89.58.30.49 — intel.lukealbertson.com

Indicator 89.58.30.49 Type ip Category C2 Infrastructure Family Covenant Hosting netcup GmbH Confidence high VT Score 10/94 Source shodan First Seen 2026-04-18 05:03:23 UTC Last Seen 2026-10-10 00:00:19 UTC Shodan View on Shodan ↗
Raw JSON
{
  "ip": 1496981041,
  "http": {
    "status": 200,
    "robots_hash": null,
    "redirects": [],
    "title_hash": -1841387799,
    "securitytxt": null,
    "title": "Covenant",
    "sitemap_hash": null,
    "robots": null,
    "server": "Kestrel",
    "dom_hash": -1168966177,
    "headers_hash": -1757387333,
    "host": "89.58.30.49",
    "html": "\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <meta charset=\"utf-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, shrink-to-fit=no\">\n    <meta name=\"description\" content=\"\">\n    <meta name=\"author\" content=\"\">\n    <link rel=\"icon\" href=\"/images/favicon.ico\" type=\"image/x-icon\">\n    <base href=\"/\">\n    <title>Covenant</title>\n\n    <link rel=\"stylesheet\" href=\"/css/bootstrap.min.css\" />\n    <link rel=\"stylesheet\" href=\"/css/bootstrap-datetimepicker.min.css\" />\n    <link rel=\"stylesheet\" href=\"/css/bootstrap-select.min.css\" />\n    <link rel=\"stylesheet\" href=\"/css/bootstrap-multiselect.css\" />\n    <link rel=\"stylesheet\" href=\"/css/jquery.typeahead.min.css\" />\n    <link rel=\"stylesheet\" href=\"/dist/lucid.css\" />\n    <link rel=\"stylesheet\" href=\"/dist/codemirror/lib/codemirror.css\">\n    <link rel=\"stylesheet\" href=\"/dist/codemirror/theme/night.css\">\n    <link rel=\"stylesheet\" href=\"/css/covenant.css\" />\n    <link rel=\"stylesheet\" href=\"/css/covenant-graph.css\" />\n</head>\n<body>\n    <app><!--Blazor:{\"type\":\"server\",\"prerenderId\":\"de2fd321d6654110adc740cf24deed30\",\"key\":{\"locationHash\":\"E0F17BC2E79EAEED940F1DD23BF26A3ACD7083F8E3D460F7503B2E006EAF760D:0\",\"formattedComponentKey\":\"\"},\"sequence\":0,\"descriptor\":\"CfDJ8BcIhuNjE\\u002BROmVU4xffGIwI68tJA8t2HtxDjJ/xMFfC/Pdtug35JtL/GqdY5PT3jhAUFv1iXBkMoS/aciZGvAXU8uDsGVPLkbbMjWFANDoJdRCxGuEKMDrl4LgPdNjReOFpSeAETHHDYbvJMQG\\u002BRDzCKjWbWnLRMoK\\u002BvzANUnsIbGUqvrhT3g2jqnMipuyzoEKOB/Ncgc4cYHLc/r4RRDvCBqxLTYuyhqQHF4tgY/7hQ7cy4o5HUkxvvZoxWwQRGFvWfm\\u002BjBqURn2fXpngVGsQgK2\\u002BIGZUJRM9L9zH3lGO\\u002BYDu6mm7\\u002Bv0qbbUN0Vl1ld7Q4u\\u002BNLa6CEQEZjQpdutkIjmCgTBVBPBghAipPCHTNLD\\u002BUPyEl77PcrMTJViuP8KTXvNVYplJrR/kY7I\\u002BOJ3dwiDnUrQEFI0fOvxf\\u002BQVDQjWhVpwY/sXt1ryuRr3Mpc/2dMvP0IbnCjV/I4MNzlj/mQ2EdmjPqGaexluNgT2TBYOc1FQYbIFYw3TF2TCePgJ5y\\u002BkoAim9RXMpAGQCfDclwk=\"}--><!--Blazor:{\"prerenderId\":\"de2fd321d6654110adc740cf24deed30\"}--></app>\n\n    <script src=\"/_framework/blazor.server.js\"></script>\n    <script src=\"/js/jquery.min.js\"></script>\n    <script src=\"/js/popper.min.js\"></script>\n    <script src=\"/js/typeahead.bundle.min.js\"></script>\n    <script src=\"/js/bootstrap.min.js\"></script>\n    <script src=\"/js/moment.min.js\"></script>\n    <script src=\"/lib/signalr/dist/browser/signalr.js\"></script>\n    <script src=\"/js/bootstrap-select.min.js\"></script>\n    <script src=\"/js/bootstrap-multiselect.js\"></script>\n    <script src=\"/js/bootstrap-datetimepicker.min.js\"></script>\n    <script src=\"/dist/codemirror/lib/codemirror.js\"></script>\n    <script src=\"/dist/codemirror/mode/clike/clike.js\"></script>\n    <script src=\"/dist/codemirror/mode/htmlmixed/htmlmixed.js\"></script>\n    <script src=\"/js/d3.min.js\"></script>\n    <script src=\"/js/inputfile.js\"></script>\n    <script src=\"/js/components/master.js\"></script>\n</body>\n</html>",
    "server_hash": -1734924932,
    "location": "/",
    "components": {
      "jQuery": {
        "categories": [
          "JavaScript libraries"
        ]
      },
      "Twitter typeahead.js": {
        "categories": [
          "JavaScript libraries"
        ]
      },
      "Microsoft ASP.NET": {
        "categories": [
          "Web frameworks"
        ]
      },
      "SignalR": {
        "categories": [
          "JavaScript libraries"
        ]
      },
      "Bootstrap": {
        "categories": [
          "UI frameworks"
        ]
      },
      "Moment.js": {
        "categories": [
          "JavaScript libraries"
        ]
      },
      "Kestrel": {
        "categories": [
          "Web servers"
        ]
      },
      "Popper": {
        "categories": [
          "Miscellaneous"
        ]
      },
      "Blazor": {
        "categories": [
          "Web frameworks"
        ]
      },
      "D3": {
        "categories": [
          "JavaScript graphics"
        ]
      }
    },
    "securitytxt_hash": null,
    "favicon": {
      "data": "AAABAAEAICAAAAEAIABXBQAAFgAAAIlQTkcNChoKAAAADUlIRFIAAAAgAAAAIAgGAAAAc3p69AAA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\nHxS32WpWNqKsAAAAAElFTkSuQmCC\n",
      "hash": -737603591,
      "location": "https://89.58.30.49:7443/images/favicon.ico"
    },
    "sitemap": null,
    "html_hash": 331176980
  },
  "port": 7443,
  "transport": "tcp",
  "location": {
    "city": "Nürnberg",
    "region_code": "BY",
    "area_code": null,
    "longitude": 11.0222,
    "latitude": 49.4453,
    "country_code": "DE",
    "country_name": "Germany"
  },
  "product": "Covenant",
  "hash": -1209356121,
  "tags": [
    "c2",
    "self-signed"
  ],
  "timestamp": "2026-04-17T20:57:52.413903",
  "ssl": {
    "chain_sha256": [
      "1367f6118106e59dd42d4d1ddea0ed4e7266840d6622579f7adc3918162212c3"
    ],
    "jarm": "2ad2ad0000000000002ad2ad2ad2ad95021c0d4b0ca73381d1f3e97c3aa109",
    "tlsext": [
      {
        "id": 65281,
        "name": "renegotiation_info"
      },
      {
        "id": 11,
        "name": "ec_point_formats"
      },
      {
        "id": 35,
        "name": "session_ticket"
      },
      {
        "id": 23,
        "name": "extended_master_secret"
      }
    ],
    "chain": [
      "-----BEGIN CERTIFICATE-----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\nvVGFJztQU+IEGVN5Q4t0hyo=\n-----END CERTIFICATE-----\n"
    ],
    "versions": [],
    "acceptable_cas": [],
    "alpn": [],
    "cert": {
      "sig_alg": "sha256WithRSAEncryption",
      "issued": "20260109140209Z",
      "expires": "20360108140209Z",
      "pubkey": {
        "bits": 2048,
        "type": "rsa"
      },
      "version": 2,
      "extensions": [
        {
          "data": "\\x03\\x02\\x04\\xb0",
          "name": "keyUsage"
        },
        {
          "data": "0\\n\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01",
          "name": "extendedKeyUsage"
        },
        {
          "data": "0\\x06\\x87\\x04\\x00\\x00\\x00\\x00",
          "name": "subjectAltName"
        }
      ],
      "fingerprint": {
        "sha256": "1367f6118106e59dd42d4d1ddea0ed4e7266840d6622579f7adc3918162212c3",
        "sha1": "878642de74ac42d525b561d62bca245fc18c9d24"
      },
      "serial": 742046566346914300,
      "issuer": {
        "CN": "Covenant"
      },
      "expired": false,
      "subject": {
        "CN": "Covenant"
      }
    },
    "cipher": {
      "version": "TLSv1.2",
      "bits": 256,
      "name": "ECDHE-RSA-AES256-GCM-SHA384"
    },
    "trust": {
      "revoked": false,
      "browser": null
    },
    "handshake_states": [
      "before SSL initialization",
      "SSLv3/TLS write client hello",
      "SSLv3/TLS read server hello",
      "SSLv3/TLS read server certificate",
      "SSLv3/TLS read server key exchange",
      "SSLv3/TLS read server done",
      "SSLv3/TLS write client key exchange",
      "SSLv3/TLS write change cipher spec",
      "SSLv3/TLS write finished",
      "SSLv3/TLS read server session ticket",
      "SSLv3/TLS read change cipher spec",
      "SSLv3/TLS read finished",
      "SSL negotiation finished successfully"
    ],
    "ja3s": "ec74a5c51106f0419184d0dd08fb05bc",
    "ocsp": {}
  },
  "hostnames": [
    "v2202411240770294653.happysrv.de"
  ],
  "org": "netcup GmbH",
  "data": "HTTP/1.1 200 OK\r\nContent-Type: text/html; charset=utf-8\r\nDate: Fri, 17 Apr 2026 20:56:42 GMT\r\nServer: Kestrel\r\nCache-Control: no-cache, no-store, max-age=0\r\nTransfer-Encoding: chunked\r\n\r\n",
  "asn": "AS197540",
  "cpe23": [
    "cpe:2.3:a:d3.js_project:d3.js",
    "cpe:2.3:a:getbootstrap:bootstrap",
    "cpe:2.3:a:jquery:jquery",
    "cpe:2.3:a:microsoft:asp.net",
    "cpe:2.3:a:momentjs:moment"
  ],
  "isp": "netcup GmbH",
  "cpe": [
    "cpe:/a:d3.js_project:d3.js",
    "cpe:/a:getbootstrap:bootstrap",
    "cpe:/a:jquery:jquery",
    "cpe:/a:microsoft:asp.net",
    "cpe:/a:momentjs:moment"
  ],
  "domains": [
    "happysrv.de"
  ],
  "ip_str": "89.58.30.49",
  "os": null,
  "_shodan": {
    "region": "na",
    "module": "https-simple-new",
    "ptr": true,
    "options": {},
    "id": "6d757bf0-3b64-4af4-8b6a-59309960f3db",
    "crawler": "6d5195c331613d103027c23dc52e6d32fd2a74af"
  }
}