| unslowpokea.com/12d5937f904f8a2a295b19aacf89ea14 |  23.83.114.131 | 200 OK | 1.3 kB |
URL User Request GET HTTP/1.1unslowpokea.com/12d5937f904f8a2a295b19aacf89ea14 IP23.83.114.131:80
File typeJavaScript source, ASCII text, with very long lines (513) Hash07d82fd91a82848094afbdd5998193de 9c51c2273dd3591dda54a5e0c270a231ad003427 a3e3976d0c4263da545006835444a7ef4de946b1406bc6202fb0b200050a7c40
GET /12d5937f904f8a2a295b19aacf89ea14 HTTP/1.1
Host: unslowpokea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: fasthttp
Date: Sat, 04 May 2024 07:32:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1283
|
|
| unslowpokea.com/favicon.ico | 23.83.114.131 | 404 Not Found | 9 B |
URL GET HTTP/1.1unslowpokea.com/favicon.ico IP23.83.114.131:80
Requested byhttp://unslowpokea.com/12d5937f904f8a2a295b19aacf89ea14
File typeASCII text, with no line terminators Hash9e076f5885f5cc16a4b5aeb8de4adff5 475c848673a3f79fa778f01c2bd5a721d4c41707 e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31
GET /favicon.ico HTTP/1.1
Host: unslowpokea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://unslowpokea.com/12d5937f904f8a2a295b19aacf89ea14
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: fasthttp
Date: Sat, 04 May 2024 07:32:13 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 9
|
|
| littlecdn.com/cd-templates-landings/notification-modals/macos/build/images/pattern__safari-arrow.png |  104.22.25.116 | 200 OK | 419 B |
URL GET HTTP/2littlecdn.com/cd-templates-landings/notification-modals/macos/build/images/pattern__safari-arrow.png IP104.22.25.116:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectlittlecdn.com Fingerprint42:A1:9F:5B:B7:1B:88:CB:90:58:FC:E9:D1:96:3C:48:38:66:3A:9A ValidityMon, 11 Mar 2024 02:10:57 GMT - Sun, 09 Jun 2024 02:10:56 GMT
File typePNG image data, 48 x 30, 8-bit colormap, non-interlaced Hashef737d44e9efeb2b705061879a33ccb4 b18447f8c87dffcc08725f1b718102f95fc9134b 33becbabd1ebe9e73f06e96b92c0f1186e6b16f8ea7860cd024c147d73aaf03f
GET /cd-templates-landings/notification-modals/macos/build/images/pattern__safari-arrow.png HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 07:32:14 GMT
content-type: image/png
content-length: 419
last-modified: Fri, 26 Jan 2024 09:39:02 GMT
vary: Accept-Encoding
etag: "65b37db6-1a3"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87e6cbb70ebeb4f4-OSL
X-Firefox-Spdy: h2
|
|
| littlecdn.com/cd-templates-landings/_assets/images/logo.png | 104.22.25.116 | 200 OK | 7.8 kB |
URL GET HTTP/2littlecdn.com/cd-templates-landings/_assets/images/logo.png IP104.22.25.116:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectlittlecdn.com Fingerprint42:A1:9F:5B:B7:1B:88:CB:90:58:FC:E9:D1:96:3C:48:38:66:3A:9A ValidityMon, 11 Mar 2024 02:10:57 GMT - Sun, 09 Jun 2024 02:10:56 GMT
File typePNG image data, 512 x 512, 8-bit colormap, non-interlaced Hash82eb2dea2b1166594c87038d540fdd4f 2c0d912580cf02bc5ba36f55eb9e91989a063993 f505997d2fb63eabc7a8e9139c4e0e35940ef97481c68f0d5b53fc0801b27acc
GET /cd-templates-landings/_assets/images/logo.png HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 07:32:14 GMT
content-type: image/png
content-length: 7753
last-modified: Fri, 26 Jan 2024 09:39:02 GMT
vary: Accept-Encoding
etag: "65b37db6-1e49"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87e6cbb71ed6b4f4-OSL
X-Firefox-Spdy: h2
|
|
| littlecdn.com/cd-templates-landings/notification-modals/macos/build/images/commands_3.png | 104.22.25.116 | 200 OK | 4.6 kB |
URL GET HTTP/2littlecdn.com/cd-templates-landings/notification-modals/macos/build/images/commands_3.png IP104.22.25.116:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectlittlecdn.com Fingerprint42:A1:9F:5B:B7:1B:88:CB:90:58:FC:E9:D1:96:3C:48:38:66:3A:9A ValidityMon, 11 Mar 2024 02:10:57 GMT - Sun, 09 Jun 2024 02:10:56 GMT
File typePNG image data, 269 x 77, 8-bit colormap, non-interlaced Hashc01fd04615824cc88f750de10ae5ce12 134ec54c41168a037c85fd7d3c2c5fd99b3ae0f8 10cda2230829632ae11c180506968d69d8d16433c4320085539f56273add7f06
GET /cd-templates-landings/notification-modals/macos/build/images/commands_3.png HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 07:32:14 GMT
content-type: image/png
content-length: 4606
last-modified: Fri, 26 Jan 2024 09:39:02 GMT
vary: Accept-Encoding
etag: "65b37db6-11fe"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87e6cbb70ebfb4f4-OSL
X-Firefox-Spdy: h2
|
|
| littlecdn.com/cd-templates-landings/notification-modals/macos/build/images/warning_yellow_gg2.png | 104.22.25.116 | 200 OK | 4.4 kB |
URL GET HTTP/2littlecdn.com/cd-templates-landings/notification-modals/macos/build/images/warning_yellow_gg2.png IP104.22.25.116:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectlittlecdn.com Fingerprint42:A1:9F:5B:B7:1B:88:CB:90:58:FC:E9:D1:96:3C:48:38:66:3A:9A ValidityMon, 11 Mar 2024 02:10:57 GMT - Sun, 09 Jun 2024 02:10:56 GMT
File typePNG image data, 140 x 140, 8-bit colormap, non-interlaced Hash2240b4a6475d040579a278be85e11a9a 990e69e88cc348cd73e0f25cd5367524681a24e3 d30c055a94700d329ffb3dcc33a89410f40a72a6cbb28e652ea8dc58cc50dfdf
GET /cd-templates-landings/notification-modals/macos/build/images/warning_yellow_gg2.png HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 07:32:14 GMT
content-type: image/png
content-length: 4372
last-modified: Fri, 26 Jan 2024 09:39:02 GMT
vary: Accept-Encoding
etag: "65b37db6-1114"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87e6cbb70ec0b4f4-OSL
X-Firefox-Spdy: h2
|
|
| littlecdn.com/cd-templates-landings/notification-modals/macos/build/images/macos2.png | 104.22.25.116 | 200 OK | 12 kB |
URL GET HTTP/2littlecdn.com/cd-templates-landings/notification-modals/macos/build/images/macos2.png IP104.22.25.116:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectlittlecdn.com Fingerprint42:A1:9F:5B:B7:1B:88:CB:90:58:FC:E9:D1:96:3C:48:38:66:3A:9A ValidityMon, 11 Mar 2024 02:10:57 GMT - Sun, 09 Jun 2024 02:10:56 GMT
File typePNG image data, 154 x 154, 8-bit colormap, non-interlaced Hasha9038fc57b075aa3da6095c627117b09 2660046d3e6bc3af36d97e0418724948680b20a0 bb07a111143f08016d8b0bc40a8216585286f7f5439eca371c0bb718d959b4b9
GET /cd-templates-landings/notification-modals/macos/build/images/macos2.png HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 07:32:14 GMT
content-type: image/png
content-length: 12366
last-modified: Fri, 26 Jan 2024 09:39:02 GMT
vary: Accept-Encoding
etag: "65b37db6-304e"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87e6cbb71ecab4f4-OSL
X-Firefox-Spdy: h2
|
|
| littlecdn.com/cd-templates-landings/notification-modals/macos/build/images/pattern__safari1.jpg | 104.22.25.116 | 200 OK | 5.8 kB |
URL GET HTTP/2littlecdn.com/cd-templates-landings/notification-modals/macos/build/images/pattern__safari1.jpg IP104.22.25.116:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectlittlecdn.com Fingerprint42:A1:9F:5B:B7:1B:88:CB:90:58:FC:E9:D1:96:3C:48:38:66:3A:9A ValidityMon, 11 Mar 2024 02:10:57 GMT - Sun, 09 Jun 2024 02:10:56 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 301x79, components 3 Hash7a0f7ed875d7bb68f7e8ae41e09fd855 628a922f931b9173bfcc97e5a2ecee570a73f9bf 39c245eec62bd3f9ffcb8b712ca4d1d38f6e6b28c295503632f36fbd5e80f555
GET /cd-templates-landings/notification-modals/macos/build/images/pattern__safari1.jpg HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 07:32:14 GMT
content-type: image/jpeg
content-length: 5771
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-origin: *
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cf-bgj: h2pri
etag: "65b37db6-168b"
last-modified: Fri, 26 Jan 2024 09:39:02 GMT
vary: Accept-Encoding
cache-control: max-age=3600
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87e6cbb72ee4b4f4-OSL
X-Firefox-Spdy: h2
|
|
| littlecdn.com/cd-templates-landings/notification-modals/macos/build/images/arrow__blue.png | 104.22.25.116 | 200 OK | 778 B |
URL GET HTTP/2littlecdn.com/cd-templates-landings/notification-modals/macos/build/images/arrow__blue.png IP104.22.25.116:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectlittlecdn.com Fingerprint42:A1:9F:5B:B7:1B:88:CB:90:58:FC:E9:D1:96:3C:48:38:66:3A:9A ValidityMon, 11 Mar 2024 02:10:57 GMT - Sun, 09 Jun 2024 02:10:56 GMT
File typePNG image data, 111 x 113, 8-bit colormap, non-interlaced Hash811a1caeb9f318966d5ec403ea285fff bb7433601acddd90abc63415b77293324278df68 91184a211c49ba11ebb84a3bd12cfbbeea659ab0c8588e46d0536f6050c6699e
GET /cd-templates-landings/notification-modals/macos/build/images/arrow__blue.png HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 07:32:14 GMT
content-type: image/png
content-length: 778
last-modified: Fri, 26 Jan 2024 09:39:02 GMT
vary: Accept-Encoding
etag: "65b37db6-30a"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87e6cbb70ec1b4f4-OSL
X-Firefox-Spdy: h2
|
|
| stoomawy.net/zone?&pub=0&zone_id=3683319&is_mobile=false&domain=oovaufty.com&var=ATnbRESVYcSJfkr&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=e2eaf3df-39ea-47cd-987b-f94d06ad867d&action=prerequest |  139.45.197.250 | 200 OK | 0 B |
URL POST HTTP/2stoomawy.net/zone?&pub=0&zone_id=3683319&is_mobile=false&domain=oovaufty.com&var=ATnbRESVYcSJfkr&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=e2eaf3df-39ea-47cd-987b-f94d06ad867d&action=prerequest IP139.45.197.250:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectstoomawy.net Fingerprint84:ED:8F:CC:56:72:B9:3F:F8:99:C7:8C:8E:28:99:5E:F7:05:72:ED ValidityMon, 15 Apr 2024 05:35:26 GMT - Sun, 14 Jul 2024 05:35:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /zone?&pub=0&zone_id=3683319&is_mobile=false&domain=oovaufty.com&var=ATnbRESVYcSJfkr&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=e2eaf3df-39ea-47cd-987b-f94d06ad867d&action=prerequest HTTP/1.1
Host: stoomawy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://oovaufty.com
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 07:32:14 GMT
content-length: 0
x-trace-id: 5c71037de8b2286393698dbc1686e345
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://oovaufty.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| littlecdn.com/cd-templates-landings/notification-modals/macos/build/images/shadow.png | 104.22.25.116 | 200 OK | 3.5 kB |
URL GET HTTP/2littlecdn.com/cd-templates-landings/notification-modals/macos/build/images/shadow.png IP104.22.25.116:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectlittlecdn.com Fingerprint42:A1:9F:5B:B7:1B:88:CB:90:58:FC:E9:D1:96:3C:48:38:66:3A:9A ValidityMon, 11 Mar 2024 02:10:57 GMT - Sun, 09 Jun 2024 02:10:56 GMT
File typePNG image data, 1170 x 53, 8-bit colormap, non-interlaced Hasha78fe596753efb7adec46540e2c003c6 b8ef888cbb92a6a1925b4602415241bee43c3d84 106ee77b22491dadd03a381a0e1c8ce7a1f7f9b6fef0707056db959dec6b6f09
GET /cd-templates-landings/notification-modals/macos/build/images/shadow.png HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://littlecdn.com/cd-templates-landings/notification-modals/macos/build/css/style.css?v=1558719747366
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 04 May 2024 07:32:15 GMT
content-type: image/png
content-length: 3469
last-modified: Fri, 26 Jan 2024 09:39:02 GMT
vary: Accept-Encoding
etag: "65b37db6-d8d"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: REVALIDATED
accept-ranges: bytes
server: cloudflare
cf-ray: 87e6cbb92890b4f4-OSL
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 525
Origin: https://oovaufty.com
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 07:32:15 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 94b6df2b06e7a5fcb5683a4c72e13f0e
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://oovaufty.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| littlecdn.com/cd-templates-landings/notification-modals/macos/build/css/style.css?v=1558719747366 | 104.22.25.116 | 200 OK | 4.5 kB |
URL GET HTTP/2littlecdn.com/cd-templates-landings/notification-modals/macos/build/css/style.css?v=1558719747366 IP104.22.25.116:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectlittlecdn.com Fingerprint42:A1:9F:5B:B7:1B:88:CB:90:58:FC:E9:D1:96:3C:48:38:66:3A:9A ValidityMon, 11 Mar 2024 02:10:57 GMT - Sun, 09 Jun 2024 02:10:56 GMT
File typeASCII text, with very long lines (22714) Hash5203c84c3f89f05ef72ab6a998913021 9c18188941541b17f56053f272a758ca39fe2750 6416c27287d736261ae26b4585c92f3d4546978ba9ddb2a43e9e973fc0638dd4
GET /cd-templates-landings/notification-modals/macos/build/css/style.css?v=1558719747366 HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 07:32:14 GMT
content-type: text/css
last-modified: Fri, 26 Jan 2024 09:39:02 GMT
vary: Accept-Encoding
etag: W/"65b37db6-58e2"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 87e6cbb70ebcb4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 528
Origin: https://oovaufty.com
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 07:32:15 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 35918f1d7c44174fd7544ab216c98873
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://oovaufty.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://oovaufty.com/
Origin: https://oovaufty.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 07:32:15 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://oovaufty.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hash6082371a843c651349fdda28e2a5e597 2e108e19d3db7cd7007f0e81a63fabd80d9f3022 cda043405f256133459a44efc36c7caf8b20b4e0faa4688ff76c0daa99bb15ed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://oovaufty.com/
Content-Type: application/json
Content-Length: 1213
Origin: https://oovaufty.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 07:32:15 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://oovaufty.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 | 139.45.197.153 | 200 OK | 24 kB |
URL GET HTTP/2oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 IP139.45.197.153:443
Requested byhttp://unslowpokea.com/12d5937f904f8a2a295b19aacf89ea14 CertificateIssuerLet's Encrypt Subjectoovaufty.com Fingerprint32:8B:C3:EB:0A:AB:5E:26:68:73:56:E4:F9:AB:98:35:CC:E4:99:4A ValidityFri, 12 Apr 2024 05:24:25 GMT - Thu, 11 Jul 2024 05:24:24 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (9009) Hashbfa036e1a9bce91d2430227497513d63 c28934df059c42097c63fa745762bad0883545cd cb2b2170fc9283af85147fcb19aa5dbd149d29a5f85fbf697b0f317cceb5ccb7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 HTTP/1.1
Host: oovaufty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://unslowpokea.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 07:32:14 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
set-cookie: reverse=USMCewzYTR2ZjDf-eSt6h1XeJR6WSdJ-OwgtBLB6ihw; expires=Sat, 04-May-2024 08:32:14 GMT; Max-Age=3600; path=/
OAID=c35dcbdfe1be075f9c90bb995ec3122f; expires=Tue, 05-Sep-2079 15:04:28 GMT; Max-Age=1746343934; path=/
oaidts=1714807934; expires=Tue, 05-Sep-2079 15:04:28 GMT; Max-Age=1746343934; path=/
syncedCookie=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: br
X-Firefox-Spdy: h2
|
|
| oovaufty.com/sw-check-permissions/3683319?var=ATnbRESVYcSJfkr&zoneId=3683319 | 139.45.197.153 | 200 OK | 9.6 kB |
URL GET HTTP/2oovaufty.com/sw-check-permissions/3683319?var=ATnbRESVYcSJfkr&zoneId=3683319 IP139.45.197.153:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectoovaufty.com Fingerprint32:8B:C3:EB:0A:AB:5E:26:68:73:56:E4:F9:AB:98:35:CC:E4:99:4A ValidityFri, 12 Apr 2024 05:24:25 GMT - Thu, 11 Jul 2024 05:24:24 GMT
Hash330387f4e9f9c207e8f5dce2eccd0e27 e38ebc64cd0527cda4b7575cb7ab1d22f75d8bb0 5fe5edd63aff8230e94ac837f8a14dfd06d5d47a95c4edc2ec59f269f3d7f8ff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sw-check-permissions/3683319?var=ATnbRESVYcSJfkr&zoneId=3683319 HTTP/1.1
Host: oovaufty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 07:32:15 GMT
content-type: application/javascript
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: br
X-Firefox-Spdy: h2
|
|
| oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13&mprtr=1 | 139.45.197.153 | 200 OK | 45 kB |
URL POST HTTP/2oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13&mprtr=1 IP139.45.197.153:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectoovaufty.com Fingerprint32:8B:C3:EB:0A:AB:5E:26:68:73:56:E4:F9:AB:98:35:CC:E4:99:4A ValidityFri, 12 Apr 2024 05:24:25 GMT - Thu, 11 Jul 2024 05:24:24 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13&mprtr=1 HTTP/1.1
Host: oovaufty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://oovaufty.com
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 07:32:14 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
set-cookie: reverse=zZmpKzuFCOajZzYT0DpkpUm12BLcMDlyAg5ofFkeyyU; expires=Sat, 04-May-2024 08:32:14 GMT; Max-Age=3600; path=/
OAID=c35dcbdfe1be075f9c90bb995ec3122f; expires=Tue, 05-Sep-2079 15:04:28 GMT; Max-Age=1746343934; path=/
oaidts=1714807934; expires=Tue, 05-Sep-2079 15:04:28 GMT; Max-Age=1746343934; path=/
syncedCookie=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: br
X-Firefox-Spdy: h2
|
|
| stoomawy.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/3683319&var=ATnbRESVYcSJfkr&z=3683319 | 139.45.197.250 | 200 OK | 37 kB |
URL GET HTTP/2stoomawy.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/3683319&var=ATnbRESVYcSJfkr&z=3683319 IP139.45.197.250:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectstoomawy.net Fingerprint84:ED:8F:CC:56:72:B9:3F:F8:99:C7:8C:8E:28:99:5E:F7:05:72:ED ValidityMon, 15 Apr 2024 05:35:26 GMT - Sun, 14 Jul 2024 05:35:25 GMT
File typeJavaScript source, ASCII text, with very long lines (37142), with no line terminators Hash32d6dbd00a639e2cd10d1704b9159bd5 0dab4c95675393f1d0e13d20f13d80ee12e41d95 9f339e5efd7c959419a4e86bb4c5e9f07eae2ed839484846157be981917743de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pfe/current/micro.tag.min.js?sw=/sw-check-permissions/3683319&var=ATnbRESVYcSJfkr&z=3683319 HTTP/1.1
Host: stoomawy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 07:32:14 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:48:51 GMT
etag: W/"662a3513-9116"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| littlecdn.com/cd-templates-landings/notification-modals/macos/build/js/script.js?v=1558719747366 | 104.22.25.116 | 200 OK | 3.6 kB |
URL GET HTTP/2littlecdn.com/cd-templates-landings/notification-modals/macos/build/js/script.js?v=1558719747366 IP104.22.25.116:443
Requested byhttps://oovaufty.com/?b=19663352&ba=1&campid=7677723&did=171&dm=1&ep=1&g=NZ&l=ATnbRESVYcSJfkr&oaid=c35dcbdfe1be075f9c90bb995ec3122f&s=810202929834233856&ssk=3d081a0a8164744292d86aa6094e3230&svar=1714730949&vi=1&vo=1&z=4625307&tr=default&stest=8c60556cf89b33ba7bd4df43d59beb13 CertificateIssuerLet's Encrypt Subjectlittlecdn.com Fingerprint42:A1:9F:5B:B7:1B:88:CB:90:58:FC:E9:D1:96:3C:48:38:66:3A:9A ValidityMon, 11 Mar 2024 02:10:57 GMT - Sun, 09 Jun 2024 02:10:56 GMT
File typeJavaScript source, ASCII text, with very long lines (3587), with no line terminators Hashb50c740c8a0ff172ea3f390540bdd221 19f7206378feec61fec7fbc3998794a096bf3687 af7c35134995c83a6c25247cf1f7654997b65ea193799cc2bdf092bdf3c94f32
GET /cd-templates-landings/notification-modals/macos/build/js/script.js?v=1558719747366 HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://oovaufty.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 04 May 2024 07:32:14 GMT
content-type: application/javascript
last-modified: Fri, 26 Jan 2024 09:39:02 GMT
vary: Accept-Encoding
etag: W/"65b37db6-df2"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 87e6cbb72ee8b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|