| my.rtmark.net/gid.js?userId=88a84aa3f4c8abff03bd01b93559b7e7 |  139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=88a84aa3f4c8abff03bd01b93559b7e7 IP139.45.195.8:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
Hash588cd8edc6ec1142feda544e60699d65 032b3137b4dfa16e2aecea95f20fb4350debd36b eedfc2b7588ab2d41a91f0b043af097b9f78573886696a7458280dae2af32941
GET /gid.js?userId=88a84aa3f4c8abff03bd01b93559b7e7 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://adxproofcheck.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://adxproofcheck.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=88a84aa3f4c8abff03bd01b93559b7e7; expires=Wed, 07 May 2025 06:35:43 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| adxproofcheck.com/js/_each-land-config.3299fec3.js |  104.21.63.16 | 200 OK | 21 kB |
URL GET HTTP/3adxproofcheck.com/js/_each-land-config.3299fec3.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash0ba3468fb169d838d511e11b5b33eaef fb53785cd4dcc6e5cf0fcebfcafed46a3968cbe9 6de414b4180a6f11c4f5a9ba570d5e97ac8e596b1f9c1bb86872a11ecd416384
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/_each-land-config.3299fec3.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:42 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=72043
etag: W/"662b7651-1196b"
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1696
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xd2nmqBPnO1eBSAxMemWOsj0rMjL%2FMxz7DP9ZYlBZwrkyCQ1Sy7WDuEHGNrbjmpSAzUTW5cGuJi9jcreNSUkEGogOq7AGIUzSbNYSp%2Bi86QG3MzDIPhQMhoRA%2BJRGu%2FKknPsmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff3108fdf10b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| arleavannya.com/sync-metrics | 139.45.197.248 | 200 OK | 17 B |
URL POST HTTP/2arleavannya.com/sync-metrics IP139.45.197.248:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hash5b64e8b89092b2e3dfd448b10700627f 484b3032619fa1acd135d114565b0a5166281c22 f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /sync-metrics HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 797
Origin: https://adxproofcheck.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 63d6a2afdaf649a21ff323c1c33760cf
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://adxproofcheck.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| adxproofcheck.com/css/SweepHeader.8e7220ee.css | 104.21.63.16 | 200 OK | 82 kB |
URL GET HTTP/3adxproofcheck.com/css/SweepHeader.8e7220ee.css IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeASCII text, with very long lines (369), with no line terminators Hashb3e63dbf70b8e4ad7c5ec23726112e15 e083def5d026fb5bc171c3043f714fd5d859f82b be1433fba47a27551a04629ff55f1a1d944922016569342433d79f0200d8959d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/SweepHeader.8e7220ee.css HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=370
etag: W/"662b7650-172"
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2yT64y5uMbQLtWm4VcL3TMLQFyLEhlvuVIGofD57U3L3Tfj7t0z8YS9ooYLAk3tOHV3ILom6JkUwMoT956vwPStgsyJYUlzahlbuxV6Az%2Fgx6t1%2Fc6N97BYgGxDA4gibcbYYqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310b786e0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/v-index.mjs.19622407.js | 104.21.63.16 | 200 OK | 8.9 kB |
URL GET HTTP/3adxproofcheck.com/js/v-index.mjs.19622407.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (35287), with no line terminators Hash1de1ec2d8e7940b88970d8fbce40ed6d 510aa24127fb8bc3578d9ca4628b2eea5a84ce01 b473156bef833bcfb2e84658093f1ebc1e64011dcba904e26ccb31f1cad8b762
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/v-index.mjs.19622407.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7651-89d7"
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1694
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=25UIwj0NbJnxsaw6XVAfixsxyoqgGrl%2FTjTm%2Bzc1NpFpOv%2B1vAHKsjwc67v05mePgNoguJpFEZkMyoXy5LV%2F2obP5dhb8kspyL8kO5v3iqEpTyALqvjMPXge%2B%2B4zPAwj3jVA%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310b78740b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/SweepHeader.b279c2bf.js | 104.21.63.16 | 200 OK | 1.0 kB |
URL GET HTTP/3adxproofcheck.com/js/SweepHeader.b279c2bf.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (1009), with no line terminators Hash0fe439de7df51eacd129903e89a15baa cd04958d3fa581e73b01c27ea41d97d5a430d75f b79bec35661387c45718f5592adf5634587c228d85d45c3b5139bac73214bdf9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/SweepHeader.b279c2bf.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7651-3f1"
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1694
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xy5LWCCD2uz09D8tC5Gq48oO5RkvJyqrhtyxy4HQv6kbL8PUsgfuN1NJfl6cuNrcwiGOhUBqG43ruLOY391P8ky%2B4aH5kigHY2auw18Tn9gUX7%2F4Jn%2BQbbA4VDfhnfVO5m0fDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310b78700b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-3.webp | 104.21.63.16 | 200 OK | 582 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-3.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash8347ebfbfa18beba17d356a3dbacb100 f1d66a05e07953cea27fe277e72a495a8e3de2e7 318e494a7bcf7cb28173e54feebeb44ba93b4c17a423c7036d2fcac40e4db6cd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-3.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 582
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-246"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uI29RcnTP6RgCXQU8DpPwejrb%2FYbVB1z%2Bxt5oi6NmZcKdg4bwnElK7v%2Ff5W1%2FVgdvGzWzHoB06h5K2XV%2FRREMhy9gPx%2Fd0PttKF6IwiLPNzuabdV%2B0LKRbYRs6qxtPomdJUc1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c597c0b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-4.webp | 104.21.63.16 | 200 OK | 800 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-4.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hashb1c95558f71bd6614c52433c225b6a28 7c903c12b48199ac1e1b3c8846baf12693b97a28 8e5987af9fd886b03617f6e4980035a877697b9ccdeb9f002c41baa1d6ee8912
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-4.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 800
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-320"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2FNLwxKwzRX%2FZOvvwq8Yf5tFyo%2FTc2AWtqgn8nthY%2BbrNSAuT6Ck%2F73weYPqzzj9GYdTIzrGMC6J0bFEo06ZZUWk3sD1%2B2Blr6fUPW9uc5NdjFSt3FYMQfCTZbU1ApsefMod9A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c59810b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-5.webp | 104.21.63.16 | 200 OK | 588 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-5.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash25e1107a0e365082ccd6093e0073f05c 7b0d3c741f2bbabbcac99f29bee8cf2f9eaa1841 935ec86b128c0bb7bfafc5915a46c0c3709c47b90509e26e4c994d8ef5587cf2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-5.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 588
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-24c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oYDCi52u6KYGohSS8kG0O7B22LPIWp%2FZZyLD41pVjruu3BAlR325uYbT6m6U3Nd1u6tpyh61yPvze6NQ9Zi9kdzb54gV5VXSvzwTSECB%2FKW3ACzvEsuT8TwkfsfIfK0T5Cppjg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c59820b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-7.webp | 104.21.63.16 | 200 OK | 610 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-7.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hasheb52e160b8ea5a1e0de8b2453f46d642 4d28311b4ca822a0a74e318c9d1f54def088b509 2e9c67781abf2cfbabb240bfd08ca836658063849f3303b85027203eec1d37c5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-7.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 610
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-262"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zeRwtBP7gBQ4UfWJ8Ptq1DYYLFMYyk5Dk4epGGqne5GwSD7OpVXbgWOLt3kb8nJ0%2BRmBRiW30uYQaJm1Bmo%2F6TctN6P5kQSs451PVEem01TwVXhfwR3K0nBL7EC5%2BcclKxEVeg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c598a0b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-6.webp | 104.21.63.16 | 200 OK | 462 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-6.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hashdfb961fdb848e75591268fde9c186902 2218e96a5c5081f5bef43fda74fd8f0cbb025003 4cf92de9b24fb1484bc1d97880c20589e113b9b1f065df1963e0648f3a38474d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-6.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 462
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-1ce"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bE2%2BH8DV%2BwsHxy4%2BGVv6b9Naa4oeERSJXR18rzUSU3Kq0qNhUSRndaJq0wYI2DC34WjDH9TkWxWGo4TTP3yCVsPoaFs9r5gAa2xsm07Wqw5Ggyugt53uzM%2BQbGUtkYFO3syMuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c59850b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-8.webp | 104.21.63.16 | 200 OK | 696 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-8.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash6a6742fef0cd1bd74f6da94e9fb833e1 ccaae2ff48574bbb04072b2efc5864b9177017a5 96bf5ed5aa8149269a215cf19a17889c762b8cddb2fe36229849c8379c2d4aa6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-8.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 696
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-2b8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X8022b3twn1Qm7%2BTEZeLcvHIXapx0AvlKHTiJtM%2FdEceOnThjdjxlfNBqap9K4Hlsaxg%2BEsTz0nCC18J8scMK9nH6AeHSb0Mt3gfE2Wqnz0O5X33lCg8vjv53LLV2TMhZybJRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c598e0b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-9.webp | 104.21.63.16 | 200 OK | 818 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-9.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hasha61b1f29004e5a54130bc57051a49c0d 7f60eef07e311b3598895343111d90282a002ea0 b3de11ad2ace70aa9786af4a9e65db774466fe25aca16e16dabdfa7ec76b0a53
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-9.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 818
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-332"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UpzluE3Vz8zM3gOtKnyLqDQtXPYW0tQ2lQ%2BJaUcv9VRXlUML2i%2BSi8%2BTjcYYdUhLW6MiQy89tZkiQBfFWs0jWwwNJI1Cnis4u3lSpipxuYgEud9XmwqKeESL6WdyjyC7aLoTpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c598f0b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-10.webp | 104.21.63.16 | 200 OK | 572 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-10.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash206819c13484a7a818f1e4499be3704e ada2f34308d6eaa0d004ed0c732e5a3aa7fda1db f4eed862cbcf8f9ce2bde63cf3e13e73ed3e58ac93ec4bb14301b248c4d58e1f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-10.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 572
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-23c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ACuwAp5OIBL4Aoe%2BWywrOM8c3hyDPPMMatolcIXAWawecB2%2Fq6x7yZk0pXMkX9Y2L79EGSt5TghM7H1TirJgV%2BAPvrA00o8KAu1Dx5mWxQ%2FfxUDE1lm2Ds%2FKufSgSeiYlM9npg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c69930b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-11.webp | 104.21.63.16 | 200 OK | 502 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-11.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash7ec874233fc75e1ec8df712b7ebbd7d2 cc219fb2b7e6057a8303283023dd1aa09a082455 9bb6b14a5a503d3c52bc6fc2e7c236a90e7971ceb41cb99e5245fcfc39ef328b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-11.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 502
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-1f6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IlmWF%2FbkH1L8A00vOqm8%2F8XkPYd7yHvBG5RkMADrofP3PReh6PyIz0VafxzpvNhoKogUSAi3vdQrxYRKVobGVHqeRHSn5mMBJvIR3H6XUYx8njJjebZ1IwnXmp%2F9d2rYQoOr8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c69940b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-12.webp | 104.21.63.16 | 200 OK | 668 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-12.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hashc57b8a772545ee6e05fedb58c143beb1 6cb5aef79f86275a725cfdd406c7038b24d80aa9 03389ef007f0fd3486a5c71848fd2b67cc05341cf449bcdd34a81a1d4048b090
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-12.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 668
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-29c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZTQ2b%2BpftSEZVbmaEbMPmCZ7U0x1rPowVjJ9%2BaB9dXTbTSxwhq3YCmX8LJOzhQSTUmZB8vHnZNftYo2qQcWBUkBo%2Fug%2BpR31qptzCy%2BMFhVpMmEGs4cMoPTMMNTrZ%2FKIDdWuxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c699b0b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-14.webp | 104.21.63.16 | 200 OK | 626 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-14.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash7c494127025f1ec09a96c16bf0531a36 0c2f9302c41f99da9fb5eead2c364bdbdf435156 e6443a7cdcc5ee11ece88ce10824fd79851700e4bd3dc6259d1a816182b82e5b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-14.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 626
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-272"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G2kwHUpOrygwsNsQbSIRcqMFDKHUa39hesKWc1dYfMp0DXRebeyoyFr8%2BhaQ5MdFGNIFqOw3YMCqO%2F%2BVrMCX8xdIIUxxVHZzuFObGTYtlLPoNLPw%2BEm8wWJyOCGUcRHKmDuFEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c699e0b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-13.webp | 104.21.63.16 | 200 OK | 640 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-13.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash8532ec97225298a9c3ae5e393f62e462 fc26fa010830045fa91a16ac9b8c89c45bb35232 9c45568c99b7782b240341ba6729ecacc59d41a8ced9b9846ca4ac51e50c5320
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-13.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 640
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-280"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QdXxu9pxkZsgWivZReuBllCazofgjoMOpuFA%2FeK9ONOdK6YHeKMLDXIPNEe6KX7qjWPkkXy5X45%2FtA%2Blxsmw%2B39i2Ki1Kd5bsrMulomIaYMJ3vZ%2BH%2FfL6VNhyG3MC5jBNroCJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c699c0b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-15.webp | 104.21.63.16 | 200 OK | 576 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-15.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash6c0726564aa84c5f1161bd0051e0c5e0 6df7e7122e0d007e7ea187c3c35fbc869f8ef8e5 98ff0218f67c0bce5c834a0145c686f56d3a7ca1b948341a3181739da66883b2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-15.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 576
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-240"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XtKAHB6MCbyt1SUXlCLeaT2TP4DQ4pYxKA3r36oBr7oUsEN%2BEbFXv%2BdU5u9P2Fqe0oqrz%2Fg0DBrhGqIX2WPtkHjUkgQiRfdtCmsELNQcIsINvTqTHgfnUKxum7m5sQiqdPUs1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c699f0b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-16.webp | 104.21.63.16 | 200 OK | 734 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-16.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash0e8c55db8fda61ba2565a293b72e36e1 ef9deaad0f8a71da57252bcf543ea369673d39ff 79b1a144ec7d571b7a155cd2852da72e89b2954affca1448001e3fed2227cb34
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-16.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 734
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-2de"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lCfxu6Oknk2KHQOihCpXbvWkFQ%2Bs8TvQ0Qy8%2BamN5kPMTorE4O3gKFDTTONnewX46oqSixBm3RqWw8aZp0lcy8psAd%2FN4b9VwLVqmsQQcQr5saRYsBFSkffW%2B1AEWL%2FnkAlxXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c79a50b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| arleavannya.com/sync-do | 139.45.197.248 | 200 OK | 0 B |
IP139.45.197.248:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /sync-do HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://adxproofcheck.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 06:35:43 GMT
content-length: 0
access-control-allow-origin: https://adxproofcheck.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| arleavannya.com/sync-metrics | 139.45.197.248 | 200 OK | 0 B |
URL POST HTTP/2arleavannya.com/sync-metrics IP139.45.197.248:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /sync-metrics HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://adxproofcheck.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 06:35:43 GMT
content-length: 0
access-control-allow-origin: https://adxproofcheck.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| arleavannya.com/sync-do | 139.45.197.248 | 200 OK | 175 B |
IP139.45.197.248:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hasha7fbccd9aed97a405c912f014e54e33d d1f5a4e6a184f566d272fb282c7719dac8da4d38 27abda38a3b61986ba145f4fc9a02407cc4649fb26b3cec1a4bda41b7cba21c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /sync-do HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 153
Origin: https://adxproofcheck.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/json; charset=utf-8
content-length: 175
x-trace-id: 421b805e5a44a162a48e20fcb1bcf430
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://adxproofcheck.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| arleavannya.com/sync-metrics | 139.45.197.248 | 200 OK | 17 B |
URL POST HTTP/2arleavannya.com/sync-metrics IP139.45.197.248:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hash5b64e8b89092b2e3dfd448b10700627f 484b3032619fa1acd135d114565b0a5166281c22 f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /sync-metrics HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 2645
Origin: https://adxproofcheck.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 462987f54e694b06bb2eca406254d3c9
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://adxproofcheck.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| adxproofcheck.com/js/v-react-dom.production.min.js.c3329619.js | 104.21.63.16 | 200 OK | 45 kB |
URL GET HTTP/3adxproofcheck.com/js/v-react-dom.production.min.js.c3329619.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashc53e5e3d8c5ca5f1c4edbce65426edfc 36cc2e7e0b893d82bf5f457c7a62374019d0f7aa ed83bf6bc001bd6f841c76b67aedfd3bc02cb28fb5537a1d55804f5ad0515e39
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/v-react-dom.production.min.js.c3329619.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:42 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=129359
etag: W/"662b7650-1f94f"
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1695
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VRpPFobHtCLm6bk7OpNmoW95Ke6AZn2V1tIIFtvZBPYygRM3Qu0RMV8WBBVsZ2sSZ22d3Ok0wfQtkS9JklQkhgB2yI9%2BImsADHnvyqxHtIAYftChIxgELhj%2Fidauuo%2Fr0bJJnw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff3108fdfa0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/SurveyContainer.e2959212.js | 104.21.63.16 | 200 OK | 15 kB |
URL GET HTTP/3adxproofcheck.com/js/SurveyContainer.e2959212.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (57082), with no line terminators Hash0df7a0f05192a1af311ce45d48639a89 df29dce5914578a52af5f516ccd18d289d808951 4cde10689c1ef6c2f58585483fae6d656ccfa1d16cc282dcfbe6cb89700ae2dc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/SurveyContainer.e2959212.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=57085
etag: W/"662b7651-defd"
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KiFTurEV%2FlCIShpCXjXPcjf%2F4HJrh1pjLcxchDT46jMjMWlmgD94N5Bn3%2B6s7t1VbuBSCDeOXgOlzvWQkN%2FgUDIKH4xL7tHEs3w%2BwQsmLln7EKv4FkZUH3x6qQ3LRXG3YkYTog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310b88910b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/sweeps-survey.724f05c4.js | 104.21.63.16 | 200 OK | 18 kB |
URL GET HTTP/3adxproofcheck.com/js/sweeps-survey.724f05c4.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (5840), with no line terminators Hashafcbdd30c40158232aa9fd35cadd736d 182fca86a5225bb13e7bef3900f162997ee3688a 9f2d46ca99b67007947391db6e07142120b0ed2d0a4746f0ad3f1edc7c75c9e3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/sweeps-survey.724f05c4.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:42 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7651-16d0"
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1695
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rJ6E13JJGmd7sCT8yPqel09dXX18ImrQBZDb27ATcsO1pKy4Hthg0l6dMnDRYbdDFTLSuRz9d1Kj3D35iI%2F0CO2qffc5LcwDbHFpbqdHifOX%2FstoPpKWImLgnZrklFeS2b3Nhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff3108fe010b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/v-possibleStandardNamesOptimized.js.205abacb.js | 104.21.63.16 | 200 OK | 6.2 kB |
URL GET HTTP/3adxproofcheck.com/js/v-possibleStandardNamesOptimized.js.205abacb.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeASCII text, with very long lines (7577), with no line terminators Hash754d15b064e9a8ceb8a31b38b1d81c9a 54ebff161ad4bfdabcff1771c25f945f8b39907e 948a15cf425885066c4d071b20d8920f6439a0e3e6684b200f68db637fdc7f8d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/v-possibleStandardNamesOptimized.js.205abacb.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7651-1d99"
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1694
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mROAY%2FMMU6z6kHQBAPtpao0L10jdynWZYwTyvUaF%2FYsdU%2FHXXyXKZWxDiMOTUuUrsRLb84AlLKd2j0ZsW8iPGbkNc6rphdJhf8X7FYGpBF8R3QiIXqV%2BHHmFv1N%2FzzEaZe33Kw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310b78780b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/css/_core-survey.d3ac2ee0.css | 104.21.63.16 | 200 OK | 6.6 kB |
URL GET HTTP/3adxproofcheck.com/css/_core-survey.d3ac2ee0.css IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeASCII text, with no line terminators Hash30d726a40ffe74d794b282ca1795b44c b43155653a1b9cc8d257687df9a75e0f204db348 4916da6d6e00e0e6681cccaf9107eb45fdfc78fe2e476444623c30a64959b5e4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/_core-survey.d3ac2ee0.css HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:42 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=84
etag: W/"662b7650-54"
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j6bTLq7QIwt0QyQ%2FqqrH0eLYmnZixhvLzV4vbsqe%2BFM3ITAVvR%2F6N9Ej9nuVprUd%2BuRpXVzah2JwYZ9B%2BHo26MiuEF%2Fy19rML1cf%2F4z90kP5pb6J2zPA7XXNdBrI6YxK6DOEYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff3108fe030b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/favicon.ico | 104.21.63.16 | 200 OK | 12 kB |
URL GET HTTP/3adxproofcheck.com/favicon.ico IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash668ba1a9fa1890ba16cb8adc28d3dad8 5e35223b2541265114eaf61b9da2556c812fea17 7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/x-icon
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: W/"662b7650-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QLNABmELX3S50dTo60e%2Fx61BCcD4gSUFKW6%2FR7EBxIbUVQexohJu3vPlwIpFBSNCyisb0B8QOv0mby%2FW8fDRqqqiH6RDg0AM1rMNumrriqfCtBJJP1ypVAAO1Ed36iIOOparpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c39650b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/v-utilities.js.d1112fc4.js | 104.21.63.16 | 200 OK | 7.5 kB |
URL GET HTTP/3adxproofcheck.com/js/v-utilities.js.d1112fc4.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (2577), with no line terminators Hash18cb151303391373ec2138ce7f10bd7f c3d6fdc026a675d23ac14beebd3a46e3e72e9dc4 93cc28fc75a9cbc865ed918e1a8d139ecf52c3a7d9a2caef63ed7092f69ee142
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/v-utilities.js.d1112fc4.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7651-a11"
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1694
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GBACmuMqVuIBHW6WsjMMPKX%2FOoTOu1mhBTUTW4cd19yAFGrltWLkQ69egW%2BJySLlgPn8L9e5sRcImtRkkjE89EGQ5qUa7qqMsXawLDERIbWelS7DVUgrniX363xp672d%2FSnuqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310b787c0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/v-node.js.28d8082c.js | 104.21.63.16 | 200 OK | 6.1 kB |
URL GET HTTP/3adxproofcheck.com/js/v-node.js.28d8082c.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (6251), with no line terminators Hashf61d0e9af048cd71962dcb945f405c63 aefdc99a8057ced201da8aba0640905dd05375d8 1d383bb00e9e3a4d2f58354b41bc0ffc60516bcdcf4486516b8638236b0aeb9d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/v-node.js.28d8082c.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7650-186b"
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1694
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K4dNuBlCYRhLgYEjXXrEZgmuRDk9V6bar13Vx5HJpS1D%2B2fa5LO82Dj3t7VhB%2FdMSxfopmtmCqx7QKbLHSS4%2FknK755KWXTl9vIZz6bgLHE%2F11mr2atsBU8J7wEaPnlHOvJSuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310b78770b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 | 139.45.195.8 | | 43 B |
URL my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 IP139.45.195.8:0
CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Cookie: ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 06:36:06 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=88a84aa3f4c8abff03bd01b93559b7e7; expires=Wed, 07 May 2025 06:36:06 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| adxproofcheck.com/js/s-checkLocalStorageAvailable.ts.f2fef93d.js | 104.21.63.16 | 200 OK | 330 B |
URL GET HTTP/3adxproofcheck.com/js/s-checkLocalStorageAvailable.ts.f2fef93d.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (338), with no line terminators Hash9a78659da737fccc89546e61f0eb6213 84e705584bdbc81715e0326742f426c2f472d3a9 bb46fe2e65cc91e5a01a8e731754fdc9b8f30813835a673bd96b48672ac82d60
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/s-checkLocalStorageAvailable.ts.f2fef93d.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:42 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7651-14a"
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1696
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FuKnRc93E1Tx20M%2BDEelfTSc6w7u4Pd9U%2FiDnD%2BtFtdu24fpnWPRj7ZlobEvtoTnTsFOkP%2FA1zPk1t%2FAcS9nrHxZGTgMUUR2rrSXVOYKpiGW8%2B%2FdhdPpro2tct1v9NiMq6ap0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff3108eded0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/_core-survey.1b09882a.js | 104.21.63.16 | 200 OK | 170 kB |
URL GET HTTP/3adxproofcheck.com/js/_core-survey.1b09882a.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
Size170 kB (169673 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/_core-survey.1b09882a.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:42 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=169676
etag: W/"662b7651-296cc"
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1695
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ppo%2Bz7n3Zay1ao9yIJ8EdO9riRccEHaozKJTGH715SHoFxmCXt7DZ12DDthLhMTZyOD7bcfpfyrBHyk36s5nxgtSqtWHbOgOLlXI5%2FSNCuWDwz0%2FX4h%2BRAOWpirNyFp4%2F6Bvnw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff3108fdff0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/v-html-to-dom.js.ff1ae7e0.js | 104.21.63.16 | 200 OK | 364 B |
URL GET HTTP/3adxproofcheck.com/js/v-html-to-dom.js.ff1ae7e0.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (373), with no line terminators Hash57f543d4f79657dc92755e2f2031da65 4884f924743049d7812b58958633a40f65e159b5 0fcc39a4a2b765b1ed92a6093fe6dc70e0a886914746f5af6fda6e3d1dc7417d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/v-html-to-dom.js.ff1ae7e0.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7651-16c"
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YyjM4EZUFraVplZC2LDgnaMWawbWq6vwqy3q7YaHaSUzXyQDWeoukDzip8g97KIVyhxZ60Ms8cCJEJmXDL4sODjLWkxRgqjh4CYdbGD8t5Pts3VmYuFqNzGxRVjdAFF7Wplbhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310b888c0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-1.webp | 104.21.63.16 | 200 OK | 862 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-1.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x52, Scaling: [none]x[none], YUV color, decoders should clamp Hash384118eb5e49870ad443d90051c692cb 35a73704dcf55b3232f2e9cfc333ff2ecfdcc19f 1ae21006f04f15e16a8057644615cdf8a8a9b39db706f53ba9a925327a6a1635
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-1.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 862
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-35e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4QFoiOvKZf6qFtSiE6f9VpuIQbclGrG1IQ3%2FqO65XHbFBCbmA2WFgcD0FteEq8RHxw72O13ZKeACgwyaomVZ3%2FKg65O4Qk06%2FpOZHjBVZfNFqGMpjJFjE7LYNji8UkNcVpNe6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c49760b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/s-storageService.js.bb9f7a22.js | 104.21.63.16 | 200 OK | 2.2 kB |
URL GET HTTP/3adxproofcheck.com/js/s-storageService.js.bb9f7a22.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (2216), with no line terminators Hash803fe057e4762b54a284184815cfb62e e748b6c77988934fe2b458b61a93e35f22cfecbc 0552fbab13dd0597298180b4d1c5e1a8a2ca66e121e3ab892f100366c8d45d3c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/s-storageService.js.bb9f7a22.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:42 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7651-87a"
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1696
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ANsYWSgqk9xB4wnF5bl7Eln3Fg03XgbnNhzBbMXaFysylaoWX5Z0mvRTff9soUQZflF66neDnJJ5xE71t%2FTzPMxEij3yXlZpeU7UYHVZR1F%2FuIkXVeUpl4oqVZM9HVEV94zlIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff3108ede80b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/v-attributes-to-props.js.a2e7cd04.js | 104.21.63.16 | 200 OK | 702 B |
URL GET HTTP/3adxproofcheck.com/js/v-attributes-to-props.js.a2e7cd04.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeASCII text, with very long lines (718), with no line terminators Hash4f868b7a0330d32e1450766a54886355 4b5952301185e7b02e2cdcba80f4aea3de700c47 2435c4b396d0b35fca9f618a201479cdcd64e84d43a386eec071a4082d7a781f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/v-attributes-to-props.js.a2e7cd04.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7652-2be"
last-modified: Fri, 26 Apr 2024 09:39:30 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VAZ4D6LMIOEhi43gJnjUtm3QQ5Uy9aCUz3wP%2BS6oI3vT%2Bngye9BfogwzH9xK0NxCF4xzG5Eia6%2FFG%2BMVZQ%2BLykhQFnok3o97A1hRcYeMupIpMY%2B5xLmrVOrnm6KlwooT5VBJfg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310b88880b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/v-constants.js.49317f47.js | 104.21.63.16 | 200 OK | 600 B |
URL GET HTTP/3adxproofcheck.com/js/v-constants.js.49317f47.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeASCII text, with very long lines (664), with no line terminators Hashcf8c486ed295e4a6a30f4fb155bf9fd3 9942a3d40672242af15f2d5cc95df2c06872914f 83c4b13e336b66f673d082c8b9b2b20fb98772916cb5da52f9e48c929cafc9cb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/v-constants.js.49317f47.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7652-258"
last-modified: Fri, 26 Apr 2024 09:39:30 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xXTr%2BFMXZ0G7s9sc9kKQsrlrJw%2Fid3misRcPAxhCjFbk2cYF188npDLgVVmD5zP3mkpsVjwICCUp%2Ba8LZoYnznlzqIhf0Mppok%2Fdb9C6NcXiV%2BQYbL2jf%2FC5yfPBGIr6OTU%2FeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310b888f0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/_rtc.f86a36d7.js | 104.21.63.16 | 200 OK | 12 kB |
URL GET HTTP/3adxproofcheck.com/js/_rtc.f86a36d7.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (12222), with no line terminators Hash128d6eec0793a7e02c314d2f6245f260 c9f09311c3f229b770f38d0cc69b422430f1c748 bf1606ac64db254cc565a094e7162a96f31f7e48ddece56fc92c654559e5abb8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/_rtc.f86a36d7.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:42 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7652-2fbe"
last-modified: Fri, 26 Apr 2024 09:39:30 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1696
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VNNVBoYCVXhEOu5OBL9QZlPXH%2BTEbIDBQtETwuuU3yGEeOPSevhJg5Czgvjqby0%2Bc9OC7BO5Agc3Q1WFtnZTgiKiRTTAKh%2FqSUJslDOnuKbsISqA6KRhzta5ztRdde1RtDaL%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff3108eddb0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/css/sweeps-survey.f5ae42b0.css | 104.21.63.16 | 200 OK | 94 kB |
URL GET HTTP/3adxproofcheck.com/css/sweeps-survey.f5ae42b0.css IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash895c99e8dc2cac2fe41b6e4623314c0e aa530776c5425e3f15a8ad66ee1bc43840172ac6 bb88f272fbb80a919f86655f6cffff6d8419f09b60e279c9727d904f16d73d9c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/sweeps-survey.f5ae42b0.css HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:42 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=93694
etag: W/"662b7650-16dfe"
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pS5HTTKPOqlmMivNl7J%2BZsFAM1khSwFQN3KCunn%2BqVXArx0VvqEas2j1TM%2BQiO4dHiyDFGXGi9kx3tZeUU%2FMxTN56Jx05Lle09ScSOOEfTR7oXd7BNwlur%2Bqx4rCHM5cnxdeuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff3108fe040b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/config/comments/en-sweep.json | 104.21.63.16 | 200 OK | 4.9 kB |
URL GET HTTP/3adxproofcheck.com/js/config/comments/en-sweep.json IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeASCII text, with very long lines (5602), with no line terminators Hashe365b2a50ff785aa57118984ebc86b5d 0cf187164eaa42ff7e244ba653bbde659feaa5bc 3094a84e8e909474fae4e0db6685d9b407d4493efd9389efe35caf326c95a6f0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/config/comments/en-sweep.json HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/json
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
vary: Accept-Encoding
etag: W/"662b7651-12f9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GgDNimcM72X09A9K0K1HY49qovuLyn0voeAh3eleRbr6Kw%2BbcBWp%2FUuJ8542ReuxUi5%2FlFn03C850DknMa9ON6oetE48MZjy6OhdHlYEMu%2BuM4zOxoPP4cAgEuZ5TmMBDTNZnA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310b48410b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/v-domparser.js.97173b2e.js | 104.21.63.16 | 200 OK | 1.7 kB |
URL GET HTTP/3adxproofcheck.com/js/v-domparser.js.97173b2e.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (1772), with no line terminators Hash46dd2964e007bc585a8f72ed695089e8 d02de9abf34cf05d707899e2562c067a8e5326bc 96d95d967e2f5ca4a1be19cf0d21f756ba2d0295ad5f4e967048054e85f6072f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/v-domparser.js.97173b2e.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7651-6b8"
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gSZy5r7%2FMK0cJ6yTy5mrpYF9sOC%2F6LNmDLYKGeVfOwk3Fa8xKp4tVTjGD6RzXdHL%2F5w4acowyAUSw2dlemAQh92bCyQVAjPK%2Bfr4LOgejreF8gmlArvoQpU5bNrs%2Bl6i9T%2BPzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310b78800b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/v-dom-to-react.js.26fdf751.js | 104.21.63.16 | 200 OK | 1.1 kB |
URL GET HTTP/3adxproofcheck.com/js/v-dom-to-react.js.26fdf751.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (1101), with no line terminators Hash5693cb2629dd3231ce6fed788c41b150 872d71cae7dddc37389be6bae0fc4a5b611ec9c0 b312636bf1d349d818517865e89c22f8b9ef9e61d1805cf315e44241ccc05d26
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/v-dom-to-react.js.26fdf751.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7650-43d"
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tEviIQWnE%2FBo7gQrKorzycBDf7rUDu%2FZR5%2BUPq7vCK6%2BCs5N79nGkSv5kHc4I43myDNWrtJ2y2NKL50UoBQn1tktJD8vtA3LNHt9edTu8FPiJDWBXU08uzbtsw%2F9gy%2BdHrOd8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310b88820b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/config/sd/sd-99275599-en.js?v=10 | 104.21.63.16 | 200 OK | 5.2 kB |
URL GET HTTP/3adxproofcheck.com/js/config/sd/sd-99275599-en.js?v=10 IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeASCII text, with very long lines (5380), with no line terminators Hash5f743ae44ecf79f46e1283242703efe9 b94976f36efc92d69bc7dca22c022fae0fe9f97a 9ffb0e0f086d5d9ca36db4cf2c10823ad6dd1442ef80902672ab7dd26620114f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/config/sd/sd-99275599-en.js?v=10 HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/javascript
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
vary: Accept-Encoding
etag: W/"662b7651-1428"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=icadktNx8BCpjowwX9THRtt%2FNDs%2F6Da6EKzFIjL5q599u5G5%2FeLn%2FjvH%2FHqFCKt%2BPG8877sYQwBO1tGz1sQkJ5%2BayTrm5%2BVKbt9wtb9Og1fRgStieFoniO5bLvpuXCyJNliW%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310a2f350b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/s-checkSessionStorageAvailable.ts.e8412d91.js | 104.21.63.16 | 200 OK | 330 B |
URL GET HTTP/3adxproofcheck.com/js/s-checkSessionStorageAvailable.ts.e8412d91.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (338), with no line terminators Hash6eb1ccbb769935debb74de9858287720 5302f94074f05eb22f05368dfe3464b85c89fb48 1e016cce8f09ded837e6e46c9e26d5dddccc19bbfa89c9dc583c04d85e2c7bb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/s-checkSessionStorageAvailable.ts.e8412d91.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:42 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7650-14a"
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1696
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4tAEH7dcUZxnEzh0PcQTokghDM8gUwA0wSpruL4Qtc1ZD%2FSY0gMQUaJT9n1X%2BbIBdhtrRSQF5LVS9aXp5HIfwKKn9z2XuTpn2L2GY5LR89p7%2Ff1DjWjyLCzrRjtqJhk71t9HyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff3108ede90b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/comments/person-sweep-2.webp | 104.21.63.16 | 200 OK | 538 B |
URL GET HTTP/3adxproofcheck.com/img/comments/person-sweep-2.webp IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hashe4d97f0d392aca4fa78b0928438d0168 55f713d8826a9a65e11fddf4c5fa4ea5939953b2 7058be64334990621fbc8cc06782aac5116c6e8a6d7700d892cb8b36f06c5866
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/person-sweep-2.webp HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/webp
content-length: 538
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-21a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VopfrHdT%2BPg%2Fv87C5u4RGya%2F%2Fmn3tG9cn2zWcMsJP8dbiuOXpn7YBA5cfBTuJfqjw2usryBoq8ZXn6T7V7K%2B2IhvA57GkC4xBs70If9MTYp0Al%2FZwaHjVsriyzBXXzgZsjcUeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c59790b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US | 104.21.63.16 | 200 OK | 7.9 kB |
URL User Request GET HTTP/2adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US IP104.21.63.16:443
CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeHTML document, ASCII text, with very long lines (8134), with no line terminators Hashf99d54c9ee3865f982d1099bdc61155f 83955028f7a58acbd0a2199f79ae501d6d3afa56 d122da6bad371a70444aede6db6ac774d49b2f913ef0c9b83a68dc38dfb48379
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 06:35:42 GMT
content-type: text/html
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LrkyXUD3M%2FmaQqEjt8r1IHHWAM%2BN4bQVEj3p2Bp5Ej5QitKT8vuXHGTC6yug1kwz8ZJfm%2Bt2ZXAyVm8zrQLIHsAGg52Gu8GJCSLAWeVpk0NDo1hYiKfRATwgp4VsqBG7rNdieg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff3106be5ab503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| adxproofcheck.com/js/config/dict/cookie-consent-1.json?v=10 | 104.21.63.16 | 200 OK | 6.8 kB |
URL GET HTTP/3adxproofcheck.com/js/config/dict/cookie-consent-1.json?v=10 IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (6009), with no line terminators Hash4b2ff958e811a50d2f641818590b443d 6abae297812bb55fad869e953e7fdf7469cbe1ae 9c77a5f3d0028d9ba122ed15728ee7b144619431f8302503a19c5785ddaa06b8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: application/json
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
vary: Accept-Encoding
etag: W/"662b7651-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jtOWSdbU0T2bz05hAYZuc%2B1sq8PxquA3g34Hs93HYSohdP4nhvpuCDoUh8W5Nhyn1U6B7tg773Qseqi%2B%2Bh2dsZ7EXv7pO%2Fwx6M4ItN24t0uYU5SUVOzIpj%2Fx%2F9JnIsF93ena6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310a3f410b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/img/sweep/tokens10k.png | 104.21.63.16 | 200 OK | 82 kB |
URL GET HTTP/3adxproofcheck.com/img/sweep/tokens10k.png IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typePNG image data, 480 x 500, 8-bit colormap, non-interlaced Hash10337a4976db716ba3b8cad1f0f1f736 788015c74e561249cc5318fc178e564b68bce44d fef211dba7465da86e75019f78dcdf59af496394963b0bc6cc78b02286effe58
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/sweep/tokens10k.png HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=88a84aa3f4c8abff03bd01b93559b7e7; syncedCookie=true; oaidts=1715063743; ID=88a84aa3f4c8abff03bd01b93559b7e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:43 GMT
content-type: image/png
content-length: 82163
last-modified: Fri, 26 Apr 2024 09:39:28 GMT
vary: Accept-Encoding
etag: "662b7650-140f3"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 509
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rVYFjlrzu2Ssh7pIX1XCYpjDPwDGjFJIPEzIkFTJLzu3kihwScv2t2rAeCJMzRmBCe4kPHbB%2FtkNKlTkaHlSkHmqNpTSKmU%2FzGt3lcl7vBw%2Fpse3jTP8ZO%2BELX%2FTt3%2FwX4qDuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff310c093b0b45-OSL
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/v-redux-toolkit.esm.js.fe3487ca.js | 104.21.63.16 | 200 OK | 11 kB |
URL GET HTTP/3adxproofcheck.com/js/v-redux-toolkit.esm.js.fe3487ca.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (11319), with no line terminators Hash5aa3676547abc9a38889c09e69ca968d d19ea919192e86f97c34c0a5959ad05c52299aec 21648e7ba668a077e403b6bd1a38f05d55d987737b959d57e3b3c53787107eb7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/v-redux-toolkit.esm.js.fe3487ca.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:42 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"662b7651-2c37"
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1696
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5xO5ayH%2BehXo0tK4fomCClFcq%2BYc4wctGIBYLDTahP5f7heZJFko%2FF5YNequOs7UWG1cLZS2zFabSRwVEI1CueZ6%2Fe2d40UVrZmqv2TRwA7GDfY8LYGbfEfcGRwTymzh5J4dlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff3108edee0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| adxproofcheck.com/js/v-index.js.da9f7529.js | 104.21.63.16 | 200 OK | 41 kB |
URL GET HTTP/3adxproofcheck.com/js/v-index.js.da9f7529.js IP104.21.63.16:443
Requested byhttps://adxproofcheck.com/policy-sweep-check.html?offer_id=99275599&geo=US&oaid=88a84aa3f4c8abff03bd01b93559b7e7&s=811513813344980992&z=6799394&b=20430602&var=CanvWiJNVa&campaignid=7970865&utm_campaign=CanvWiJNVa&utm_medium=6799394&utm_source=zd_7970865&utm_term=20430602&utm_content=zd_public_v2&country=US CertificateIssuerLet's Encrypt Subjectadxproofcheck.com Fingerprint24:9E:27:83:F9:3D:78:1E:CC:8C:13:DF:61:4B:9E:56:85:49:5B:9B ValiditySun, 24 Mar 2024 13:11:16 GMT - Sat, 22 Jun 2024 13:11:15 GMT
File typeJavaScript source, ASCII text, with very long lines (40985), with no line terminators Hash47a5b821c80a532b5e989cf87d451283 c0f9e87128e1d7d634649fb3c7b6c08f714e79bc 2526538666fe9c7811b9afaf71794b4f8cb4f0751f62872e1a0d8c3a6c131f07
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/v-index.js.da9f7529.js HTTP/1.1
Host: adxproofcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 06:35:42 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=40988
etag: W/"662b7651-a01c"
last-modified: Fri, 26 Apr 2024 09:39:29 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1696
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FgOwiufTYGQKzVh6YLVNj14ianIh%2F%2B294XA5%2FVdfuGoTtzKpDvrVEzYx4HukRlo1VJuUpavn5PNomSHnp9vtjy77rTQrUQfSGaIaIFOU5hbwvRZEnoIUMTA9Fm38KWqzXwwHeg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ff3108ede40b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
172.67.142.102