| descarga.ink/wp-content/themes/generatepress_child/style.css?ver=1710369755 |  107.189.31.193 | 200 OK | 143 B |
URL GET HTTP/3descarga.ink/wp-content/themes/generatepress_child/style.css?ver=1710369755 IP107.189.31.193:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectdescarga.ink Fingerprint00:8A:3C:75:4A:06:E2:E1:15:2B:DD:B2:C9:FE:12:58:03:16:FD:8B ValidityThu, 07 Mar 2024 20:22:33 GMT - Wed, 05 Jun 2024 20:22:32 GMT
File typeASCII text, with CRLF line terminators Hash492327f0d88ad2d055581d06770af6e2 5298ca7b326e86185ed8a29c66fd46ef356d6e84 f22691711c373a3444980cc32ab028fa86dad687c1b386e14847a47ce8b88e73
GET /wp-content/themes/generatepress_child/style.css?ver=1710369755 HTTP/1.1
Host: descarga.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/universodelamecatronica/548/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 19:43:59 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 22:42:35 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 143
date: Fri, 26 Apr 2024 19:43:59 GMT
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=157680000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
serversignature: Off
servertokens: Prod
x-permitted-cross-domain-policies: master-only
|
|
| descarga.ink/wp-includes/css/dist/block-library/style.min.css?ver=6.4.3 | 107.189.31.193 | 200 OK | 14 kB |
URL GET HTTP/3descarga.ink/wp-includes/css/dist/block-library/style.min.css?ver=6.4.3 IP107.189.31.193:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectdescarga.ink Fingerprint00:8A:3C:75:4A:06:E2:E1:15:2B:DD:B2:C9:FE:12:58:03:16:FD:8B ValidityThu, 07 Mar 2024 20:22:33 GMT - Wed, 05 Jun 2024 20:22:32 GMT
File typeASCII text, with very long lines (57196) Hash0234d0a7685aefa6fd06041fbd602928 cbcba60aa82286dd1f877cb8bd5b5cc047f82ce0 0085adfd2d08a45f62a06d8f3f969ddc4a94ebe8d226511db90aa038f11ed180
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.3 HTTP/1.1
Host: descarga.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/universodelamecatronica/548/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 19:43:59 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 22:42:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 13600
date: Fri, 26 Apr 2024 19:43:59 GMT
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=157680000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
serversignature: Off
servertokens: Prod
x-permitted-cross-domain-policies: master-only
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
|
|
| descarga.ink/wp-content/themes/generatepress/assets/css/main.min.css?ver=3.4.0 | 107.189.31.193 | 200 OK | 4.4 kB |
URL GET HTTP/3descarga.ink/wp-content/themes/generatepress/assets/css/main.min.css?ver=3.4.0 IP107.189.31.193:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectdescarga.ink Fingerprint00:8A:3C:75:4A:06:E2:E1:15:2B:DD:B2:C9:FE:12:58:03:16:FD:8B ValidityThu, 07 Mar 2024 20:22:33 GMT - Wed, 05 Jun 2024 20:22:32 GMT
File typeASCII text, with very long lines (19564), with no line terminators Hash867585929ee8b21749cdefa675d9aa11 afbd7bc967068d4e804641f4b1df78ab37417144 bc3b2c1e618a27e485095a3c0db20da5ba2fbfaf3b872ccd6ca35cb19eb37b5d
GET /wp-content/themes/generatepress/assets/css/main.min.css?ver=3.4.0 HTTP/1.1
Host: descarga.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/universodelamecatronica/548/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 19:43:59 GMT
content-type: text/css
last-modified: Wed, 13 Mar 2024 22:42:35 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4416
date: Fri, 26 Apr 2024 19:43:59 GMT
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=157680000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
serversignature: Off
servertokens: Prod
x-permitted-cross-domain-policies: master-only
|
|
| descarga.ink/wp-content/themes/generatepress/assets/js/navigation-search.min.js?ver=3.4.0 | 107.189.31.193 | 200 OK | 673 B |
URL GET HTTP/3descarga.ink/wp-content/themes/generatepress/assets/js/navigation-search.min.js?ver=3.4.0 IP107.189.31.193:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectdescarga.ink Fingerprint00:8A:3C:75:4A:06:E2:E1:15:2B:DD:B2:C9:FE:12:58:03:16:FD:8B ValidityThu, 07 Mar 2024 20:22:33 GMT - Wed, 05 Jun 2024 20:22:32 GMT
File typeJavaScript source, ASCII text, with very long lines (2141), with no line terminators Hashd803bf6d0044d45f7a6dda2aec3fd1db b21e343b695d6ccc8a9122036f6d3a04c304f79b 07b22512394b6fe16bd285c017731e78759c4cda65c809240e49def78fba53a7
GET /wp-content/themes/generatepress/assets/js/navigation-search.min.js?ver=3.4.0 HTTP/1.1
Host: descarga.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/universodelamecatronica/548/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 19:43:59 GMT
content-type: application/javascript
last-modified: Wed, 13 Mar 2024 22:42:35 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 673
date: Fri, 26 Apr 2024 19:43:59 GMT
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=157680000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
serversignature: Off
servertokens: Prod
x-permitted-cross-domain-policies: master-only
|
|
| my.rtmark.net/gid.js?userId=00804a18a75b4115e4cc351527a99e3d |  139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=00804a18a75b4115e4cc351527a99e3d IP139.45.195.8:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
Hash8c050ff4c51dcf7df654ef16a1fa9e4f 92cdda526872f7cedc4661c87a6ac18ec2c80c7a 8b7706c2d79067fa8d8a721bd7a7045e50f335b0e20438418415b19d6ddc03fe
GET /gid.js?userId=00804a18a75b4115e4cc351527a99e3d HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:43:59 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://descarga.ink
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=00804a18a75b4115e4cc351527a99e3d; expires=Sat, 26 Apr 2025 19:43:59 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| moonoafy.net/zone?pub=0&zone_id=7216393&is_mobile=false&domain=descarga.ink&var=&ymid=&var_3=&tg=0&sw=3.1.504 | 139.45.197.250 | 200 OK | 880 B |
URL GET HTTP/2moonoafy.net/zone?pub=0&zone_id=7216393&is_mobile=false&domain=descarga.ink&var=&ymid=&var_3=&tg=0&sw=3.1.504 IP139.45.197.250:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hashb7a568faa1b58cd17bb8f187ec5613cc a8146a22594118a5dfb5564480a79df7c2a00ecf 0b9b59591bc23c7ca0c92aa5d23435c95bb7ff6d5c8c7cc6b95639301ab94694
GET /zone?pub=0&zone_id=7216393&is_mobile=false&domain=descarga.ink&var=&ymid=&var_3=&tg=0&sw=3.1.504 HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://descarga.ink/
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:43:59 GMT
content-type: application/json; charset=utf-8
content-length: 880
x-trace-id: feabb6a6ffa9a8137fcea72bb275a269
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://descarga.ink
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.universodelamecatronica.com/wp-content/uploads/universo-de-la-mecatronica.png | 107.189.31.193 | 200 OK | 5.6 kB |
URL GET HTTP/2www.universodelamecatronica.com/wp-content/uploads/universo-de-la-mecatronica.png IP107.189.31.193:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectuniversodelamecatronica.com Fingerprint0F:48:50:A8:79:71:B6:FD:57:B7:69:72:0C:FE:4C:07:84:26:1C:D2 ValidityMon, 05 Feb 2024 01:33:14 GMT - Sun, 05 May 2024 01:33:13 GMT
File typePNG image data, 315 x 81, 8-bit colormap, non-interlaced Hash2aa3c9bbfcc2b7020e480b00ae89d5f1 3b4a15beaa62a0d63f8bc43e5eab62d340b37eed 22f6182cb5f89113ff69a611649f1d3a975bf1ce4bf0fa2302344b7d9705a0d3
GET /wp-content/uploads/universo-de-la-mecatronica.png HTTP/1.1
Host: www.universodelamecatronica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=10368000,public
expires: Sat, 24 Aug 2024 19:44:00 GMT
content-type: image/png
last-modified: Thu, 12 Oct 2023 01:32:32 GMT
accept-ranges: bytes
content-length: 5647
date: Fri, 26 Apr 2024 19:44:00 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=157680000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
serversignature: Off
servertokens: Prod
x-permitted-cross-domain-policies: master-only
content-security-policy: upgrade-insecure-requests;
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://descarga.ink/
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:00 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://descarga.ink
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 39 B |
IP139.45.197.250:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://descarga.ink/
Content-Type: application/json
Content-Length: 389
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:00 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 2c68d0eb97cb3055f9025942ee614e1b
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://descarga.ink
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| descarga.ink/sw.js | 107.189.31.193 | 200 OK | 2.3 kB |
IP107.189.31.193:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectdescarga.ink Fingerprint00:8A:3C:75:4A:06:E2:E1:15:2B:DD:B2:C9:FE:12:58:03:16:FD:8B ValidityThu, 07 Mar 2024 20:22:33 GMT - Wed, 05 Jun 2024 20:22:32 GMT
File typeJavaScript source, ASCII text, with very long lines (5237) Hashc0a7a0e63f1bd2d80e96b19150d59541 a0777d905d225321b96e9913ad2521c56d3d41d1 c42e4be1e96691b239f8274b556e9ab1a3e34eb01c3a059134ffd7a705ceedd3
GET /sw.js HTTP/1.1
Host: descarga.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://descarga.ink/universodelamecatronica/548/
DNT: 1
Connection: keep-alive
Cookie: prefetchAd_7216389=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 19:44:00 GMT
content-type: application/javascript
last-modified: Thu, 14 Mar 2024 00:32:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2321
date: Fri, 26 Apr 2024 19:44:00 GMT
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=157680000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
serversignature: Off
servertokens: Prod
x-permitted-cross-domain-policies: master-only
|
|
| cameesse.net/27/7552beb94fc0bdff7bbb33cad3d1ab0a | 139.45.197.242 | 200 OK | 131 kB |
URL GET HTTP/2cameesse.net/27/7552beb94fc0bdff7bbb33cad3d1ab0a IP139.45.197.242:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
File typegzip compressed data, max speed, from Unix Size131 kB (130593 bytes) Hash7357cc9142fd10b2b2aa6a64d7e8a7c4 03f82c4647fb9439da97b7138e74a2792e74cb5d 105a061090632104773356d53e4c10783d769310fe5f1a0e75e3a4f9f4a332de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /27/7552beb94fc0bdff7bbb33cad3d1ab0a HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Cookie: scm=1; OAID=04004a06f6a541c2ff3082986de5f415; oaidts=1714160639
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:43:59 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: eb493e0a04800572d0dc4a753807ad5f
cache-control: max-age:290304000, public
last-modified: Tue, 09 Apr 2024 03:16:58 GMT
expires: Tue, 09 May 2084 03:16:58 GMT
access-control-expose-headers: X-Sc
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tzegilo.com/stattag.js |  172.67.193.52 | 200 OK | 7.4 kB |
IP172.67.193.52:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerGoogle Trust Services LLC Subjecttzegilo.com Fingerprint28:2E:D0:DF:04:78:60:5A:D2:5B:1F:EA:59:80:9C:2F:89:C1:9D:D1 ValiditySat, 30 Mar 2024 15:54:48 GMT - Fri, 28 Jun 2024 15:54:47 GMT
File typeJavaScript source, ASCII text, with very long lines (18486) Hash70ebd404c2e1e7bad13998538b56887c 86e57af8ba3cfc2c004da3311835f6b54ba6d848 d71ea61938136a384e4c53c5a7a3c36e68fcc70a68bae691e270987d5d2eb11f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:43:59 GMT
content-type: application/javascript
last-modified: Wed, 07 Feb 2024 12:51:13 GMT
etag: W/"65c37cc1-4ac0"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 5641
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UgCzsJ2f1c5uKjVv1fIvwC%2F4WySa%2BfUmCCAdfzgZnzOIee5tJR1kx7sssD%2BgYNkpxvNV2bsQykSsXyUba6ygSxY8Dkx2RhKIwNw3n5Sbew9C0AOmRsd%2BSfBlERqlJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9109f6b3e56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| gishejuy.com/500/7216390?excludes=&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 0 B |
URL OPTIONS HTTP/2gishejuy.com/500/7216390?excludes=&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /500/7216390?excludes=&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://descarga.ink/
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:00 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://descarga.ink
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| cameesse.net/9?z=7216391&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=00804a18a75b4115e4cc351527a99e3d | 139.45.197.242 | 204 No Content | 0 B |
URL OPTIONS HTTP/2cameesse.net/9?z=7216391&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=00804a18a75b4115e4cc351527a99e3d IP139.45.197.242:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /9?z=7216391&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=00804a18a75b4115e4cc351527a99e3d HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://descarga.ink/
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 26 Apr 2024 19:44:00 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://descarga.ink
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| veepteero.com/?rb=YILXozqJPs2NgiLGts6iIip3VfSNQ6hXHXPW8hKaVTJ40TFp6cc2Xmr6YgC0d8Xr5yVwzR7CixnTmOATdtMRmW8syW0S-3zhBjOoJJSpY6KVnuZ7SWT0fxnysEe9N1sMditDzaMG7hsRVbm3KfQLLbBXOHZkBeRJ_BR0OtfW_DUYiY_9TOF5BgDK_A9U2TaDLHnDGBPIEuT2jO2sEr-mpxddroE22gwNKMmH-NwwIvAJhzH40CiMdVxXsLNadWQ6T6vDsSdfJFA%3D&request_ab2=0&zoneid=7216389&js_build=iclick-v1.785.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.785.0&navlng=en-US&pnt=0&pnrc=0&bs=bdf343d2-b778-43ba-8459-540b4a67c623&wasm=1&userId=00804a18a75b4115e4cc351527a99e3d&m=link | 139.45.197.242 | 200 OK | 2.3 kB |
URL GET HTTP/2veepteero.com/?rb=YILXozqJPs2NgiLGts6iIip3VfSNQ6hXHXPW8hKaVTJ40TFp6cc2Xmr6YgC0d8Xr5yVwzR7CixnTmOATdtMRmW8syW0S-3zhBjOoJJSpY6KVnuZ7SWT0fxnysEe9N1sMditDzaMG7hsRVbm3KfQLLbBXOHZkBeRJ_BR0OtfW_DUYiY_9TOF5BgDK_A9U2TaDLHnDGBPIEuT2jO2sEr-mpxddroE22gwNKMmH-NwwIvAJhzH40CiMdVxXsLNadWQ6T6vDsSdfJFA%3D&request_ab2=0&zoneid=7216389&js_build=iclick-v1.785.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.785.0&navlng=en-US&pnt=0&pnrc=0&bs=bdf343d2-b778-43ba-8459-540b4a67c623&wasm=1&userId=00804a18a75b4115e4cc351527a99e3d&m=link IP139.45.197.242:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectveepteero.com Fingerprint13:68:56:48:EC:67:A6:93:BE:E0:36:BC:FA:04:75:6D:6E:D2:C1:91 ValiditySat, 23 Mar 2024 05:18:36 GMT - Fri, 21 Jun 2024 05:18:35 GMT
File typegzip compressed data, max speed, from Unix Hash36a602caff7a40d47053abd14bf158ce 6830c6f417ed08d2f581428f5b3da32161d7f5f8 6244bec8409bc26a81bb586635f7bd3e6919dc64d7c668af33da6a0d24eec329
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?rb=YILXozqJPs2NgiLGts6iIip3VfSNQ6hXHXPW8hKaVTJ40TFp6cc2Xmr6YgC0d8Xr5yVwzR7CixnTmOATdtMRmW8syW0S-3zhBjOoJJSpY6KVnuZ7SWT0fxnysEe9N1sMditDzaMG7hsRVbm3KfQLLbBXOHZkBeRJ_BR0OtfW_DUYiY_9TOF5BgDK_A9U2TaDLHnDGBPIEuT2jO2sEr-mpxddroE22gwNKMmH-NwwIvAJhzH40CiMdVxXsLNadWQ6T6vDsSdfJFA%3D&request_ab2=0&zoneid=7216389&js_build=iclick-v1.785.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.785.0&navlng=en-US&pnt=0&pnrc=0&bs=bdf343d2-b778-43ba-8459-540b4a67c623&wasm=1&userId=00804a18a75b4115e4cc351527a99e3d&m=link HTTP/1.1
Host: veepteero.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://descarga.ink/
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:43:59 GMT
content-type: application/json
x-trace-id: 6e70460739006f494a946b07b1e83da0
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://descarga.ink
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=00804a18a75b4115e4cc351527a99e3d; expires=Sat, 26 Apr 2025 19:43:59 GMT; path=/; secure; SameSite=None
oaidts=1714160639; expires=Sat, 26 Apr 2025 19:43:59 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Fri, 03 May 2024 19:43:59 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://descarga.ink/
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:00 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://descarga.ink
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| aistekso.net/500/7216392?excludes=&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.244 | 200 OK | 0 B |
URL GET HTTP/2aistekso.net/500/7216392?excludes=&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.244:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectaistekso.net Fingerprint3E:A5:CE:35:F4:D9:45:6B:A1:3B:2E:9C:B3:9E:78:4D:8A:4B:51:BB ValiditySun, 24 Mar 2024 05:08:27 GMT - Sat, 22 Jun 2024 05:08:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /500/7216392?excludes=&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://descarga.ink/
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:00 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://descarga.ink
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 39 B |
IP139.45.197.250:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://descarga.ink/
Content-Type: application/json
Content-Length: 398
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:00 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: c122bd67d52414e6a036a3f19987134a
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://descarga.ink
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| cameesse.net/11?rnd=1303159691&z=7216391&b=15540606&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=Fs6gDZOnIk_Rn5Z9tKz8vvX_zKOy9gKsqrmsze79fldgIHb9Xpm2je0dZDcEdSSxSbQ9XJrTeRvFf6fzMKj3jS8bqmLefXaV1H0bqJOyG-C3c7tduDimsMJuQH91LoHm84Yz0WNp2vOAJirGK95FaXvp27qwvzPJryeg-9yKE1R-Jjjr_-RL-1VYqGfI9XVVApl-v_O7axbUvdP44jlyhVDMkApMa9-6uxSerLtj9tkeWOMtj3oxNAVxqScjqnW9U2wrqtFhEr7FUMT48LU2e31mzYyyfsjaIaZ5Dg-EhudW3EeQb70W9eKmLl6imBxO0hixA3GHeusB26GexdRbjP_rur5H4udqBoLhasyYA-hkr5kpWs8bcKFBW86znOXdkvphyddYitBTLi_3KnvOcGkdCbxNhSB5DE5tjBlfntj_LH_b_8D-Gbgj54RVwZRh9ej5oPtLdpSbMBEebXdKjc7QjHPYzrRfMlILtK2gMM8jpI6I3GxOD1R-AqLfPDq9l0MMOeY8DDTrbmo_tGvLAP1t3YxIKeL4JOXSJ6gtuiuYHPmeFNz7fLOFfEBLsEWq5hye5m_bFJf30A9lGGPPE-TPTvPkse3uYq1o-iYvs98gTLx8i0kXf_a-RbmhAPkK&ruid=b4e09989-09c7-4c5b-8bbc-0279d43aa0f7&subid=807810880285708288&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=165 | 139.45.197.242 | 200 OK | 0 B |
URL GET HTTP/2cameesse.net/11?rnd=1303159691&z=7216391&b=15540606&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=Fs6gDZOnIk_Rn5Z9tKz8vvX_zKOy9gKsqrmsze79fldgIHb9Xpm2je0dZDcEdSSxSbQ9XJrTeRvFf6fzMKj3jS8bqmLefXaV1H0bqJOyG-C3c7tduDimsMJuQH91LoHm84Yz0WNp2vOAJirGK95FaXvp27qwvzPJryeg-9yKE1R-Jjjr_-RL-1VYqGfI9XVVApl-v_O7axbUvdP44jlyhVDMkApMa9-6uxSerLtj9tkeWOMtj3oxNAVxqScjqnW9U2wrqtFhEr7FUMT48LU2e31mzYyyfsjaIaZ5Dg-EhudW3EeQb70W9eKmLl6imBxO0hixA3GHeusB26GexdRbjP_rur5H4udqBoLhasyYA-hkr5kpWs8bcKFBW86znOXdkvphyddYitBTLi_3KnvOcGkdCbxNhSB5DE5tjBlfntj_LH_b_8D-Gbgj54RVwZRh9ej5oPtLdpSbMBEebXdKjc7QjHPYzrRfMlILtK2gMM8jpI6I3GxOD1R-AqLfPDq9l0MMOeY8DDTrbmo_tGvLAP1t3YxIKeL4JOXSJ6gtuiuYHPmeFNz7fLOFfEBLsEWq5hye5m_bFJf30A9lGGPPE-TPTvPkse3uYq1o-iYvs98gTLx8i0kXf_a-RbmhAPkK&ruid=b4e09989-09c7-4c5b-8bbc-0279d43aa0f7&subid=807810880285708288&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=165 IP139.45.197.242:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /11?rnd=1303159691&z=7216391&b=15540606&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=Fs6gDZOnIk_Rn5Z9tKz8vvX_zKOy9gKsqrmsze79fldgIHb9Xpm2je0dZDcEdSSxSbQ9XJrTeRvFf6fzMKj3jS8bqmLefXaV1H0bqJOyG-C3c7tduDimsMJuQH91LoHm84Yz0WNp2vOAJirGK95FaXvp27qwvzPJryeg-9yKE1R-Jjjr_-RL-1VYqGfI9XVVApl-v_O7axbUvdP44jlyhVDMkApMa9-6uxSerLtj9tkeWOMtj3oxNAVxqScjqnW9U2wrqtFhEr7FUMT48LU2e31mzYyyfsjaIaZ5Dg-EhudW3EeQb70W9eKmLl6imBxO0hixA3GHeusB26GexdRbjP_rur5H4udqBoLhasyYA-hkr5kpWs8bcKFBW86znOXdkvphyddYitBTLi_3KnvOcGkdCbxNhSB5DE5tjBlfntj_LH_b_8D-Gbgj54RVwZRh9ej5oPtLdpSbMBEebXdKjc7QjHPYzrRfMlILtK2gMM8jpI6I3GxOD1R-AqLfPDq9l0MMOeY8DDTrbmo_tGvLAP1t3YxIKeL4JOXSJ6gtuiuYHPmeFNz7fLOFfEBLsEWq5hye5m_bFJf30A9lGGPPE-TPTvPkse3uYq1o-iYvs98gTLx8i0kXf_a-RbmhAPkK&ruid=b4e09989-09c7-4c5b-8bbc-0279d43aa0f7&subid=807810880285708288&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=165 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Cookie: scm=1; OAID=00804a18a75b4115e4cc351527a99e3d; oaidts=1714160639
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:00 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://descarga.ink
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 503e2b1b6b13f94d1bd4df402a58e19e
access-control-expose-headers: X-Sc
set-cookie: OAID=00804a18a75b4115e4cc351527a99e3d; expires=Sat, 26 Apr 2025 19:44:00 GMT; secure; SameSite=None
oaidts=1714160639; expires=Sat, 26 Apr 2025 19:44:00 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| gishejuy.com/500/7216390?excludes=&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 1.4 kB |
URL OPTIONS HTTP/2gishejuy.com/500/7216390?excludes=&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
Hasha6f1d9a7b2a33ca0c048b4fe33aca489 f52a37958e7d04b23b0a85270c01b1086e2bd371 22b956dbaf1a996287d65617f8ba4b6289a6213ef3db89b2cbb3405cf228c671
GET /500/7216390?excludes=&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Cookie: OAID=03004aa69bd74cc9ea55be5a4a8a2b39
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:00 GMT
content-type: application/javascript
x-trace-id: d71926337b4eca2336565488cd69b450
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: https://descarga.ink
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=00804a18a75b4115e4cc351527a99e3d; expires=Sat, 26 Apr 2025 19:44:00 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg |  104.22.33.172 | 200 OK | 17 kB |
URL GET HTTP/2offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg IP104.22.33.172:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerGoogle Trust Services LLC Subjectofferimage.com Fingerprint5C:87:DE:3A:1B:66:15:11:B1:75:B6:AC:AF:F9:A6:EF:5E:7F:80:72 ValidityFri, 05 Apr 2024 23:50:04 GMT - Thu, 04 Jul 2024 23:50:03 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hash9c6355bcf96815c755fbba83f9fd8f64 ce698b45fb51ef1494f80f432b7aff0985247724 2cd74e866757767cd5c88d066a0bc057aded1e6c07171e091dd87f56ffd4a906
GET /www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:44:00 GMT
content-type: image/jpeg
content-length: 17173
cache-control: max-age=86400
cf-bgj: h2pri
etag: "642af881-4315"
expires: Sat, 27 Apr 2024 13:29:13 GMT
last-modified: Mon, 03 Apr 2023 16:02:09 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 22487
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a910a2ff201d12-CPH
X-Firefox-Spdy: h2
|
|
| aistekso.net/500/7216392?excludes=&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.244 | 200 OK | 207 kB |
URL GET HTTP/2aistekso.net/500/7216392?excludes=&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.244:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectaistekso.net Fingerprint3E:A5:CE:35:F4:D9:45:6B:A1:3B:2E:9C:B3:9E:78:4D:8A:4B:51:BB ValiditySun, 24 Mar 2024 05:08:27 GMT - Sat, 22 Jun 2024 05:08:26 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (1756) Size207 kB (207195 bytes) Hash1798240331bb6de3b27d8f4313a11b31 6bf2bf52ad2cb55181ca29d9e34f296d70b62905 0f8dad8e989b30c6a8eb6b406a192c20d80a94d670b4104bb149cd828db80fc9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /500/7216392?excludes=&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Cookie: OAID=03004a15d462434ee3798caddac4526a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:00 GMT
content-type: application/javascript
x-trace-id: 81beb0834754eabb0040fbdf359d4315
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://descarga.ink
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=00804a18a75b4115e4cc351527a99e3d; expires=Sat, 26 Apr 2025 19:44:00 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| descarga.ink/wp-content/uploads/2023/03/favicon.png | 107.189.31.193 | 200 OK | 5.0 kB |
URL GET HTTP/3descarga.ink/wp-content/uploads/2023/03/favicon.png IP107.189.31.193:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectdescarga.ink Fingerprint00:8A:3C:75:4A:06:E2:E1:15:2B:DD:B2:C9:FE:12:58:03:16:FD:8B ValidityThu, 07 Mar 2024 20:22:33 GMT - Wed, 05 Jun 2024 20:22:32 GMT
File typePNG image data, 128 x 128, 8-bit colormap, non-interlaced Hash05a51b2feeeef41cbaeb8d6ef5762b75 89b8a5810e315880625556b6973b0c30b4056e4e 1c0043e04e381e96c509d617f9bfe79260575d2e52a23a3047ca756c2a50e3e4
GET /wp-content/uploads/2023/03/favicon.png HTTP/1.1
Host: descarga.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/universodelamecatronica/548/
Cookie: prefetchAd_7216389=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 19:44:00 GMT
content-type: image/png
last-modified: Wed, 13 Mar 2024 22:42:35 GMT
accept-ranges: bytes
content-length: 4957
date: Fri, 26 Apr 2024 19:44:00 GMT
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=157680000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
serversignature: Off
servertokens: Prod
x-permitted-cross-domain-policies: master-only
|
|
| descarga.ink/wp-content/uploads/2023/03/favicon-uni.png | 107.189.31.193 | 200 OK | 415 B |
URL GET HTTP/3descarga.ink/wp-content/uploads/2023/03/favicon-uni.png IP107.189.31.193:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectdescarga.ink Fingerprint00:8A:3C:75:4A:06:E2:E1:15:2B:DD:B2:C9:FE:12:58:03:16:FD:8B ValidityThu, 07 Mar 2024 20:22:33 GMT - Wed, 05 Jun 2024 20:22:32 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash3b6bb0ee1408490a20c0043beb8eb712 98e80e53e788357de86480c5435cf822a33d4217 c135969b67154087a3f293cbf8101b5ce998e78a6f295ec6fd9945ac5b9c4250
GET /wp-content/uploads/2023/03/favicon-uni.png HTTP/1.1
Host: descarga.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/universodelamecatronica/548/
Cookie: prefetchAd_7216389=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Fri, 03 May 2024 19:44:00 GMT
content-type: image/png
last-modified: Wed, 13 Mar 2024 22:42:35 GMT
accept-ranges: bytes
content-length: 415
date: Fri, 26 Apr 2024 19:44:00 GMT
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=157680000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
serversignature: Off
servertokens: Prod
x-permitted-cross-domain-policies: master-only
|
|
| b6f71hwqomrafu683pz507uj2g.hop.clickbank.net/?tid=go1&clickid=807810880285708288 | 54.185.206.10 | 307 Temporary Redirect | 0 B |
URL GET HTTP/2b6f71hwqomrafu683pz507uj2g.hop.clickbank.net/?tid=go1&clickid=807810880285708288 IP54.185.206.10:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerAmazon Subject*.clickbank.net FingerprintF6:83:80:57:29:2F:05:CA:22:F9:4C:9D:38:00:09:58:06:FC:7F:99 ValiditySat, 27 Jan 2024 00:00:00 GMT - Mon, 24 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?tid=go1&clickid=807810880285708288 HTTP/1.1
Host: b6f71hwqomrafu683pz507uj2g.hop.clickbank.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Fri, 26 Apr 2024 19:44:01 GMT
content-length: 0
location: http://futmillionaire.com?hopId=c0d2ed14-9b0a-4c08-9a44-4822aea12662&clickid=807810880285708288
accept-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Bitness, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-frame-options: DENY
x-xss-protection: 1 ; mode=block
referrer-policy: no-referrer
set-cookie: q=01.E1CF15A3C414610AC0AE6066FE01003CD6FC3795637D74735D06A940ABE59933EFD18BC6B7A623911D6777719E203830100FB40A; Path=/; Domain=.clickbank.net; Max-Age=31536000; Expires=Sat, 26 Apr 2025 19:44:01 GMT
server-timing: traceparent;desc="00-0c17b2be1a3331e6011e26dc48af5d08-b27e4bfbded4c4b7-01"
access-control-expose-headers: Server-Timing
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://descarga.ink/
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:01 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://descarga.ink
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 39 B |
IP139.45.197.250:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://descarga.ink/
Content-Type: application/json
Content-Length: 725
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:01 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 47fb6c98cff281b7b782542e8e57704f
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://descarga.ink
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| gishejuy.com/impression/dMtpVYSYGUEVOF1W6HTyRxI0ctuL_k0sDrluFiaBjDxO2WD__yVhHDUVNCXTkjguSkAvYvvHoOGuk9V3hKxrDAK6yZ7meiijLNBW9haZ19OE8hG5mHaQq0-4lAlWRvxbbCWeV987xVeMfpnKNNIxervtWNjZ9az73k_aJVNcFRENyZCSCwi1YEqM_vnQtMl1cE34B1NPVowg6TDGHDJ8JIlPq9L4b5Cq4S3cmi7QtjqJ9EmOwa2wubuhUm-pg0w8Epo-1vJXfa_b7bhJA7oShWyXyhQjih1FA4rJG1H0B2aXgPIVMw7fpagbp3_jqhL1J5eeXYx-EiZ-1dPmxQ04oyXuVx-pZQQ1VqDdzS8ZICBvVsD-5wmaNwpRnaWs8lXQG5DLBsZZwFbsLg_Qf5n9xUwO99j_vhNgkTEBij6rbXNRdzC51uPvxMJewXndWDAGQzPOwY3Kh2dFg7PiJVzU28JiSoDLcYcjQk7U_f-EAA8B9ms57-B4srjmpNHS0xk-wV3dFmjF9cr9dKHfooPvQX4EC010AHauAyIg_X6dkSRkyq8JzqFBpOnPeu4RsNzTOSa18IMO7hS6pFM3jYRDa4jJnC2WMVm02qJq96pkGPxXMyMtV65LreUPqyhmPY5QMW203YCjvN4jtWAKEkFK-7gpbDu-6av0IbaQO1dUl1wz27L2SF__-IQVrHTixxMZPLNdZXLuHp6X0E9RuTLzkw5jeYuahW_Y-HObpmSTkAxLd5eyser19Fy1NzMXdRTBGWGy_raWA-pTLvG6MvQm7V8d3zdUyMmnCxpCCyrFNhscKf2Z6sa3GsuZC-c=?_z=7216390&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 43 B |
URL GET HTTP/2gishejuy.com/impression/dMtpVYSYGUEVOF1W6HTyRxI0ctuL_k0sDrluFiaBjDxO2WD__yVhHDUVNCXTkjguSkAvYvvHoOGuk9V3hKxrDAK6yZ7meiijLNBW9haZ19OE8hG5mHaQq0-4lAlWRvxbbCWeV987xVeMfpnKNNIxervtWNjZ9az73k_aJVNcFRENyZCSCwi1YEqM_vnQtMl1cE34B1NPVowg6TDGHDJ8JIlPq9L4b5Cq4S3cmi7QtjqJ9EmOwa2wubuhUm-pg0w8Epo-1vJXfa_b7bhJA7oShWyXyhQjih1FA4rJG1H0B2aXgPIVMw7fpagbp3_jqhL1J5eeXYx-EiZ-1dPmxQ04oyXuVx-pZQQ1VqDdzS8ZICBvVsD-5wmaNwpRnaWs8lXQG5DLBsZZwFbsLg_Qf5n9xUwO99j_vhNgkTEBij6rbXNRdzC51uPvxMJewXndWDAGQzPOwY3Kh2dFg7PiJVzU28JiSoDLcYcjQk7U_f-EAA8B9ms57-B4srjmpNHS0xk-wV3dFmjF9cr9dKHfooPvQX4EC010AHauAyIg_X6dkSRkyq8JzqFBpOnPeu4RsNzTOSa18IMO7hS6pFM3jYRDa4jJnC2WMVm02qJq96pkGPxXMyMtV65LreUPqyhmPY5QMW203YCjvN4jtWAKEkFK-7gpbDu-6av0IbaQO1dUl1wz27L2SF__-IQVrHTixxMZPLNdZXLuHp6X0E9RuTLzkw5jeYuahW_Y-HObpmSTkAxLd5eyser19Fy1NzMXdRTBGWGy_raWA-pTLvG6MvQm7V8d3zdUyMmnCxpCCyrFNhscKf2Z6sa3GsuZC-c=?_z=7216390&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /impression/dMtpVYSYGUEVOF1W6HTyRxI0ctuL_k0sDrluFiaBjDxO2WD__yVhHDUVNCXTkjguSkAvYvvHoOGuk9V3hKxrDAK6yZ7meiijLNBW9haZ19OE8hG5mHaQq0-4lAlWRvxbbCWeV987xVeMfpnKNNIxervtWNjZ9az73k_aJVNcFRENyZCSCwi1YEqM_vnQtMl1cE34B1NPVowg6TDGHDJ8JIlPq9L4b5Cq4S3cmi7QtjqJ9EmOwa2wubuhUm-pg0w8Epo-1vJXfa_b7bhJA7oShWyXyhQjih1FA4rJG1H0B2aXgPIVMw7fpagbp3_jqhL1J5eeXYx-EiZ-1dPmxQ04oyXuVx-pZQQ1VqDdzS8ZICBvVsD-5wmaNwpRnaWs8lXQG5DLBsZZwFbsLg_Qf5n9xUwO99j_vhNgkTEBij6rbXNRdzC51uPvxMJewXndWDAGQzPOwY3Kh2dFg7PiJVzU28JiSoDLcYcjQk7U_f-EAA8B9ms57-B4srjmpNHS0xk-wV3dFmjF9cr9dKHfooPvQX4EC010AHauAyIg_X6dkSRkyq8JzqFBpOnPeu4RsNzTOSa18IMO7hS6pFM3jYRDa4jJnC2WMVm02qJq96pkGPxXMyMtV65LreUPqyhmPY5QMW203YCjvN4jtWAKEkFK-7gpbDu-6av0IbaQO1dUl1wz27L2SF__-IQVrHTixxMZPLNdZXLuHp6X0E9RuTLzkw5jeYuahW_Y-HObpmSTkAxLd5eyser19Fy1NzMXdRTBGWGy_raWA-pTLvG6MvQm7V8d3zdUyMmnCxpCCyrFNhscKf2Z6sa3GsuZC-c=?_z=7216390&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Cookie: OAID=00804a18a75b4115e4cc351527a99e3d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:05 GMT
content-type: image/gif
content-length: 43
x-trace-id: f8947941d7a3964f003e808c349562d3
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| aistekso.net/impression/zCMlB3HI4P3wl0eT_jj6lJ_UpSsGxoH0sguQxgcg46MY9R_Bh_QlE_o5zfvQxHsH6KeN8jvEEZjFD-vjloHw8pmWcpUyGG9HBaKzlRrvdNPehf8pXcJ7PAIgKi_XZb6euWEe_sK2EyC_id50jgPF1awHyhIASPA1Bq2yik8cpovTaNtmGKArFp1OOOmCtUMJuPSRcOeCqtst6zqnNEGgYU8gz9y80F8SSC3A6g3f_HCSb76qAjjJ0RJC3urSmRf8eL_bFkKaZCHKQN7e4KXdPvrk1Rp2UCBJXuNKhH5rdmTdDpulXzSoRVA2Qj_FXZxt0K6Na1oCybIJ3z9qf35SbFfce6WC_gpl71e7KGre2byZbzaRnW6KD4oW7Q2IuJzJ5NIFNQ3yJoG4kGh_3Agq1WsHe8OdYCsq2RTNSRkxsvdEua9Wo4peNMmAATFiPxjHbv6QN2iCvkEVignV4lBjVLha95X26WTTpvMyDNpg8RC_NyEzr6ClJ49tVDUBGhvPi0j41qKqgtmgvLRVCn-T87S5LMRHfPfCjJC3SmeFKDtAq4N8BQiw2jN05Klh_DKNAc-nlhRmhTzjfKBKfRIgDlrEpr5ZCpkCAjux0k54Tefw0zoCtj7R5wJH1NRwCycLD2oxhfxEZPHXL63Axisf9oRm3YYt4oRwpM6nWhJiAuwE7lHrK4gcga-tMj9_gDoTPJSUNra1uH-yYSWNUzDpE3tF3TyafWA5gjJIFEyzBmx0S_0PPPmn8Pp_BuSTHn06J5Vhse_fXga5hjpDQi6-SIMTmq5eAXaG5pVwgsMiJp0pAukMyuM_knkIvPY=?_z=7216392&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.244 | 200 OK | 43 B |
URL GET HTTP/2aistekso.net/impression/zCMlB3HI4P3wl0eT_jj6lJ_UpSsGxoH0sguQxgcg46MY9R_Bh_QlE_o5zfvQxHsH6KeN8jvEEZjFD-vjloHw8pmWcpUyGG9HBaKzlRrvdNPehf8pXcJ7PAIgKi_XZb6euWEe_sK2EyC_id50jgPF1awHyhIASPA1Bq2yik8cpovTaNtmGKArFp1OOOmCtUMJuPSRcOeCqtst6zqnNEGgYU8gz9y80F8SSC3A6g3f_HCSb76qAjjJ0RJC3urSmRf8eL_bFkKaZCHKQN7e4KXdPvrk1Rp2UCBJXuNKhH5rdmTdDpulXzSoRVA2Qj_FXZxt0K6Na1oCybIJ3z9qf35SbFfce6WC_gpl71e7KGre2byZbzaRnW6KD4oW7Q2IuJzJ5NIFNQ3yJoG4kGh_3Agq1WsHe8OdYCsq2RTNSRkxsvdEua9Wo4peNMmAATFiPxjHbv6QN2iCvkEVignV4lBjVLha95X26WTTpvMyDNpg8RC_NyEzr6ClJ49tVDUBGhvPi0j41qKqgtmgvLRVCn-T87S5LMRHfPfCjJC3SmeFKDtAq4N8BQiw2jN05Klh_DKNAc-nlhRmhTzjfKBKfRIgDlrEpr5ZCpkCAjux0k54Tefw0zoCtj7R5wJH1NRwCycLD2oxhfxEZPHXL63Axisf9oRm3YYt4oRwpM6nWhJiAuwE7lHrK4gcga-tMj9_gDoTPJSUNra1uH-yYSWNUzDpE3tF3TyafWA5gjJIFEyzBmx0S_0PPPmn8Pp_BuSTHn06J5Vhse_fXga5hjpDQi6-SIMTmq5eAXaG5pVwgsMiJp0pAukMyuM_knkIvPY=?_z=7216392&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.244:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectaistekso.net Fingerprint3E:A5:CE:35:F4:D9:45:6B:A1:3B:2E:9C:B3:9E:78:4D:8A:4B:51:BB ValiditySun, 24 Mar 2024 05:08:27 GMT - Sat, 22 Jun 2024 05:08:26 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impression/zCMlB3HI4P3wl0eT_jj6lJ_UpSsGxoH0sguQxgcg46MY9R_Bh_QlE_o5zfvQxHsH6KeN8jvEEZjFD-vjloHw8pmWcpUyGG9HBaKzlRrvdNPehf8pXcJ7PAIgKi_XZb6euWEe_sK2EyC_id50jgPF1awHyhIASPA1Bq2yik8cpovTaNtmGKArFp1OOOmCtUMJuPSRcOeCqtst6zqnNEGgYU8gz9y80F8SSC3A6g3f_HCSb76qAjjJ0RJC3urSmRf8eL_bFkKaZCHKQN7e4KXdPvrk1Rp2UCBJXuNKhH5rdmTdDpulXzSoRVA2Qj_FXZxt0K6Na1oCybIJ3z9qf35SbFfce6WC_gpl71e7KGre2byZbzaRnW6KD4oW7Q2IuJzJ5NIFNQ3yJoG4kGh_3Agq1WsHe8OdYCsq2RTNSRkxsvdEua9Wo4peNMmAATFiPxjHbv6QN2iCvkEVignV4lBjVLha95X26WTTpvMyDNpg8RC_NyEzr6ClJ49tVDUBGhvPi0j41qKqgtmgvLRVCn-T87S5LMRHfPfCjJC3SmeFKDtAq4N8BQiw2jN05Klh_DKNAc-nlhRmhTzjfKBKfRIgDlrEpr5ZCpkCAjux0k54Tefw0zoCtj7R5wJH1NRwCycLD2oxhfxEZPHXL63Axisf9oRm3YYt4oRwpM6nWhJiAuwE7lHrK4gcga-tMj9_gDoTPJSUNra1uH-yYSWNUzDpE3tF3TyafWA5gjJIFEyzBmx0S_0PPPmn8Pp_BuSTHn06J5Vhse_fXga5hjpDQi6-SIMTmq5eAXaG5pVwgsMiJp0pAukMyuM_knkIvPY=?_z=7216392&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Cookie: OAID=00804a18a75b4115e4cc351527a99e3d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:05 GMT
content-type: image/gif
content-length: 43
x-trace-id: 07f1838303995a99fa05303fea9dee78
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| gishejuy.com/500/7216390?excludes=19845928&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 0 B |
URL GET HTTP/2gishejuy.com/500/7216390?excludes=19845928&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /500/7216390?excludes=19845928&oaid=00804a18a75b4115e4cc351527a99e3d&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=3&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://descarga.ink/
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:05 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://descarga.ink
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg | 104.22.33.172 | 200 OK | 17 kB |
URL GET HTTP/2offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg IP104.22.33.172:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerGoogle Trust Services LLC Subjectofferimage.com Fingerprint5C:87:DE:3A:1B:66:15:11:B1:75:B6:AC:AF:F9:A6:EF:5E:7F:80:72 ValidityFri, 05 Apr 2024 23:50:04 GMT - Thu, 04 Jul 2024 23:50:03 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hash9c6355bcf96815c755fbba83f9fd8f64 ce698b45fb51ef1494f80f432b7aff0985247724 2cd74e866757767cd5c88d066a0bc057aded1e6c07171e091dd87f56ffd4a906
GET /www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:44:05 GMT
content-type: image/jpeg
content-length: 17173
cache-control: max-age=86400
cf-bgj: h2pri
etag: "642af881-4315"
expires: Sat, 27 Apr 2024 13:29:13 GMT
last-modified: Mon, 03 Apr 2023 16:02:09 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 22492
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a910c0cebb1d12-CPH
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/8fe3c6098f18e4106a620cf6727dd52b.png | 104.22.33.172 | 200 OK | 71 kB |
URL GET HTTP/2offerimage.com/www/images/8fe3c6098f18e4106a620cf6727dd52b.png IP104.22.33.172:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerGoogle Trust Services LLC Subjectofferimage.com Fingerprint5C:87:DE:3A:1B:66:15:11:B1:75:B6:AC:AF:F9:A6:EF:5E:7F:80:72 ValidityFri, 05 Apr 2024 23:50:04 GMT - Thu, 04 Jul 2024 23:50:03 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash8fe3c6098f18e4106a620cf6727dd52b 9f43a274821bff164f83166e89db3b5559b8d88f a8487a46e41b96730b6c16da957ff9260e0a4f7123dd491f2674a5299a31da2e
GET /www/images/8fe3c6098f18e4106a620cf6727dd52b.png HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:44:05 GMT
content-type: image/png
content-length: 70563
last-modified: Wed, 20 Sep 2023 16:50:05 GMT
etag: "650b22bd-113a3"
expires: Sat, 27 Apr 2024 13:07:42 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: HIT
age: 23783
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a910c10f241d12-CPH
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg | 104.22.33.172 | 200 OK | 17 kB |
URL GET HTTP/2offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg IP104.22.33.172:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerGoogle Trust Services LLC Subjectofferimage.com Fingerprint5C:87:DE:3A:1B:66:15:11:B1:75:B6:AC:AF:F9:A6:EF:5E:7F:80:72 ValidityFri, 05 Apr 2024 23:50:04 GMT - Thu, 04 Jul 2024 23:50:03 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hash9c6355bcf96815c755fbba83f9fd8f64 ce698b45fb51ef1494f80f432b7aff0985247724 2cd74e866757767cd5c88d066a0bc057aded1e6c07171e091dd87f56ffd4a906
GET /www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:44:05 GMT
content-type: image/jpeg
content-length: 17173
cache-control: max-age=86400
cf-bgj: h2pri
etag: "642af881-4315"
expires: Sat, 27 Apr 2024 13:29:13 GMT
last-modified: Mon, 03 Apr 2023 16:02:09 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 22492
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a910c289551d12-CPH
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700 | 142.250.74.106 | | 17 kB |
URL fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700 IP142.250.74.106:0
File typegzip compressed data, max compression Hash2b020d5dab9b008f60245d3651af95be a25899b31f692ed0da036900f552b4e663ed954e a554b8ff3024b4ed27f37d9724612a0b4c973358f96179ab7851869614d8f80f
GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 19:44:05 GMT
date: Fri, 26 Apr 2024 19:44:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:02:10 GMT
expires: Sat, 26 Apr 2025 06:02:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 49315
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gishejuy.com/impression/F9ucbuCNbxylvZXsYPWcCMEYiq7TGTugaIATUpUyxAAqVYobU8nqoGOB9jdq4kYcfc8ytDXHQPY9FvUSGPthNahF1RW43z03vOjolAq3HhIbqspIjw-CWPkrDuyUu-FBrc5mA-05OFon9xNHLsz4u2E7amZmPdcFR10U_sz1Th1DgCrWpe7CWY4E1Z9VgYC8X4eJvaq_NOn2NTToSjus3chnmrK3ATvsTENzY1-Obsf6ROyFObNbGKvFBlWiFZDkLGSkIhsFnwOTcN8FZ9t_IG5I1NCpSaM74WTY_eu_kVcnmcaxgRkwj3SrO9PQyWIH_An2rmIojMivR4IaagBgFiV6DHAtODfFJa6zqGzoY-EV8wP4jUS-7hFsZ63AvJIpFRTGd-1BVsTIKuqXeFowQKezWj3TfOZpJXWCO437iccuyiHzaiUhW8v3DBBGusPFhQEAfMMltnRkaIb0XqnYojs5iWxy6Qy-sGUMIMa-9FYFBZdKWFqWQadtABSrR_E20nYn5BgBflNjH6gWIz7ke0Wp16Bys1ZTqGsCO6MlL0GW8g0r1E2TnxMZ7Fv9KTVFQqh_eOkBy0MdI8Ro6hUjrdGLkNAGRdnucTjHrOUQ9Gnf7mC232Q9xbld2Ui4kX8-0n2uJZPIKodq0v7ko1pYzeu1k7mnrJ3fwhlwogNYo00kllWy5Z8v4p32BEIJ8EIPzBue8SCqRiFu3xqrPuPc2hOJnHJ4c4P0YNCQ6zkdWbXVWxHXgyxf5tVjZ2MukIHxdptNSxeyjOF3HJebqHzy-tYAt2gJdF5UVSi9yY3jgqprGRR4il4y4i36hSA=?_z=7216390&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 43 B |
URL GET HTTP/2gishejuy.com/impression/F9ucbuCNbxylvZXsYPWcCMEYiq7TGTugaIATUpUyxAAqVYobU8nqoGOB9jdq4kYcfc8ytDXHQPY9FvUSGPthNahF1RW43z03vOjolAq3HhIbqspIjw-CWPkrDuyUu-FBrc5mA-05OFon9xNHLsz4u2E7amZmPdcFR10U_sz1Th1DgCrWpe7CWY4E1Z9VgYC8X4eJvaq_NOn2NTToSjus3chnmrK3ATvsTENzY1-Obsf6ROyFObNbGKvFBlWiFZDkLGSkIhsFnwOTcN8FZ9t_IG5I1NCpSaM74WTY_eu_kVcnmcaxgRkwj3SrO9PQyWIH_An2rmIojMivR4IaagBgFiV6DHAtODfFJa6zqGzoY-EV8wP4jUS-7hFsZ63AvJIpFRTGd-1BVsTIKuqXeFowQKezWj3TfOZpJXWCO437iccuyiHzaiUhW8v3DBBGusPFhQEAfMMltnRkaIb0XqnYojs5iWxy6Qy-sGUMIMa-9FYFBZdKWFqWQadtABSrR_E20nYn5BgBflNjH6gWIz7ke0Wp16Bys1ZTqGsCO6MlL0GW8g0r1E2TnxMZ7Fv9KTVFQqh_eOkBy0MdI8Ro6hUjrdGLkNAGRdnucTjHrOUQ9Gnf7mC232Q9xbld2Ui4kX8-0n2uJZPIKodq0v7ko1pYzeu1k7mnrJ3fwhlwogNYo00kllWy5Z8v4p32BEIJ8EIPzBue8SCqRiFu3xqrPuPc2hOJnHJ4c4P0YNCQ6zkdWbXVWxHXgyxf5tVjZ2MukIHxdptNSxeyjOF3HJebqHzy-tYAt2gJdF5UVSi9yY3jgqprGRR4il4y4i36hSA=?_z=7216390&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /impression/F9ucbuCNbxylvZXsYPWcCMEYiq7TGTugaIATUpUyxAAqVYobU8nqoGOB9jdq4kYcfc8ytDXHQPY9FvUSGPthNahF1RW43z03vOjolAq3HhIbqspIjw-CWPkrDuyUu-FBrc5mA-05OFon9xNHLsz4u2E7amZmPdcFR10U_sz1Th1DgCrWpe7CWY4E1Z9VgYC8X4eJvaq_NOn2NTToSjus3chnmrK3ATvsTENzY1-Obsf6ROyFObNbGKvFBlWiFZDkLGSkIhsFnwOTcN8FZ9t_IG5I1NCpSaM74WTY_eu_kVcnmcaxgRkwj3SrO9PQyWIH_An2rmIojMivR4IaagBgFiV6DHAtODfFJa6zqGzoY-EV8wP4jUS-7hFsZ63AvJIpFRTGd-1BVsTIKuqXeFowQKezWj3TfOZpJXWCO437iccuyiHzaiUhW8v3DBBGusPFhQEAfMMltnRkaIb0XqnYojs5iWxy6Qy-sGUMIMa-9FYFBZdKWFqWQadtABSrR_E20nYn5BgBflNjH6gWIz7ke0Wp16Bys1ZTqGsCO6MlL0GW8g0r1E2TnxMZ7Fv9KTVFQqh_eOkBy0MdI8Ro6hUjrdGLkNAGRdnucTjHrOUQ9Gnf7mC232Q9xbld2Ui4kX8-0n2uJZPIKodq0v7ko1pYzeu1k7mnrJ3fwhlwogNYo00kllWy5Z8v4p32BEIJ8EIPzBue8SCqRiFu3xqrPuPc2hOJnHJ4c4P0YNCQ6zkdWbXVWxHXgyxf5tVjZ2MukIHxdptNSxeyjOF3HJebqHzy-tYAt2gJdF5UVSi9yY3jgqprGRR4il4y4i36hSA=?_z=7216390&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Cookie: OAID=00804a18a75b4115e4cc351527a99e3d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:08 GMT
content-type: image/gif
content-length: 43
x-trace-id: 33ecee6e6be20fcd24475a940f7371d2
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| cameesse.net/11?rnd=1303159691&z=7216391&b=15540606&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=Fs6gDZOnIk_Rn5Z9tKz8vvX_zKOy9gKsqrmsze79fldgIHb9Xpm2je0dZDcEdSSxSbQ9XJrTeRvFf6fzMKj3jS8bqmLefXaV1H0bqJOyG-C3c7tduDimsMJuQH91LoHm84Yz0WNp2vOAJirGK95FaXvp27qwvzPJryeg-9yKE1R-Jjjr_-RL-1VYqGfI9XVVApl-v_O7axbUvdP44jlyhVDMkApMa9-6uxSerLtj9tkeWOMtj3oxNAVxqScjqnW9U2wrqtFhEr7FUMT48LU2e31mzYyyfsjaIaZ5Dg-EhudW3EeQb70W9eKmLl6imBxO0hixA3GHeusB26GexdRbjP_rur5H4udqBoLhasyYA-hkr5kpWs8bcKFBW86znOXdkvphyddYitBTLi_3KnvOcGkdCbxNhSB5DE5tjBlfntj_LH_b_8D-Gbgj54RVwZRh9ej5oPtLdpSbMBEebXdKjc7QjHPYzrRfMlILtK2gMM8jpI6I3GxOD1R-AqLfPDq9l0MMOeY8DDTrbmo_tGvLAP1t3YxIKeL4JOXSJ6gtuiuYHPmeFNz7fLOFfEBLsEWq5hye5m_bFJf30A9lGGPPE-TPTvPkse3uYq1o-iYvs98gTLx8i0kXf_a-RbmhAPkK&ruid=b4e09989-09c7-4c5b-8bbc-0279d43aa0f7&subid=807810880285708288&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 | 139.45.197.242 | 200 OK | 0 B |
URL GET HTTP/2cameesse.net/11?rnd=1303159691&z=7216391&b=15540606&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=Fs6gDZOnIk_Rn5Z9tKz8vvX_zKOy9gKsqrmsze79fldgIHb9Xpm2je0dZDcEdSSxSbQ9XJrTeRvFf6fzMKj3jS8bqmLefXaV1H0bqJOyG-C3c7tduDimsMJuQH91LoHm84Yz0WNp2vOAJirGK95FaXvp27qwvzPJryeg-9yKE1R-Jjjr_-RL-1VYqGfI9XVVApl-v_O7axbUvdP44jlyhVDMkApMa9-6uxSerLtj9tkeWOMtj3oxNAVxqScjqnW9U2wrqtFhEr7FUMT48LU2e31mzYyyfsjaIaZ5Dg-EhudW3EeQb70W9eKmLl6imBxO0hixA3GHeusB26GexdRbjP_rur5H4udqBoLhasyYA-hkr5kpWs8bcKFBW86znOXdkvphyddYitBTLi_3KnvOcGkdCbxNhSB5DE5tjBlfntj_LH_b_8D-Gbgj54RVwZRh9ej5oPtLdpSbMBEebXdKjc7QjHPYzrRfMlILtK2gMM8jpI6I3GxOD1R-AqLfPDq9l0MMOeY8DDTrbmo_tGvLAP1t3YxIKeL4JOXSJ6gtuiuYHPmeFNz7fLOFfEBLsEWq5hye5m_bFJf30A9lGGPPE-TPTvPkse3uYq1o-iYvs98gTLx8i0kXf_a-RbmhAPkK&ruid=b4e09989-09c7-4c5b-8bbc-0279d43aa0f7&subid=807810880285708288&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 IP139.45.197.242:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /11?rnd=1303159691&z=7216391&b=15540606&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=Fs6gDZOnIk_Rn5Z9tKz8vvX_zKOy9gKsqrmsze79fldgIHb9Xpm2je0dZDcEdSSxSbQ9XJrTeRvFf6fzMKj3jS8bqmLefXaV1H0bqJOyG-C3c7tduDimsMJuQH91LoHm84Yz0WNp2vOAJirGK95FaXvp27qwvzPJryeg-9yKE1R-Jjjr_-RL-1VYqGfI9XVVApl-v_O7axbUvdP44jlyhVDMkApMa9-6uxSerLtj9tkeWOMtj3oxNAVxqScjqnW9U2wrqtFhEr7FUMT48LU2e31mzYyyfsjaIaZ5Dg-EhudW3EeQb70W9eKmLl6imBxO0hixA3GHeusB26GexdRbjP_rur5H4udqBoLhasyYA-hkr5kpWs8bcKFBW86znOXdkvphyddYitBTLi_3KnvOcGkdCbxNhSB5DE5tjBlfntj_LH_b_8D-Gbgj54RVwZRh9ej5oPtLdpSbMBEebXdKjc7QjHPYzrRfMlILtK2gMM8jpI6I3GxOD1R-AqLfPDq9l0MMOeY8DDTrbmo_tGvLAP1t3YxIKeL4JOXSJ6gtuiuYHPmeFNz7fLOFfEBLsEWq5hye5m_bFJf30A9lGGPPE-TPTvPkse3uYq1o-iYvs98gTLx8i0kXf_a-RbmhAPkK&ruid=b4e09989-09c7-4c5b-8bbc-0279d43aa0f7&subid=807810880285708288&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fdescarga.ink%2Funiversodelamecatronica%2F548%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Cookie: scm=1; OAID=00804a18a75b4115e4cc351527a99e3d; oaidts=1714160639
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:20 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://descarga.ink
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: de633a12edd6e43a9504bc1ab180d878
access-control-expose-headers: X-Sc
set-cookie: OAID=00804a18a75b4115e4cc351527a99e3d; expires=Sat, 26 Apr 2025 19:44:20 GMT; secure; SameSite=None
oaidts=1714160639; expires=Sat, 26 Apr 2025 19:44:20 GMT; secure; SameSite=None
oaidvc=1; expires=Sat, 26 Apr 2025 19:44:20 GMT; secure; SameSite=None
CNT=1_v1_fiHtAAEAAAB_TQAA; expires=Fri, 26 Apr 2024 20:44:20 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| alwingulla.com/88/tag.min.js | 104.21.72.155 | 200 OK | 80 kB |
URL GET HTTP/2alwingulla.com/88/tag.min.js IP104.21.72.155:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerGoogle Trust Services LLC Subjectalwingulla.com FingerprintB6:A3:BD:4F:5E:0D:58:50:07:9D:17:E0:30:97:67:97:9E:23:1A:1C ValidityTue, 12 Mar 2024 16:48:22 GMT - Mon, 10 Jun 2024 16:48:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65494) Hash43924fe8e2255a2e76b29a06339c7690 fad13a835b71dae7ce63edbfd5ba9c4920185a7f 8bf6442dc2d4d7e8b9a0b593311095b7de0fea8007f1876a75d6f5f6165f9108
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /88/tag.min.js HTTP/1.1
Host: alwingulla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 19:43:59 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 468432275f4834bf594f97e94bdb6da7
cache-control: max-age=86400
last-modified: Fri, 26 Apr 2024 13:29:11 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Sat, 27 Apr 2024 13:34:25 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 22174
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5u7ZsjSM3ZFKWuhMiT8QBGaKdLJVuPefPEC1V%2BKcZV%2B8OHyekOqS0MAiudBZjjZ3suIXWwrCHWVCXPwnSLwKIpObEDOuvbbXjUbM%2FM2M%2BBzUWo7ccrca89%2BIbv2iKhv%2Faw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9109b9f065694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://descarga.ink/
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:00 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://descarga.ink
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash5370be656257ee159708ce1ab8ac41e4 c740c68064920b32cfb17bc5538f82f2db1629bc 98611b5c2f1f4db2b75db3f7dccfb1577ca5b653be5600bdc3d865f0a8f73991
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://descarga.ink/
Content-Type: application/json
Content-Length: 525
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:44:00 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://descarga.ink
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js?ver=6.4.3 | 142.250.74.164 | 200 OK | 850 B |
URL GET HTTP/2www.google.com/recaptcha/api.js?ver=6.4.3 IP142.250.74.164:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintF3:75:C9:48:E6:A5:11:C7:87:C8:8D:9A:C4:16:F8:09:4E:88:7C:5A ValidityMon, 08 Apr 2024 07:33:48 GMT - Mon, 01 Jul 2024 07:33:47 GMT
File typeJavaScript source, ASCII text, with very long lines (850), with no line terminators Hashee87fd4035a91d937ff13613982b4170 e897502e3a58c6be2b64da98474f0d405787f5f7 7649b605b4f35666df5cbcbb03597306d9215f53f61c2a097f085fa39af9859f
GET /recaptcha/api.js?ver=6.4.3 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Fri, 26 Apr 2024 19:43:59 GMT
date: Fri, 26 Apr 2024 19:43:59 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| descarga.ink/universodelamecatronica/548/ | 107.189.31.193 | 200 OK | 48 kB |
URL User Request GET HTTP/2descarga.ink/universodelamecatronica/548/ IP107.189.31.193:443
CertificateIssuerLet's Encrypt Subjectdescarga.ink Fingerprint00:8A:3C:75:4A:06:E2:E1:15:2B:DD:B2:C9:FE:12:58:03:16:FD:8B ValidityThu, 07 Mar 2024 20:22:33 GMT - Wed, 05 Jun 2024 20:22:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /universodelamecatronica/548/ HTTP/1.1
Host: descarga.ink
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
x-ua-compatible: IE=edge
link: <https://descarga.ink/wp-json/>; rel="https://api.w.org/", <https://descarga.ink/wp-json/wp/v2/posts/548>; rel="alternate"; type="application/json", <https://descarga.ink/?p=548>; rel=shortlink
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 19:43:58 GMT
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=157680000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
serversignature: Off
servertokens: Prod
x-permitted-cross-domain-policies: master-only
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| cameesse.net/1?z=7216391 | 139.45.197.242 | 200 OK | 43 kB |
IP139.45.197.242:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
File typeJavaScript source, ASCII text, with very long lines (42427) Hash02c2febb53bd1b83225f186813d6fbaf 79271786e0462abb042ebde96eaccae13628fce8 f0fe25086776da44537436812c2a72cd1de3d10daff2c923f7d1ddc1b70a527d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1?z=7216391 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:43:59 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: dfee04c4e7f7dd85657dc96aa273a57f
access-control-expose-headers: X-Sc
x-sc: dTTmWoH1eMA8HgAoeihKcL8Q7ZA9ffF_C1XOzxBYiFYZxrkp_XBRgWD3XLfhmouC0AY22iavhEYBHx9wG45SbN3Y4_U=
set-cookie: scm=1; expires=Sat, 26 Apr 2025 19:43:59 GMT; secure; SameSite=None
OAID=04004a06f6a541c2ff3082986de5f415; expires=Sat, 26 Apr 2025 19:43:59 GMT; secure; SameSite=None
oaidts=1714160639; expires=Sat, 26 Apr 2025 19:43:59 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cameesse.net/121?rnd=2415890447&z=7216391&b=15540606&c=6274858&var=&varid=0&d=https%3A%2F%2Fb6f71hwqomrafu683pz507uj2g.hop.clickbank.net%2F%3Ftid%3Dgo1%26clickid%3D807810880285708288&cln={CELL_NUMBER}&btp=7&rb=Fs6gDZOnIk_Rn5Z9tKz8vvX_zKOy9gKsqrmsze79fldgIHb9Xpm2je0dZDcEdSSxSbQ9XJrTeRvFf6fzMKj3jS8bqmLefXaV1H0bqJOyG-C3c7tduDimsMJuQH91LoHm84Yz0WNp2vOAJirGK95FaXvp27qwvzPJryeg-9yKE1R-Jjjr_-RL-1VYqGfI9XVVApl-v_O7axbUvdP44jlyhVDMkApMa9-6uxSerLtj9tkeWOMtj3oxNAVxqScjqnW9U2wrqtFhEr7FUMT48LU2e31mzYyyfsjaIaZ5Dg-EhudW3EeQb70W9eKmLl6imBxO0hixA3GHeusB26GexdRbjP_rur5H4udqBoLhasyYA-hkr5kpWs8bcKFBW86znOXdkvphyddYitBTLi_3KnvOcGkdCbxNhSB5DE5tjBlfntj_LH_b_8D-Gbgj54RVwZRh9ej5oPtLdpSbMBEebXdKjc7QjHPYzrRfMlILtK2gMM8jpI6I3GxOD1R-AqLfPDq9l0MMOeY8DDTrbmo_tGvLAP1t3YxIKeL4JOXSJ6gtuiuYHPmeFNz7fLOFfEBLsEWq5hye5m_bFJf30A9lGGPPE-TPTvPkse3uYq1o-iYvs98gTLx8i0kXf_a-RbmhAPkK&bag=fac56DlTlq6Vm3G5YqEbiFg4vWNzVkDB&ruid=b4e09989-09c7-4c5b-8bbc-0279d43aa0f7&subid=807810880285708288 | 139.45.197.242 | 302 Found | 0 B |
URL GET HTTP/2cameesse.net/121?rnd=2415890447&z=7216391&b=15540606&c=6274858&var=&varid=0&d=https%3A%2F%2Fb6f71hwqomrafu683pz507uj2g.hop.clickbank.net%2F%3Ftid%3Dgo1%26clickid%3D807810880285708288&cln={CELL_NUMBER}&btp=7&rb=Fs6gDZOnIk_Rn5Z9tKz8vvX_zKOy9gKsqrmsze79fldgIHb9Xpm2je0dZDcEdSSxSbQ9XJrTeRvFf6fzMKj3jS8bqmLefXaV1H0bqJOyG-C3c7tduDimsMJuQH91LoHm84Yz0WNp2vOAJirGK95FaXvp27qwvzPJryeg-9yKE1R-Jjjr_-RL-1VYqGfI9XVVApl-v_O7axbUvdP44jlyhVDMkApMa9-6uxSerLtj9tkeWOMtj3oxNAVxqScjqnW9U2wrqtFhEr7FUMT48LU2e31mzYyyfsjaIaZ5Dg-EhudW3EeQb70W9eKmLl6imBxO0hixA3GHeusB26GexdRbjP_rur5H4udqBoLhasyYA-hkr5kpWs8bcKFBW86znOXdkvphyddYitBTLi_3KnvOcGkdCbxNhSB5DE5tjBlfntj_LH_b_8D-Gbgj54RVwZRh9ej5oPtLdpSbMBEebXdKjc7QjHPYzrRfMlILtK2gMM8jpI6I3GxOD1R-AqLfPDq9l0MMOeY8DDTrbmo_tGvLAP1t3YxIKeL4JOXSJ6gtuiuYHPmeFNz7fLOFfEBLsEWq5hye5m_bFJf30A9lGGPPE-TPTvPkse3uYq1o-iYvs98gTLx8i0kXf_a-RbmhAPkK&bag=fac56DlTlq6Vm3G5YqEbiFg4vWNzVkDB&ruid=b4e09989-09c7-4c5b-8bbc-0279d43aa0f7&subid=807810880285708288 IP139.45.197.242:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /121?rnd=2415890447&z=7216391&b=15540606&c=6274858&var=&varid=0&d=https%3A%2F%2Fb6f71hwqomrafu683pz507uj2g.hop.clickbank.net%2F%3Ftid%3Dgo1%26clickid%3D807810880285708288&cln={CELL_NUMBER}&btp=7&rb=Fs6gDZOnIk_Rn5Z9tKz8vvX_zKOy9gKsqrmsze79fldgIHb9Xpm2je0dZDcEdSSxSbQ9XJrTeRvFf6fzMKj3jS8bqmLefXaV1H0bqJOyG-C3c7tduDimsMJuQH91LoHm84Yz0WNp2vOAJirGK95FaXvp27qwvzPJryeg-9yKE1R-Jjjr_-RL-1VYqGfI9XVVApl-v_O7axbUvdP44jlyhVDMkApMa9-6uxSerLtj9tkeWOMtj3oxNAVxqScjqnW9U2wrqtFhEr7FUMT48LU2e31mzYyyfsjaIaZ5Dg-EhudW3EeQb70W9eKmLl6imBxO0hixA3GHeusB26GexdRbjP_rur5H4udqBoLhasyYA-hkr5kpWs8bcKFBW86znOXdkvphyddYitBTLi_3KnvOcGkdCbxNhSB5DE5tjBlfntj_LH_b_8D-Gbgj54RVwZRh9ej5oPtLdpSbMBEebXdKjc7QjHPYzrRfMlILtK2gMM8jpI6I3GxOD1R-AqLfPDq9l0MMOeY8DDTrbmo_tGvLAP1t3YxIKeL4JOXSJ6gtuiuYHPmeFNz7fLOFfEBLsEWq5hye5m_bFJf30A9lGGPPE-TPTvPkse3uYq1o-iYvs98gTLx8i0kXf_a-RbmhAPkK&bag=fac56DlTlq6Vm3G5YqEbiFg4vWNzVkDB&ruid=b4e09989-09c7-4c5b-8bbc-0279d43aa0f7&subid=807810880285708288 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: scm=1; OAID=00804a18a75b4115e4cc351527a99e3d; oaidts=1714160639
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 26 Apr 2024 19:44:00 GMT
content-length: 0
location: https://b6f71hwqomrafu683pz507uj2g.hop.clickbank.net/?tid=go1&clickid=807810880285708288
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: a7c9babd2fcdf471e57c48adc20a6baf
access-control-expose-headers: X-Sc
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| aistekso.net/401/7216392 | 139.45.197.244 | 200 OK | 91 kB |
IP139.45.197.244:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectaistekso.net Fingerprint3E:A5:CE:35:F4:D9:45:6B:A1:3B:2E:9C:B3:9E:78:4D:8A:4B:51:BB ValiditySun, 24 Mar 2024 05:08:27 GMT - Sat, 22 Jun 2024 05:08:26 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash743b49ea738e7d21ea07d01f6da262fd 8b204970e4a958c5a504c22e48642aa4c4b8f677 ed10f269ef41c4b77e8c7b888c0dc2223a93afb0af903d1b8f63e7ba2f210237
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /401/7216392 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:43:59 GMT
content-type: application/javascript
x-trace-id: 99729cb891b036c1348decd437d15bd7
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=03004a15d462434ee3798caddac4526a; expires=Sat, 26 Apr 2025 19:43:59 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=49ab02d6-ee4c-40a5-ace0-83b08bf5ae57 | 139.45.195.254 | 200 OK | 12 B |
URL POST HTTP/1.1fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=49ab02d6-ee4c-40a5-ace0-83b08bf5ae57 IP139.45.195.254:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerSectigo Limited Subjectfleraprt.com Fingerprint32:DB:C5:24:21:ED:1D:C3:40:C3:46:9F:CF:EE:98:4D:72:29:4C:3C ValidityTue, 09 Jan 2024 00:00:00 GMT - Mon, 13 Jan 2025 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash6949f52318584a4b51c719a9b84a7287 9fbd870c6afd4bdd6fbbd87f52df2c81dd23e905 72603096ec3515dbc615ab8837fd1b15e91ee827bc7af41d71c9882b08699375
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=49ab02d6-ee4c-40a5-ace0-83b08bf5ae57 HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1762
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Fri, 26 Apr 2024 19:44:00 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://descarga.ink
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| gishejuy.com/400/7216390 | 139.45.197.242 | 200 OK | 84 kB |
IP139.45.197.242:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash190ae5fa2ed564a1a3f73e92ea9d319e af0e83640ae4f3b164d3a4bc99d7cdf9196694b3 af7cf9838d3c559d8cfa3d224f63d7599a0d3601d08d1b09ba053db7589d858b
GET /400/7216390 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:43:59 GMT
content-type: application/javascript
x-trace-id: 4f58ed9697ff16817f2d82aac0018d28
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=03004aa69bd74cc9ea55be5a4a8a2b39; expires=Sat, 26 Apr 2025 19:43:59 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| moonoafy.net/pfe/current/universal.min.js?v=3.1.504 | 139.45.197.250 | 200 OK | 90 kB |
URL GET HTTP/2moonoafy.net/pfe/current/universal.min.js?v=3.1.504 IP139.45.197.250:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash4caad44ecc6a13eba45b63ed7cf9e387 e67dfe90bebd5447495d8fe962d03e55f6d13071 66f95b5eb4bf3dc3a13643e3e6776b18a2b15e0b881328e2ee012c73e679ad00
GET /pfe/current/universal.min.js?v=3.1.504 HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://descarga.ink/
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:43:59 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:48:53 GMT
etag: W/"662a3515-15efa"
access-control-allow-origin: https://descarga.ink
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js | 142.250.74.35 | 200 OK | 518 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeJavaScript source, ASCII text, with very long lines (631) Size518 kB (517649 bytes) Hashe2e79d6b927169d9e0e57e3baecc0993 1299473950b2999ba0b7f39bd5e4a60eafd1819d 231336ed913a5ebd4445b85486e053caf2b81cab91318241375f3f7a245b6c6b
GET /recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 205803
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 14:46:34 GMT
expires: Sat, 26 Apr 2025 14:46:34 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2024 21:03:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 17846
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| veepteero.com/88/51012 | 139.45.197.242 | 200 OK | 3.1 kB |
IP139.45.197.242:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectveepteero.com Fingerprint13:68:56:48:EC:67:A6:93:BE:E0:36:BC:FA:04:75:6D:6E:D2:C1:91 ValiditySat, 23 Mar 2024 05:18:36 GMT - Fri, 21 Jun 2024 05:18:35 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (3340), with no line terminators Hashe0ad30c17937adc2726c9d15679d7590 595e15a4b833cd2c204d702f1e19f38638aa56e5 273775b1b4cab0ad2d670f4bf5debb4ba377b570c9414813d545dc3559708e6e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /88/51012 HTTP/1.1
Host: veepteero.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://descarga.ink/
Origin: https://descarga.ink
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:43:59 GMT
content-type: application/json
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://descarga.ink
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| moonoafy.net/pfe/current/tag.min.js?z=7216393 | 139.45.197.250 | 200 OK | 15 kB |
URL GET HTTP/2moonoafy.net/pfe/current/tag.min.js?z=7216393 IP139.45.197.250:443
Requested byhttps://descarga.ink/universodelamecatronica/548/ CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
File typeJavaScript source, ASCII text, with very long lines (14612), with no line terminators Hashffdd38e0a5a1a47cb341a116a3318e0e 2fd730feff506cf56e14c531e9d89cdea2cca424 7d8e97e9586d3f04c4a2a703692378868e49120c6159d079ae7ed1eca2ca2b5c
GET /pfe/current/tag.min.js?z=7216393 HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://descarga.ink/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 19:43:59 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:48:52 GMT
etag: W/"662a3514-3914"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|