Report - gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip

Report Overview

Submitted URL
gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
IP
172.67.136.150
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 00:06:30
Access
public
Website Title
ebook landing page template
Final URL
gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
42

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
gts794.com	unknown	2023-04-11	2023-04-11	2024-04-17	10 kB	1.8 MB	172.67.136.150
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-18	1.0 kB	104 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-18	461 B	7.9 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed
2024-04-18	medium	gts794.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	gts794.com/js/bootstrap.bundle.min.js	80 kB	2023-03-08	2024-04-30
Pretty URL gts794.com/js/bootstrap.bundle.min.js IP 172.67.136.150 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:58:09 Last Seen2024-04-30 23:24:36 Times Seen1420 Hash d2b0d31f74e62440ea1a557f126d0c64 5c8f6cb983397deb65673b961a8657cfd6113ad9 c4b2394a30fa0e4a23c6b308541353e20872a6fd765ed8fb70e6b402029deb00 Loading...

	gts794.com/js/jquery.sticky.js	7.3 kB	2023-03-26	2024-05-01
Pretty URL gts794.com/js/jquery.sticky.js IP 172.67.136.150 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 03:17:11 Last Seen2024-05-01 21:57:33 Times Seen434 Hash b8746b98470305fb641e8a0b30d38c4d 495ab774710f8f9a1476f72c77aaf713c19da491 40223bede5475b91b43535458932df276f2750c236732faa669ba9faefd1d1f5 Loading...

	gts794.com/js/click-scroll.js	1.3 kB	2023-10-26	2024-04-30
Pretty URL gts794.com/js/click-scroll.js IP 172.67.136.150 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-26 20:48:13 Last Seen2024-04-30 13:03:46 Times Seen402 Hash 4ff6c9d82db0002b541259399e9790a9 716fda992f18b6265cbcfc38b57bf7909180074a cb9f115efd1f6edc979913d2479a5536ad9eaa1d66636538214e626cca2a683c Loading...

	gts794.com/js/custom.js	701 B	2023-03-26	2024-05-01
Pretty URL gts794.com/js/custom.js IP 172.67.136.150 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 03:17:11 Last Seen2024-05-01 21:57:32 Times Seen382 Hash 2adc2e623f9407039c2dfe90a7c29ab6 fadfe06ac81af039d3d7d879690b13788e3120c7 45d3ebe30154c05721aa8648b4e090e076c01b2c9e3e9590af6d195784e726d4 Loading...

	gts794.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	1.2 kB	2023-03-07	2024-05-02
Pretty URL gts794.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 172.67.136.150 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-02 06:56:39 Times Seen55659 Hash 9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8 Loading...

	gts794.com/js/jquery.min.js	86 kB	2023-03-07	2024-05-01
Pretty URL gts794.com/js/jquery.min.js IP 172.67.136.150 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:02:14 Last Seen2024-05-01 21:57:34 Times Seen1150 Hash 48abd2372de119dfd7ffb96c8f307bfe da49460a365d995ef121403cece389dafe496505 04685bdefed2099cae5f544505b8319ee7ae4d0a7f90a93b2e764bde5cad1de6 Loading...

HTTP Transactions (24)

URL IP Response Size

gts794.com/images/education-online-books.png

172.67.136.150

200 OK

310 kB

URL GET HTTP/3
gts794.com/images/education-online-books.png
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
PNG image data, 725 x 905, 8-bit/color RGBA, non-interlaced
Size
310 kB (310455 bytes)
Hash
effbcadb714b24e2cabb8d64097c8dcc
239e471a633629d027c050e19b441a6ce9fa77b4
3752073371d57443834b6693c146073d90c52015eff88f241fe2e1df21b8b203

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/education-online-books.png HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: image/png
content-length: 310455
last-modified: Thu, 29 Dec 2022 05:38:02 GMT
etag: "4bcb7-5f0f0e36de280"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QYinltupfz%2BvyQRtOvXJ99XRsfm%2FqWL%2B0ftjEFSXbfJXRH14z5ia3y28SmTV5a0FBIz%2FbZAIy%2FwpYWxKBcVI%2BAwBhzssMvPvjbpVihqPTfV%2BlYQnfORp2LvoqbVP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57bfbd856c3-OSL
alt-svc: h3=":443"; ma=86400

gts794.com/images/avatar/portrait-beautiful-young-woman-standing-grey-wall.jpg

172.67.136.150

200 OK

24 kB

URL GET HTTP/3
gts794.com/images/avatar/portrait-beautiful-young-woman-standing-grey-wall.jpg
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1000], progressive, precision 8, 500x334, components 3
Size
24 kB (24232 bytes)
Hash
2b00b22d0fc9400405e0a93d2c32581d
9ccb0bcdab3c25027740217df2a64ee2dc18ec93
1b5d07b73321be8f54ea2281e6f6520f4d730df706676895c99d7e988cb96ffc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/avatar/portrait-beautiful-young-woman-standing-grey-wall.jpg HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: image/jpeg
content-length: 24232
last-modified: Tue, 15 Mar 2022 05:33:50 GMT
etag: "5ea8-5da3b24454b80"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bD2jy6h4WTp%2BxWVUbOE7HWAECLaz3aj%2B0xCuEJPZ8LK1VxYTd2pHIgL147mqO2QV%2B8O1MAIJkFwaKyIgP0pCzECBrRVfOcBHFauZ%2FHvvhj4fyCEKAR3dJ94LSU3j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57bfbd956c3-OSL
alt-svc: h3=":443"; ma=86400

gts794.com/images/avatar/portrait-young-redhead-bearded-male.jpg

172.67.136.150

200 OK

26 kB

URL GET HTTP/3
gts794.com/images/avatar/portrait-young-redhead-bearded-male.jpg
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1000], progressive, precision 8, 500x334, components 3
Size
26 kB (25921 bytes)
Hash
71e947fcdeaa5cf2a2a5dfb28e4921ec
cfa6b029f4437f5687bcd64227597584c47b7ab7
c3df7f5fc1f27d7f400fb7ec2fce0b202d0101c56f8251a3de2c9d3b580d0122

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/avatar/portrait-young-redhead-bearded-male.jpg HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: image/jpeg
content-length: 25921
last-modified: Tue, 15 Mar 2022 08:21:34 GMT
etag: "6541-5da3d7c21bf80"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RIxmxeobYw%2BjKuUMAVlM7vqC6WJ4tyKk2ggsdjFCcGUiCXiksQt6FwcPvEPGHSrX08XoSjJZTK3PrBXKxdguZcVvmn%2FxoZ6UOnRd20c9mIrN4%2BHnaAuk0AuFkcl3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57c0bda56c3-OSL
alt-svc: h3=":443"; ma=86400

gts794.com/images/avatar/pretty-blonde-woman.jpg

172.67.136.150

200 OK

30 kB

URL GET HTTP/3
gts794.com/images/avatar/pretty-blonde-woman.jpg
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1000], progressive, precision 8, 500x334, components 3
Size
30 kB (30052 bytes)
Hash
83251e8a0f137b34118d0eba449b5471
c8971e020d6ecc4fda7559ef7dfa1c64e7f36d62
b5c8cd944dd5dad57ce0672dfca04123aabd9e35b03052467610d34536518411

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/avatar/pretty-blonde-woman.jpg HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: image/jpeg
content-length: 30052
last-modified: Mon, 14 Mar 2022 02:47:18 GMT
etag: "7564-5da24b2dc1980"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sxWhigX9sZlDBw53Opfevajdjp1AjyaVAsGyPaljIxgEkvKWD9czC5L8fsPqdPvb%2F%2F%2BC5sIJL8d1voh1iUfznzhJB8LTjdYQWCPF7iiR2%2FILPFHV2RDxLp19GSKK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57c0bdb56c3-OSL
alt-svc: h3=":443"; ma=86400

gts794.com/images/avatar/studio-portrait-emotional-happy-funny-smiling-boyfriend.jpg

172.67.136.150

200 OK

26 kB

URL GET HTTP/3
gts794.com/images/avatar/studio-portrait-emotional-happy-funny-smiling-boyfriend.jpg
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1000], progressive, precision 8, 500x334, components 3
Size
26 kB (26473 bytes)
Hash
2c1eba2ef33f5d5dff9e8dd2b04073ce
cb767536742c4844448bb69aa3da8858c77dcf63
f253622fdd5a4f20f46b85f188de785b08302a62164f82721070535a4c9acf04

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/avatar/studio-portrait-emotional-happy-funny-smiling-boyfriend.jpg HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: image/jpeg
content-length: 26473
last-modified: Mon, 14 Mar 2022 02:47:36 GMT
etag: "6769-5da24b3eec200"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ldLYWxqHTnnroyBWirlIdD6B5GbWXJf6T5MK189PRLE4MQTzDHONH5j%2FbKV7WeAGSx8oZsfzGlDsYNMSHFGcEB99e2lll864CImrTaFOWawKK5aCqFZvnOri4hB%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57c0bdc56c3-OSL
alt-svc: h3=":443"; ma=86400

gts794.com/images/portrait-mature-smiling-authoress-sitting-desk.jpg

172.67.136.150

200 OK

246 kB

URL GET HTTP/3
gts794.com/images/portrait-mature-smiling-authoress-sitting-desk.jpg
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
JPEG image data, progressive, precision 8, 1200x800, components 3
Size
246 kB (245913 bytes)
Hash
c2145d3454a8746683132d9e811983f1
8370e814fdff455fa198d7acb0842ef4f99e5911
0cb646bdf34b06c9bd365078812099e41aae0de5d75d71e6f822be0e76e64fa4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/portrait-mature-smiling-authoress-sitting-desk.jpg HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: image/jpeg
content-length: 245913
last-modified: Mon, 02 Jan 2023 01:10:16 GMT
etag: "3c099-5f13d9d2fae00"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eWzCvmfs%2FQDBbLRoLp5%2FYHwClmXv91HckW60E7AIeCUVzd6%2Fxy1somIqU%2B985IXNopcYE%2Bd9SK6sUeWTEi%2FJVPhNLwvLH8BDiRfWQ3Ik%2BVMpxFSXIJRg6cm14wpP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57c0bdf56c3-OSL
alt-svc: h3=":443"; ma=86400

gts794.com/images/tablet-screen-contents.jpg

172.67.136.150

200 OK

220 kB

URL GET HTTP/3
gts794.com/images/tablet-screen-contents.jpg
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
JPEG image data, progressive, precision 8, 1836x1280, components 3
Size
220 kB (219556 bytes)
Hash
7cf6f9cbec501581b78c4c8e82f8b20d
c9bbda23f7cd24eca42a77a6961745abdbdc6c73
d70adc38af1c7c886564b0c2de6eeccb8e3ada43b4e4c9ae365a9491ac8a54a1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/tablet-screen-contents.jpg HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: image/jpeg
content-length: 219556
last-modified: Mon, 02 Jan 2023 01:08:26 GMT
etag: "359a4-5f13d96a13680"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yi7VYjtfztgTJeLH1J%2FQeGvNt1iCQimSRkFtlriFW52hmicIICu%2FtWzc9y89rm7zKUqqhdhwRXPQmq4ZRG5NzUnSATFzplwHUB3FgqC%2Fp2drT5NWVAC7AzHgR0lo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57c0bdd56c3-OSL
alt-svc: h3=":443"; ma=86400

gts794.com/images/businessman-sitting-by-table-cafe.jpg

172.67.136.150

200 OK

271 kB

URL GET HTTP/3
gts794.com/images/businessman-sitting-by-table-cafe.jpg
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
JPEG image data, progressive, precision 8, 1920x1280, components 3
Size
271 kB (271312 bytes)
Hash
51dc9f63ce344cc166d6f2ae3f9c998e
079bcd439c8959ab809d38a8d739fb04b6e83fcf
061f46b2950582a059e667f2123474063a59a4422aadfd25c84ff007a45b8b14

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/businessman-sitting-by-table-cafe.jpg HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: image/jpeg
content-length: 271312
last-modified: Mon, 02 Jan 2023 01:09:46 GMT
etag: "423d0-5f13d9b65ea80"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qo1SdItFlNLkRbdTOOf4znu5uW%2F%2FCdbNjGxOvHSCLTLapVYiQCclhZeg9KkJVIoDfCO89gFmYC%2BmdjUmPBEgexJZQ0hBmh77U7cGamjRhIWCSs93jIF3DrMqdlUJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57c0be056c3-OSL
alt-svc: h3=":443"; ma=86400

gts794.com/js/jquery.sticky.js

172.67.136.150

200 OK

2.5 kB

URL GET HTTP/3
gts794.com/js/jquery.sticky.js
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
JavaScript source, ASCII text
Size
2.5 kB (2521 bytes)
Hash
b8746b98470305fb641e8a0b30d38c4d
495ab774710f8f9a1476f72c77aaf713c19da491
40223bede5475b91b43535458932df276f2750c236732faa669ba9faefd1d1f5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/jquery.sticky.js HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: text/javascript
last-modified: Thu, 11 Aug 2022 05:36:54 GMT
etag: W/"1c85-5e5f08d97c980"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DKZd49ulNFOB4qnafzvnt3RPZZpxA6J33R%2FSgjJM8i32d6mda%2FlHmHYsmQKB0hhGsAKjpHqMD31kLxGkZesJLprNWurOTxVKguz6bct7uNto4pY0SnKimnX3ZRf2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57c0be656c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gts794.com/js/bootstrap.bundle.min.js

172.67.136.150

200 OK

52 kB

URL GET HTTP/3
gts794.com/js/bootstrap.bundle.min.js
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
JavaScript source, ASCII text, with very long lines (65299)
Size
52 kB (52060 bytes)
Hash
d2b0d31f74e62440ea1a557f126d0c64
5c8f6cb983397deb65673b961a8657cfd6113ad9
c4b2394a30fa0e4a23c6b308541353e20872a6fd765ed8fb70e6b402029deb00

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/bootstrap.bundle.min.js HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: text/javascript
last-modified: Sun, 02 Oct 2022 08:07:38 GMT
etag: W/"13a70-5ea08b867c680"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pZ9E46d1oSn4lFG9h56xpMFjUepzSFnFePifpu45uHB2L496FUemmL%2BSRJC7SXRSwWZ%2BOV%2F%2FfAaGkD2%2B7PFxE6Gnq%2BNkUshGdb%2B%2FiqH33BSTQy8FhWhz9ncxiEuD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57c0be556c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gts794.com/fonts/bootstrap-icons.woff2?8d200481aa7f02a2d63a331fc782cfaf

172.67.136.150

200 OK

112 kB

URL GET HTTP/3
gts794.com/fonts/bootstrap-icons.woff2?8d200481aa7f02a2d63a331fc782cfaf
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
Web Open Font Format (Version 2), TrueType, length 112440, version 1.0
Size
112 kB (112440 bytes)
Hash
31e1300d419245fd27614630601dc74d
3a284b0618771f29da8eb6be900e99439253dce0
c69bf1ccae5f13b5aa4345dcfeb209a8148ad0bfa1e0678b93792aae0429c764

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/bootstrap-icons.woff2?8d200481aa7f02a2d63a331fc782cfaf HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/css/bootstrap-icons.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:03 GMT
content-type: font/woff2
content-length: 112440
last-modified: Sat, 16 Jul 2022 21:30:40 GMT
etag: "1b738-5e3f2d8a78000"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4683
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oFzHhq92i52jlHip%2BWY85NzuERAQRP7nckOnnwMZ4oBFGG5aO4%2BJsElqCxjb56LivMxx6ODwVbcwWHxYcET3A1uLIQBPwLqykVbDoNnuKTC0t%2BfigT5CKe5cTI7g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57e6ca856c3-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8Zf.woff2

216.58.207.227

200 OK

51 kB

URL GET HTTP/2
fonts.gstatic.com/s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8Zf.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 51316, version 1.0
Size
51 kB (51316 bytes)
Hash
fb0970515acfd8ed361ac0c20d238229
0bd17b15e9711ea19cd30dc93a64249966f23860
49bec9b3339d0007b61e3553f9f5eeb8e28bf6472071a7fa1e1ab72fc006abad

HTTP Headers

GET /s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8Zf.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://gts794.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 51316
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 00:34:15 GMT
expires: Wed, 16 Apr 2025 00:34:15 GMT
cache-control: public, max-age=31536000
age: 257508
last-modified: Thu, 24 Aug 2023 20:18:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

gts794.com/js/click-scroll.js

172.67.136.150

200 OK

52 kB

URL GET HTTP/3
gts794.com/js/click-scroll.js
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
JavaScript source, ASCII text
Size
52 kB (51711 bytes)
Hash
4ff6c9d82db0002b541259399e9790a9
716fda992f18b6265cbcfc38b57bf7909180074a
cb9f115efd1f6edc979913d2479a5536ad9eaa1d66636538214e626cca2a683c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/click-scroll.js HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: text/javascript
last-modified: Sat, 31 Dec 2022 03:08:52 GMT
etag: W/"4f3-5f11709a67900"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T74oujFZeGj5ihcMERM1LU1%2Ffm%2Fy2906L9G3LRmm%2F%2BOcNKyEACBGaAZOxgAbUj0%2Bs%2FGk0EzLPAGmvVKL%2FGgMlakFcmM9ZaVIc69QSQK2CSrb1SXhSuRe072B1qCw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57c1be756c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8Zf.woff2

216.58.207.227

200 OK

51 kB

URL GET HTTP/2
fonts.gstatic.com/s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8Zf.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 51316, version 1.0
Size
51 kB (51316 bytes)
Hash
fb0970515acfd8ed361ac0c20d238229
0bd17b15e9711ea19cd30dc93a64249966f23860
49bec9b3339d0007b61e3553f9f5eeb8e28bf6472071a7fa1e1ab72fc006abad

HTTP Headers

GET /s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8Zf.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://gts794.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 51316
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 00:34:15 GMT
expires: Wed, 16 Apr 2025 00:34:15 GMT
cache-control: public, max-age=31536000
age: 257508
last-modified: Thu, 24 Aug 2023 20:18:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

gts794.com/css/bootstrap-icons.css

172.67.136.150

200 OK

24 kB

URL GET HTTP/3
gts794.com/css/bootstrap-icons.css
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
ASCII text
Size
24 kB (23552 bytes)
Hash
00220fe2fa340d5502e177032cf423c2
1ce683e78b48dfd6a85e2b4314d85c9a52388f25
4fa72a297d7c91658cf15d00ef0a9e4e83d9a62bf29d34e5f6092e531256567c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/bootstrap-icons.css HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: text/css
last-modified: Tue, 18 Oct 2022 11:47:26 GMT
etag: W/"15a0b-5eb4da7eeaf80"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5StATwbGtTYR%2FFCPzT9%2BUibW1kGDALHwDNsmhMZa4tHZzIDLFbsd0FKOFJ2TppeEfj3iOb2ipc8UFUL2Cnga9%2F4HGsJdZE%2BdmoRGwv5glaObjsOv3LnGnIjPBQ%2Fo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57bfbd456c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip

172.67.136.150

200 OK

8.6 kB

URL User Request GET HTTP/2
gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
8.6 kB (8598 bytes)
Hash
b8f9911fe0cd7e23427288709a4b5de0
7d1cb54663b4ea26352a1c771d482d06c47ff76d
dec526bee895e75497b408a9464800bd507d106170e49eaed275ec423fc1db63

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: text/html;charset=UTF-8
x-powered-by: PHP/8.2.12
cache-control: no-store
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OdKDsjvTTAW1NT5udAEkWWll86Sp10M8OEulAGgc00erf0AoKljluir6yS80aajUtL%2B9I9bz6awNHfOj6S%2B4sj6Q0%2FzVwdyhQjF5aCYl0rIaVVH26li1G0zHr2b0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a579af2eb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Unbounded:wght@300;400;600;700&display=swap

142.250.74.106

200 OK

7.2 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Unbounded:wght@300;400;600;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
ASCII text, with very long lines (7416), with no line terminators
Size
7.2 kB (7236 bytes)
Hash
daa8b82608c6187a05bf7eedd37943ea
246b58bfc464cc277f42b27b8fc326d2fadfd416
5ef076a4eebc4b98674a900d8eb5e5e8b12541fb561bbdbb426d070f8ccea081

HTTP Headers

GET /css2?family=Unbounded:wght@300;400;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Apr 2024 00:06:03 GMT
date: Fri, 19 Apr 2024 00:06:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

gts794.com/favicon.ico

172.67.136.150

200 OK

26 kB

URL GET HTTP/3
gts794.com/favicon.ico
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type

Size
26 kB (26098 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:03 GMT
content-type: text/html;charset=UTF-8
x-powered-by: PHP/8.2.12
cache-control: no-store
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Srv7FkF1ewdjiSVQyrtVNVSvVuY63ZlTGagiM0KJVnHnp%2F5dLwhsIE%2Bj8UD2vuZb9JZk7E%2FT7cnxc%2FzVA4BTRxZoNqw5gKXCaHuGHgeQDFScUUynTabtXyi06wEY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57f9d6656c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gts794.com/css/bootstrap.min.css

172.67.136.150

200 OK

195 kB

URL GET HTTP/3
gts794.com/css/bootstrap.min.css
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type

Size
195 kB (194901 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/bootstrap.min.css HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: text/css
last-modified: Sun, 02 Oct 2022 08:07:38 GMT
etag: W/"2f955-5ea08b867c680"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HlfjxBn8WN46eQMouurxNpxEGVN0G5c0hGsAopTIUb78xtcxd1fD38IFzIpfPUiDfE88FqfhLqXXfOrYmJExY3X6lbVDVflOHtzES3C2iy%2FdH9YCY9U%2FGuNXWu1C"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57bfbd356c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gts794.com/css/templatemo-ebook-landing.css

172.67.136.150

200 OK

22 kB

URL GET HTTP/3
gts794.com/css/templatemo-ebook-landing.css
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type

Size
22 kB (22277 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/templatemo-ebook-landing.css HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: text/css
last-modified: Wed, 29 Mar 2023 05:06:56 GMT
etag: W/"5705-5f802f1ecbc00"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ErRrn8g%2FjodReZxwgS2904WBLFM5jtWX9FIEGfExFSjyN4T64fOvaI47XcgxUR%2FtWB2aVpT6l%2FlI%2FQ2eNMM3%2FQ%2FmUKk%2F%2BXbi3gSPtBscbXWfTXwcFHPAqKcZ6KbL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57bfbd556c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gts794.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js

172.67.136.150

200 OK

1.2 kB

URL GET HTTP/3
gts794.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
HTML document, ASCII text, with very long lines (1271), with no line terminators
Size
1.2 kB (1239 bytes)
Hash
40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: application/javascript
last-modified: Tue, 16 Apr 2024 15:45:04 GMT
etag: W/"661e9d00-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8EispVJ%2FCMkXaesJ3VlG1gJIngTTMR3g%2FjTIiwVwgkRYezu5eqHJ1SuRPY3DQnSHT%2ByOsDAMxfQqnFVokJENhrz2Efs2C%2BEIbxNnPPwPRQcTFUjrYmnErVGiRamq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57c0be356c3-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sun, 21 Apr 2024 00:06:02 GMT
cache-control: max-age=172800, public
content-encoding: gzip

gts794.com/js/jquery.min.js

172.67.136.150

200 OK

86 kB

URL GET HTTP/3
gts794.com/js/jquery.min.js
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
JavaScript source, ASCII text, with very long lines (32065)
Size
86 kB (85658 bytes)
Hash
48abd2372de119dfd7ffb96c8f307bfe
da49460a365d995ef121403cece389dafe496505
04685bdefed2099cae5f544505b8319ee7ae4d0a7f90a93b2e764bde5cad1de6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/jquery.min.js HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: text/javascript
last-modified: Wed, 06 Oct 2021 05:11:36 GMT
etag: W/"14e9a-5cda82e261200"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L5Vvk%2BKPoRHGBP%2BXRr9k3j9rIgK5oLHuq57HjLSPyjeQrmH%2BQ904QF7Nvs2BcR7H5EUo2ssIPhakvAzDCnjampDPQypiW3KAtQ0A9xWnSkgHAmB4Kd9tLShVSfrO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57c0be456c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gts794.com/images/circle-scatter-haikei.png

172.67.136.150

200 OK

28 kB

URL GET HTTP/3
gts794.com/images/circle-scatter-haikei.png
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
PNG image data, 562 x 1000, 8-bit/color RGBA, non-interlaced
Size
28 kB (27975 bytes)
Hash
00fa544a8f7b68ecd2fa2269a8b29baf
f95d1fba2ca79d9eb64003c72b6d4124284b8006
6b1341f874cd118bc840c9e3d0095605718088a53c324caeed4c30381b88de61

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/circle-scatter-haikei.png HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/css/templatemo-ebook-landing.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:03 GMT
content-type: image/png
content-length: 27975
last-modified: Mon, 02 Jan 2023 00:34:34 GMT
etag: "6d47-5f13d1d835a80"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4683
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=akHN2VAUe6CtBMQkxocrgMe4gxZfPKJXTluaZtxGNj1ZYgwfknsimI3i%2Bvjqt5eNepQZJP0ARs%2BdLUsrdLXvl6XBzi788cl7O9tsXgZJHIJIhGDQdKT4FCEWDi%2Bt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57e4ca156c3-OSL
alt-svc: h3=":443"; ma=86400

gts794.com/js/custom.js

172.67.136.150

200 OK

701 B

URL GET HTTP/3
gts794.com/js/custom.js
IP
172.67.136.150:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Certificate
IssuerLet's Encrypt
Subjectgts794.com
Fingerprint4A:EE:38:44:7C:47:BD:9E:74:95:59:D9:43:A5:DE:43:CA:C9:BF:30
ValidityFri, 12 Apr 2024 06:29:03 GMT - Thu, 11 Jul 2024 06:29:02 GMT

File type
JavaScript source, ASCII text, with very long lines (738), with no line terminators
Size
701 B (701 bytes)
Hash
5e65e49da9882605e11cdf4c0acbd1d2
e2e98901d8427986df4b4f733be5677c4d93eda1
e03a84014b7ee65f4957b39f75a2755442afe6edc165606818545936542b8746

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/custom.js HTTP/1.1
Host: gts794.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gts794.com/Adobe+Premiere+Pro+2020+14.0.1.71+(x64)+Multilingual.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 00:06:02 GMT
content-type: text/javascript
last-modified: Wed, 04 Jan 2023 08:57:34 GMT
etag: W/"2bd-5f16c60105b80"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4682
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R3s0NUrp1SQ99z5hyjpuIQ9gkIk%2Bgj9M4qfaRy6n5uNeXZ1EyWNRdJDQ8g7nnlfUOeK3EVDGAAYHkeW61BXHPebF6FvtfzuR%2FfjUChZFUz%2BzC%2Ff5Qrj%2Bfiu3SRSv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8768a57c1be856c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (24)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3