| vamtoacm.com/_next/static/chunks/main-beb6af9e60a8e042.js |  188.114.97.1 | 200 OK | 43 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/main-beb6af9e60a8e042.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash44ec1451f689d71d5f33a10d4aa44658 0f7e72050b7bf72366d9463a16038ae94e232f46 1708144463d376da261c16eab17b1d2fe5c49351847f43a46c6ae4b347fd9304
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/main-beb6af9e60a8e042.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-1a957"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rhji2Tl9wZP%2FBUucvqYyfhTPFw9mZTII8bWc5Y%2B3yXgYRAk5hWFnL%2BiKntTqSAXW1Sl4GoNFESoTNuAUPlHdUBg47E%2BfhBarnuNsbEZtTN6UKCN0n3aEKh1HxbkbQ9M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d178ab5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/img/rain/dollars-2.webp | 188.114.97.1 | 200 OK | 8.1 kB |
URL GET HTTP/3vamtoacm.com/img/rain/dollars-2.webp IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeRIFF (little-endian) data, Web/P image Hash8b4203d496c3f52b116af082a0cd4017 de5369e9459e240950bb7eb5261eaac1db26907f 8dd1f04088c25e20d15e1bc23129604830aab2b4d3d0a408a5f047f9768f39a4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/rain/dollars-2.webp HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: image/webp
content-length: 8140
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: "663df8ab-1fcc"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0rTbqPGGZIxeWM84fuyEUyVr5ddTkDmplBoUWxWVFNRWLF0C1KBsCUmC6Tc64RCU6%2Fj12SVRnyfrcFvIdusYM8gKnFEMN2ETy9y%2FoP7BFYpJvVTEa%2FTkhgk0V7GyQCs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d289ec5689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/img/rain/dollars-3.webp | 188.114.97.1 | 200 OK | 5.9 kB |
URL GET HTTP/3vamtoacm.com/img/rain/dollars-3.webp IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeRIFF (little-endian) data, Web/P image Hash51ea76ff382bff8ef58a9943f7fd21d1 5c3d6ad6620fbde5ce3dddc88604e6d54621eba2 0240f30fc542fb5c2d532f33bc793b797199adaea75e22a7d9f04674b80d9a32
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/rain/dollars-3.webp HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: image/webp
content-length: 5938
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: "663df8ab-1732"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FQnew1vTlvyKoY7xaR%2B916R9Dc9EbbNGUQ%2FdOBKNj7Smz3pv%2FnGi357QKNsErqWWaz6zzjnAWCWLGf8IRg2biXF3glJ7z0%2FZjOss9C2JMz0Saa0WAgBbSUSG%2BPpPBc4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d289ee5689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/favicon.ico | 188.114.97.1 | 204 No Content | 0 B |
IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Fri, 10 May 2024 12:55:44 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4315
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UgdroDZk6J2vIZxvZo78Bt4q%2FAK4m5VOA2ja53zBrj%2FYhZULdgPdx%2Bj%2BdRisAhDFkDdCxInIfjTBBSSE0xWGCPkSt%2B6cn1WUzVYDR9oQXRHotf3ueoTnPsG8PfxQUMc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881a15d44c275689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| my.rtmark.net/gid.js?userId=7jgh8b7mglwx6818mtu1foxvfs4bmsqx |  139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=7jgh8b7mglwx6818mtu1foxvfs4bmsqx IP139.45.195.8:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
Hash0936ecf34aad07cf38bf19b31ea29668 82e22144912343ec53ab8ea3f3deaaeebd118bf0 44e18601b941088ac322258bef8b8f0b63ec50d47bf6a43dad8f1099ef8b7620
GET /gid.js?userId=7jgh8b7mglwx6818mtu1foxvfs4bmsqx HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vamtoacm.com/
Origin: https://vamtoacm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://vamtoacm.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=7jgh8b7mglwx6818mtu1foxvfs4bmsqx; expires=Sat, 10 May 2025 12:55:44 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| vamtoacm.com/_next/static/chunks/810.a0608c12f2123e1d.js | 188.114.97.1 | 200 OK | 1.6 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/810.a0608c12f2123e1d.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (2996), with no line terminators Hash21123338572e9bc9ecef1ae7f2a671a0 6bfd1a5a3a454c704c10a07f8d72ce96ba6d0cad e869ca9a1dd932f4220641f06ed73b7ff85e06587cf86e014a23b972388b4a12
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/810.a0608c12f2123e1d.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-bb4"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o7g7ridiWXP%2BVNsTrpefRoQL6bOpprwbGHa2gdDWBeFkj87Hewx08QusjYygRmyvT6%2FmR2dgx2XbZpflCrXH6h%2BqtvmLPy4Q%2Fxa8LS52Gfc%2FoOb4hAL%2F98pjtXDxEXA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d37b335689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| arleavannya.com/sync-metrics | 139.45.197.248 | 200 OK | 0 B |
URL OPTIONS HTTP/2arleavannya.com/sync-metrics IP139.45.197.248:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync-metrics HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vamtoacm.com/
Origin: https://vamtoacm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 12:55:44 GMT
content-length: 0
access-control-allow-origin: https://vamtoacm.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| arleavannya.com/sync-metrics | 139.45.197.248 | 200 OK | 17 B |
URL OPTIONS HTTP/2arleavannya.com/sync-metrics IP139.45.197.248:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hash5b64e8b89092b2e3dfd448b10700627f 484b3032619fa1acd135d114565b0a5166281c22 f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vamtoacm.com/
Content-Type: application/json
Content-Length: 223
Origin: https://vamtoacm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 3fd52bee9a85d63f00972a2546b5a465
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://vamtoacm.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| arleavannya.com/sync-metrics | 139.45.197.248 | 200 OK | 17 B |
URL OPTIONS HTTP/2arleavannya.com/sync-metrics IP139.45.197.248:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hash5b64e8b89092b2e3dfd448b10700627f 484b3032619fa1acd135d114565b0a5166281c22 f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vamtoacm.com/
Content-Type: application/json
Content-Length: 276
Origin: https://vamtoacm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 1929aa276298b4cc6fb5bef8c15671ea
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://vamtoacm.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| vamtoacm.com/_next/static/chunks/pages/_app-96c04cc813c34c9e.js | 188.114.97.1 | 200 OK | 14 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/pages/_app-96c04cc813c34c9e.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (42130), with no line terminators Hash38d24ab8e3972383198c5cdd87548c28 dbd519bf95c2e24f2eb5122d6c81524ad442c884 e96eca5f1ae0f2434dd09834ba152a942beb3c9678603d8e8eadcac9469b95ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/_app-96c04cc813c34c9e.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"663df8ab-a492"
last-modified: Fri, 10 May 2024 10:36:27 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4315
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zd%2FPNx0VDZfe3WBNCAeVgUON2exzh%2F%2FwtzP1Iw%2Fpj1IViZr5LAeW0vIWl9K2h519v73cWGWB1tQDP10PcJpUTCIjaW1ZEdzOzGw10Rz5xftAynG9sOA4%2B0VEXsAYDpY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d178ad5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/img/comments/finance-survey-people/person-1.webp | 188.114.97.1 | 200 OK | 1.4 kB |
URL GET HTTP/3vamtoacm.com/img/comments/finance-survey-people/person-1.webp IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hashc5da2ea294623650bae71fc84401cf60 f1f62ea011cf81953cefe28254c134e992453b91 09a846c5b1af2c6100ff3193789be1e0e21ba9fc45c268f76f2007c78f1e4ac1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/finance-survey-people/person-1.webp HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: image/webp
content-length: 1402
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: "663df8ab-57a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9xC4rJ1pB2ixJ429GkpMflPFpMDUhCTBjPlr9mNwENclssOIoHGEOBK9BuFiC1USJRri2MD%2FRZFk5flTliWAADYdwxEzTiC0gxANFIgwCcO6DfTzXTStZNFTvEIpnKk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d62e695689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/img/comments/finance-survey-people/person-4.webp | 188.114.97.1 | 200 OK | 1.8 kB |
URL GET HTTP/3vamtoacm.com/img/comments/finance-survey-people/person-4.webp IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hash5dc160f6b521dc8f6c670b140b354fed 22e15cda82b532067b99932ec28f86ea2cc1ecbc 09c6c6de57458ec0c4e7a3d2375e0c7b9c037de9366b63e3685cc0ca94d838b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/finance-survey-people/person-4.webp HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: image/webp
content-length: 1798
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: "663df8ab-706"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9LTpJJfm7Pjzd%2BD0qZcvmdcKtd0anXI4lD%2BnA6uMK%2FKDx8GyJklvHKeTTfL2no7lo%2Fg4cC4IzeXGPK7IPkert20FK8wYPqh3hPbc0zuJ1TRraV3qs5dNTlFyuWl76WY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d63e7e5689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/7903-dd238946c7924507.js | 188.114.97.1 | 200 OK | 14 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/7903-dd238946c7924507.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (31896), with no line terminators Hashb5dd343db67bd22544d11da18268f5c3 069b5b221dd75af58d93192460778b3d07835e74 6347f1d4083f7a0a2ac3d8b12aae8832d9ea6914aa6e137d16a4d41869d14ea5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/7903-dd238946c7924507.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-7c98"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fE0xPpvLm0L5jx%2FNUXy6tUwdCoavKiCmd1XMO7scduPIFNNNKLGF6S3z1u%2BYRjgJq1GEkTmETVTvXiEUPkk1m2p%2B6Zz1PQlS73aRRxXzAAg40iwngmCntIqA9E5dWpw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d178b25689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/framework-8940d626f3bfb7e9.js | 188.114.97.1 | 200 OK | 12 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/framework-8940d626f3bfb7e9.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (25995), with no line terminators Hash33a34c525e2bee14a166fe1289835308 4afb650772181930d19dca9a41490beea5087932 bebac61ce044debeb2025b1fbf1c95f1b9a4bc97d0702676dea22b0bb689b555
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/framework-8940d626f3bfb7e9.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-658b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jn6I5%2FKydHVOK5dVG01qNZybRUkbIngfC2VXiUj%2FKZLB8qh8aoZbCYX147SblJym7bLzDgarDb%2FvGwCtPswX5CpFWbsc8tpYJ7my5NP46U%2FzpS3yd0OwcAUiKNpHT0M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d178aa5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/img/comments/finance-survey-people/person-7.webp | 188.114.97.1 | 200 OK | 2.4 kB |
URL GET HTTP/3vamtoacm.com/img/comments/finance-survey-people/person-7.webp IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hash0d91c465f6e704113b3a499440a0f525 a138134744c1f316d7aefc9500d573210c35cc46 5f20fc611eeb4669a12f237e22c403afc79c7646d9c0fec719d2a14890bfd530
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/finance-survey-people/person-7.webp HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: image/webp
content-length: 2386
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: "663df8ab-952"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XSDRO7EL7FLrh34Xj3AJWZzI9n%2FOC1DYIOzgMN0SiXsq6N2A7Fc3QM8xCzrS%2FEo2WKvnDXQ9EFvcOcsmSGrmo1QNlPqjekspnm7yHnxKtZxTuDC22uu32UQKco6Gymk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d6bf455689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/6223.f75ac61ae8ab7ac1.js | 188.114.97.1 | 200 OK | 4.0 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/6223.f75ac61ae8ab7ac1.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (3821), with no line terminators Hash63e42624a0a2e938e43c9f253bdd2af1 6c4bd2c6c56338138db1d18413a1e333c08d6a40 6a5a6b8e03f61bbb48eb6c298071e6d028dda863efd959e45eefb94cef57ac2f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6223.f75ac61ae8ab7ac1.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-eed"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RoPP5UU%2BHd4a68qukRjtCat4ipjpRIE9gN2prJL3tV73inr2rw%2Fd%2F%2BtlpuYnWMixNoP3wECLmNBWfaimjyeMPGYVdTeGVDzwob40%2FsTWLE%2BOwgbcyIkXlTBZtpG3nmM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d38b415689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| arleavannya.com/sync-do | 139.45.197.248 | 200 OK | 0 B |
IP139.45.197.248:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync-do HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vamtoacm.com/
Origin: https://vamtoacm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 12:55:44 GMT
content-length: 0
access-control-allow-origin: https://vamtoacm.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| arleavannya.com/sync-do | 139.45.197.248 | 200 OK | 179 B |
IP139.45.197.248:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hash081142aa1c9267422ee7fd25ac457579 cf8a223610da412aab4cc9aec68f6f304258b3ce 58084d495376ed2e41f026c352cabb187129c58109f2b15caeb1a539deb2cd19
POST /sync-do HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vamtoacm.com/
Content-Type: application/json
Content-Length: 161
Origin: https://vamtoacm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/json; charset=utf-8
content-length: 179
x-trace-id: e6ef6de9481ff8bc3cb7ae58f992da17
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://vamtoacm.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=7baaeab7-6420-4721-8d9c-a8c7d12dcdb9 | 37.48.68.71 | 200 OK | 12 B |
URL POST HTTP/1.1datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=7baaeab7-6420-4721-8d9c-a8c7d12dcdb9 IP37.48.68.71:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerSectigo Limited Subjectdatatechonert.com Fingerprint3F:E1:50:2C:9F:FC:F9:37:03:E3:B6:34:00:06:89:69:01:E7:C3:27 ValiditySun, 10 Dec 2023 00:00:00 GMT - Mon, 23 Dec 2024 23:59:59 GMT
Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=7baaeab7-6420-4721-8d9c-a8c7d12dcdb9 HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1335
Origin: https://vamtoacm.com
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Fri, 10 May 2024 12:55:44 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://vamtoacm.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| vamtoacm.com/zone?&pub=0&zone_id=6679107&is_mobile=false&domain=vamtoacm.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=f4f53c15-01f6-4c23-b23d-607b797e0588&action=prerequest | 188.114.97.1 | 200 OK | 0 B |
URL POST HTTP/3vamtoacm.com/zone?&pub=0&zone_id=6679107&is_mobile=false&domain=vamtoacm.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=f4f53c15-01f6-4c23-b23d-607b797e0588&action=prerequest IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /zone?&pub=0&zone_id=6679107&is_mobile=false&domain=vamtoacm.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=f4f53c15-01f6-4c23-b23d-607b797e0588&action=prerequest HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vamtoacm.com
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Cookie: OAID=7jgh8b7mglwx6818mtu1foxvfs4bmsqx; syncedCookie=true; oaidts=1715345744
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-length: 0
x-trace-id: 7377f976ff4182d5e6c88248498f2020
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://vamtoacm.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=36lGmH7vpiXW%2FYxhafCBpc%2Bx5X04ubji6GTWZC3lNLpwelWLr7gJy9b1IMobGnZFzdSl2KcS8GavmNrmo%2BW2aAxDHj0guCP7WbCpgObS8W0Myz9Sa75fJEc7s4kl7%2FY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d8997e5689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/4981.2a332d38c95dc4f9.js | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/4981.2a332d38c95dc4f9.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (19546), with no line terminators Hash223898374dd56eccf76322f878b326f7 dc004d92d8fb70e324e193f138f496b190164126 56c360551aebd13f55666a056edd4c681b39fd1b3832ce1233fc2dae7640ed46
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4981.2a332d38c95dc4f9.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-4c5a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UNgQGgzINTb4IXNtn5V0UZCjmBxhVOiKYOPOU8SCN95vGzO6unDporX2MJ0cEAkNmWEh7tfZQEQxGIRbbzTWEUjlel%2FJphZHhIrZRdVSHGpYMrFKRPY1TE5JJrF%2BVS8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d168a15689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/6335.98b59ea79e74779e.js | 188.114.97.1 | 200 OK | 14 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/6335.98b59ea79e74779e.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (54277), with no line terminators Hashd2d1ee007a43b39d59e399adf09cdb45 c4e72353ba2deb9e9c9439516fc75080796ba35a bc4157510f688def5f555f6809552242db5d20bdcac80e418acf6fdd362edf7d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6335.98b59ea79e74779e.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-d405"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SDw%2FgwzUn%2FDnYVfYn%2BTTRiQgW0CYUvo3Nrt80KvMarOS09JR3E4BE6oxs%2Fm3%2FOkeaphl3e9Zc6UxbujViPsqgQbGmtnELEWbWvCZgDY6163f0e0V0olktaYDY%2BFywCk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d178a55689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://vamtoacm.com/
Origin: https://vamtoacm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 12:55:44 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://vamtoacm.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd6db954e06bbe2abd676f05b70d706e3 c048df9f6eb92bd0b9be34229fdfad9907f43fe1 ed01e3b018b1c97a0b3a8af928fab44ba644a9fa35bd3ec19db5a3ac27e7dee6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vamtoacm.com/
Content-Type: application/json
Content-Length: 1648
Origin: https://vamtoacm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://vamtoacm.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| vamtoacm.com/rotate?zz=6543018%3B5128285%3B4326647%3B4949467%3B5381239%3B5381316%3B5381307%3B5381339&var=&ymid=&ab2r=&var_3=&var_4=&os_version=&uid=7jgh8b7mglwx6818mtu1foxvfs4bmsqx | 188.114.97.1 | 200 OK | 8.4 kB |
URL GET HTTP/3vamtoacm.com/rotate?zz=6543018%3B5128285%3B4326647%3B4949467%3B5381239%3B5381316%3B5381307%3B5381339&var=&ymid=&ab2r=&var_3=&var_4=&os_version=&uid=7jgh8b7mglwx6818mtu1foxvfs4bmsqx IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
Hash91b01334eb9eab492403cde66e31a6c4 151d76a58095be9b7b3572b7e04f212f18f3290f 8323d47e606b5847bd5649add59fcf36957bed8c4d73b8b77f0232c20f59f4d9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /rotate?zz=6543018%3B5128285%3B4326647%3B4949467%3B5381239%3B5381316%3B5381307%3B5381339&var=&ymid=&ab2r=&var_3=&var_4=&os_version=&uid=7jgh8b7mglwx6818mtu1foxvfs4bmsqx HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vamtoacm.com/finance-survey/20/5522/
DNT: 1
Connection: keep-alive
Cookie: OAID=7jgh8b7mglwx6818mtu1foxvfs4bmsqx; syncedCookie=true; oaidts=1715345744
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:45 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-trace-id: 9e50a5aef6f45472b3e6b70868d03696
timing-allow-origin: *
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
access-control-allow-origin: https://vamtoacm.com/
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
set-cookie: OAID=7jgh8b7mglwx6818mtu1foxvfs4bmsqx; expires=Sat, 10 May 2025 12:55:44 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GeA8pM8DkFIabSMgvYI0GjReuXCdrzCJfIEY7wD6xSJVBcCscAG0Purheyh%2BXDujZOVKRo5LQH6rITWhwwKAeI7Dm8deb2HGCRB%2FzbUmFCPkGVH5qZKn79owtKepV28%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d77ff85689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/finance-survey/20/5522/ | 188.114.97.1 | 200 OK | 39 kB |
URL User Request GET HTTP/2vamtoacm.com/finance-survey/20/5522/ IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /finance-survey/20/5522/ HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: text/html
last-modified: Fri, 10 May 2024 10:36:30 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qhHW5kJcaoIRQKQoBlkyeQimjZnO1N7Z5D9sSH%2BWVcnDP380IfYnHprga1ekujyUFWGIG8tO1OXJe9tK3UFRkEX%2FUmqnbnZ%2Bjrq%2Bv5nbSSFsWzgiR9MuTzO%2Bm2PTU5I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15cdcb7a56c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vamtoacm.com/img/rain/dollars-1.webp | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3vamtoacm.com/img/rain/dollars-1.webp IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeRIFF (little-endian) data, Web/P image Hasha5bef813a0113d018592091106451c8b 59365e96c4abca5eb98a0c56db0af0bb5cbffebb 036beb7de9c9d450e1442d593ff70ad392ca4be6754e7feaec249c0009e1bd83
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/rain/dollars-1.webp HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: image/webp
content-length: 10546
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: "663df8ab-2932"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m8gjOyhK7EHbzjEuArqtthhGIhDM5qwXmqxfmuYurgfH1C%2FutO5y%2Fi0zh275eWaAaIgVtf8MAdLFQv5rp5%2F6buW2uJGiqdOgpPmKmW9cVwGvvJAuFblcs8mkSMzj8%2BY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d289ea5689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/img/comments/finance-survey-people/person-5.webp | 188.114.97.1 | 200 OK | 2.4 kB |
URL GET HTTP/3vamtoacm.com/img/comments/finance-survey-people/person-5.webp IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hash188dfcdf19da1d86ed162d54ed03536d 98b1baefbb803548b2894547091b4c7773406524 4f8251665e3cc796f127ea6cbdc00a9ec450adff16acb4ec74463c446b6f4ba6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/finance-survey-people/person-5.webp HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: image/webp
content-length: 2384
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: "663df8ab-950"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yS%2FzfpGxZl2ssdQ6GBOBRaUovkoklZyRrC1QoJaR8ALVdFtgI%2Fgkvc%2Fi4PgKYxz7b8SwL7JGSzu3BQWvAFyGeLaojLoXudk1IvJYk7b6ohKudit0zhTm5Ldo4UKg6ZY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d6bf485689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/img/comments/finance-survey-people/person-2.webp | 188.114.97.1 | 200 OK | 2.2 kB |
URL GET HTTP/3vamtoacm.com/img/comments/finance-survey-people/person-2.webp IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hash8f8ffbb278de1342e5cf44cd0c677c23 1b4b4428e409479cc8a8acfce6f537c2aeea7556 ac4284ed6941963c4fa0db306537f42f3a0b1fa18710bc7b9e1e62188961d83a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/finance-survey-people/person-2.webp HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: image/webp
content-length: 2220
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: "663df8ab-8ac"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qclYuCc27Laf9e79VSu7zkC7Zvq%2Ft5kebaUlQTnAa4jSkfMIGY0EjnX44ZS6gXg%2Fs3TbbedtoTVzzhnjBqb9kPhe6lOcK8pZE9r2wRtpNdn7YdRdS3Co5hlJM0URslE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d62e705689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/custom | 188.114.97.1 | 200 OK | 39 B |
IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashc16023891530fbce40f0a1244c3af01c e15d9dff768d82673e5e797a8395d1fa7d9049b7 c7d0061f2d2b9eb7b65b547c4bdf03f5f332cf34021bc972f64b6ad58d3a121a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 303
Origin: https://vamtoacm.com
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Cookie: OAID=7jgh8b7mglwx6818mtu1foxvfs4bmsqx; syncedCookie=true; oaidts=1715345744
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-trace-id: 86658e766df386e0b94a3ec4706a8cec
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://vamtoacm.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VkYN67C46e4FQRMWHdngXmG7g6LPN57cn2nd50KeLA0%2FRy2iq%2B1a8CMM%2FLjBNgJ4ayZOEWKQcdZ8%2FPuqSH0p%2BRHDTHfv%2Bz9QK4nsKDX2nmOsKuYWRcqCWHEXUFIiZC4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d8997c5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/OAeNmNzTh6Eywu5w8qlhq/_buildManifest.js | 188.114.97.1 | 200 OK | 1.6 kB |
URL GET HTTP/3vamtoacm.com/_next/static/OAeNmNzTh6Eywu5w8qlhq/_buildManifest.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeASCII text, with very long lines (1697), with no line terminators Hashe482e9c3e80bf1c59d3f509069c95b78 1e5a69823f6c6e129ac789dcd4fc98061a18fbc5 d00586f5303ec941fce1cc558be619a643ba562886fa74a16bd42f03d12ee892
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/OAeNmNzTh6Eywu5w8qlhq/_buildManifest.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"663df8ab-645"
last-modified: Fri, 10 May 2024 10:36:27 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4315
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TSAW4TEXEXdV6xXuP1qRTs2%2F2RKbpCevteQeDFQkVApEQrk9x9Cqsygozfh%2FXMS776SXjDDq7IbferBM6BBMZkW4QRBAKe2wlp1M3SULKtzkUfMWjfgGzTsczVs2T%2FM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d188bb5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/OAeNmNzTh6Eywu5w8qlhq/_ssgManifest.js | 188.114.97.1 | 200 OK | 182 B |
URL GET HTTP/3vamtoacm.com/_next/static/OAeNmNzTh6Eywu5w8qlhq/_ssgManifest.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeASCII text, with no line terminators Hashca6aa05f78eb6859347a61db067f16dc 444e70f53eb809f0920de921925d854baccdd251 11ca6f5cc9bc3b5e4021fe0fdad57091b6e8b54a5018672cf9d8b6a7e4f0e229
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/OAeNmNzTh6Eywu5w8qlhq/_ssgManifest.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"663df8ab-b6"
last-modified: Fri, 10 May 2024 10:36:27 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4315
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I7byB3ZiDSWnaFKM3JdbALrhBhfwKVQo2CZJ1prBph3QRNXITVWL5Zmo24euBgRvHfhEP2NMHiMJFiH95NkeCHM0MVsVOUiZnqzbEd8mBTILjZRlwHGF%2F25spg2uZvM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d188be5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/8904.396665ff0f4e920f.js | 188.114.97.1 | 200 OK | 762 B |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/8904.396665ff0f4e920f.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (776), with no line terminators Hashaec61fe1e1029a2cd28ad561e36a44a5 b54bdeca3c3d326daa1fd3f0af51f10c6db1d0bd 4ef42b6542eec1aa4e855cd2256867bb25c11e34f3b89837f40a908eb2a72d4e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8904.396665ff0f4e920f.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"663df8ab-2fa"
last-modified: Fri, 10 May 2024 10:36:27 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1952
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kG6gSptwUf4zT3DoUX4a0tzoJqn6mwTimDzsgtbeMDfnrn1JvrVofpo75jxaZYVJ0Pw%2BortNBdClYU8b5HBSzZRin52NDi6PrWXxDkGP8jqa1L46cblRLdeeMsKC8rg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d38b395689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/2090-519478c186a3d867.js | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/2090-519478c186a3d867.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (10752), with no line terminators Hash37545926cc9a6e537b9f3e95d7a16c1e c3cbfe1f9737817eda25770274e97feaf6b8cc68 d3ccc772608b2a03a543da22715903e2b6e2c14c42c2f475a0f483ac3cd64b37
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2090-519478c186a3d867.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-2a00"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fPV7CXlTE8yMIW6GTpiPRvVD1mTHAH1kx7ubOpjDFHNzTB6fIEA2yb2SyYZGAS0aHmo4x19ruaGnnJRQTxcS0pzlVzDK2dPwfjjo8UJ7rsGUVezCatL6SyZtn6%2BkXi8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d178b35689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/pages/%5BlandingName%5D/%5BconfigId%5D/%5B%5B...slug%5D%5D-7177d7b8d71b6d81.js | 188.114.97.1 | 200 OK | 912 B |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/pages/%5BlandingName%5D/%5BconfigId%5D/%5B%5B...slug%5D%5D-7177d7b8d71b6d81.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (920), with no line terminators Hashf3ac4fe2101afc4a5578af799f3fbb74 c66b2ae62c6650a37bafc18abc1a1c6633b0492e 7c038d65511f6803b79894b7f4cd35e6f1ba7394e6ab27caa9a61bae0570cd34
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/%5BlandingName%5D/%5BconfigId%5D/%5B%5B...slug%5D%5D-7177d7b8d71b6d81.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"663df8ab-390"
last-modified: Fri, 10 May 2024 10:36:27 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4315
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=43fGzzRW%2F6wkJz%2FuM%2B87jY6f5EBJqX23MGlHwTf45Vj8UvTvxrd3QYdnLL9k5wzZ9AayJn83j%2BGep6%2Ftq68IUsEpCxN1spZvrTOS0ZsryahGE%2FHbmrIwb8hDvxdJ30g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d188ba5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/sw/universal.js?ab2_ttl=5184000&zoneId=6679107 | 188.114.97.1 | 200 OK | 1.5 kB |
URL GET HTTP/3vamtoacm.com/sw/universal.js?ab2_ttl=5184000&zoneId=6679107 IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeASCII text, with very long lines (1540), with no line terminators Hash5edd43e1c6126829925eb36cdbaf7af3 e1baae48011f9077aa37e6ab31d4604d41aec303 38945b2621b28329b93e77cc757db7e8def95dd4f4ba1c13862018da2df83411
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sw/universal.js?ab2_ttl=5184000&zoneId=6679107 HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Cookie: OAID=7jgh8b7mglwx6818mtu1foxvfs4bmsqx; syncedCookie=true; oaidts=1715345744
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-5b2"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kew88VrWfRMR06aGpcsLnl01BEO5mSmW7gP4jb%2FpArJOXJsZoRnKXoQv0JpxP2h0dIp0kGZf1Ur5MiY3aUIXUsgephqOpqwhf0NjTcJHU19lheFeuumWij2eULyN5NU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d859325689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/css/0bc0cde260d08b97.css | 188.114.97.1 | 200 OK | 1.8 kB |
URL GET HTTP/3vamtoacm.com/_next/static/css/0bc0cde260d08b97.css IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeASCII text, with very long lines (1843), with no line terminators Hash64b2b4fa42c7d558d735e2cd28ecf88a 03d6da6e55b1201b51689590520da495a9233d67 2fdb3ce9ccba8355040e5ba3dfb2283194acba81858943b5d88f70030dbb71ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/0bc0cde260d08b97.css HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: text/css
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-733"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6MRBgSzRRL7bJ25MmBXMtGK4RN%2FS2zrHKollMckZpKlMVi4wXP2UlP0yZjYXCXNMGcUuGuvx60r4PA0V5c58t%2BtPsAzTVRtv6TBudo5dIoGhcdZahiWupavLTjuGY%2Bg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d1689a5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/2734.6269ca0cf725ea17.js | 188.114.97.1 | 200 OK | 4.1 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/2734.6269ca0cf725ea17.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (4219), with no line terminators Hash98132c6c771aec065d3ab61e5c8c0f53 56484dafed6218ea17ef047fc8cd4c5a342c1890 ae09486720d6d4764b5126f0e26414962ee83eeebdc05db588bb7d86855e8b23
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2734.6269ca0cf725ea17.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-1033"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HYuKu4lLqc%2F7eVpTAiVff8Xiq%2FLSx4PVY1dZAqHQ8JdP1esn5WQB6bBiOXKdrM9PgT5JhrzPemvAI2YH9bY4YuurfS%2FAZC5a1jYwzD3P1Zl0SreSLm5T7uoPKH0A3w8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d37b2d5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/6037.086d113a52bb6dae.js | 188.114.97.1 | 200 OK | 1.2 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/6037.086d113a52bb6dae.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (1240), with no line terminators Hash4c5f50c10ca520ba5c17c96557452e7a a772f8756a93e5f2fb01e88f5f3856b5523ab97e 7cdd71c93dd078d4ba57cc70f3a6ac739ce902054d5cfba3b1a810d3d3e709bb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6037.086d113a52bb6dae.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-4c0"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yjLfbIj2%2Fv5GpYaCGAaM2AfTh89BowVciUnUI8zcls6%2FAuBzz0HhSSTqjKhx1UnuFfg4cuX9JojPtMRRbELqJx%2BBx77yNDLmS4Xnw7uBJMxg5PIviyn8%2FVhk00YHOPk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d38b465689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/img/comments/finance-survey-people/person-6.webp | 188.114.97.1 | 200 OK | 2.4 kB |
URL GET HTTP/3vamtoacm.com/img/comments/finance-survey-people/person-6.webp IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hash7be25941ac032fcec25b1bb4ede296d2 cfc4fb3733844326076b6d7632087204c0bea34d 0ff9d28c4ab7516d2790e8df4d325cf602bc8f9eb787a7cd9b6554edd9530e4e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/finance-survey-people/person-6.webp HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: image/webp
content-length: 2440
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: "663df8ab-988"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xCZSexpws1jQTjTJE3%2Fq5tcGMNG8X05cu18sczr8BcRdRpKiF3A7sCBxF6m%2F948RSYtS1A6yWaCP5IhYlzMYkt5ytXpVI%2BBGciRB9hWUwDJt59lxba0HSB%2BuKyQ0%2FJg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d62e6d5689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/img/comments/finance-survey-people/person-3.webp | 188.114.97.1 | 200 OK | 1.5 kB |
URL GET HTTP/3vamtoacm.com/img/comments/finance-survey-people/person-3.webp IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hasha747d227c2e10b5178fd942484301d7a b3c5cf90dd5fd2c26c7b17dcb2d35b6dd47065be 9f4fb1281b7141b9dd48925953f7b039b6c411ea0e6e5b158d3e000d75316e9f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/finance-survey-people/person-3.webp HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: image/webp
content-length: 1454
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: "663df8ab-5ae"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5t65g6oEMAxDZD9RdEbEfUY2t1xfpsNTq3EZqr%2F2so0HPQvFTOmsq5oNgKER6ILMB9585ssnzgHGQrRIY2RYyz%2FNM5VynlPVXSf2CBDWYI1fKZpqEIEgXQ58PgcDFr8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d63e7d5689-OSL
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/327.22f7b2ea913d8fe1.js | 188.114.97.1 | 200 OK | 8.4 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/327.22f7b2ea913d8fe1.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (8611), with no line terminators Hash5abe31d6d6a74d99ab6d12e4fcefba91 066a60fdaef863c724a70819b8b71780c418b1d3 ecc79bfe6eb4312367c931f76663678ea2f8dea9a8f2b5234dc4b81fe325c36f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/327.22f7b2ea913d8fe1.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"663df8ab-20ee"
last-modified: Fri, 10 May 2024 10:36:27 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4315
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KQDKE5Co6j1FOkgp8gAnJz8F7e%2B5qeMPwSSIXUL80B8Dj6DWVD4mRKFnvIbU65ukk%2FcJ3jRMUryjuZMJo2OJiNCR9tXc59oY%2BgirXP9i43V2Y9wkMbhx%2FQj3N8HcZNM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d168a05689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/finance-survey/icon-survey.svg | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3vamtoacm.com/finance-survey/icon-survey.svg IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeSVG Scalable Vector Graphics image Hasha000ba4d0e7570d810feafb22bc50bef af8fce44a683d3dfebe69cbe856e747739c9a666 9ae848c180201d8ae5c59ce118b0b7ef395a01295fb04d57e81cfe0566100679
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /finance-survey/icon-survey.svg HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: image/svg+xml
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-a72"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=igCkGbOl9FggKRJrfXKLaewgFVsh3qP%2BqztDSKH2w6y9pHOb4K6DPgE3%2FUgTq1p2A4hbcM5GbHcdvq%2BQUbT1kLgkcVPK%2BH6wHC5Dkc5gK%2BO1uUBYKH4%2F%2FsBKSKjiOsM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d62e765689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdntechone.com/stattag.js | 188.114.96.1 | 200 OK | 19 kB |
URL GET HTTP/2cdntechone.com/stattag.js IP188.114.96.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerGoogle Trust Services LLC Subjectcdntechone.com Fingerprint3D:20:D4:11:5D:06:B3:63:9C:08:BF:D9:D9:16:22:D5:DC:3B:9A:CB ValidityMon, 22 Apr 2024 03:33:58 GMT - Sun, 21 Jul 2024 03:33:57 GMT
File typeJavaScript source, ASCII text, with very long lines (18452) Hashbec2755dff94190fec0365b0db53807b f98c36e7e9e06325d03fe39c3b98879062fc2704 ccb15ff22ece6946136f1501ab3ae74155399187c8e85beb10399d56bb8e149a
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/javascript
last-modified: Wed, 07 Feb 2024 12:51:04 GMT
etag: W/"65c37cb8-4a9e"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1138
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tcEP2vDurPHxR9L40o3UqyeOSA31d7Z%2BUMwy0wnSelaI76FMlAg76cFllZtPYcFUxXtGAvkSz5ex2inggtDXPN4cIyliROelg%2BIqX6ynPm%2FSRCC00biMfQUFwfbjbPJSnw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881a15d51c34568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| vamtoacm.com/_next/static/chunks/2758-722eba84ac2b7889.js | 188.114.97.1 | 200 OK | 82 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/2758-722eba84ac2b7889.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashb933f0512fa26ca09df9af38084199fd 79ecee1188912ad708a86369c970cad8befde40f 93772d0dd8b36b5d4f37dc03ee615b58aadca7118bd226ea1ea39b9bd218ad44
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2758-722eba84ac2b7889.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"663df8ab-13ef2"
last-modified: Fri, 10 May 2024 10:36:27 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4315
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=73rL5C1dV0HU%2BYOs4ZZaFCePPiJFvkLep4U456%2B37vFJolj0ijBhg8EqEb8vLIBC2urL0HFrHlf0ZgqvORTdH2FJb%2BjK5Gc2dXt0qbmRf6nuKOoutJNZHZQATiurV18%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d178b65689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/5927.37a5338b8ac59a08.js | 188.114.97.1 | 200 OK | 19 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/5927.37a5338b8ac59a08.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (18708), with no line terminators Hasha385421104bc74c949dc4c6191ef7df9 30827209462e4ce7b901e71b238109574cc117ba 441f4699276f051e940137c231a4d48a7d4a0958ceeae78958482cd8a89663be
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5927.37a5338b8ac59a08.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-4914"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IR%2BM7XG%2F9WWEwXPi7QVXWABRkPj9Nlca%2Bt24HsRqAkuMWwFOJakqYXgWj%2FehWTcl9uDQi%2B55XVUaj157OaQGM9RvZDXD%2BtZLV13GpmdbVPEidcl6gdlINjyiL6y7jwc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d39b4b5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/pfe/current/micro.tag.min.js?sw=/sw/universal.js&var=&ymid=&b=&campaignid=&click_id=&ab2r=&rhd=1&var_3=&oaid=7jgh8b7mglwx6818mtu1foxvfs4bmsqx&os_version=&btz=UTC&bto=0&z=6679107&cdn=1&domain=vamtoacm.com&ab2=&ab2_ttl=5184000 | 188.114.97.1 | 200 OK | 37 kB |
URL GET HTTP/3vamtoacm.com/pfe/current/micro.tag.min.js?sw=/sw/universal.js&var=&ymid=&b=&campaignid=&click_id=&ab2r=&rhd=1&var_3=&oaid=7jgh8b7mglwx6818mtu1foxvfs4bmsqx&os_version=&btz=UTC&bto=0&z=6679107&cdn=1&domain=vamtoacm.com&ab2=&ab2_ttl=5184000 IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (37142), with no line terminators Hash32d6dbd00a639e2cd10d1704b9159bd5 0dab4c95675393f1d0e13d20f13d80ee12e41d95 9f339e5efd7c959419a4e86bb4c5e9f07eae2ed839484846157be981917743de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pfe/current/micro.tag.min.js?sw=/sw/universal.js&var=&ymid=&b=&campaignid=&click_id=&ab2r=&rhd=1&var_3=&oaid=7jgh8b7mglwx6818mtu1foxvfs4bmsqx&os_version=&btz=UTC&bto=0&z=6679107&cdn=1&domain=vamtoacm.com&ab2=&ab2_ttl=5184000 HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Cookie: OAID=7jgh8b7mglwx6818mtu1foxvfs4bmsqx; syncedCookie=true; oaidts=1715345744
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:49:22 GMT
vary: Accept-Encoding
etag: W/"662a3532-9116"
access-control-allow-credentials: true
cache-control: max-age=1800
pragma: no-cache
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kbpgF3TIQlD0GwIWuJJ1ztqCg8wMUSqNMJ8pwRHqW7wAnj65UVgGA0xZ1xn1oaNJdnJZ7W8oGmgpFnxSf6sbmqfX1exZYXJyGwUBbDk9cZQfN785%2FNjFjTj%2ByYVrWjs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d7a82b5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/86.1605512c42332a2f.js | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/86.1605512c42332a2f.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (2908), with no line terminators Hashf7cb4f746f2cabc625d1ab452426c2e5 32f7f8a18c1d477a41291637019374bd4d722df9 6e3c489f8505040ae3a765d615dd63b8e385d2baeecd0ba58a2da9bf079b1a9a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/86.1605512c42332a2f.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-b1e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2Fsu3jDVWGC6gLXxT4oQ8ZbBoSB3Mjv%2BBOz8PPAsiqx97Hl38yl2Y4D10RhKzI8k9od0QlY0poPNtekgbiOIRTKZFZFoUwT4UiRq24CX%2FCAUheVrX%2BhaNiVouvt3kEc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d37b305689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/1754.983ed55293c299ce.js | 188.114.97.1 | 200 OK | 13 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/1754.983ed55293c299ce.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (12711), with no line terminators Hashaaadd1fe7166e1641b80d4a871e91a77 44dd71230caa2b99dbe1a804fb3e444fa2dd8255 918408a27b1ee2472daf8940c82be10db3c347bf9111c15eb4b23bd34600153a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1754.983ed55293c299ce.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-31a7"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6svWwoAlm%2BhN59Yg19c3qidXKFKJLVCEbeZDZBs22rlHGkj0XbfZIjQ1kedDA7oaJSa%2FPKLx0F58yFM9xLEgFkYXyI9QjouaUUjsEok9Qbi0qWfmUtZrTHMMgQLA%2Ft0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d4ac8a5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/custom | 188.114.97.1 | 200 OK | 39 B |
IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashc16023891530fbce40f0a1244c3af01c e15d9dff768d82673e5e797a8395d1fa7d9049b7 c7d0061f2d2b9eb7b65b547c4bdf03f5f332cf34021bc972f64b6ad58d3a121a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 302
Origin: https://vamtoacm.com
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Cookie: OAID=7jgh8b7mglwx6818mtu1foxvfs4bmsqx; syncedCookie=true; oaidts=1715345744
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-trace-id: b666bab941e9bf3b898ad1d76a8eae0a
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://vamtoacm.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NjbTr7lMaMe0diV%2F9hHAVxUuxHUP0%2BX234B%2BsiDA%2FhlUkOuP0cPy4eqbVe1LP9mumineyi7o9pxHWJyvvgJNtHhODNprXz1JzA9LZuaV0qPMcy6bL%2Fs3d%2BsSc7rdzZQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d8a9865689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/webpack-07707c7545674cd5.js | 188.114.97.1 | 200 OK | 6.4 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/webpack-07707c7545674cd5.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (6664), with no line terminators Hash60db1aa48640823a932f44e2f6f27de9 9a249c00142ef7924f4d30eb5c44db0cebe527b6 59c990c0de994568c7f0a130acb2fc95c1e77d4989e4c3507947f4afdf3e2d9b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/webpack-07707c7545674cd5.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"663df8ab-1906"
last-modified: Fri, 10 May 2024 10:36:27 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4315
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BNleZ3HX3%2F2B%2F2l7IY8JYD9kTWL%2BY%2FyDFdXN6SS43KlfBD%2FbKub%2BIBHSiLroICMq%2BlTgPJoKaYZxpvZUUu2HiFYf5Ek1q19sOyYogrXgcJ2NaaACZA3VAb06zdIc%2Fs0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d178a85689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/3091.8141ef861c4fae96.js | 188.114.97.1 | 200 OK | 2.4 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/3091.8141ef861c4fae96.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (2431), with no line terminators Hashaff0a51ad60c666bf1f7f27ddff14217 9677799390dc5667eeda431957d59b25d6a40946 f495db20d41fe12519423d9776481cd5c3f1dabc346ea304b8a7201b032d4e87
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/3091.8141ef861c4fae96.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-951"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iX4ul%2F5NVG6ScSFeRc%2FpqYewq5LhkhH7rlD7B3am1BKg%2F6JT7rvVPTYi53DvRt2HqtrvlLQbeq1w4dCmwxl%2BYuMeDh8GvImtAodZACL8S2UK8YdhP52tOW4qgA5m4Qk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d38b445689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/custom | 188.114.97.1 | 200 OK | 39 B |
IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashc16023891530fbce40f0a1244c3af01c e15d9dff768d82673e5e797a8395d1fa7d9049b7 c7d0061f2d2b9eb7b65b547c4bdf03f5f332cf34021bc972f64b6ad58d3a121a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 300
Origin: https://vamtoacm.com
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Cookie: OAID=7jgh8b7mglwx6818mtu1foxvfs4bmsqx; syncedCookie=true; oaidts=1715345744
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:44 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-trace-id: 32b4d1db385d94d205cfea371e1a5705
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://vamtoacm.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tumw9PAQUSc0yW0%2FfqVLC%2BWla6r2WGw5yz5qVFcqiFAc3eY5nIdh6oAHpBbsSO5duug%2FhnqaOcDk1DJ1%2FnQmBmUghR%2Fbq0Uop6NYAImH70pCXnEfz6KVZGP2%2F%2FsVGZ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d8592e5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vamtoacm.com/_next/static/chunks/812.7027cef6620548be.js | 188.114.97.1 | 200 OK | 13 kB |
URL GET HTTP/3vamtoacm.com/_next/static/chunks/812.7027cef6620548be.js IP188.114.97.1:443
Requested byhttps://vamtoacm.com/finance-survey/20/5522/ CertificateIssuerLet's Encrypt Subjectvamtoacm.com Fingerprint8F:EF:46:DF:33:00:3B:87:D4:D3:05:C4:B9:1B:47:7D:A4:39:DA:F9 ValidityFri, 19 Apr 2024 10:22:31 GMT - Thu, 18 Jul 2024 10:22:30 GMT
File typeJavaScript source, ASCII text, with very long lines (13202), with no line terminators Hash0cdc7044086bdb0ab8c55df3e1576c7e fc66dfaf7e67479c19b68476453cfca37df28469 6253c27cf319c795afe04117585b004d5cb4b20150e2ed3da234f40b7dcfe568
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/812.7027cef6620548be.js HTTP/1.1
Host: vamtoacm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vamtoacm.com/finance-survey/20/5522/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 12:55:43 GMT
content-type: application/javascript
last-modified: Fri, 10 May 2024 10:36:27 GMT
vary: Accept-Encoding
etag: W/"663df8ab-3392"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wjN7sC3bLC169UeeruikqtR8imx7tzR%2FzsY7fBdXdEVAi62cdDXqZC5Hour%2FRw7xdKT8mm39ECkHSP5E5Qk4q2beyI6qSPJSbOQqqJQRJcf6BzZFZND1uLTjTj0Pme8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881a15d1689d5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|