Report - tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi

Report Overview

Submitted URL
tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
IP
172.67.178.96
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 11:29:44
Access
public
Website Title
tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Final URL
tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
acscdn.com	93608	2020-05-05	2020-05-06	2024-04-16	1.2 kB	427 kB	172.67.165.20
tapelovesads.org	unknown	2024-03-22	2024-03-22	2024-04-18	3.1 kB	303 kB	104.21.91.194
ci.spontonelatery.com	unknown	unknown	No data	No data	416 B	1.5 kB	23.109.170.72

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	spontonelatery.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	unknown	79 B	2023-04-11	2024-05-01
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:38:58 Last Seen2024-05-01 00:14:56 Times Seen125066 Hash aa049e2749b8531cb8f233c2f64fc2b2 b611a5a62c1813ae5b4763378b3a4a565556530a e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2 Loading...

	unknown	34 B	2023-04-11	2024-04-30
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-04-30 23:22:54 Times Seen75764 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	tapelovesads.org/js/jquery.min.js	88 kB	2023-03-07	2024-04-30
Pretty URL tapelovesads.org/js/jquery.min.js IP 104.21.91.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-04-30 23:39:29 Times Seen96290 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

	tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi	452 B	2024-04-18	2024-04-18
Pretty URL tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi IP 104.21.91.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 13:29:50 Last Seen2024-04-18 13:29:50 Times Seen1 Hash 07d9d03c537d19414963e272502f7aa5 145e43c18ae56153c44efbe515eec59d721ae7d6 865441a2f41c14aa7930b024121f48d43b17a236217d9ccdc7a277ab98e1e830 Loading...

	tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi	23 kB	2024-04-18	2024-04-18
Pretty URL tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi IP 104.21.91.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 13:29:50 Last Seen2024-04-18 13:29:51 Times Seen1 Hash a16bf77826cc567e366d6a0144df13cc 6fdbecb96fff05ad1c58258d9978c4bf1e4404c1 6db340ea74ca053fd4fd8f578f87b46d86fc198ebce2832da3d2f49a19422676 Loading...

	tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi	105 B	2024-02-16	2024-04-30
Pretty URL tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi IP 104.21.91.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-02-16 23:12:08 Last Seen2024-04-30 23:14:49 Times Seen19 Hash d986a9f30acb72cb5aa9c5ee0d6bc9ad 6fae9ad1036fdbe06c8ae35450d48dfa5206f504 a8533afad19e78d5d99bcd855bc02ca2df98e1d868ac26f6c766d7b243d79a85 Loading...

	unknown	37 B	2023-04-11	2024-05-01
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:31:25 Last Seen2024-05-01 00:14:56 Times Seen233077 Hash 29d0c84b9d1d8da446a6062c6a840ad9 6d6b3a6065667c7c50d92f3889c85ed65a9ad784 3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1 Loading...

	tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi	4.9 kB	2023-10-21	2024-04-30
Pretty URL tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi IP 104.21.91.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-21 08:54:01 Last Seen2024-04-30 23:22:54 Times Seen102 Hash 991e31d1267d98ff019b705a3d148ae4 ce26bf1efabcfe070f058fbef107ebadbd1d8d40 aeb0b57af128c03be119c7203f7a81fb63705ded005926bf8ee2485f75f31aac Loading...

	tapelovesads.org/adgpt.js	20 B	2023-03-07	2024-04-30
Pretty URL tapelovesads.org/adgpt.js IP 104.21.91.194 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:24:29 Last Seen2024-04-30 23:22:55 Times Seen366 Hash 69a305bcdc8e061bbd43294a477a3678 506582a1d912d546f5942d95ffae95ec7f4c37ce 8964d85afd6d5d84b97872464646809c952ab900cdf5c5d7c3b7b4bdb74202fa Loading...

	acscdn.com/script/aclib.js	167 kB	2024-04-17	2024-04-22
Pretty URL acscdn.com/script/aclib.js IP 172.67.165.20 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 07:23:37 Last Seen2024-04-22 00:20:09 Times Seen26 Hash aa5502dfd5258498e89e92a0923afbe5 5a0d2e6dd8f03d743a5554b0cd855046cd235932 913404435cc2e88ca55336cd2a89a062f37971f4893caa637d5b36c04816d0ef Loading...

HTTP Transactions (10)

URL IP Response Size

tapelovesads.org/adgpt.js

104.21.91.194

200 OK

20 B

URL GET HTTP/3
tapelovesads.org/adgpt.js
IP
104.21.91.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Certificate
IssuerLet's Encrypt
Subjecttapelovesads.org
FingerprintF5:BB:92:99:16:58:0B:62:CD:9B:75:E2:40:5C:98:3F:53:2F:16:78
ValidityFri, 22 Mar 2024 20:51:33 GMT - Thu, 20 Jun 2024 20:51:32 GMT

File type
ASCII text, with no line terminators
Size
20 B (20 bytes)
Hash
69a305bcdc8e061bbd43294a477a3678
506582a1d912d546f5942d95ffae95ec7f4c37ce
8964d85afd6d5d84b97872464646809c952ab900cdf5c5d7c3b7b4bdb74202fa

HTTP Headers

GET /adgpt.js HTTP/1.1
Host: tapelovesads.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Cookie: _b=kube11
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:29:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 20
last-modified: Tue, 28 Mar 2023 18:04:25 GMT
etag: "64232c29-14"
cache-control: max-age=345600
cf-cache-status: HIT
age: 272
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CaCed0vX9r98HxWMp0JF%2F34QwQAm83O0cuSEk73tobR2o0KMSbaWKbgIUp0eKMOKHjaC0Ry5eO%2BXnGWzVMjdY0LydlFyI5hKDzLlzjmzSeQgV4TVxJfILU8Y8NPTUVH1tUd8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876450feecd91bfe-OSL
alt-svc: h3=":443"; ma=86400

ci.spontonelatery.com/g2CODBAYVVpGK/58191

23.109.170.72

200 OK

26 B

URL GET HTTP/1.1
ci.spontonelatery.com/g2CODBAYVVpGK/58191
IP
23.109.170.72:443
ASN
#7979 SERVERS-COM

Requested by
https://tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Certificate
IssuerLet's Encrypt
Subjectci.spontonelatery.com
Fingerprint46:43:CE:69:07:4C:A9:2B:93:65:FD:C2:28:FD:FE:E1:61:10:3D:57
ValidityFri, 12 Apr 2024 09:05:49 GMT - Thu, 11 Jul 2024 09:05:48 GMT

File type
ASCII text, with no line terminators
Size
26 B (26 bytes)
Hash
4fc71bf68a1d477bd1523733e34d1e90
15119105cffbe108b6cf290146ab02c9aa8517ba
74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /g2CODBAYVVpGK/58191 HTTP/1.1
Host: ci.spontonelatery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapelovesads.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 11:29:19 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://tapelovesads.org
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Fri, 19-Apr-2024 11:29:19 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Fri, 19-Apr-2024 11:29:19 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff

acscdn.com/script/ippg.js

172.67.165.20

200 OK

146 kB

URL GET HTTP/3
acscdn.com/script/ippg.js
IP
172.67.165.20:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Certificate
IssuerGoogle Trust Services LLC
Subjectacscdn.com
FingerprintC2:6C:14:F0:34:12:76:91:EB:3A:02:AC:4F:41:CA:11:17:6F:F0:01
ValidityWed, 28 Feb 2024 11:34:54 GMT - Tue, 28 May 2024 11:34:53 GMT

File type

Size
146 kB (145818 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /script/ippg.js HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapelovesads.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:29:19 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPq4YPe91Fh5YyoI6QyH8pewEApntLQ0Q7zurWxC2FKQs51F55WvM8Du-bOIkRzS8w6YdQ
x-goog-generation: 1713265676940884
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 145818
x-goog-hash: crc32c=TiQ6UA==, md5=MzuZ6a2eU77Ohwypre2gcA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Thu, 18 Apr 2024 11:24:07 GMT
cache-control: public, max-age=3600
last-modified: Tue, 16 Apr 2024 11:07:57 GMT
etag: W/"333b99e9ad9e53bece870ca9adeda070"
age: 1115
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=16sIEzNzaXGfjfszOxMhgdre7cr2pTIpit1etqjftV8Wg%2FLz%2Br%2FLLUJD7WcI9p6wibs9fVPGVcBYR7fZaBQTd%2B%2FegpbIXCMWelqRzDtiYxwr2i3UqMxbWgQ9IwIH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876451009c06b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi

104.21.91.194

200 OK

81 kB

URL User Request GET HTTP/2
tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
IP
104.21.91.194:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjecttapelovesads.org
FingerprintF5:BB:92:99:16:58:0B:62:CD:9B:75:E2:40:5C:98:3F:53:2F:16:78
ValidityFri, 22 Mar 2024 20:51:33 GMT - Thu, 20 Jun 2024 20:51:32 GMT

File type
JavaScript source, ASCII text, with very long lines (21221)
Size
81 kB (81400 bytes)
Hash
1581a08d016182bb71b9c4c557c6137e
c4d20ec703c1b6e0fba065338cfaa65f2b87d69e
f582d58695bed1b3134eeff2a13359c207abf35a1aad915a8b6d65795ea6342a

HTTP Headers

GET /e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi HTTP/1.1
Host: tapelovesads.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 11:29:19 GMT
content-type: text/html; charset=UTF-8
cache-control: private
cf-cache-status: BYPASS
set-cookie: _b=kube11; path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UjJVz3AtL3nZEwrnPW4Ug%2FHoAzCK8Yio45LnL3JD1gRMbKginABlLoAs4gQvnj5PBHaNvfd7yEq2WumN53gc%2FVH%2FPQ8rKsdU%2BtsogD%2Br2Tm8Opbwc0wFNsq5UKUJzelqV4SD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876450fcdfe10b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

tapelovesads.org/js/jquery.min.js

104.21.91.194

200 OK

88 kB

URL GET HTTP/3
tapelovesads.org/js/jquery.min.js
IP
104.21.91.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Certificate
IssuerLet's Encrypt
Subjecttapelovesads.org
FingerprintF5:BB:92:99:16:58:0B:62:CD:9B:75:E2:40:5C:98:3F:53:2F:16:78
ValidityFri, 22 Mar 2024 20:51:33 GMT - Thu, 20 Jun 2024 20:51:32 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
88 kB (88145 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /js/jquery.min.js HTTP/1.1
Host: tapelovesads.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Cookie: _b=kube11
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:29:19 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 01 Apr 2020 13:49:44 GMT
etag: W/"5e849bf8-15851"
cache-control: max-age=345600
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FyIGelHnCCX5yal0%2FTg%2B975oad%2FM5%2BNEphZHgauj7Mr5W5Ok7sG59RwCvZ4g0DAq4RuKQ7Ndh8GRJ%2BDjRsGemrTcfAWhpt136Py%2FG1SzRME1%2B%2BaSqZ5IIaSvP4npVMOaD9%2FZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876450feecd61bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

acscdn.com/script/aclib.js

172.67.165.20

200 OK

167 kB

URL GET HTTP/2
acscdn.com/script/aclib.js
IP
172.67.165.20:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Certificate
IssuerGoogle Trust Services LLC
Subjectacscdn.com
FingerprintC2:6C:14:F0:34:12:76:91:EB:3A:02:AC:4F:41:CA:11:17:6F:F0:01
ValidityWed, 28 Feb 2024 11:34:54 GMT - Tue, 28 May 2024 11:34:53 GMT

File type

Size
167 kB (166958 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /script/aclib.js HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapelovesads.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 11:29:19 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPqm9eOwZlMAvAYk4W7V8HVJcpT0qhQpLbR9gqQjgxME5bODq5mGD-A8qvdrSFmqvCxTWr8rrERmKQ
x-goog-generation: 1713265374889872
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 166958
x-goog-hash: crc32c=kb+1Lg==, md5=qlUC39UlhJjonpKgkjr75Q==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Thu, 18 Apr 2024 11:19:29 GMT
cache-control: public, max-age=3600
age: 1279
last-modified: Tue, 16 Apr 2024 11:02:54 GMT
etag: W/"aa5502dfd5258498e89e92a0923afbe5"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QD%2BkD9zqX%2BRGiPp1RUkqxp3TINsumVCxQiF4A2g5yEU6ukZeuhgNb%2FBWTytGesNjjG0kLnntQaEpZmCyAs5%2BxaKUuUhqOC93G1XK1z1MDNyw2%2FSHHn5Q%2BhZP15zQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876450ff19197130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

tapelovesads.org/js/jquery.min.js

104.21.91.194

200 OK

88 kB

URL GET HTTP/3
tapelovesads.org/js/jquery.min.js
IP
104.21.91.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Certificate
IssuerLet's Encrypt
Subjecttapelovesads.org
FingerprintF5:BB:92:99:16:58:0B:62:CD:9B:75:E2:40:5C:98:3F:53:2F:16:78
ValidityFri, 22 Mar 2024 20:51:33 GMT - Thu, 20 Jun 2024 20:51:32 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
88 kB (88145 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /js/jquery.min.js HTTP/1.1
Host: tapelovesads.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Cookie: _b=kube11
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:29:19 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 01 Apr 2020 13:49:44 GMT
etag: W/"5e849bf8-15851"
cache-control: max-age=345600
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dvS2y11mHr6AqVhgyxtG5hji1mSZjVdRrXCxS0CItMORomOT%2FzUPghfq4tOzJJDHvEozRrpMpYDnYH89GB1y2buuzsOQagYiuBSvRhOH0cpriDhGqqmwRgcyRSgn0CHJkjTS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876450fffdef1bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

tapelovesads.org/api/website/filemanager/convert/oQDrQoVaRquWj6

104.21.91.194

200 OK

18 B

URL GET HTTP/3
tapelovesads.org/api/website/filemanager/convert/oQDrQoVaRquWj6
IP
104.21.91.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Certificate
IssuerLet's Encrypt
Subjecttapelovesads.org
FingerprintF5:BB:92:99:16:58:0B:62:CD:9B:75:E2:40:5C:98:3F:53:2F:16:78
ValidityFri, 22 Mar 2024 20:51:33 GMT - Thu, 20 Jun 2024 20:51:32 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
18 B (18 bytes)
Hash
994e8c168e27f3663169d2b78a64e804
3c1c6a21285be945ae9d9bf955d9d6d0f4e8d4b1
c635889366cce490d2c81cb9870c8cbe5d9a7559b25e299b0324d0cf14fe1a11

HTTP Headers

GET /api/website/filemanager/convert/oQDrQoVaRquWj6 HTTP/1.1
Host: tapelovesads.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Cookie: _b=kube11
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:29:19 GMT
content-type: application/json; charset=UTF-8
cache-control: private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wTuXKBhBlupWhxX2%2Ba5DR1JBGJnYMRPcTWzbUvofiwj1gMaDp3fUXi7ZhW49EC92N7xxGxC39uZ6P2KNt0FZRRBG%2BaGtu4oPASsQRXAl5HPEsdnnClwPf3%2Fj3AjZO1FTszhS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876451003e491bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

acscdn.com/script/ut.js?cb=1713439759451

172.67.165.20

200 OK

111 kB

URL GET HTTP/3
acscdn.com/script/ut.js?cb=1713439759451
IP
172.67.165.20:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Certificate
IssuerGoogle Trust Services LLC
Subjectacscdn.com
FingerprintC2:6C:14:F0:34:12:76:91:EB:3A:02:AC:4F:41:CA:11:17:6F:F0:01
ValidityWed, 28 Feb 2024 11:34:54 GMT - Tue, 28 May 2024 11:34:53 GMT

File type

Size
111 kB (110973 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /script/ut.js?cb=1713439759451 HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapelovesads.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:29:19 GMT
content-type: text/javascript
x-guploader-uploadid: ABPtcPqj2-9zjuV15lYe07jPEY6QCEx-gXUiFKWRFcyaVc5RmSWNLX6p6dohggkr_-1xnDtPMms
x-goog-generation: 1712582919769261
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 110973
x-goog-hash: crc32c=zPCrng==, md5=y6b2O1iBUF6uWcbIgbxEhA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Thu, 18 Apr 2024 11:10:47 GMT
cache-control: public, max-age=3600
age: 1306
last-modified: Mon, 08 Apr 2024 13:28:39 GMT
etag: W/"cba6f63b5881505eae59c6c881bc4484"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vnumEy7fBx5AwdzEITF%2BIXJ8h%2Bnc7yvP6u08NGu%2FJD5VqvP9Jgjkya23Afvr8ihD4rvapwfVHdLW%2BrfWQZ%2BmnWWnm4aCPsH00ScD4JTZbekNMV2Q4TI312Vyarr0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876451009bf1b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

tapelovesads.org/favicon.ico

104.21.91.194

200 OK

42 kB

URL GET HTTP/3
tapelovesads.org/favicon.ico
IP
104.21.91.194:443
ASN
#13335 CLOUDFLARENET

Requested by
https://tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Certificate
IssuerLet's Encrypt
Subjecttapelovesads.org
FingerprintF5:BB:92:99:16:58:0B:62:CD:9B:75:E2:40:5C:98:3F:53:2F:16:78
ValidityFri, 22 Mar 2024 20:51:33 GMT - Thu, 20 Jun 2024 20:51:32 GMT

File type
MS Windows icon resource - 1 icon, 100x100, 32 bits/pixel
Size
42 kB (41662 bytes)
Hash
1f1617bb9d33485e49af9fae638831f9
e245af39fd84866e07b7e177fa0ff6d25221252f
3fe1701b124953220bd71e61910006cb7c3ae36f6c8975075c842101d97cf513

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: tapelovesads.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tapelovesads.org/e/oQDrQoVaRquWj6/Made.In.Chelsea.S27E01.XviD-AFG[EZTVx.to].avi
Cookie: _b=kube11
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 11:29:20 GMT
content-type: image/x-icon
last-modified: Sun, 29 Nov 2020 16:24:53 GMT
etag: W/"5fc3cb55-a2be"
cache-control: max-age=345600
cf-cache-status: HIT
age: 4891
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZQJ0kqYH7Pkm769MNQR1cC2cpDMBCEUw7Dct9jAzhcpJCnvFiLqqQey9ncJpPaS3babuotj0dBcXsDhl6tbHzkvP7DAmwctJ27xwyMt4HIkkkmxkP94sNtLTPIxTnISG1cwP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876451048aa91bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash