-age=521715,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7cd6db83a8fbb527-OSL

                                        
                                            GET /wp/ HTTP/1.1 
Host: cleancraftscleaners.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             198.54.114.202
HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
                                            
keep-alive: timeout=5, max=100
x-powered-by: PHP/7.1.33
content-length: 102
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 26 May 2023 14:55:10 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed


--- Additional Info ---
Magic:  HTML document, Unicode text, UTF-8 (with BOM) text
Size:   102
Md5:    c428ec513cc2afc7c576f035a9bbf6ad
Sha1:   2f0046728caadd48858b2e32730b51a2c71d41e9
Sha256: bd61514fe252974abeb2df5bff6e1fddc284a9c7ae40549eccf5f67e2d295ebc
                                        
                                            GET /online/ HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://cleancraftscleaners.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Date: Fri, 26 May 2023 14:55:09 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   497
Md5:    0279d61245e6189e831c63b0d63811a4
Sha1:   69f797a785e9e66f740796e01d1aa0fd7507d0ce
Sha256: 37f565654d32cbee2a0301d2cb5761c5775c6032a3cc1ad183e107e90d91c407

Blocklists:
  - fortinet: Malware
                                        
                                            GET /online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216 HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: rowan=attkinson
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Date: Fri, 26 May 2023 14:55:10 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (65107), with CRLF line terminators
Size:   79688
Md5:    e6a86f54c6ef7f2d207c69f54f26520e
Sha1:   fefe07070d0b103f3f2795bf8ef45cd50d81aba0
Sha256: 2c81a621c5bd6630c3bee80e9bbf72a740f8ebe0080352d885c38bc9139a2de6
                                        
                                            GET /online/Sign%20in%20Scotiabank_files/7c428f63a00e5bd025fa159e8c94389f.svg HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar-flux.com/online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216
Cookie: rowan=attkinson
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 26 May 2023 14:55:10 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Blocklists:
  - fortinet: Malware
                                        
                                            GET /online/assets/8fd30bd010d9e2c7677ec339685f958b.woff HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ar-flux.com/online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216
Cookie: rowan=attkinson
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 26 May 2023 14:55:10 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Blocklists:
  - fortinet: Malware
                                        
                                            GET /online/assets/50805f331bb1b697aafb6f0c28b09212.woff2 HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ar-flux.com/online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216
Cookie: rowan=attkinson
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 26 May 2023 14:55:10 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Blocklists:
  - fortinet: Malware
                                        
                                            GET /online/assets/00cecde981e3ef7491eba946f4b95fe0.woff HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ar-flux.com/online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216
Cookie: rowan=attkinson
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 26 May 2023 14:55:11 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Blocklists:
  - fortinet: Malware
                                        
                                            GET /online/assets/15243e297f5364bd59f4088a864abbf7.woff HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ar-flux.com/online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216
Cookie: rowan=attkinson
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 26 May 2023 14:55:11 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Blocklists:
  - fortinet: Malware
                                        
                                            GET /online/assets/8424a042624210828b0fbe7a8c533b2a.woff2 HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ar-flux.com/online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216
Cookie: rowan=attkinson
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 26 May 2023 14:55:11 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Blocklists:
  - fortinet: Malware
                                        
                                            GET /online/assets/1e98970fd9c76545bbf1e1a377f4f3c2.woff2 HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ar-flux.com/online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216
Cookie: rowan=attkinson
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 26 May 2023 14:55:11 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Blocklists:
  - fortinet: Malware
                                        
                                            GET /online/assets/64a8523319c68ca5e492309a68af4a9e.woff2 HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ar-flux.com/online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216
Cookie: rowan=attkinson
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 26 May 2023 14:55:11 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Blocklists:
  - fortinet: Malware
                                        
                                            GET /online/assets/3ca6c3facf3966b88b55118f7821ee72.woff2 HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ar-flux.com/online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216
Cookie: rowan=attkinson
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 26 May 2023 14:55:11 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Blocklists:
  - fortinet: Malware
                                        
                                            GET /online/assets/0a9f36f23c26fbad0827f0a8ec86c908.woff HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ar-flux.com/online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216
Cookie: rowan=attkinson
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 26 May 2023 14:55:11 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Blocklists:
  - fortinet: Malware
                                        
                                            GET /online/assets/7e2a698e9980c7ba52f69a2717e97b86.woff HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ar-flux.com/online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216
Cookie: rowan=attkinson
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 26 May 2023 14:55:11 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Blocklists:
  - fortinet: Malware
                                        
                                            GET /online/assets/811a29d581fc684aa63616499cad4782.ttf HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar-flux.com/online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216
Cookie: rowan=attkinson
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 26 May 2023 14:55:11 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Blocklists:
  - fortinet: Malware
                                        
                                            GET /online/assets/12b6c5fcbc2e61c7ba17f51cd9c2b8c0.ttf HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar-flux.com/online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216
Cookie: rowan=attkinson
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 26 May 2023 14:55:11 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Blocklists:
  - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: ar-flux.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ar-flux.com/online/X0910976447c998e1.php?xex=&ca1a833cb3b334f37add068b1e63ef029c50f9b864d310791e0bbaae60c5d9453a8e0bf27bee94b9061607aed68415a905d834ac294df2514809ba8c75183cd6fc787fcf542e7e8255c8ed17d776150664daa719d2f2c244b216
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             162.241.69.148
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Fri, 26 May 2023 14:55:11 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3