Report - windows-adsblocker.com/

Report Overview

Submitted URL
windows-adsblocker.com/
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-04 19:51:11
Access
public
Website Title
windows-adsblocker.com/
Final URL
windows-adsblocker.com/blank
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
windows-adsblocker.com	unknown	2023-10-24	2023-12-07	2024-01-30	5.5 kB	430 kB	188.114.97.1
undefined	142677	unknown	2020-01-28	2023-07-23	438 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	undefined	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	windows-adsblocker.com/_next/static/chunks/webpack-1da13afc2892aaee.js	12 kB	2024-05-04	2024-05-05
Pretty URL windows-adsblocker.com/_next/static/chunks/webpack-1da13afc2892aaee.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 04:47:25 Last Seen2024-05-05 00:05:54 Times Seen16 Hash 25635d0e0186609c7d52649ffa86a4bd dac1d56e6cd5b46563e1f92f0b0bd5417f26e8bf 6333f906ae4454a6ce392521f530cc16b764821bd774d9446f9628b4848dc1ff Loading...

	windows-adsblocker.com/_next/static/chunks/pages/_app-5605590669623660.js	20 kB	2024-05-04	2024-05-05
Pretty URL windows-adsblocker.com/_next/static/chunks/pages/_app-5605590669623660.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 04:47:25 Last Seen2024-05-05 00:05:54 Times Seen16 Hash 4c9d1cfdad232fa01da696a31931fbd8 d5d4909e5f3ffdf72f2c3c4fb10c325a5b2a11e6 d7dae3b68d5538962b0871b8ab253db0bc3bbc6c8aab99faf95161c14f7db911 Loading...

	windows-adsblocker.com/_next/static/d8_XFAhnwDOphc1qygsS1/_buildManifest.js	1.0 kB	2024-05-04	2024-05-05
Pretty URL windows-adsblocker.com/_next/static/d8_XFAhnwDOphc1qygsS1/_buildManifest.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 04:47:25 Last Seen2024-05-05 00:05:54 Times Seen9 Hash ec538a52c96ecd73a939496b8386a67b 8bc8abfbeafce0d2a81d57e933621f7e82c7c8b3 a57660a5187eacfebed73168b6e92907a95669f7ab13a2b9c80f5cb85ad105f6 Loading...

	windows-adsblocker.com/_next/static/d8_XFAhnwDOphc1qygsS1/_ssgManifest.js	77 B	2023-03-07	2024-05-18
Pretty URL windows-adsblocker.com/_next/static/d8_XFAhnwDOphc1qygsS1/_ssgManifest.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:02 Last Seen2024-05-18 15:12:34 Times Seen87340 Hash b6652df95db52feb4daf4eca35380933 65451d110137761b318c82d9071c042db80c4036 6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e Loading...

	windows-adsblocker.com/_next/static/chunks/pages/blank-f6c98c684ec9dfca.js	1.0 kB	2024-05-04	2024-05-18
Pretty URL windows-adsblocker.com/_next/static/chunks/pages/blank-f6c98c684ec9dfca.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 04:47:25 Last Seen2024-05-18 14:35:46 Times Seen45 Hash d0bcb5f9e15743f4e22a4c39e4d4f6fe 0fc39dee567a79392ddb79ed43f580e75ec7a588 1d19115599b7e2c0b820b9e889e43e7d3112612606b2460424cdd7ae4f8f337d Loading...

	windows-adsblocker.com/_next/static/chunks/framework-3671d8951bf44e4e.js	141 kB	2023-04-09	2024-05-18
Pretty URL windows-adsblocker.com/_next/static/chunks/framework-3671d8951bf44e4e.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-09 05:13:29 Last Seen2024-05-18 14:35:46 Times Seen206 Hash 6081d0683ad8f48c96c1fa6ba4b00a6c 288295b31b2be8ca70324de3142b75483a4571cf 1845c289c582dd2b58a3ab7f8eadb695ebabbfe7a2685e5f9012ae16e0541580 Loading...

	windows-adsblocker.com/_next/static/chunks/main-403c8612371c9360.js	89 kB	2023-12-01	2024-05-18
Pretty URL windows-adsblocker.com/_next/static/chunks/main-403c8612371c9360.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 17:43:42 Last Seen2024-05-18 14:35:46 Times Seen93 Hash 8de5f1bfeb434ccf34a254a49093706a 78e1085a0f56e6e20f14f84a70ed45079b2a4da9 0514cea519259a90ef195e663ef8f544520a3b08a3e3986179e7e43a56cfba1a Loading...

	windows-adsblocker.com/_next/static/chunks/7928-d8a4c27bf1912aa7.js	101 kB	2024-05-04	2024-05-05
Pretty URL windows-adsblocker.com/_next/static/chunks/7928-d8a4c27bf1912aa7.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 04:47:25 Last Seen2024-05-05 00:05:54 Times Seen16 Hash 59ce8f43cb753373c63a7c6561c7bd46 ce80721967646cbc275920ce19c0ce842096335e 9cbdc251f1d17d72d9330efaab8639f637b6a70fd94ba7f5425e28329c9e9349 Loading...

	windows-adsblocker.com/_next/static/chunks/pages/index-5685e0be8113e42c.js	23 kB	2024-05-04	2024-05-05
Pretty URL windows-adsblocker.com/_next/static/chunks/pages/index-5685e0be8113e42c.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 04:47:25 Last Seen2024-05-05 00:05:54 Times Seen16 Hash dfdd118a3d420fc47f97128124219bff 17130ca9a2e4d643c384673052ce9d664602eb11 63e5e75536d651f60f84e80e68b268cccaafd71ef94443ef8c7d74144f5b57c7 Loading...

HTTP Transactions (13)

URL IP Response Size

windows-adsblocker.com/_next/static/css/9d92a176c9608aa4.css

188.114.97.1

200 OK

6.3 kB

URL GET HTTP/3
windows-adsblocker.com/_next/static/css/9d92a176c9608aa4.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://windows-adsblocker.com/
Certificate
IssuerLet's Encrypt
Subjectwindows-adsblocker.com
FingerprintC3:D7:E9:58:C2:CA:A2:DE:4F:EF:83:27:23:66:93:88:6C:51:33:0D
ValidityThu, 18 Apr 2024 14:35:38 GMT - Wed, 17 Jul 2024 14:35:37 GMT

File type
ASCII text, with no line terminators
Size
6.3 kB (6263 bytes)
Hash
6cf10bb0ebaccbb83a7d95b8b2faf6a2
0c203afc6a2c883c7b4f0a8561cd6df35dca1ba3
9b5d584b6200dfb2ea17d372ceb88c61ee68bf6e7ae5cabed28d31952b048a10

HTTP Headers

GET /_next/static/css/9d92a176c9608aa4.css HTTP/1.1
Host: windows-adsblocker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://windows-adsblocker.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 19:50:46 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 22:48:50 GMT
etag: W/"66-18f40a55e9a"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nlGIjPKg05L1iQCqiJFSoThVJ2b6xfRkQeCH0IQnjrX4kLNaqtoQ37I5VL9wVetLkwta%2FORNKEbSios2qnUHeLj6zw4g1KEIut1jBCV7dQx8kxudaxuUIwWKNQYPG9nLEkCL22lZn0BK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eb058d58df56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

windows-adsblocker.com/_next/static/chunks/webpack-1da13afc2892aaee.js

188.114.97.1

200 OK

9.4 kB

URL GET HTTP/3
windows-adsblocker.com/_next/static/chunks/webpack-1da13afc2892aaee.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://windows-adsblocker.com/
Certificate
IssuerLet's Encrypt
Subjectwindows-adsblocker.com
FingerprintC3:D7:E9:58:C2:CA:A2:DE:4F:EF:83:27:23:66:93:88:6C:51:33:0D
ValidityThu, 18 Apr 2024 14:35:38 GMT - Wed, 17 Jul 2024 14:35:37 GMT

File type
JavaScript source, ASCII text, with very long lines (11860), with no line terminators
Size
9.4 kB (9409 bytes)
Hash
25635d0e0186609c7d52649ffa86a4bd
dac1d56e6cd5b46563e1f92f0b0bd5417f26e8bf
6333f906ae4454a6ce392521f530cc16b764821bd774d9446f9628b4848dc1ff

HTTP Headers

GET /_next/static/chunks/webpack-1da13afc2892aaee.js HTTP/1.1
Host: windows-adsblocker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://windows-adsblocker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 19:50:46 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 22:48:50 GMT
etag: W/"2e54-18f40a55e9a"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=66k3i%2BE6ySWfa8ddXev2QhQJ%2FFsWsncBC7rrQyiNM25FJDy3OjmnHiabFsLaCLxsQKoDoERAOC62p8%2BOsS%2BJMzllLVrvdbihN47ACQAsGO7DFNUVjXWrg%2FMDihjeySKQkPVU8U7CY2XP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eb058d58e456bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

windows-adsblocker.com/_next/static/chunks/main-403c8612371c9360.js

188.114.97.1

200 OK

89 kB

URL GET HTTP/3
windows-adsblocker.com/_next/static/chunks/main-403c8612371c9360.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://windows-adsblocker.com/
Certificate
IssuerLet's Encrypt
Subjectwindows-adsblocker.com
FingerprintC3:D7:E9:58:C2:CA:A2:DE:4F:EF:83:27:23:66:93:88:6C:51:33:0D
ValidityThu, 18 Apr 2024 14:35:38 GMT - Wed, 17 Jul 2024 14:35:37 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
89 kB (89343 bytes)
Hash
8de5f1bfeb434ccf34a254a49093706a
78e1085a0f56e6e20f14f84a70ed45079b2a4da9
0514cea519259a90ef195e663ef8f544520a3b08a3e3986179e7e43a56cfba1a

HTTP Headers

GET /_next/static/chunks/main-403c8612371c9360.js HTTP/1.1
Host: windows-adsblocker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://windows-adsblocker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 19:50:46 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 22:48:50 GMT
etag: W/"15cff-18f40a55e9e"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j6LE%2FOgoHdx8f38JPNj%2B0e335xem1GIrwo%2FImmXByMKYW9GWyFn6WXdiwbMIzS1VpwWkTzy6KDProeBFE9Ndx1RsA7s4sr5FU5LEoJB%2BT1vO0dsxj%2F9WNHT%2FrXAywbqUZARskOHMkN%2B3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eb058d68ed56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

windows-adsblocker.com/_next/static/chunks/pages/index-5685e0be8113e42c.js

188.114.97.1

200 OK

23 kB

URL GET HTTP/3
windows-adsblocker.com/_next/static/chunks/pages/index-5685e0be8113e42c.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://windows-adsblocker.com/
Certificate
IssuerLet's Encrypt
Subjectwindows-adsblocker.com
FingerprintC3:D7:E9:58:C2:CA:A2:DE:4F:EF:83:27:23:66:93:88:6C:51:33:0D
ValidityThu, 18 Apr 2024 14:35:38 GMT - Wed, 17 Jul 2024 14:35:37 GMT

File type
JavaScript source, ASCII text, with very long lines (23425), with no line terminators
Size
23 kB (23425 bytes)
Hash
dfdd118a3d420fc47f97128124219bff
17130ca9a2e4d643c384673052ce9d664602eb11
63e5e75536d651f60f84e80e68b268cccaafd71ef94443ef8c7d74144f5b57c7

HTTP Headers

GET /_next/static/chunks/pages/index-5685e0be8113e42c.js HTTP/1.1
Host: windows-adsblocker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://windows-adsblocker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 19:50:46 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 22:48:50 GMT
etag: W/"5b81-18f40a55e9a"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aHuSrzxygKDJ%2FBYCUWOGhmYZjtWXiwyMxhmxnOlCqlFN87ij6ZJeE5i3ORFDCuWkDjVNR9A7f%2BwAISCm5z%2B1N3CQHN1SASXXDO5uuxzepZEHu9UVAdRl5O0OVFfcRxyXgVdZw6NG7Qhp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eb058d68f756bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

windows-adsblocker.com/_next/static/chunks/framework-3671d8951bf44e4e.js

188.114.97.1

200 OK

141 kB

URL GET HTTP/3
windows-adsblocker.com/_next/static/chunks/framework-3671d8951bf44e4e.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://windows-adsblocker.com/
Certificate
IssuerLet's Encrypt
Subjectwindows-adsblocker.com
FingerprintC3:D7:E9:58:C2:CA:A2:DE:4F:EF:83:27:23:66:93:88:6C:51:33:0D
ValidityThu, 18 Apr 2024 14:35:38 GMT - Wed, 17 Jul 2024 14:35:37 GMT

File type
JavaScript source, ASCII text, with very long lines (65201)
Size
141 kB (141053 bytes)
Hash
6081d0683ad8f48c96c1fa6ba4b00a6c
288295b31b2be8ca70324de3142b75483a4571cf
1845c289c582dd2b58a3ab7f8eadb695ebabbfe7a2685e5f9012ae16e0541580

HTTP Headers

GET /_next/static/chunks/framework-3671d8951bf44e4e.js HTTP/1.1
Host: windows-adsblocker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://windows-adsblocker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 19:50:46 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 22:48:50 GMT
etag: W/"226fd-18f40a55e9e"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BpBmfwHQbMSFFRMzbW6rUiC1bChB4A1u7eOHY3shpn3i9gCqk7pxvwSOq31KpKV0XGunaIRuJfwhRLssQjA%2FOlYSTvJSzRVZxa%2BlCrBOc8jY9r8vjMEr5vEzbm6uWj%2F8%2BvYr2WLf6VY9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eb058d58e956bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

windows-adsblocker.com/_next/static/chunks/pages/_app-5605590669623660.js

188.114.97.1

200 OK

20 kB

URL GET HTTP/3
windows-adsblocker.com/_next/static/chunks/pages/_app-5605590669623660.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://windows-adsblocker.com/
Certificate
IssuerLet's Encrypt
Subjectwindows-adsblocker.com
FingerprintC3:D7:E9:58:C2:CA:A2:DE:4F:EF:83:27:23:66:93:88:6C:51:33:0D
ValidityThu, 18 Apr 2024 14:35:38 GMT - Wed, 17 Jul 2024 14:35:37 GMT

File type
JavaScript source, ASCII text, with very long lines (19729), with no line terminators
Size
20 kB (19729 bytes)
Hash
4c9d1cfdad232fa01da696a31931fbd8
d5d4909e5f3ffdf72f2c3c4fb10c325a5b2a11e6
d7dae3b68d5538962b0871b8ab253db0bc3bbc6c8aab99faf95161c14f7db911

HTTP Headers

GET /_next/static/chunks/pages/_app-5605590669623660.js HTTP/1.1
Host: windows-adsblocker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://windows-adsblocker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 19:50:46 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 22:48:50 GMT
etag: W/"4d11-18f40a55e9a"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jKW84il%2BbE2d64fd%2B6cjRKmNZG%2Fg5eU67da7Dgs%2F6Iu51xnd%2Fcnlbcf%2F36j2FF36FP8oscntAYA%2BdnCS32ASUHqB8LHVWlshvMONdTL8qKzPGqLfjcYmj5781Bnxa26KgdmsI5rf10U8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eb058d68f356bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

windows-adsblocker.com/_next/static/chunks/7928-d8a4c27bf1912aa7.js

188.114.97.1

200 OK

101 kB

URL GET HTTP/3
windows-adsblocker.com/_next/static/chunks/7928-d8a4c27bf1912aa7.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://windows-adsblocker.com/
Certificate
IssuerLet's Encrypt
Subjectwindows-adsblocker.com
FingerprintC3:D7:E9:58:C2:CA:A2:DE:4F:EF:83:27:23:66:93:88:6C:51:33:0D
ValidityThu, 18 Apr 2024 14:35:38 GMT - Wed, 17 Jul 2024 14:35:37 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
101 kB (100864 bytes)
Hash
59ce8f43cb753373c63a7c6561c7bd46
ce80721967646cbc275920ce19c0ce842096335e
9cbdc251f1d17d72d9330efaab8639f637b6a70fd94ba7f5425e28329c9e9349

HTTP Headers

GET /_next/static/chunks/7928-d8a4c27bf1912aa7.js HTTP/1.1
Host: windows-adsblocker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://windows-adsblocker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 19:50:46 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 22:48:50 GMT
etag: W/"18a00-18f40a55e9e"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mp33T1Z2hxK2rjk0hZiWp91etLEo1WbC9sPhnSwbAPOy8gRFeK2%2FxEFfeOZqO79Dd4dVGoTmrLHgxFDR0SJsJJVpxmn32E69NjBFtqdIo06UNEm078qVuKPxcgHQJ1lmKr2nZM6t6eak"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eb058d68f656bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

windows-adsblocker.com/favicon.ico

188.114.97.1

200 OK

26 kB

URL GET HTTP/3
windows-adsblocker.com/favicon.ico
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://windows-adsblocker.com/
Certificate
IssuerLet's Encrypt
Subjectwindows-adsblocker.com
FingerprintC3:D7:E9:58:C2:CA:A2:DE:4F:EF:83:27:23:66:93:88:6C:51:33:0D
ValidityThu, 18 Apr 2024 14:35:38 GMT - Wed, 17 Jul 2024 14:35:37 GMT

File type
MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
26 kB (25931 bytes)
Hash
c30c7d42707a47a3f4591831641e50dc
9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e
2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: windows-adsblocker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://windows-adsblocker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 19:50:47 GMT
content-type: image/x-icon
cache-control: public, max-age=14400
last-modified: Fri, 03 May 2024 22:48:36 GMT
etag: W/"654b-18f40a52802"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uV47SjEn2Nfr598aaJwD3Sp3EbW86DfdU6gdqClvNXFj8BR9dHSvajs49gP%2F0rcpHikuvqxUNIyseUTXitblLEsAFyoz528lrbKTqQ90RntSTXN1uW7e%2BMJ3akf5%2FM%2Fug2VWdZq6QDI0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eb058fcbec56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

windows-adsblocker.com/

188.114.97.1

200 OK

1.4 kB

URL User Request GET HTTP/2
windows-adsblocker.com/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectwindows-adsblocker.com
FingerprintC3:D7:E9:58:C2:CA:A2:DE:4F:EF:83:27:23:66:93:88:6C:51:33:0D
ValidityThu, 18 Apr 2024 14:35:38 GMT - Wed, 17 Jul 2024 14:35:37 GMT

File type
HTML document, ASCII text, with very long lines (1450), with no line terminators
Size
1.4 kB (1360 bytes)
Hash
1bf8642227d4fb45bb3e1ccfa5db1cf0
eb6b6927829e925b091d85b90620f597f2b891ea
b963bdb2e576c524d6412ac06710fed8b2ef93ee4cee8a8e4d8f21253402c528

HTTP Headers

GET / HTTP/1.1
Host: windows-adsblocker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 19:50:46 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wtkepa9IO0gstNg1TpR8uBkhuYATNcTCUU%2Fa0RsqJ2EJ6Quw0Hzzl850PPU54TmDrT4pq5hCckEIdyA6tB77RGZG3ICNH0paBsIeri9%2FPpzGEWcGwCuDCzADznOz9hiAY2XbR7GQ0ipi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eb05899f2d0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

undefined/cp4kl7k.php?add_event6=1

0.0.0.0

0 B

URL GET
undefined/cp4kl7k.php?add_event6=1
IP
0.0.0.0:0
ASN
#0

Requested by
https://windows-adsblocker.com/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cp4kl7k.php?add_event6=1 HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://windows-adsblocker.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

windows-adsblocker.com/_next/static/chunks/pages/blank-f6c98c684ec9dfca.js

188.114.97.1

200 OK

1.0 kB

URL GET HTTP/3
windows-adsblocker.com/_next/static/chunks/pages/blank-f6c98c684ec9dfca.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://windows-adsblocker.com/
Certificate
IssuerLet's Encrypt
Subjectwindows-adsblocker.com
FingerprintC3:D7:E9:58:C2:CA:A2:DE:4F:EF:83:27:23:66:93:88:6C:51:33:0D
ValidityThu, 18 Apr 2024 14:35:38 GMT - Wed, 17 Jul 2024 14:35:37 GMT

File type
JavaScript source, ASCII text, with very long lines (1026), with no line terminators
Size
1.0 kB (1026 bytes)
Hash
d0bcb5f9e15743f4e22a4c39e4d4f6fe
0fc39dee567a79392ddb79ed43f580e75ec7a588
1d19115599b7e2c0b820b9e889e43e7d3112612606b2460424cdd7ae4f8f337d

HTTP Headers

GET /_next/static/chunks/pages/blank-f6c98c684ec9dfca.js HTTP/1.1
Host: windows-adsblocker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://windows-adsblocker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 19:50:46 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 22:48:50 GMT
etag: W/"402-18f40a55e9a"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dAHHrwl0sMDGl8a9j9wcl%2B9HYX0W%2FU5%2FVouansu%2BqzHY7puVDJylLwnSBknwDHsGae0RU%2BcmoCjFFjDYx4lNS2UJ3uyF5dGWqyEfmvRmTwQJ2xY4p1GC5h%2FJuOINHqHwxMW1W0UxGr6R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eb058f2b4856bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

windows-adsblocker.com/_next/static/d8_XFAhnwDOphc1qygsS1/_buildManifest.js

188.114.97.1

200 OK

1.0 kB

URL GET HTTP/3
windows-adsblocker.com/_next/static/d8_XFAhnwDOphc1qygsS1/_buildManifest.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://windows-adsblocker.com/
Certificate
IssuerLet's Encrypt
Subjectwindows-adsblocker.com
FingerprintC3:D7:E9:58:C2:CA:A2:DE:4F:EF:83:27:23:66:93:88:6C:51:33:0D
ValidityThu, 18 Apr 2024 14:35:38 GMT - Wed, 17 Jul 2024 14:35:37 GMT

File type
ASCII text, with very long lines (1102), with no line terminators
Size
1.0 kB (1034 bytes)
Hash
4419f2d55aa548b7b5e29a99bec5d481
be175dd5a8e97b04258e65f88c54b53d53689686
74863ab22f0508ddd226bc40ab7a5af691212bfbc894a474f3c0a1f7ddd3f73c

HTTP Headers

GET /_next/static/d8_XFAhnwDOphc1qygsS1/_buildManifest.js HTTP/1.1
Host: windows-adsblocker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://windows-adsblocker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 19:50:46 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 22:48:50 GMT
etag: W/"40a-18f40a55e9e"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CUAcekl5ErFsxCxujiGqmNSVmVZa9qv9%2FrbFrGu%2Byh%2BdYTJUx8V7mlL1er2jwV%2Fyi%2BIl7vd3mMz7qinj6ZwxpXKW%2FNcCy%2FWNlu8ymKkxu51NUHI3qENocFXxiPGkK8EasqMyyWT3hU%2Bf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eb058d68fb56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

windows-adsblocker.com/_next/static/d8_XFAhnwDOphc1qygsS1/_ssgManifest.js

188.114.97.1

200 OK

77 B

URL GET HTTP/3
windows-adsblocker.com/_next/static/d8_XFAhnwDOphc1qygsS1/_ssgManifest.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://windows-adsblocker.com/
Certificate
IssuerLet's Encrypt
Subjectwindows-adsblocker.com
FingerprintC3:D7:E9:58:C2:CA:A2:DE:4F:EF:83:27:23:66:93:88:6C:51:33:0D
ValidityThu, 18 Apr 2024 14:35:38 GMT - Wed, 17 Jul 2024 14:35:37 GMT

File type
ASCII text, with no line terminators
Size
77 B (77 bytes)
Hash
b6652df95db52feb4daf4eca35380933
65451d110137761b318c82d9071c042db80c4036
6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e

HTTP Headers

GET /_next/static/d8_XFAhnwDOphc1qygsS1/_ssgManifest.js HTTP/1.1
Host: windows-adsblocker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://windows-adsblocker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 04 May 2024 19:50:46 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 22:48:50 GMT
etag: W/"4d-18f40a55e9e"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zqbsLHJlOHHXTfp5SMEyXFweXMBlyikRCs8NfsU33TIqEpkb0BJ5tlPWoWfL3zUCrdKRLIPMyjDVMzWXWZpSdioZmOSB4ntCsk6u6iQmfIywPE3q%2BdxXLoNxMQ5YpoqNcYIhy1FwoJ6D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eb058d68fe56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML