| www1.movies123.la/cdn-cgi/challenge-platform/scripts/jsd/main.js |  104.31.16.119 | 302 Found | 0 B |
URL GET HTTP/3www1.movies123.la/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.31.16.119:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectmovies123.la FingerprintDC:5D:46:19:A4:8E:B8:ED:94:EB:FE:8C:AA:49:77:48:F2:17:13:28 ValidityTue, 16 Apr 2024 15:26:16 GMT - Mon, 15 Jul 2024 15:26:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: www1.movies123.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Thu, 18 Apr 2024 06:52:01 GMT
content-length: 0
cache-control: max-age=300, public
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5wvE3qE5WKGWPeMQUCypgWWzgZyInWus9mAT4YzeEavwxoGDl8vzvX9KEh%2FdnRtqXjeb47K4hHzSAkTREt7lI%2BbJqeJE3Mp15D60ygFRqI25lzAv5XJgLFwLAcOktj2ENPFjXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762baceaa31b523-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www1.movies123.la/cdn-cgi/challenge-platform/h/g/jsd/r/8762bacbfd9856a5 | 104.31.16.119 | 200 OK | 0 B |
URL POST HTTP/3www1.movies123.la/cdn-cgi/challenge-platform/h/g/jsd/r/8762bacbfd9856a5 IP104.31.16.119:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectmovies123.la FingerprintDC:5D:46:19:A4:8E:B8:ED:94:EB:FE:8C:AA:49:77:48:F2:17:13:28 ValidityTue, 16 Apr 2024 15:26:16 GMT - Mon, 15 Jul 2024 15:26:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/g/jsd/r/8762bacbfd9856a5 HTTP/1.1
Host: www1.movies123.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12162
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 06:52:01 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=cx42FJDa9hd5lHBLyYUGhp0i1hmuf0YNVwgwkZd_y4A-1713423121-1.0.1.1-OL0WpuDY8VgwFdPLyEiamhozCkf5FkGvOcQIDCVAIXcogDjZWcFldcvscanAvieSdVzunjIkEEmyx_eJzHXGGg; path=/; expires=Fri, 18-Apr-25 06:52:01 GMT; domain=.movies123.la; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F5rXEvnA17s79wwEVb%2BWQV%2FbsGkmsTJf%2BP0phIsCpl6USXSjcyENU0kAemKEKn%2FQYL6cVcCdD6uTbU9r1PZJW6GOf%2Bo7oDmSKftdxhrgGXByNexx8nlaPItAeTukXZGfwgagng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8762bacf8b4bb523-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-0FTEVYS5XK |  142.250.74.168 | 200 OK | 100 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-0FTEVYS5XK IP142.250.74.168:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size100 kB (100158 bytes) Hash86c749e786816d4d938d39e6f21d9119 94333842324e8f8dbb3715ae42e8097e85e26612 b8e624f2b11dc8bec19e1b8a57d49f37ae134bd6b767a03106b701caf5dd58b4
GET /gtag/js?id=G-0FTEVYS5XK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 18 Apr 2024 06:52:01 GMT
expires: Thu, 18 Apr 2024 06:52:01 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100158
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www1.movies123.la/cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js | 104.31.16.119 | 200 OK | 13 kB |
URL GET HTTP/3www1.movies123.la/cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js IP104.31.16.119:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectmovies123.la FingerprintDC:5D:46:19:A4:8E:B8:ED:94:EB:FE:8C:AA:49:77:48:F2:17:13:28 ValidityTue, 16 Apr 2024 15:26:16 GMT - Mon, 15 Jul 2024 15:26:15 GMT
File typeJavaScript source, ASCII text, with very long lines (7847), with no line terminators Hash4f81684bad89ef9a8a6021a087ac50aa 43b2ba93888a004c6386211c88cfd30c6d51e0f6 89e4b869ac2fa57ab3197383dd4c33763685785d4d2836dfc51785124fcb214b
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js HTTP/1.1
Host: www1.movies123.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 06:52:01 GMT
content-type: application/javascript; charset=UTF-8
vary: accept-encoding
x-content-type-options: nosniff
content-encoding: br
cache-control: max-age=14400, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ilPC9M%2BlzWe3vjvzOwB6f9uasJW4YZPL4xFUhpARu5Njssrl31cW62ZDWcxF3LURi5%2Fi55a5Uz2bNB5%2B085%2FWDtMimGh4CdkagQ%2BsKxmGI5DXFdJa4m6CFyYeMJCeJi66unDcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8762baceda63b523-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www1.movies123.la/images/favicon-16x16.png | 104.31.16.119 | 200 OK | 981 B |
URL GET HTTP/3www1.movies123.la/images/favicon-16x16.png IP104.31.16.119:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectmovies123.la FingerprintDC:5D:46:19:A4:8E:B8:ED:94:EB:FE:8C:AA:49:77:48:F2:17:13:28 ValidityTue, 16 Apr 2024 15:26:16 GMT - Mon, 15 Jul 2024 15:26:15 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash177d1f0dd6679bb43940ddac73fb1536 209b0418f0ee3326c2a04bcd4323609c9b53bb4c a2755ad99cc64b44c51de91575b72ddafda7a609dd60de1636c4f07f150067b1
GET /images/favicon-16x16.png HTTP/1.1
Host: www1.movies123.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda
Cookie: cf_clearance=cx42FJDa9hd5lHBLyYUGhp0i1hmuf0YNVwgwkZd_y4A-1713423121-1.0.1.1-OL0WpuDY8VgwFdPLyEiamhozCkf5FkGvOcQIDCVAIXcogDjZWcFldcvscanAvieSdVzunjIkEEmyx_eJzHXGGg; srv=1; _ga_0FTEVYS5XK=GS1.1.1713423122.1.0.1713423122.0.0.0; _ga=GA1.1.1695662346.1713423122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 06:52:02 GMT
content-type: image/png
content-length: 981
last-modified: Thu, 18 Apr 2024 02:37:11 GMT
etag: "3d5-61655d92089de"
cache-control: public, max-age=2592000
expires: Sat, 18 May 2024 06:40:36 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 686
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vDiRtODpkkNxDREzOzL1teW6yEfia6sPh3mZVvW7270VMMaFng6ZrgZ2ceXXagknKYvfDtFmhAF6YfQzkSgCZlMyJvXhBcoQnYEem%2BL2dPxO45ycMRMu8shvaNNA4v1julEgzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762bad1fe42b523-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www1.movies123.la/images/apple-touch-icon.png | 104.31.16.119 | 200 OK | 1.1 kB |
URL GET HTTP/3www1.movies123.la/images/apple-touch-icon.png IP104.31.16.119:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectmovies123.la FingerprintDC:5D:46:19:A4:8E:B8:ED:94:EB:FE:8C:AA:49:77:48:F2:17:13:28 ValidityTue, 16 Apr 2024 15:26:16 GMT - Mon, 15 Jul 2024 15:26:15 GMT
File typePNG image data, 180 x 180, 4-bit colormap, non-interlaced Hash333558579aefc8cc27d37033e7f8ab49 e8593694ca34c1e71b2723062eb27a5450e898bd 69c215d17b01f220d6dd8340d7f926c095e29246ee51f990086cf772114dafe6
GET /images/apple-touch-icon.png HTTP/1.1
Host: www1.movies123.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda
Cookie: cf_clearance=cx42FJDa9hd5lHBLyYUGhp0i1hmuf0YNVwgwkZd_y4A-1713423121-1.0.1.1-OL0WpuDY8VgwFdPLyEiamhozCkf5FkGvOcQIDCVAIXcogDjZWcFldcvscanAvieSdVzunjIkEEmyx_eJzHXGGg; srv=1; _ga_0FTEVYS5XK=GS1.1.1713423122.1.0.1713423122.0.0.0; _ga=GA1.1.1695662346.1713423122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 06:52:02 GMT
content-type: image/png
content-length: 1074
last-modified: Thu, 18 Apr 2024 02:37:11 GMT
etag: "432-61655d9208dc6"
cache-control: public, max-age=2592000
expires: Sat, 18 May 2024 02:55:43 GMT
x-powered-by: PleskLin
cf-cache-status: HIT
age: 14178
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=30zpcBtfhEmGqrvvnaWdtv9KlPCuUoiHPWnBF1DWZpiYgmdLiI5DhJ9J65YpIYR62v5NhCGBruhHKofhqNcG21kpgQzyXQMU9af9dOzmgrlGB4giOr16Kdo2FPnligRAqw%2BFag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762bad1fe3fb523-OSL
alt-svc: h3=":443"; ma=86400
|
|
| banishafreshconjunction.com/89/ab/21/89ab21fd5e23690514167a08b906efa4.js | 192.243.61.227 | 200 OK | 16 kB |
URL GET HTTP/1.1banishafreshconjunction.com/89/ab/21/89ab21fd5e23690514167a08b906efa4.js IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectbanishafreshconjunction.com FingerprintF1:A1:E3:40:51:C5:ED:65:2A:31:52:99:37:D1:E7:F3:4C:49:34:6E ValidityThu, 28 Mar 2024 20:08:05 GMT - Wed, 26 Jun 2024 20:08:04 GMT
File typeJavaScript source, ASCII text, with very long lines (44073), with no line terminators Hashf67e468c0e7750bdad0004f7e339e1b4 890fcddcb96b37240bf7a6c0ffe3135f6136394e 157c7c754ad1c69648f2ae92e459f466dde279ab9d8bef8c8ea051ddbd176cdf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /89/ab/21/89ab21fd5e23690514167a08b906efa4.js HTTP/1.1
Host: banishafreshconjunction.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:02 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 926550fa251017636febdb9652177706
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| proftrafficcounter.com/stats |  52.29.198.136 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP52.29.198.136:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashafb2e11f4b2df41c1cc8d332478151ed f83c972551f54b4e7e2fdc6b0acd5224906fa74c e5810ac9c7542c64310e2344cfe1db9e943b1b399211a223abe768e74b4291a4
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:52:02 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www1.movies123.la
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; expires=Sun, 16 Apr 2034 06:52:02 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| banishafreshconjunction.com/f0/54/67/f05467e9f36c51475b64860bccf43bdc.js | 192.243.61.227 | 200 OK | 18 kB |
URL GET HTTP/1.1banishafreshconjunction.com/f0/54/67/f05467e9f36c51475b64860bccf43bdc.js IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectbanishafreshconjunction.com FingerprintF1:A1:E3:40:51:C5:ED:65:2A:31:52:99:37:D1:E7:F3:4C:49:34:6E ValidityThu, 28 Mar 2024 20:08:05 GMT - Wed, 26 Jun 2024 20:08:04 GMT
File typeJavaScript source, ASCII text, with very long lines (43624), with no line terminators Hash9e4393bd095995f2259ee8f3b49f16c0 af1126d9372a30245c89d0666eae033a7b79536f 879d23ad460570c9e7270edad780c42779a39a2935130e205a07e18fcba3edc1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /f0/54/67/f05467e9f36c51475b64860bccf43bdc.js HTTP/1.1
Host: banishafreshconjunction.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:02 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2e0c853b4ed32aab946e466b72089d1a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| www1.movies123.la/cdn-cgi/challenge-platform/scripts/jsd/main.js | 104.31.16.119 | 302 Found | 0 B |
URL GET HTTP/3www1.movies123.la/cdn-cgi/challenge-platform/scripts/jsd/main.js IP104.31.16.119:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectmovies123.la FingerprintDC:5D:46:19:A4:8E:B8:ED:94:EB:FE:8C:AA:49:77:48:F2:17:13:28 ValidityTue, 16 Apr 2024 15:26:16 GMT - Mon, 15 Jul 2024 15:26:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: www1.movies123.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=cx42FJDa9hd5lHBLyYUGhp0i1hmuf0YNVwgwkZd_y4A-1713423121-1.0.1.1-OL0WpuDY8VgwFdPLyEiamhozCkf5FkGvOcQIDCVAIXcogDjZWcFldcvscanAvieSdVzunjIkEEmyx_eJzHXGGg; srv=1; _ga_0FTEVYS5XK=GS1.1.1713423122.1.0.1713423122.0.0.0; _ga=GA1.1.1695662346.1713423122; dom3ic8zudi28v8lr6fgphwffqoz0j6c=8d0c55cd-6c22-4aad-b66f-ec906ba30206%3A2%3A1; ppu_show_on_f05467e9f36c51475b64860bccf43bdc=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Thu, 18 Apr 2024 06:52:03 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js
access-control-allow-origin: *
cache-control: max-age=300, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8NmMmRM7BVB0h9OdBKZYd2yQri66xtquuzX7wFRLTLKtqix5r56giKa2gEx4cnWhzNwz9JtvNqQqb5kcnF2dITbPcw%2FaDOBiIsgS7Pf5KFvNrGbEcbK0nFT9fACKDnXy75xyJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762bad6fc51b523-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda | 104.31.16.119 | 200 OK | 14 kB |
URL User Request GET HTTP/2www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda IP104.31.16.119:443
CertificateIssuerGoogle Trust Services LLC Subjectmovies123.la FingerprintDC:5D:46:19:A4:8E:B8:ED:94:EB:FE:8C:AA:49:77:48:F2:17:13:28 ValidityTue, 16 Apr 2024 15:26:16 GMT - Mon, 15 Jul 2024 15:26:15 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (16529), with CRLF, LF line terminators Hash56edf50d847023465b1789ddbd3c560d 153579aa66ab59609b38d708e584d46138dce1f3 99f7c8f450742903a0110fc282662c8cf36f5b869b702d6d4ff50e1a4f236884
GET /searching?limit=5&offset=0&q=kung+fu+panda HTTP/1.1
Host: www1.movies123.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:52:01 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.18, PleskLin
cache-control: max-age=600, private, must-revalidate
expires: Thu, 18 Apr 2024 07:52:01 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AEHBpPQ6ege0wnAE4UKAtEF4KIjGn2ikheksyYYcmzMv0CqgdxCycKgvuLo%2FJ82LDkwU5kCgtbz9J4kYHYFgEwhw5w0CnsyVjDaLj0a5xImLB9I5PEN%2BN4eE7HbSJytOcd0TNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8762bacbfd9856a5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| downstairsnegotiatebarren.com/sfp.js |  188.114.96.1 | 200 OK | 43 kB |
URL GET HTTP/3downstairsnegotiatebarren.com/sfp.js IP188.114.96.1:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44 ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:52:03 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 36532a8b34be7f5ca3d54963f7fe7689
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 18 Apr 2024 06:52:02 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ekdGG%2FloO1Iip6swk7hDXT5Q%2BaM0iGfROa%2FjgX2FFwXU3Q%2Fg7haXRkI%2Ftk0E4%2FIdNNAtLfP3ZtCC9JVGNlFoV41%2FxmWWayfcHNu1yDBRhrwtpAXDZay5YH7UwiKrBIIARo6u2tClXfEe1AsV%2BpOnyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762bad60f82b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www1.movies123.la/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js | 104.31.16.119 | 200 OK | 8.2 kB |
URL GET HTTP/3www1.movies123.la/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP104.31.16.119:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectmovies123.la FingerprintDC:5D:46:19:A4:8E:B8:ED:94:EB:FE:8C:AA:49:77:48:F2:17:13:28 ValidityTue, 16 Apr 2024 15:26:16 GMT - Mon, 15 Jul 2024 15:26:15 GMT
File typeJavaScript source, ASCII text, with very long lines (12331) Hashc9b462e2ba924d500f5d48e6a545234b c9f8575b452f56e3df19562e6b4483d58a7e8459 be5d3d6ce7772831089496ae6873d0ccd05c22b9354d82a5be54afc2575f00a7
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www1.movies123.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 06:52:01 GMT
content-type: application/javascript
last-modified: Tue, 16 Apr 2024 15:45:04 GMT
etag: W/"661e9d00-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fah1%2BXVExRqPDfxav4Q4DCP9M%2Fz7if2sDWfYoZxcz%2BeolHU%2BOnLRQaTLHke9qPoUpXrZxgz6w8I8p0oOHLQi%2BlXKnHtzBQAOqICquwduYgQTXbsLAIwqjsttnqqm5Yc0lvBW4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762bace3994b523-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 20 Apr 2024 06:52:01 GMT
cache-control: max-age=172800, public
content-encoding: gzip
|
|
| www1.movies123.la/cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js | 104.31.16.119 | 200 OK | 31 kB |
URL GET HTTP/3www1.movies123.la/cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js IP104.31.16.119:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectmovies123.la FingerprintDC:5D:46:19:A4:8E:B8:ED:94:EB:FE:8C:AA:49:77:48:F2:17:13:28 ValidityTue, 16 Apr 2024 15:26:16 GMT - Mon, 15 Jul 2024 15:26:15 GMT
File typeJavaScript source, ASCII text, with very long lines (7801), with no line terminators Hash68cf014632d3315aa8408ce9ba13d580 c5dd04338adcbbe4c36ff3b648b91f027e6f961d c69d32933f8c7c288e4c08dd6a9706f04b600c04aac18cf73f86c018d1736c90
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/54ea73d52131/main.js HTTP/1.1
Host: www1.movies123.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: cf_clearance=cx42FJDa9hd5lHBLyYUGhp0i1hmuf0YNVwgwkZd_y4A-1713423121-1.0.1.1-OL0WpuDY8VgwFdPLyEiamhozCkf5FkGvOcQIDCVAIXcogDjZWcFldcvscanAvieSdVzunjIkEEmyx_eJzHXGGg; srv=1; _ga_0FTEVYS5XK=GS1.1.1713423122.1.0.1713423122.0.0.0; _ga=GA1.1.1695662346.1713423122; dom3ic8zudi28v8lr6fgphwffqoz0j6c=8d0c55cd-6c22-4aad-b66f-ec906ba30206%3A2%3A1; ppu_show_on_f05467e9f36c51475b64860bccf43bdc=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 06:52:03 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
cache-control: max-age=14400, public
vary: accept-encoding
content-encoding: br
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1r12jRmp7y677ogtH1EUhH6CUMGew46G1%2FrVqp0CuKHX0UUWhu37wtDqZPrM%2BsUxREe%2BK%2BbXW6%2FEaqyv4x3DGK%2B40WPqGcojPIw920P42CYePwWTwfzTivgmuImI7EHoIs%2B7og%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8762bad70c63b523-OSL
alt-svc: h3=":443"; ma=86400
|
|
| stripherselfscuba.com/sbar.json?key=8fb47e6668b7fa2d208541541b49d522&uuid=8d0c55cd-6c22-4aad-b66f-ec906ba30206%3A2%3A1 | 172.240.108.68 | 200 OK | 6.1 kB |
URL GET HTTP/1.1stripherselfscuba.com/sbar.json?key=8fb47e6668b7fa2d208541541b49d522&uuid=8d0c55cd-6c22-4aad-b66f-ec906ba30206%3A2%3A1 IP172.240.108.68:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectstripherselfscuba.com Fingerprint27:09:AC:8B:2B:B3:33:5D:E9:D5:03:33:75:F8:E2:63:AA:1A:2B:92 ValidityTue, 16 Apr 2024 13:43:56 GMT - Mon, 15 Jul 2024 13:43:55 GMT
Hashb13baebe593b9ae1e0b5d8ed95154a8c 576cb389c79ffa9616119fcef712372376f6b5a1 b9015cfed869e9876a72ad4ee700791f725222e7131ee982a7e30e4a0f049c6e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sbar.json?key=8fb47e6668b7fa2d208541541b49d522&uuid=8d0c55cd-6c22-4aad-b66f-ec906ba30206%3A2%3A1 HTTP/1.1
Host: stripherselfscuba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:04 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www1.movies123.la
Access-Control-Allow-Origin: https://www1.movies123.la
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=21602085; expires=Fri, 19 Apr 2024 06:52:04 GMT; secure; SameSite=None
uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; expires=Thu, 25 Apr 2024 06:52:04 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 19 Apr 2024 06:52:04 GMT; secure; SameSite=None
uncs=1; expires=Fri, 19 Apr 2024 06:52:04 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 19 Apr 2024 06:52:04 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 19 Apr 2024 06:52:04 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d8ce7d8fdeaae71183a730060dde3355
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| stripherselfscuba.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwYscxReunt%2F%2BRBAEJSdF6IOCijvb3TPTM2MOYowrS9YkJIp6kuqq6tlyq7uaqq7p2T0tBiTHISAe7f1mN4sxiLl4M8hsQCEg7Hjag%2FsneBFylhkXR9%2Bh3vve9wq%2B%2Bl59se%2FOSARHTy%2B%2Fr3elUnSt0wz8Vz8Ow4v%2BpszdyB%2F14k%2Fj9kXfDN%2Fsx83gNf89wbb1WhSEQRAGob8ujUj1aG1OQhb3%2B2GzHzTbUTPstDEy%2F8XWebDUAx%2Bekech%2BWzlkXcBkk2RZ99fFna71MUb72ZO0VIbDPnRh%2Fl2rqsc2bJMjYc0PzqfhrYn6w%2Bh88OFXOjhP4OJnBHv54dI8qNzkUiGBwudiYLIkfBnUA2nEGoKSadg%2BhYkPyEA47h6DXl296o2Fd35m6VzdkZWnvwJWc3Iyu8XkGffXVJy5N%2FUypVS5xajtIYcTSEHUxTuGOVuA7I6Bis%2Fh%2BS%2FkrUnm8izg2tWaUh%2B%2BnKPB6zTYXw1ZlG02qaUryZxnK4K1g%2FihLaCKIgXBkk5hUynUGIMahtw1oOTHlzqwRUeMn7qszAMuwFnNOj1GWvxrkhiHoS0m4Y0DOIeHJu%2FYYyyGIOpMZjZQ2H2sC3HMO4n2K0alnuwJcGQ16gEQWUJKkpQSYKqJKiG9SFXNrL1Xa6sS8LzHJ3nVj3R5WCfHupyIHICasYwvN4vzshzcwO9ja9fwbY49Xtp0u6KOI57STelEY%2BCXqcddtph0u7zThTByhrSNkCth105I%2F4vL6CQM%2FL%2Fp0sk9BhWHYNJD9S9BFrVoFs1dvMHYdTK9FAKmxohmpI5cF2jKFdQ7nj76oy8uNjjla%2FuQbDH5DzATI3C1PhMPiIYqNuTG7oiBzd0ZcmDa0UpM7lL5zu%2BWdJSPHXvitiptOEbl%2B34m7fZnJiX9z8QttykOZf5wJJvL0nOhVnXhgny44b9SCTXnd265Ezuis3r76xvZIUR1kqdT0HlySd3wOSMPPvD5uLzvu7%2FAWmmMK5G5pZKpZ6CFXuwxbJnNYFRS5wUHipXT0yULJtKEiixxDSpYf%2BFk2U9MXR%2Bm8p6397GwDRAy1vIsxpDU2OoalA1hnX%2Fm5SFefzWb61FIFGNSaJM4yBRRt1ZmDw%2FvoSVp3631Qpo3O%2BE3S4V3aQd9dI45JRG7TiKY9pCaWepf3zhLwAAAP%2F%2FAQAA%2F%2F8ScucslgQAAA%3D%3D | 172.240.108.68 | 200 OK | 7 B |
URL GET HTTP/1.1stripherselfscuba.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwYscxReunt%2F%2BRBAEJSdF6IOCijvb3TPTM2MOYowrS9YkJIp6kuqq6tlyq7uaqq7p2T0tBiTHISAe7f1mN4sxiLl4M8hsQCEg7Hjag%2FsneBFylhkXR9%2Bh3vve9wq%2B%2Bl59se%2FOSARHTy%2B%2Fr3elUnSt0wz8Vz8Ow4v%2BpszdyB%2F14k%2Fj9kXfDN%2Fsx83gNf89wbb1WhSEQRAGob8ujUj1aG1OQhb3%2B2GzHzTbUTPstDEy%2F8XWebDUAx%2Bekech%2BWzlkXcBkk2RZ99fFna71MUb72ZO0VIbDPnRh%2Fl2rqsc2bJMjYc0PzqfhrYn6w%2Bh88OFXOjhP4OJnBHv54dI8qNzkUiGBwudiYLIkfBnUA2nEGoKSadg%2BhYkPyEA47h6DXl296o2Fd35m6VzdkZWnvwJWc3Iyu8XkGffXVJy5N%2FUypVS5xajtIYcTSEHUxTuGOVuA7I6Bis%2Fh%2BS%2FkrUnm8izg2tWaUh%2B%2BnKPB6zTYXw1ZlG02qaUryZxnK4K1g%2FihLaCKIgXBkk5hUynUGIMahtw1oOTHlzqwRUeMn7qszAMuwFnNOj1GWvxrkhiHoS0m4Y0DOIeHJu%2FYYyyGIOpMZjZQ2H2sC3HMO4n2K0alnuwJcGQ16gEQWUJKkpQSYKqJKiG9SFXNrL1Xa6sS8LzHJ3nVj3R5WCfHupyIHICasYwvN4vzshzcwO9ja9fwbY49Xtp0u6KOI57STelEY%2BCXqcddtph0u7zThTByhrSNkCth105I%2F4vL6CQM%2FL%2Fp0sk9BhWHYNJD9S9BFrVoFs1dvMHYdTK9FAKmxohmpI5cF2jKFdQ7nj76oy8uNjjla%2FuQbDH5DzATI3C1PhMPiIYqNuTG7oiBzd0ZcmDa0UpM7lL5zu%2BWdJSPHXvitiptOEbl%2B34m7fZnJiX9z8QttykOZf5wJJvL0nOhVnXhgny44b9SCTXnd265Ezuis3r76xvZIUR1kqdT0HlySd3wOSMPPvD5uLzvu7%2FAWmmMK5G5pZKpZ6CFXuwxbJnNYFRS5wUHipXT0yULJtKEiixxDSpYf%2BFk2U9MXR%2Bm8p6397GwDRAy1vIsxpDU2OoalA1hnX%2Fm5SFefzWb61FIFGNSaJM4yBRRt1ZmDw%2FvoSVp3631Qpo3O%2BE3S4V3aQd9dI45JRG7TiKY9pCaWepf3zhLwAAAP%2F%2FAQAA%2F%2F8ScucslgQAAA%3D%3D IP172.240.108.68:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectstripherselfscuba.com Fingerprint27:09:AC:8B:2B:B3:33:5D:E9:D5:03:33:75:F8:E2:63:AA:1A:2B:92 ValidityTue, 16 Apr 2024 13:43:56 GMT - Mon, 15 Jul 2024 13:43:55 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSwYscxReunt%2F%2BRBAEJSdF6IOCijvb3TPTM2MOYowrS9YkJIp6kuqq6tlyq7uaqq7p2T0tBiTHISAe7f1mN4sxiLl4M8hsQCEg7Hjag%2FsneBFylhkXR9%2Bh3vve9wq%2B%2Bl59se%2FOSARHTy%2B%2Fr3elUnSt0wz8Vz8Ow4v%2BpszdyB%2F14k%2Fj9kXfDN%2Fsx83gNf89wbb1WhSEQRAGob8ujUj1aG1OQhb3%2B2GzHzTbUTPstDEy%2F8XWebDUAx%2Bekech%2BWzlkXcBkk2RZ99fFna71MUb72ZO0VIbDPnRh%2Fl2rqsc2bJMjYc0PzqfhrYn6w%2Bh88OFXOjhP4OJnBHv54dI8qNzkUiGBwudiYLIkfBnUA2nEGoKSadg%2BhYkPyEA47h6DXl296o2Fd35m6VzdkZWnvwJWc3Iyu8XkGffXVJy5N%2FUypVS5xajtIYcTSEHUxTuGOVuA7I6Bis%2Fh%2BS%2FkrUnm8izg2tWaUh%2B%2BnKPB6zTYXw1ZlG02qaUryZxnK4K1g%2FihLaCKIgXBkk5hUynUGIMahtw1oOTHlzqwRUeMn7qszAMuwFnNOj1GWvxrkhiHoS0m4Y0DOIeHJu%2FYYyyGIOpMZjZQ2H2sC3HMO4n2K0alnuwJcGQ16gEQWUJKkpQSYKqJKiG9SFXNrL1Xa6sS8LzHJ3nVj3R5WCfHupyIHICasYwvN4vzshzcwO9ja9fwbY49Xtp0u6KOI57STelEY%2BCXqcddtph0u7zThTByhrSNkCth105I%2F4vL6CQM%2FL%2Fp0sk9BhWHYNJD9S9BFrVoFs1dvMHYdTK9FAKmxohmpI5cF2jKFdQ7nj76oy8uNjjla%2FuQbDH5DzATI3C1PhMPiIYqNuTG7oiBzd0ZcmDa0UpM7lL5zu%2BWdJSPHXvitiptOEbl%2B34m7fZnJiX9z8QttykOZf5wJJvL0nOhVnXhgny44b9SCTXnd265Ezuis3r76xvZIUR1kqdT0HlySd3wOSMPPvD5uLzvu7%2FAWmmMK5G5pZKpZ6CFXuwxbJnNYFRS5wUHipXT0yULJtKEiixxDSpYf%2BFk2U9MXR%2Bm8p6397GwDRAy1vIsxpDU2OoalA1hnX%2Fm5SFefzWb61FIFGNSaJM4yBRRt1ZmDw%2FvoSVp3631Qpo3O%2BE3S4V3aQd9dI45JRG7TiKY9pCaWepf3zhLwAAAP%2F%2FAQAA%2F%2F8ScucslgQAAA%3D%3D HTTP/1.1
Host: stripherselfscuba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Cookie: u_pl=21602085; uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:04 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4527f959c2bdac75b79fa0322700314b
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Findex.html&l=1553&fd=629 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Findex.html&l=1553&fd=629 IP172.240.108.68:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectstripherselfscuba.com Fingerprint27:09:AC:8B:2B:B3:33:5D:E9:D5:03:33:75:F8:E2:63:AA:1A:2B:92 ValidityTue, 16 Apr 2024 13:43:56 GMT - Mon, 15 Jul 2024 13:43:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Findex.html&l=1553&fd=629 HTTP/1.1
Host: stripherselfscuba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Cookie: u_pl=21602085; uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:04 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/img/1.jpg | 104.21.70.253 | 200 OK | 36 kB |
URL GET HTTP/3cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/img/1.jpg IP104.21.70.253:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3 Hashfc90b66d3831faf345c0a6173f02746f 4f5310e4fb903bdd4dceaa5d4095e48a83673a69 a2b1cc40143d3a9c13f5ffb5040a72ad972bc7d285c7eceef8708efe369fdeb4
GET //sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/img/1.jpg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 06:52:04 GMT
content-type: image/jpeg
content-length: 36061
last-modified: Thu, 01 Feb 2024 14:48:15 GMT
etag: "65bbaf2f-8cdd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 5506218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x7WXErkZKmsmtKn6BB4GujiZeNOVchdAkua5HsX0qzkbbgbO3s8mC90lcFpcg4MTdR%2FeZZPIcMVQX2OX5K%2BDsZMfJ6Qg7o4H0FrXmntJdbj5t4p7AVJfcTs6o9ZVHcTNFuBh05tlBb8z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762bae1c813568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fjs%2Fscript.js&l=386&fd=31 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fjs%2Fscript.js&l=386&fd=31 IP172.240.108.68:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectstripherselfscuba.com Fingerprint27:09:AC:8B:2B:B3:33:5D:E9:D5:03:33:75:F8:E2:63:AA:1A:2B:92 ValidityTue, 16 Apr 2024 13:43:56 GMT - Mon, 15 Jul 2024 13:43:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fjs%2Fscript.js&l=386&fd=31 HTTP/1.1
Host: stripherselfscuba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Cookie: u_pl=21602085; uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:04 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fcss%2Fstyle.css&l=3630&fd=48 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fcss%2Fstyle.css&l=3630&fd=48 IP172.240.108.68:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectstripherselfscuba.com Fingerprint27:09:AC:8B:2B:B3:33:5D:E9:D5:03:33:75:F8:E2:63:AA:1A:2B:92 ValidityTue, 16 Apr 2024 13:43:56 GMT - Mon, 15 Jul 2024 13:43:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fcss%2Fstyle.css&l=3630&fd=48 HTTP/1.1
Host: stripherselfscuba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Cookie: u_pl=21602085; uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:04 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F4%2Findex.html&l=1571&fd=578 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F4%2Findex.html&l=1571&fd=578 IP172.240.108.68:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectstripherselfscuba.com Fingerprint27:09:AC:8B:2B:B3:33:5D:E9:D5:03:33:75:F8:E2:63:AA:1A:2B:92 ValidityTue, 16 Apr 2024 13:43:56 GMT - Mon, 15 Jul 2024 13:43:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F4%2Findex.html&l=1571&fd=578 HTTP/1.1
Host: stripherselfscuba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Cookie: u_pl=21602085; uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:05 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/img/1.jpg | 104.21.70.253 | 200 OK | 22 kB |
URL GET HTTP/3cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/img/1.jpg IP104.21.70.253:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3 Hash7bcc800a4957dac955e91ce1ee3b73cd b1fae2cacecc790a22f91e2320077f89707473b1 760783cbcd04b3b7ef5f6b10a24878869d061709e4511ccada113b532833243d
GET //sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/img/1.jpg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 06:52:05 GMT
content-type: image/jpeg
content-length: 21597
last-modified: Thu, 01 Feb 2024 14:55:47 GMT
etag: "65bbb0f3-545d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2441364
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EhEc%2FxOhXWxGkiKDPoOEthtqafX%2BDjAin5i7skcUPT%2BZ4jYKkWSixv7x7D5uriUMCvfMDwXo793HkMijkRzpld11%2F2%2FC6zI%2Byl3l0QeYNxttqClLVFVZiQjW6vPJqUS0TXE5e7YFVuqn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762bae3cbd8568e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F4%2Fcss%2Fstyle.css&l=3630&fd=22 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F4%2Fcss%2Fstyle.css&l=3630&fd=22 IP172.240.108.68:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectstripherselfscuba.com Fingerprint27:09:AC:8B:2B:B3:33:5D:E9:D5:03:33:75:F8:E2:63:AA:1A:2B:92 ValidityTue, 16 Apr 2024 13:43:56 GMT - Mon, 15 Jul 2024 13:43:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F4%2Fcss%2Fstyle.css&l=3630&fd=22 HTTP/1.1
Host: stripherselfscuba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Cookie: u_pl=21602085; uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:05 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| binaryrecentrecentcut.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRuunm8%2FEQRBzUkJ9MGDijvb3TPTM2MOYowrIWsSEkU9Sf3q2XKru5qq7unZPS0GJMdhFbz2PrObRQ1iLt4MMhtQCAg7etmD%2B08IOcuMi6Pvod73eZ%2B34Knnrc%2F3yzMSoaSnV94zO0prutZpBv4rH4XhJX9DZeXIH%2FXiT%2BL2Jd8O3%2BjHzeBV%2F13Jt8xaFIRBEAahv66sTMxobU5C5ff7YbMfNNtRM%2By0MbL%2Fxa704KgHMTwjz0OJ2coj7wIUnyJLv78i3VZh8tffSUtNC2MxFEcfZFuZqTKkyzKxHpLs6Hwaxp2sP4TJDhdyYYb%2FDDI1I97PD8Gyo3ORYMODhU6mITMw8Qyq4RRST6HoFNzcgRInBOAC128gS%2B9dN7ai23%2BzdM7OyMqTP6GqGVn54wKy9LvLWo3820aXhTKZwyipoUZTqMEUeXmMYqcBVR2DF59BiV%2FJ2pMNZOnBDacNlDh9uScC3ulwsRrzKFptUypWWRwnq5L3g5jRVhAF8cIgpaZQyRRajkFdA6XzUCoPZeKhzD2k4tTnYRh2A8Fp0Otz3hJdyWIRhLSbhDQM4h5KPn%2FDGEU%2BBtdjcLuL3O5iS41hy5%2FgNms44cEVBENRo5IElSOoKEGlCKqCoBrWh0K7yNX3hHYlC89zdJ5b9cQUg316aIqBzAioHcOKej8%2FI8%2FNDfQuTr7Aljz1e33KojARHRm14n7QCdth3KVBj%2FWDWCa0DadqKNcAdR521Iz4v7yIXM3I%2F58uwOgxnD4GVx5oeRG0qkE3a%2BxkD8KolZqhki6xUjYVLyFMjbxYQbHt7esz8tJij9e%2B2oPkj8l5gNsaua3xqXpEMNB3J7dMRQ5umcqRBzfyQqVqh853fLughXzqm2tyuzJWXL3ixl%2B%2FxefEvLz%2FvnTFBs2EygaOfHtZCSHturFckh%2Bvug8lu1m6zculzcp84%2Bbb61fT3ErnlMmmoOrk4z1wNSPP%2FrCx%2BLyv%2Bb9D2SlsWSMtl0qVmYLnu3D5sucMgdVLzHIPVVlPbMSWTa0ItFxiymq4f2G2rCeWzm9TVe%2B7uxjYBmhxB1laY2hrDHUNqsdw5f8mRW4fv%2FlbaxFgujFh2jYOmLZ6b2Hy%2FPgSTp36rUB0mUxkl8l2p51ILlinwwKecNYSvR5H4WaJf%2FzCXwAAAP%2F%2FAQAA%2F%2F%2BST4GClgQAAA%3D%3D | 172.240.253.132 | 200 OK | 7 B |
URL GET HTTP/1.1binaryrecentrecentcut.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRuunm8%2FEQRBzUkJ9MGDijvb3TPTM2MOYowrIWsSEkU9Sf3q2XKru5qq7unZPS0GJMdhFbz2PrObRQ1iLt4MMhtQCAg7etmD%2B08IOcuMi6Pvod73eZ%2B34Knnrc%2F3yzMSoaSnV94zO0prutZpBv4rH4XhJX9DZeXIH%2FXiT%2BL2Jd8O3%2BjHzeBV%2F13Jt8xaFIRBEAahv66sTMxobU5C5ff7YbMfNNtRM%2By0MbL%2Fxa704KgHMTwjz0OJ2coj7wIUnyJLv78i3VZh8tffSUtNC2MxFEcfZFuZqTKkyzKxHpLs6Hwaxp2sP4TJDhdyYYb%2FDDI1I97PD8Gyo3ORYMODhU6mITMw8Qyq4RRST6HoFNzcgRInBOAC128gS%2B9dN7ai23%2BzdM7OyMqTP6GqGVn54wKy9LvLWo3820aXhTKZwyipoUZTqMEUeXmMYqcBVR2DF59BiV%2FJ2pMNZOnBDacNlDh9uScC3ulwsRrzKFptUypWWRwnq5L3g5jRVhAF8cIgpaZQyRRajkFdA6XzUCoPZeKhzD2k4tTnYRh2A8Fp0Otz3hJdyWIRhLSbhDQM4h5KPn%2FDGEU%2BBtdjcLuL3O5iS41hy5%2FgNms44cEVBENRo5IElSOoKEGlCKqCoBrWh0K7yNX3hHYlC89zdJ5b9cQUg316aIqBzAioHcOKej8%2FI8%2FNDfQuTr7Aljz1e33KojARHRm14n7QCdth3KVBj%2FWDWCa0DadqKNcAdR521Iz4v7yIXM3I%2F58uwOgxnD4GVx5oeRG0qkE3a%2BxkD8KolZqhki6xUjYVLyFMjbxYQbHt7esz8tJij9e%2B2oPkj8l5gNsaua3xqXpEMNB3J7dMRQ5umcqRBzfyQqVqh853fLughXzqm2tyuzJWXL3ixl%2B%2FxefEvLz%2FvnTFBs2EygaOfHtZCSHturFckh%2Bvug8lu1m6zculzcp84%2Bbb61fT3ErnlMmmoOrk4z1wNSPP%2FrCx%2BLyv%2Bb9D2SlsWSMtl0qVmYLnu3D5sucMgdVLzHIPVVlPbMSWTa0ItFxiymq4f2G2rCeWzm9TVe%2B7uxjYBmhxB1laY2hrDHUNqsdw5f8mRW4fv%2FlbaxFgujFh2jYOmLZ6b2Hy%2FPgSTp36rUB0mUxkl8l2p51ILlinwwKecNYSvR5H4WaJf%2FzCXwAAAP%2F%2FAQAA%2F%2F%2BST4GClgQAAA%3D%3D IP172.240.253.132:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectbinaryrecentrecentcut.com FingerprintA7:82:4A:2C:01:A7:28:16:18:7F:72:48:9A:D8:E9:21:1F:0B:A0:EE ValidityTue, 16 Apr 2024 14:06:21 GMT - Mon, 15 Jul 2024 14:06:20 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRuunm8%2FEQRBzUkJ9MGDijvb3TPTM2MOYowrIWsSEkU9Sf3q2XKru5qq7unZPS0GJMdhFbz2PrObRQ1iLt4MMhtQCAg7etmD%2B08IOcuMi6Pvod73eZ%2B34Knnrc%2F3yzMSoaSnV94zO0prutZpBv4rH4XhJX9DZeXIH%2FXiT%2BL2Jd8O3%2BjHzeBV%2F13Jt8xaFIRBEAahv66sTMxobU5C5ff7YbMfNNtRM%2By0MbL%2Fxa704KgHMTwjz0OJ2coj7wIUnyJLv78i3VZh8tffSUtNC2MxFEcfZFuZqTKkyzKxHpLs6Hwaxp2sP4TJDhdyYYb%2FDDI1I97PD8Gyo3ORYMODhU6mITMw8Qyq4RRST6HoFNzcgRInBOAC128gS%2B9dN7ai23%2BzdM7OyMqTP6GqGVn54wKy9LvLWo3820aXhTKZwyipoUZTqMEUeXmMYqcBVR2DF59BiV%2FJ2pMNZOnBDacNlDh9uScC3ulwsRrzKFptUypWWRwnq5L3g5jRVhAF8cIgpaZQyRRajkFdA6XzUCoPZeKhzD2k4tTnYRh2A8Fp0Otz3hJdyWIRhLSbhDQM4h5KPn%2FDGEU%2BBtdjcLuL3O5iS41hy5%2FgNms44cEVBENRo5IElSOoKEGlCKqCoBrWh0K7yNX3hHYlC89zdJ5b9cQUg316aIqBzAioHcOKej8%2FI8%2FNDfQuTr7Aljz1e33KojARHRm14n7QCdth3KVBj%2FWDWCa0DadqKNcAdR521Iz4v7yIXM3I%2F58uwOgxnD4GVx5oeRG0qkE3a%2BxkD8KolZqhki6xUjYVLyFMjbxYQbHt7esz8tJij9e%2B2oPkj8l5gNsaua3xqXpEMNB3J7dMRQ5umcqRBzfyQqVqh853fLughXzqm2tyuzJWXL3ixl%2B%2FxefEvLz%2FvnTFBs2EygaOfHtZCSHturFckh%2Bvug8lu1m6zculzcp84%2Bbb61fT3ErnlMmmoOrk4z1wNSPP%2FrCx%2BLyv%2Bb9D2SlsWSMtl0qVmYLnu3D5sucMgdVLzHIPVVlPbMSWTa0ItFxiymq4f2G2rCeWzm9TVe%2B7uxjYBmhxB1laY2hrDHUNqsdw5f8mRW4fv%2FlbaxFgujFh2jYOmLZ6b2Hy%2FPgSTp36rUB0mUxkl8l2p51ILlinwwKecNYSvR5H4WaJf%2FzCXwAAAP%2F%2FAQAA%2F%2F%2BST4GClgQAAA%3D%3D HTTP/1.1
Host: binaryrecentrecentcut.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Cookie: u_pl=18719635; uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:05 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a32abe83c837d724739fb03cb5e9572f
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fcss%2Fanimate.css&l=79245&fd=39 | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fcss%2Fanimate.css&l=79245&fd=39 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectstripherselfscuba.com Fingerprint27:09:AC:8B:2B:B3:33:5D:E9:D5:03:33:75:F8:E2:63:AA:1A:2B:92 ValidityTue, 16 Apr 2024 13:43:56 GMT - Mon, 15 Jul 2024 13:43:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F1%2Fcss%2Fanimate.css&l=79245&fd=39 HTTP/1.1
Host: stripherselfscuba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Cookie: u_pl=21602085; uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:05 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/css/style.css | 104.21.70.253 | 200 OK | 17 kB |
URL GET HTTP/2cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/css/style.css IP104.21.70.253:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash9b388680bb9d9cf0d8e7e4dad7b39ac5 393a2393f3b96b727a3114d249fffb35bf34d9f5 758934b1fbbad9e578664b4efbb5ee3303482d0d37ec7837b4bb2fa4915be70f
GET //sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:52:04 GMT
content-type: text/css
last-modified: Thu, 01 Feb 2024 14:48:12 GMT
etag: W/"65bbaf2c-e2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 11609
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qDDoKx01IRfiwe7gLsVFhIJ2ZpoHNvgqpClol5tec%2Fv6aZg8mcsqSAlGI6XT6yEAF0v7NMSkfOxynNYYxOaO1z1FkhL8DZLm962h926uR7dDLKTjIuc9QstIsUqLWFqSCjCfvbhJvTWP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762bae14ef35696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.131 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.131:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:37:01 GMT
expires: Fri, 18 Apr 2025 02:37:01 GMT
cache-control: public, max-age=31536000
age: 15304
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/css/animate.css | 104.21.70.253 | 200 OK | 5.5 kB |
URL GET HTTP/2cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/css/animate.css IP104.21.70.253:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash80047eaa13ebd50c50e8a9753621e430 9c503e07d130572a0eaf51f7c02cbd4cf6213fe3 3f831a59615f8d5d40b4340b2836f91438c876f8dbce75f78e38360d6fe0f429
GET //sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:52:04 GMT
content-type: text/css
last-modified: Thu, 01 Feb 2024 14:48:12 GMT
etag: W/"65bbaf2c-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 11609
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ffsbRx70fCZBxTnL4sNHGXrTtc%2FC49NOowDWKNdrkMeCk52l2G0MQHcNivLYZ%2BxE0jZ5FPaT%2BSmLgLN7IpJKjMLI4D%2FC6qz3QSHh6nf8U9ziNFXV%2Fz3Qk6LxqGQs9Nfi%2FL6pbeLUCkcx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762bae13ee55696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.106 | 200 OK | 5.5 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.106:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Hasha4d576843b3ef83328ef229d9a6b2162 3c7fbfb8f1fc48bc6ea79d166b06939fd889871e 364002aa0ffb1533e3ab745892b2e7947f18652602654e4ec010cb75d76e4dc5
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 06:52:04 GMT
date: Thu, 18 Apr 2024 06:52:04 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.131 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.131:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:37:01 GMT
expires: Fri, 18 Apr 2025 02:37:01 GMT
cache-control: public, max-age=31536000
age: 15304
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.131 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.131:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 10:46:32 GMT
expires: Wed, 16 Apr 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 158733
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F4%2Fjs%2Fscript.js&l=386&fd=21 | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F4%2Fjs%2Fscript.js&l=386&fd=21 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectstripherselfscuba.com Fingerprint27:09:AC:8B:2B:B3:33:5D:E9:D5:03:33:75:F8:E2:63:AA:1A:2B:92 ValidityTue, 16 Apr 2024 13:43:56 GMT - Mon, 15 Jul 2024 13:43:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F4%2Fjs%2Fscript.js&l=386&fd=21 HTTP/1.1
Host: stripherselfscuba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Cookie: u_pl=21602085; uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:05 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| stripherselfscuba.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRuunm8%2FEQRByUkR%2BqCg4s5298z0zJiDGOPKkjUJiaKepH71bLnVXU1V9%2FTsnhYDkuMQEI%2F2PrObxRjEXLwZZDagEBB2PO3B%2FRO8CDnLjIuj76He93mft%2BCp560v9sszEqGkp5ffN7tKa7rWaQb%2Bqx%2BH4UV%2FU2XlyB%2F14k%2Fj9kXfDt%2Fsx83gNf89ybfNWhSEQRAGob%2BurEzMaG1OQuX3%2B2GzHzTbUTPstDGy%2F8Wu9OCoBzE8I89DidnKI%2B8CFJ8iS7%2B%2FLN12YfI33k1LTQtjMRRHH2bbmakypMsysR6S7Oh8GsadrD%2BEyQ4XcmGG%2FwwyNSPezw%2FBsqNzkWDDg4VOpiEzMPEMquEUUk%2Bh6BTc3IISJwTgAlevIUvvXjW2ojt%2Fs3TOzsjKkz%2BhqhlZ%2Bf0CsvS7S1qN%2FJtGl4UymcMoqaFGU6jBFHl5jGK3AVUdgxefQ4lfydqTTWTpwTWnDZQ4fbknAt7pcLEa8yhabVMqVlkcJ6uS94OY0VYQBfHCIKWmUMkUWo5BXQOl81AqD2Xiocw9pOLU52EYdgPBadDrc94SXcliEYS0m4Q0DOIeSj5%2FwxhFPgbXY3C7h9zuYVuNYcuf4LZqOOHBFQRDUaOSBJUjqChBpQiqgqAa1odCu8jVd4V2JQvPc3SeW%2FXEFIN9emiKgcwIqB3Dino%2FPyPPzQ30Nr5%2BBdvy1O8lrN2VcRz3WDehkYiCXqcddtoha%2FdFJ4rgVA3lGqDOw66aEf%2BXF5CrGfn%2F0wUYPYbTx%2BDKAy1fAq1q0K0au9mDMGqlZqikS6yUTcVLCFMjL1ZQ7Hj7%2Boy8uNjjla%2FuQfLH5DzAbY3c1vhMPSIY6NuTG6YiBzdM5ciDa3mhUrVL5zu%2BWdBCPnXvitypjBUbl934m7f5nJiX9z%2BQrtikmVDZwJFvLykhpF03lkvy44b7SLLrpdu6VNqszDevv7O%2BkeZWOqdMNgVVJ5%2FcAVcz8uwPm4vP%2B7r%2FB5SdwpY10nKpVJkpeL4Hly97zhBYvcQs91CV9cRGbNnUikDLJaashvsXZst6Yun8NlX1vruNgW2AFreQpTWGtsZQ16B6DFf%2Bb1Lk9vFbv7UWAaYbE6Zt44Bpq%2B8sTJ4fX8KpU78ViC6Tiewy2e60E8kF63RYwBPOWqLX4yjcLPGPL%2FwFAAD%2F%2FwEAAP%2F%2FkqYyxJYEAAA%3D | 172.240.108.68 | 200 OK | 7 B |
URL GET HTTP/1.1stripherselfscuba.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRuunm8%2FEQRByUkR%2BqCg4s5298z0zJiDGOPKkjUJiaKepH71bLnVXU1V9%2FTsnhYDkuMQEI%2F2PrObxRjEXLwZZDagEBB2PO3B%2FRO8CDnLjIuj76He93mft%2BCp560v9sszEqGkp5ffN7tKa7rWaQb%2Bqx%2BH4UV%2FU2XlyB%2F14k%2Fj9kXfDt%2Fsx83gNf89ybfNWhSEQRAGob%2BurEzMaG1OQuX3%2B2GzHzTbUTPstDGy%2F8Wu9OCoBzE8I89DidnKI%2B8CFJ8iS7%2B%2FLN12YfI33k1LTQtjMRRHH2bbmakypMsysR6S7Oh8GsadrD%2BEyQ4XcmGG%2FwwyNSPezw%2FBsqNzkWDDg4VOpiEzMPEMquEUUk%2Bh6BTc3IISJwTgAlevIUvvXjW2ojt%2Fs3TOzsjKkz%2BhqhlZ%2Bf0CsvS7S1qN%2FJtGl4UymcMoqaFGU6jBFHl5jGK3AVUdgxefQ4lfydqTTWTpwTWnDZQ4fbknAt7pcLEa8yhabVMqVlkcJ6uS94OY0VYQBfHCIKWmUMkUWo5BXQOl81AqD2Xiocw9pOLU52EYdgPBadDrc94SXcliEYS0m4Q0DOIeSj5%2FwxhFPgbXY3C7h9zuYVuNYcuf4LZqOOHBFQRDUaOSBJUjqChBpQiqgqAa1odCu8jVd4V2JQvPc3SeW%2FXEFIN9emiKgcwIqB3Dino%2FPyPPzQ30Nr5%2BBdvy1O8lrN2VcRz3WDehkYiCXqcddtoha%2FdFJ4rgVA3lGqDOw66aEf%2BXF5CrGfn%2F0wUYPYbTx%2BDKAy1fAq1q0K0au9mDMGqlZqikS6yUTcVLCFMjL1ZQ7Hj7%2Boy8uNjjla%2FuQfLH5DzAbY3c1vhMPSIY6NuTG6YiBzdM5ciDa3mhUrVL5zu%2BWdBCPnXvitypjBUbl934m7f5nJiX9z%2BQrtikmVDZwJFvLykhpF03lkvy44b7SLLrpdu6VNqszDevv7O%2BkeZWOqdMNgVVJ5%2FcAVcz8uwPm4vP%2B7r%2FB5SdwpY10nKpVJkpeL4Hly97zhBYvcQs91CV9cRGbNnUikDLJaashvsXZst6Yun8NlX1vruNgW2AFreQpTWGtsZQ16B6DFf%2Bb1Lk9vFbv7UWAaYbE6Zt44Bpq%2B8sTJ4fX8KpU78ViC6Tiewy2e60E8kF63RYwBPOWqLX4yjcLPGPL%2FwFAAD%2F%2FwEAAP%2F%2FkqYyxJYEAAA%3D IP172.240.108.68:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectstripherselfscuba.com Fingerprint27:09:AC:8B:2B:B3:33:5D:E9:D5:03:33:75:F8:E2:63:AA:1A:2B:92 ValidityTue, 16 Apr 2024 13:43:56 GMT - Mon, 15 Jul 2024 13:43:55 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRuunm8%2FEQRByUkR%2BqCg4s5298z0zJiDGOPKkjUJiaKepH71bLnVXU1V9%2FTsnhYDkuMQEI%2F2PrObxRjEXLwZZDagEBB2PO3B%2FRO8CDnLjIuj76He93mft%2BCp560v9sszEqGkp5ffN7tKa7rWaQb%2Bqx%2BH4UV%2FU2XlyB%2F14k%2Fj9kXfDt%2Fsx83gNf89ybfNWhSEQRAGob%2BurEzMaG1OQuX3%2B2GzHzTbUTPstDGy%2F8Wu9OCoBzE8I89DidnKI%2B8CFJ8iS7%2B%2FLN12YfI33k1LTQtjMRRHH2bbmakypMsysR6S7Oh8GsadrD%2BEyQ4XcmGG%2FwwyNSPezw%2FBsqNzkWDDg4VOpiEzMPEMquEUUk%2Bh6BTc3IISJwTgAlevIUvvXjW2ojt%2Fs3TOzsjKkz%2BhqhlZ%2Bf0CsvS7S1qN%2FJtGl4UymcMoqaFGU6jBFHl5jGK3AVUdgxefQ4lfydqTTWTpwTWnDZQ4fbknAt7pcLEa8yhabVMqVlkcJ6uS94OY0VYQBfHCIKWmUMkUWo5BXQOl81AqD2Xiocw9pOLU52EYdgPBadDrc94SXcliEYS0m4Q0DOIeSj5%2FwxhFPgbXY3C7h9zuYVuNYcuf4LZqOOHBFQRDUaOSBJUjqChBpQiqgqAa1odCu8jVd4V2JQvPc3SeW%2FXEFIN9emiKgcwIqB3Dino%2FPyPPzQ30Nr5%2BBdvy1O8lrN2VcRz3WDehkYiCXqcddtoha%2FdFJ4rgVA3lGqDOw66aEf%2BXF5CrGfn%2F0wUYPYbTx%2BDKAy1fAq1q0K0au9mDMGqlZqikS6yUTcVLCFMjL1ZQ7Hj7%2Boy8uNjjla%2FuQfLH5DzAbY3c1vhMPSIY6NuTG6YiBzdM5ciDa3mhUrVL5zu%2BWdBCPnXvitypjBUbl934m7f5nJiX9z%2BQrtikmVDZwJFvLykhpF03lkvy44b7SLLrpdu6VNqszDevv7O%2BkeZWOqdMNgVVJ5%2FcAVcz8uwPm4vP%2B7r%2FB5SdwpY10nKpVJkpeL4Hly97zhBYvcQs91CV9cRGbNnUikDLJaashvsXZst6Yun8NlX1vruNgW2AFreQpTWGtsZQ16B6DFf%2Bb1Lk9vFbv7UWAaYbE6Zt44Bpq%2B8sTJ4fX8KpU78ViC6Tiewy2e60E8kF63RYwBPOWqLX4yjcLPGPL%2FwFAAD%2F%2FwEAAP%2F%2FkqYyxJYEAAA%3D HTTP/1.1
Host: stripherselfscuba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Cookie: u_pl=21602085; uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:05 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 44db78146b659a3b7547df822ecfea24
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| stripherselfscuba.com/pixel/sbs?c=1 | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1stripherselfscuba.com/pixel/sbs?c=1 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectstripherselfscuba.com Fingerprint27:09:AC:8B:2B:B3:33:5D:E9:D5:03:33:75:F8:E2:63:AA:1A:2B:92 ValidityTue, 16 Apr 2024 13:43:56 GMT - Mon, 15 Jul 2024 13:43:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbs?c=1 HTTP/1.1
Host: stripherselfscuba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Cookie: u_pl=21602085; uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:05 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| addresseepaper.com/sfp.js | 3.64.163.50 | 410 Gone | 113 B |
URL GET HTTP/2addresseepaper.com/sfp.js IP3.64.163.50:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectaddresseepaper.com Fingerprint04:E2:47:07:1C:BD:EF:52:CF:38:CF:90:4A:39:37:9D:0A:C0:4F:FA ValidityWed, 10 Apr 2024 19:36:56 GMT - Tue, 09 Jul 2024 19:36:55 GMT
File typeHTML document, ASCII text, with no line terminators Hash13fb46419b3d9afffb93787911a8ccda 10217383bb7b2385be0f150364f46e14b2861c1b 1670b2800b3b3f31fca4dbd213fd674023d54e30b7e46a6878431b586f83a8f7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 410 Gone
server: openresty
date: Thu, 18 Apr 2024 06:52:03 GMT
content-type: application/javascript
X-Firefox-Spdy: h2
|
|
| stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F4%2Fcss%2Fanimate.css&l=79245&fd=22 | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1stripherselfscuba.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F4%2Fcss%2Fanimate.css&l=79245&fd=22 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectstripherselfscuba.com Fingerprint27:09:AC:8B:2B:B3:33:5D:E9:D5:03:33:75:F8:E2:63:AA:1A:2B:92 ValidityTue, 16 Apr 2024 13:43:56 GMT - Mon, 15 Jul 2024 13:43:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2F%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2Fecorious%2Fmessage_redcircle2%2Fjan24%2F4%2Fcss%2Fanimate.css&l=79245&fd=22 HTTP/1.1
Host: stripherselfscuba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Cookie: u_pl=21602085; uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:05 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| binaryrecentrecentcut.com/sbar.json?key=89ab21fd5e23690514167a08b906efa4&uuid=8d0c55cd-6c22-4aad-b66f-ec906ba30206%3A2%3A1 | 172.240.253.132 | 200 OK | 12 kB |
URL GET HTTP/1.1binaryrecentrecentcut.com/sbar.json?key=89ab21fd5e23690514167a08b906efa4&uuid=8d0c55cd-6c22-4aad-b66f-ec906ba30206%3A2%3A1 IP172.240.253.132:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectbinaryrecentrecentcut.com FingerprintA7:82:4A:2C:01:A7:28:16:18:7F:72:48:9A:D8:E9:21:1F:0B:A0:EE ValidityTue, 16 Apr 2024 14:06:21 GMT - Mon, 15 Jul 2024 14:06:20 GMT
Hash424e415b668a416946b28fb5157fc541 f57e16e179cc970c2d29fa7d6816a7ac127b88e9 432a0897dbe7ac8b904e06631123566218337f39109ff82471c0a7a1bd09a143
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sbar.json?key=89ab21fd5e23690514167a08b906efa4&uuid=8d0c55cd-6c22-4aad-b66f-ec906ba30206%3A2%3A1 HTTP/1.1
Host: binaryrecentrecentcut.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:03 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www1.movies123.la
Access-Control-Allow-Origin: https://www1.movies123.la
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=18719635; expires=Fri, 19 Apr 2024 06:52:03 GMT; secure; SameSite=None
uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; expires=Thu, 25 Apr 2024 06:52:03 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 19 Apr 2024 06:52:03 GMT; secure; SameSite=None
uncs=1; expires=Fri, 19 Apr 2024 06:52:03 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 19 Apr 2024 06:52:03 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 19 Apr 2024 06:52:03 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f3f2f60b8b6fc41b9d608f450587e8b5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/index.html | 104.26.6.19 | 200 OK | 1.6 kB |
URL GET HTTP/2cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/index.html IP104.26.6.19:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint84:82:6E:35:03:D4:C4:FC:BA:08:CD:C8:E6:A3:97:A9:20:2F:F5:49 ValiditySun, 23 Jul 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (1642), with no line terminators Hashd086ac98379bfeb8250336ab371ad609 92031b5a736cd9ccd82410e38f51e9931b63cd2d ce2f2bb21f09fde1d48a137d2982c497595fae100b1258328b839a713340e6b9
GET /sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:52:04 GMT
content-type: text/html
last-modified: Thu, 01 Feb 2024 14:48:10 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0hGbdQPCL9x%2FktLsZnx%2FpE13NmOidSoWnF%2F%2Fs%2BAK46WBE0wZUO67Xo1RPMXRbdX6zFnp8ZRp9lK7HWXPKOO%2BhdecNv8bMF6hGaIzqafvkaAEebPH8ZGBOmpbTO70k0tgndA9EMI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762badd2d77b4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/index.html | 104.26.6.19 | 200 OK | 1.6 kB |
URL GET HTTP/2cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/index.html IP104.26.6.19:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint84:82:6E:35:03:D4:C4:FC:BA:08:CD:C8:E6:A3:97:A9:20:2F:F5:49 ValiditySun, 23 Jul 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (1660), with no line terminators Hash0029b7cb4d5550c5233f931c816165ea 31298b092158bb9ce60a8e9bf497c5bd1f562a11 26ba2ea9cf182d890d03039af9052b75e71a92a6f3a9a386e955428677907062
GET /sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:52:04 GMT
content-type: text/html
last-modified: Thu, 01 Feb 2024 14:55:44 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PltYZY%2F%2FwJXX%2FB%2B3M8%2FswEgm7%2BLueN7iR40R1YGKGyMDQ3ULRLIPK56ZKbUCa4dgktwxVb3teANxrj8BZ%2BNypsR4QOlJ%2BJR456fQ8VKFpLqrSrjYrg7KraiM%2BHhfh9rG1ijJ98c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762badf6a38b4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/js/script.js | 104.21.70.253 | 200 OK | 386 B |
URL GET HTTP/2cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/js/script.js IP104.21.70.253:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (399), with no line terminators Hash022602a468da44628060800173771da2 9be813fbfebbcb2aa46d8c6b8abec68b3d16c89c 6742c376e658c34d09b2dc5772bd798e3cd52bb265758bac5bce184f8ee7b5cc
GET //sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 06:52:04 GMT
content-type: application/javascript
last-modified: Thu, 01 Feb 2024 14:48:15 GMT
etag: W/"65bbaf2f-182"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 11609
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lqJ8f7t8RsJW%2FX5Y%2Fzs40qYUkVg8IoikwUncleQC1F%2FaHHe8eTchvXoOQg3PGL7eiFvLDVJWkan9rI%2F6JcQHfteaqn%2BiHdB9QBYRTvVbVxBjUCYYSEzoUYmCJiNVxxZEzBVXLPnCAd5i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762bae14eef5696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/css/animate.css | 104.21.70.253 | 200 OK | 79 kB |
URL GET HTTP/3cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/css/animate.css IP104.21.70.253:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash80047eaa13ebd50c50e8a9753621e430 9c503e07d130572a0eaf51f7c02cbd4cf6213fe3 3f831a59615f8d5d40b4340b2836f91438c876f8dbce75f78e38360d6fe0f429
GET //sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 06:52:04 GMT
content-type: text/css
last-modified: Thu, 01 Feb 2024 14:55:44 GMT
etag: W/"65bbb0f0-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 11706
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ope0%2B1BI2PaYUQrnWXqe91SwB0s6rTtKgVto72bF3b%2BN30oyiOLRnYRg03zeWr29J3IPpR3vKd0%2Fqx5fSOF5J6XbEsRZ8ruyqvzsl2BymyKjL0P%2BZVryEtJpp06AsqpckKDRhnPvxAHm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762bae31a92568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/js/script.js | 104.21.70.253 | 200 OK | 386 B |
URL GET HTTP/3cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/js/script.js IP104.21.70.253:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (399), with no line terminators Hash022602a468da44628060800173771da2 9be813fbfebbcb2aa46d8c6b8abec68b3d16c89c 6742c376e658c34d09b2dc5772bd798e3cd52bb265758bac5bce184f8ee7b5cc
GET //sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 06:52:04 GMT
content-type: application/javascript
last-modified: Thu, 01 Feb 2024 14:55:49 GMT
etag: W/"65bbb0f5-182"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 11706
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vnVp%2B21wzYtJ6yaJIfiPJlabqcfdESuuv5C5yW10psbMG6UJrEpjhbpb61X5KvzpkXW4rEuGuHEIfkPcF%2BBFe1V2Bxdsx454Kp1lviqiogsLvD5NU2pZwSP6wTWhNVaLSoFByCcCEk3L"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762bae32aa0568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 1.redirects.store/searching?limit=5&offset=0&q=kung+fu+panda | 104.21.39.90 | 301 Moved Permanently | 51 kB |
URL User Request GET HTTP/21.redirects.store/searching?limit=5&offset=0&q=kung+fu+panda IP104.21.39.90:443
CertificateIssuerGoogle Trust Services LLC Subjectredirects.store Fingerprint2A:DF:EA:B4:13:0A:A6:25:94:4B:C3:A2:D4:95:5C:F2:A7:C2:78:FA ValidityMon, 15 Apr 2024 13:55:20 GMT - Sun, 14 Jul 2024 13:55:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /searching?limit=5&offset=0&q=kung+fu+panda HTTP/1.1
Host: 1.redirects.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 18 Apr 2024 06:52:01 GMT
content-type: text/html; charset=iso-8859-1
location: https://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda
x-powered-by: PleskLin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ohAifPhk0VEaZBv%2BnOQH2SsoFz0TyoUrziQb4UI1gT4%2BMAvEo30BS3tsQ%2BdDpkwDMKM31aSPTZK%2FlJgO9oy0iW50DcD8vTpTZqVSbGqkXhFLhibl2Sxp6hS7FUd4nvTSHvZbYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8762bacacc3e56c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/css/style.css | 104.21.70.253 | 200 OK | 3.6 kB |
URL GET HTTP/3cdn.creative-bars1.com//sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/css/style.css IP104.21.70.253:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (3854), with no line terminators Hash1ef6c40dc9237f64e46f930e4b26d112 7e94a725845a7101b17bfc0ff488e27c12060c1d e23167c1f14d771e6eb40f86085c2f04f52010a5e934cff3f9e214aab984f4b4
GET //sb/notifications/utility/default/us/blog/ecorious/message_redcircle2/jan24/4/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www1.movies123.la
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 06:52:04 GMT
content-type: text/css
last-modified: Thu, 01 Feb 2024 14:55:46 GMT
etag: W/"65bbb0f2-e2e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 11706
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DJhQCYVWXnNCCwuQiT9R5gS8JWzKE4DRnavq09X257Az1sGgfbTv2cql%2B1v7FbJ2ZN6UXIbP5%2FvavrkZ2W5iWaNi7EavcrMSPgd5vOsgyFEQMGHQ3AvV37JP%2FfO0Vy%2BHyZKkGn2YxspU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762bae32a9a568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www1.movies123.la/js/app.min.2.js | 104.31.16.119 | 200 OK | 64 kB |
URL GET HTTP/3www1.movies123.la/js/app.min.2.js IP104.31.16.119:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerGoogle Trust Services LLC Subjectmovies123.la FingerprintDC:5D:46:19:A4:8E:B8:ED:94:EB:FE:8C:AA:49:77:48:F2:17:13:28 ValidityTue, 16 Apr 2024 15:26:16 GMT - Mon, 15 Jul 2024 15:26:15 GMT
File typeJavaScript source, ASCII text, with very long lines (63412) Hash95fcaba0e70babdf8718fe7ed294ce05 08de5e47487e68c11f78010c43a346da1c32cf7a 5577efa0234ac4f57f5a86064d4c8eaf66398e9b60b4be2b86587ac21c5f89fe
GET /js/app.min.2.js HTTP/1.1
Host: www1.movies123.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 06:52:01 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 02:37:11 GMT
etag: W/"f7f3-61655d9229d21-gzip"
cache-control: max-age=216000, private
expires: Thu, 25 Apr 2024 06:52:01 GMT
vary: Accept-Encoding
x-powered-by: PleskLin
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h6DnIXl9U5WC8%2F6XcpMGOeMWq0OQtEH6L%2F%2F8NVY3wApCiBTOKCI%2BF6jrwOumxwH8yVFGfxZ7LkbeMYo6GVN%2FbAkviTcFLPpllyIWnMSgiKAg0pZF78pn7%2BGccsHK%2BkeyL%2FKGnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8762bace9a2cb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| binaryrecentrecentcut.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwYscxReunt%2F%2BRBAENScl0AcPKu5sd89Mz4w5iDGuhKxJSBT1JNVV1bPlVnc1VV3Ts3taDEiOwyp47f1mN4saxFy8GWQ2oBAQdvSyB%2FefEHKWGRdH36He%2B973Cr76Xn2%2B785IBEdPr7ynd6RSdK3TDPxXPgrDS%2F6GzN3IH%2FXiT%2BL2Jd8M3%2BjHzeBV%2F13BtvRaFIRBEAahvy6NSPVobU5CFvf7YbMfNNtRM%2By0MTL%2FxdZ5sNQDH56R5yH5bOWRdwGSTZFn318RdqvUxevvZE7RUhsM%2BdEH%2BVauqxzZskyNhzQ%2FOp%2BGtifrD6Hzw4Vc6OE%2Fg4mcEe%2Fnh0jyo3ORSIYHC52JgsiR8GdQDacQagpJp2D6DiQ%2FIQDjuH4DeXbvujYV3f6bpXN2Rlae%2FAlZzcjKHxeQZ99dVnLk39bKlVLnFqO0hhxNIQdTFO4Y5U4DsjoGKz%2BD5L%2BStScbyLODG1ZpSH76co8HrNNhfDVmUbTappSvJnGcrgrWD%2BKEtoIoiBcGSTmFTKdQYgxqG3DWg5MeXOrBFR4yfuqzMAy7AWc06PUZa%2FGuSGIehLSbhjQM4h4cm79hjLIYg6kxmNlFYXaxJccw7ifYzRqWe7AlwZDXqARBZQkqSlBJgqokqIb1IVc2svU9rqxLwvMcnedWPdHlYJ8e6nIgcgJqxjC83i%2FOyHNzA72Lky%2BwJU79Xp8mUZjyjohacT%2FohO0w7tKgl%2FSDWKS0DStrSNsAtR525Iz4v7yIQs7I%2F58ukdBjWHUMJj1QdxG0qkE3a%2BzkD8KolemhFDY1QjQlc%2BC6RlGuoNz29tUZeWmxx2tf7UGwx%2BQ8wEyNwtT4VD4iGKi7k1u6Ige3dGXJgxtFKTO5Q%2Bc7vl3SUjz1zTWxXWnDr16x46%2FfYnNiXt5%2FX9hyg%2BZc5gNLvr0sORdmXRsmyI9X7Yciuens5mVnclds3Hx7%2FWpWGGGt1PkUVJ58vAcmZ%2BTZHzYWn%2Fc1%2F3dIM4VxNTK3VCr1FKzYhS2WPasJjFripPBQuXpiomTZVJJAiSWmSQ37L5ws64mh89tU1vv2LgamAVreQZ7VGJoaQ1WDqjGs%2B9%2BkLMzjN39rLQKJakwSZRoHiTJqb2Hy%2FPgSVp763VYroHG%2FE3a7VHSTdtRL45BTGrXjKI5pC6Wdpf7xC38BAAD%2F%2FwEAAP%2F%2FEptUapYEAAA%3D | 172.240.253.132 | 200 OK | 0 B |
URL GET HTTP/1.1binaryrecentrecentcut.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwYscxReunt%2F%2BRBAENScl0AcPKu5sd89Mz4w5iDGuhKxJSBT1JNVV1bPlVnc1VV3Ts3taDEiOwyp47f1mN4saxFy8GWQ2oBAQdvSyB%2FefEHKWGRdH36He%2B973Cr76Xn2%2B785IBEdPr7ynd6RSdK3TDPxXPgrDS%2F6GzN3IH%2FXiT%2BL2Jd8M3%2BjHzeBV%2F13BtvRaFIRBEAahvy6NSPVobU5CFvf7YbMfNNtRM%2By0MTL%2FxdZ5sNQDH56R5yH5bOWRdwGSTZFn318RdqvUxevvZE7RUhsM%2BdEH%2BVauqxzZskyNhzQ%2FOp%2BGtifrD6Hzw4Vc6OE%2Fg4mcEe%2Fnh0jyo3ORSIYHC52JgsiR8GdQDacQagpJp2D6DiQ%2FIQDjuH4DeXbvujYV3f6bpXN2Rlae%2FAlZzcjKHxeQZ99dVnLk39bKlVLnFqO0hhxNIQdTFO4Y5U4DsjoGKz%2BD5L%2BStScbyLODG1ZpSH76co8HrNNhfDVmUbTappSvJnGcrgrWD%2BKEtoIoiBcGSTmFTKdQYgxqG3DWg5MeXOrBFR4yfuqzMAy7AWc06PUZa%2FGuSGIehLSbhjQM4h4cm79hjLIYg6kxmNlFYXaxJccw7ifYzRqWe7AlwZDXqARBZQkqSlBJgqokqIb1IVc2svU9rqxLwvMcnedWPdHlYJ8e6nIgcgJqxjC83i%2FOyHNzA72Lky%2BwJU79Xp8mUZjyjohacT%2FohO0w7tKgl%2FSDWKS0DStrSNsAtR525Iz4v7yIQs7I%2F58ukdBjWHUMJj1QdxG0qkE3a%2BzkD8KolemhFDY1QjQlc%2BC6RlGuoNz29tUZeWmxx2tf7UGwx%2BQ8wEyNwtT4VD4iGKi7k1u6Ige3dGXJgxtFKTO5Q%2Bc7vl3SUjz1zTWxXWnDr16x46%2FfYnNiXt5%2FX9hyg%2BZc5gNLvr0sORdmXRsmyI9X7Yciuens5mVnclds3Hx7%2FWpWGGGt1PkUVJ58vAcmZ%2BTZHzYWn%2Fc1%2F3dIM4VxNTK3VCr1FKzYhS2WPasJjFripPBQuXpiomTZVJJAiSWmSQ37L5ws64mh89tU1vv2LgamAVreQZ7VGJoaQ1WDqjGs%2B9%2BkLMzjN39rLQKJakwSZRoHiTJqb2Hy%2FPgSVp763VYroHG%2FE3a7VHSTdtRL45BTGrXjKI5pC6Wdpf7xC38BAAD%2F%2FwEAAP%2F%2FEptUapYEAAA%3D IP172.240.253.132:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectbinaryrecentrecentcut.com FingerprintA7:82:4A:2C:01:A7:28:16:18:7F:72:48:9A:D8:E9:21:1F:0B:A0:EE ValidityTue, 16 Apr 2024 14:06:21 GMT - Mon, 15 Jul 2024 14:06:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSwYscxReunt%2F%2BRBAENScl0AcPKu5sd89Mz4w5iDGuhKxJSBT1JNVV1bPlVnc1VV3Ts3taDEiOwyp47f1mN4saxFy8GWQ2oBAQdvSyB%2FefEHKWGRdH36He%2B973Cr76Xn2%2B785IBEdPr7ynd6RSdK3TDPxXPgrDS%2F6GzN3IH%2FXiT%2BL2Jd8M3%2BjHzeBV%2F13BtvRaFIRBEAahvy6NSPVobU5CFvf7YbMfNNtRM%2By0MTL%2FxdZ5sNQDH56R5yH5bOWRdwGSTZFn318RdqvUxevvZE7RUhsM%2BdEH%2BVauqxzZskyNhzQ%2FOp%2BGtifrD6Hzw4Vc6OE%2Fg4mcEe%2Fnh0jyo3ORSIYHC52JgsiR8GdQDacQagpJp2D6DiQ%2FIQDjuH4DeXbvujYV3f6bpXN2Rlae%2FAlZzcjKHxeQZ99dVnLk39bKlVLnFqO0hhxNIQdTFO4Y5U4DsjoGKz%2BD5L%2BStScbyLODG1ZpSH76co8HrNNhfDVmUbTappSvJnGcrgrWD%2BKEtoIoiBcGSTmFTKdQYgxqG3DWg5MeXOrBFR4yfuqzMAy7AWc06PUZa%2FGuSGIehLSbhjQM4h4cm79hjLIYg6kxmNlFYXaxJccw7ifYzRqWe7AlwZDXqARBZQkqSlBJgqokqIb1IVc2svU9rqxLwvMcnedWPdHlYJ8e6nIgcgJqxjC83i%2FOyHNzA72Lky%2BwJU79Xp8mUZjyjohacT%2FohO0w7tKgl%2FSDWKS0DStrSNsAtR525Iz4v7yIQs7I%2F58ukdBjWHUMJj1QdxG0qkE3a%2BzkD8KolemhFDY1QjQlc%2BC6RlGuoNz29tUZeWmxx2tf7UGwx%2BQ8wEyNwtT4VD4iGKi7k1u6Ige3dGXJgxtFKTO5Q%2Bc7vl3SUjz1zTWxXWnDr16x46%2FfYnNiXt5%2FX9hyg%2BZc5gNLvr0sORdmXRsmyI9X7Yciuens5mVnclds3Hx7%2FWpWGGGt1PkUVJ58vAcmZ%2BTZHzYWn%2Fc1%2F3dIM4VxNTK3VCr1FKzYhS2WPasJjFripPBQuXpiomTZVJJAiSWmSQ37L5ws64mh89tU1vv2LgamAVreQZ7VGJoaQ1WDqjGs%2B9%2BkLMzjN39rLQKJakwSZRoHiTJqb2Hy%2FPgSVp763VYroHG%2FE3a7VHSTdtRL45BTGrXjKI5pC6Wdpf7xC38BAAD%2F%2FwEAAP%2F%2FEptUapYEAAA%3D HTTP/1.1
Host: binaryrecentrecentcut.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Cookie: u_pl=18719635; uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:04 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 497bb1e01e144a2d4d9252d6ccded581
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| banishafreshconjunction.com/8f/b4/7e/8fb47e6668b7fa2d208541541b49d522.js | 192.243.61.227 | 200 OK | 44 kB |
URL GET HTTP/1.1banishafreshconjunction.com/8f/b4/7e/8fb47e6668b7fa2d208541541b49d522.js IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectbanishafreshconjunction.com FingerprintF1:A1:E3:40:51:C5:ED:65:2A:31:52:99:37:D1:E7:F3:4C:49:34:6E ValidityThu, 28 Mar 2024 20:08:05 GMT - Wed, 26 Jun 2024 20:08:04 GMT
File typeJavaScript source, ASCII text, with very long lines (44061), with no line terminators Hash7ea71f68d4961827029f03551779146e 186dc9b080365b84573bf7ebdfdabd1f3dce68ef f5a9ebd9b2efaf3cbe528a2a7cb73b5d45c4625e3c5d51020136a7c3eb196d61
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /8f/b4/7e/8fb47e6668b7fa2d208541541b49d522.js HTTP/1.1
Host: banishafreshconjunction.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:03 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7b6919a205fd2a21b18838ae07028f81
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| binaryrecentrecentcut.com/pixel/sbs?c=1 | 172.240.253.132 | 200 OK | 0 B |
URL GET HTTP/1.1binaryrecentrecentcut.com/pixel/sbs?c=1 IP172.240.253.132:443
Requested byhttps://www1.movies123.la/searching?limit=5&offset=0&q=kung+fu+panda CertificateIssuerLet's Encrypt Subjectbinaryrecentrecentcut.com FingerprintA7:82:4A:2C:01:A7:28:16:18:7F:72:48:9A:D8:E9:21:1F:0B:A0:EE ValidityTue, 16 Apr 2024 14:06:21 GMT - Mon, 15 Jul 2024 14:06:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbs?c=1 HTTP/1.1
Host: binaryrecentrecentcut.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www1.movies123.la/
Cookie: u_pl=18719635; uid_id2=8d0c55cd-6c22-4aad-b66f-ec906ba30206:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 06:52:05 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|