| |  192.185.111.226 | 200 OK | 9.2 kB |
URL User Request GET HTTP/2IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators Hash453281da2ecfa67f9c2f3fc5070e80ea 3c859806d9e3a302239ec9d77d56eb0f1087b58e 414f0440a61aa3f9a625e875a2f4e9b58aea3e86485c32cd881097642d758bf9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
link: <https://www.n-psy-t.com/wp-json/>; rel="https://api.w.org/"
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16; path=/
vary: Accept-Encoding
content-encoding: gzip
content-length: 9211
content-type: text/html; charset=UTF-8
date: Thu, 18 Apr 2024 09:18:29 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| maps.google.com/maps/api/js?sensor=false | 142.250.74.14 | 200 OK | 66 kB |
URL GET HTTP/2maps.google.com/maps/api/js?sensor=false IP142.250.74.14:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (10217) Hash92a3272dbfbe2e44d4463d47f4d6d6c7 34f5ca451ce8016106640bcaf8f896054be6de6b 46107ff6174be0156755c47325dabfa52979b2f5126b11af3dafef84849e5219
GET /maps/api/js?sensor=false HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=1800
content-type: text/javascript; charset=UTF-8
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Language, Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 18 Apr 2024 09:18:30 GMT
server: scaffolding on HTTPServer2
content-length: 65961
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/skins/vim.css?ver=1.2 | 192.185.111.226 | 200 OK | 1.5 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/skins/vim.css?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeASCII text, with very long lines (310) Hash8c7e48fefeee6fd3fc1aa17f2d68658d ee9908bdfa30b1e9dbf09714a6da19b52c9f172c b4bd8e3d1cc65df8e50627aeb2e48e7614e263b8da948720edcce0a0a79d98f7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/skins/vim.css?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 22 Nov 2010 19:28:08 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1540
content-type: text/css
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/css/menu3.css?ver=1.2 | 192.185.111.226 | 200 OK | 369 B |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/css/menu3.css?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
Hashf60e98f4c9954986440a8c804550e946 7aa9b1f6c38b094c5c0ae33a1db4c09acec64444 9ff9108aca9a190cbfefd6c159e59f66ede43ffee0aa935d1534bf9edb449faa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/css/menu3.css?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 23 Oct 2011 03:36:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 369
content-type: text/css
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/css/screen.css?ver=1.2 | 192.185.111.226 | 200 OK | 18 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/css/screen.css?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
Hashce08dece545d645cb80574b5aae63e9d aef2ffe66b29b6a39d5574017171291123004a71 286045e0824213ffe89b8b4ca00c5e94782e06a80f60eef8b3e8627779551837
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/css/screen.css?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 03 Nov 2011 01:55:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 17740
content-type: text/css
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/css/jqueryui/custom.css?ver=1.2 | 192.185.111.226 | 200 OK | 4.5 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/css/jqueryui/custom.css?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeASCII text, with very long lines (1398) Hash72f63cb74863d938828a21793c2f7e51 e8fb02519a83b406b6ecf5e846bc6fb5e77ed2db bf41cb384823375fb9e4f42d36b3f1e35a74ab77d338f72c95a7ae3383889034
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/css/jqueryui/custom.css?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 29 Dec 2010 03:26:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4511
content-type: text/css
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/fancybox/jquery.fancybox-1.3.0.css?ver=1.2 | 192.185.111.226 | 200 OK | 1.5 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/fancybox/jquery.fancybox-1.3.0.css?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeASCII text, with CRLF line terminators Hash04bc638f0b56a0c1495e7f7a75139b71 f0d07e436adaea05fc88a39ca011ae662dded018 e3db7b51824180787a7ad11288b70e1fd8e3438885bbf87ee06ce9fb42c1fe0b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/fancybox/jquery.fancybox-1.3.0.css?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 03 May 2011 16:52:18 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1474
content-type: text/css
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/video-js.css?ver=1.2 | 192.185.111.226 | 200 OK | 4.6 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/video-js.css?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
Hash41bff18603560dc90129ead6afdb6a5f 13ec929d71f398a539f7e4d3b13f3ce401089d90 814d422ea79cdc7f2bfc7396596acf610eb94acd6605f5eeb5e5388b752aaab0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/video-js.css?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 23 Nov 2010 12:01:56 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4628
content-type: text/css
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/colorpicker/css/colorpicker.css?ver=1.2 | 192.185.111.226 | 200 OK | 903 B |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/colorpicker/css/colorpicker.css?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeASCII text, with CRLF line terminators Hash16cb7aba1ac61b4a5fa7a4f9bd046bac 7a0b0850545eb5606679f4008e3a1b1853b25dc6 8aceae025d4330c5c5f6f955d67418cc48d219c6ea510c6b900729b472b22837
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/colorpicker/css/colorpicker.css?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 26 Oct 2011 05:37:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 903
content-type: text/css
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 192.185.111.226 | 200 OK | 5.4 kB |
URL GET HTTP/2www.n-psy-t.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 24 Aug 2023 16:58:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5422
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/eye.js?ver=1.2 | 192.185.111.226 | 200 OK | 313 B |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/eye.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hasha7305a07fc5f1123097487e9de66abb1 7efd34a9024ec9201d8ab223c7ca6b231cb7810d 2dac2cbda5435bb48c52ec0f363901174b6ce4674d16afca52d8cecee49b8b0d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/eye.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 25 Mar 2011 20:28:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 313
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/jquery.tipsy.js?ver=1.2 | 192.185.111.226 | 200 OK | 1.4 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/jquery.tipsy.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text Hashe82a7bca2c561de3790788a01bd2a34f 618e879098c81ae084264ad0ab8f99cc00b3ee21 0e53466218d7ff174e0a083ecce89b1c090c67ccbe55775eddca03e930ff9e35
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/jquery.tipsy.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 05 Jan 2010 19:14:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1358
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/reflection.js?ver=1.2 | 192.185.111.226 | 200 OK | 1.1 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/reflection.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text, with very long lines (1576) Hash931325146f3d9289565c5594e76b3dd0 8ca355ab0155c508fa3f6641296dc144dad27d7b 7b75708a7f947de58784318d26edfa28f3db6778095153176ab563b07abab645
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/reflection.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 25 May 2011 05:56:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1067
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/custom.js?ver=1.2 | 192.185.111.226 | 200 OK | 4.1 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/custom.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text Hash78553bcad348da5662cdf218baa507a4 aa9d451e07e9c72aaeac1de9b9b5439baf40be7f ab6b0a8fe75bc9886b89ffe5ad792c22f423474e6ec00f7d8a70a2f1df7f99cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/custom.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 26 Oct 2011 21:22:22 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4111
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/hint.js?ver=1.2 | 192.185.111.226 | 200 OK | 468 B |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/hint.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text Hash48f1f74bfd24b6e2d3808284e591a783 e0027db2b931d4f817fb657ad5bdc48e50872180 d99ea9db1da8549489666d36c9e3fb717842550eed1554e96860af8d30c3b008
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/hint.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Feb 2010 17:12:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 468
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/utils.js?ver=1.2 | 192.185.111.226 | 200 OK | 2.1 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/utils.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hasheecc5c66710f5e6956de9d17b4cc0b00 5400012ef7cc17e20fa16529ed6eff3be7d7ae88 f9c202ff33146b9e9997c54598a5687477e30df8e156edf7f5ee44d21da03b3b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/utils.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 25 Mar 2011 20:28:08 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2083
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/galleria/themes/classic/galleria.classic.js?ver=1.2 | 192.185.111.226 | 200 OK | 944 B |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/galleria/themes/classic/galleria.classic.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text Hash60b371223dd87ff6283e39829d39297d 4e524288ccff5874bc565535c7dc816c7d02f121 521d7d3d3184d152a39f3b9f720497566bed992bdf5e7cc0ade478f88c575b3a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/galleria/themes/classic/galleria.classic.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 15 Feb 2011 03:43:16 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 944
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/swfobject/swfobject.js?ver=1.2 | 192.185.111.226 | 200 OK | 4.7 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/swfobject/swfobject.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text, with very long lines (10071) Hash892a543f3abb54e8ec1ada55be3b0649 5847ed101f55d51c53538a7078971e7de8fb6762 8677971b119ccdb82af697ff0e08f218490d15116f221d44301f1cc8797e67d4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/swfobject/swfobject.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 12 Jun 2009 08:14:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4672
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/data/1542692540_npsyt-logo.png | 192.185.111.226 | 200 OK | 5.7 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/data/1542692540_npsyt-logo.png IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typePNG image data, 241 x 98, 8-bit/color RGBA, non-interlaced Hash11151f83034d28baa84138d9ee54b0f2 03db053f57f7400316836222e0b1ad513fd05144 cc838287bbea8c655b44f5e528431a2aebb009443f9ed3356e2e5a2f96423581
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/data/1542692540_npsyt-logo.png HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Nov 2018 05:42:20 GMT
accept-ranges: bytes
content-length: 5668
content-type: image/png
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/jquery.kwicks.js?ver=1.2 | 192.185.111.226 | 200 OK | 2.3 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/jquery.kwicks.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashbc9f6c60e0caf0932f032e34eb7f6399 6e4c02f7a41087e9ac2343f39c659aa0f17021d7 eed25a310e5aaf527d507a859aadd1611a707f9aa6107194899571c925b2db39
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/jquery.kwicks.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 21 Oct 2011 01:58:44 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2301
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/browser.js?ver=1.2 | 192.185.111.226 | 200 OK | 783 B |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/browser.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
Hashea961504a723f4cd772bf528d872d1c5 9b89aa65166bf07918ae4c423b2854fed6abd7b7 1aaab3c3d6f974416ae34893cebe3a544aea17931439b2449ec392061d11ec82
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/browser.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Jul 2010 15:57:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 783
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/jquery.quicksand.js?ver=1.2 | 192.185.111.226 | 200 OK | 1.3 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/jquery.quicksand.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text, with very long lines (524) Hash2d9f76d0c7ed73475eef0254c0796f4e 5a92797bf476c7a3e9c4b5f43be14dacc67e24bd f2e0b2520adf060ab7c7074ca8ccddcb12aca10f260ee2c8eedc5fdcd0545690
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/jquery.quicksand.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 03 Mar 2010 23:04:06 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1283
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/jquery.easing.js?ver=1.2 | 192.185.111.226 | 200 OK | 2.8 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/jquery.easing.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
Hash6516449ed5089677ed3d7e2f11fc8942 82e40d060bc269a6dde20c3990ca5a4fea6ca754 0757f7ff6e5f6a581922a5e2d42c5e0cf7475d880885a9802e8bdd5e4188dd34
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/jquery.easing.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 05 Jul 2010 15:13:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2763
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/jquery.validate.js?ver=1.2 | 192.185.111.226 | 200 OK | 8.5 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/jquery.validate.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (14656) Hashf00ae9f2cea2f1f05e082652057d7b48 a26883da9a4aead7f87976a2990ca39b45a100a7 748b13a7434eeef1660554202784aa86312651244169bd091ce501f4d6e0a57c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/jquery.validate.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 25 Jun 2010 23:48:30 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8484
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/jquery.bxSlider.js?ver=1.2 | 192.185.111.226 | 200 OK | 12 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/jquery.bxSlider.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text Hash7a45dd0bf832ae5b575a8faf9521a0ec 42e26330d8ffa0a9edae66e46124c57e6cc95c2f ff064e32c3312b920765eac6853999be4c7ca49782ead34e5011323996ef79b6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/jquery.bxSlider.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 03 May 2011 03:10:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12340
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/gmap.js?ver=1.2 | 192.185.111.226 | 200 OK | 1.9 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/gmap.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text, with very long lines (1593) Hash994695f4adca3b6713a1eefbf8e1d6fe b18764eb397072c401167582aa9c42a21d4a021e 0c05e3fc7d239466cb30e561b3641d3637b07cd221f65568e6dafea3e3c19b00
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/gmap.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 22 Mar 2011 21:01:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1887
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/jquery.nivoslider.js?ver=1.2 | 192.185.111.226 | 200 OK | 6.9 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/jquery.nivoslider.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash2f1b8741d4fe159b2d7591dab300c7e5 952cde743ee34c13047d7de5518125d25af83793 bd6a2f008770306cd394a2808f1fce51605df1b8097b7dd0bdf9aaf60a603145
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/jquery.nivoslider.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 22 Oct 2011 00:24:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6881
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/fancybox/jquery.fancybox-1.3.0.js?ver=1.2 | 192.185.111.226 | 200 OK | 9.2 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/fancybox/jquery.fancybox-1.3.0.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text, with very long lines (370), with CRLF line terminators Hashdb32e125b2770f5a3dab05caf05b0329 fcea231f609fb63e2e3128df84b8f683c24c5b19 bb701047e1205a42714a3b389a248a40c6989297d8ee4cf6ece1549f68826c03
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/fancybox/jquery.fancybox-1.3.0.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 15 Mar 2010 04:28:40 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 9178
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/colorpicker.js?ver=1.2 | 192.185.111.226 | 200 OK | 4.7 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/colorpicker.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text, with very long lines (1023), with CRLF line terminators Hash96e6db8dd2c341f8aee73603eccea3b9 004db0e881d90bd5244e80becb8c6edcaf6d7d88 633dc2faf8814cf105d53e40564cca15b2dfe2e176d8c25eeb6d84d5e25d1346
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/colorpicker.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 25 Mar 2011 20:28:14 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4725
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/timthumb.php?src=https://www.n-psy-t.com/wp-content/uploads/2020/04/slider-wellness-3.jpg&h=447&w=960&zc=1 | 192.185.111.226 | 200 OK | 86 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/timthumb.php?src=https://www.n-psy-t.com/wp-content/uploads/2020/04/slider-wellness-3.jpg&h=447&w=960&zc=1 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typegzip compressed data, from Unix Hash170d33f9cdd91862036f9f87bb99f7ab d0b2e6d0d8dde40fd0c26eb33214a293f18a1bdc 9fba3d3786e1f801d1e7176bc2048ccaf5eb09263bbdaebba92f2302ebb830de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/timthumb.php?src=https://www.n-psy-t.com/wp-content/uploads/2020/04/slider-wellness-3.jpg&h=447&w=960&zc=1 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Sun, 28 Apr 2024 09:18:30 GMT
last-modified: Thu, 18 Apr 2024 09:18:30 GMT
vary: Accept-Encoding
content-encoding: gzip
content-type: image/jpeg
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/images/header_curve.png | 192.185.111.226 | 200 OK | 17 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/images/header_curve.png IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typePNG image data, 1400 x 84, 8-bit/color RGBA, non-interlaced Hash82229c7afee916e020e742b8b669ba08 be7e6cc9a9b3ef18c8ba192987dbe4f68131f846 03894081990f00bdfc68b3085a2528b1824a726e5035a716462c18ff750969b8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/images/header_curve.png HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/wp-content/themes/ovid/css/screen.css?ver=1.2
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 12 Oct 2011 23:16:58 GMT
accept-ranges: bytes
content-length: 17064
content-type: image/png
date: Thu, 18 Apr 2024 09:18:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/images/header_shadow.png | 192.185.111.226 | 200 OK | 135 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/images/header_shadow.png IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typePNG image data, 1400 x 600, 8-bit/color RGBA, non-interlaced Size135 kB (134595 bytes) Hash078fca9ce9abfb015a257eabfe90a70f 9b63980d7036198b6495b2c0c0626dcdcc1f8773 27fd8f3bddce28f97d95ab953e307f26502ef3d7a6f44e97b3c1cbbcf0853e1b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/images/header_shadow.png HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 23 Oct 2011 03:49:06 GMT
accept-ranges: bytes
content-length: 134595
content-type: image/png
date: Thu, 18 Apr 2024 09:18:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/images/ajax-loader.gif | 192.185.111.226 | 200 OK | 9.4 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/images/ajax-loader.gif IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeGIF image data, version 89a, 32 x 32 Hash067ecc0de941eb9a6f8ded3bc25f291f 7cc6b123b4f66971f8cb0c090ff7ba012ba6cb73 086e1ad78c0f792d79e25f214d30a9598367180fbde1a84d8b04a32335bcd849
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/images/ajax-loader.gif HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/wp-content/themes/ovid/css/screen.css?ver=1.2
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 22 Oct 2011 20:38:24 GMT
accept-ranges: bytes
content-length: 9427
content-type: image/gif
date: Thu, 18 Apr 2024 09:18:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/images/slider_curve.png | 192.185.111.226 | 200 OK | 13 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/images/slider_curve.png IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typePNG image data, 980 x 58, 8-bit/color RGBA, non-interlaced Hash6336874eace5c2ce08f27ccdadfe0e06 a7a01ffde11b6068e02f5d8fc04000272909cfb3 b4193d68c0d180b1419f3c6054f4de16bcd0017b303e59496bb694275531c10d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/images/slider_curve.png HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/wp-content/themes/ovid/css/screen.css?ver=1.2
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 12 Oct 2011 22:41:36 GMT
accept-ranges: bytes
content-length: 12694
content-type: image/png
date: Thu, 18 Apr 2024 09:18:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/uploads/2011/12/individual_banner.png | 192.185.111.226 | 200 OK | 28 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/uploads/2011/12/individual_banner.png IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typePNG image data, 201 x 121, 8-bit/color RGBA, non-interlaced Hash054cab730ec86c64f9d29e71271849b0 83e8f4dd2b271b4b8951e04aa391d4c1cedcb0bc 4f98e541f1b60d11defeed48e81f312a6f71e71de3a49d8914b24d96820b9289
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2011/12/individual_banner.png HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Jul 2019 22:56:03 GMT
accept-ranges: bytes
content-length: 27883
content-type: image/png
date: Thu, 18 Apr 2024 09:18:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/uploads/2011/12/government_banner.png | 192.185.111.226 | 200 OK | 48 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/uploads/2011/12/government_banner.png IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typePNG image data, 201 x 121, 8-bit/color RGBA, non-interlaced Hash8ae6aad1d8aafe0602572f4e03038dea 1e7527ca5a3d5b4699ea4916433418d70d32ea61 80aa9fd26c051e11fe7c0c5849a45fa837cd0f2eeae99e1909189b10148efb2a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2011/12/government_banner.png HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Jul 2019 22:57:32 GMT
accept-ranges: bytes
content-length: 48534
content-type: image/png
date: Thu, 18 Apr 2024 09:18:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/uploads/2011/12/coaching_banner.png | 192.185.111.226 | 200 OK | 41 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/uploads/2011/12/coaching_banner.png IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typePNG image data, 201 x 121, 8-bit/color RGBA, non-interlaced Hashd51f0b5900a72687e8f4cca41c1ccf2d 8585bf5b2cdbb6bf778485e3b35642e2080cd4cd fd88dc7c6d83dcf2e32affb1803ac05fcba63b3ae43731195f7147ec3b7c7925
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2011/12/coaching_banner.png HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Jul 2019 22:57:35 GMT
accept-ranges: bytes
content-length: 40855
content-type: image/png
date: Thu, 18 Apr 2024 09:18:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/uploads/2011/12/corporate_banner.png | 192.185.111.226 | 200 OK | 33 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/uploads/2011/12/corporate_banner.png IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typePNG image data, 201 x 121, 8-bit/color RGBA, non-interlaced Hash0e194e42ac02232392533fbe1f8b7346 bea751cee5ca7f025e395a6d1a5edb2614354e30 86e09582085010cab4d4cf29c44700abe3b2444748ce070126fa313a763f02ce
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2011/12/corporate_banner.png HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Jul 2019 22:56:29 GMT
accept-ranges: bytes
content-length: 32687
content-type: image/png
date: Thu, 18 Apr 2024 09:18:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.youtube.com/s/player/f92087f2/www-player.css | 142.250.74.14 | 200 OK | 48 kB |
URL GET HTTP/3www.youtube.com/s/player/f92087f2/www-player.css IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hasheff7afac8f7ac0ed881f37ffd3eebcbe 21acf841f4603dbfaed62decef15175b5d68f20f ff1235e0e6c896931d1f31f618b35e68a469befd8c90d7a0da22f1d988b0bbc2
GET /s/player/f92087f2/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/J5qWP-EMSRQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48137
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 07:21:52 GMT
expires: Wed, 16 Apr 2025 07:21:52 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 Apr 2024 04:18:33 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 179799
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/s/player/f92087f2/player_ias.vflset/en_US/embed.js | 142.250.74.14 | 200 OK | 18 kB |
URL GET HTTP/3www.youtube.com/s/player/f92087f2/player_ias.vflset/en_US/embed.js IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (3391) Hash1acbd20b4a303a41bba4c1af0636abbe 21497b44dca32bad04a2abbba7dd517e8cc16055 760bcaf29c194cd5c63b59b29fef5bc7fa164c844152ff5eee8f7b97e84a38ac
GET /s/player/f92087f2/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/J5qWP-EMSRQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 18187
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 07:25:31 GMT
expires: Wed, 16 Apr 2025 07:25:31 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 Apr 2024 04:18:33 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 179580
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/s/player/f92087f2/www-embed-player.vflset/www-embed-player.js | 142.250.74.14 | 200 OK | 98 kB |
URL GET HTTP/3www.youtube.com/s/player/f92087f2/www-embed-player.vflset/www-embed-player.js IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (682) Hashb1882b5e3edaca0885f674750fe7bd88 b1c29c838ece05563e2ef1eb10cf7a986c588301 5a1b22f96bab9384df7827c7710b6477229500a6d2c0f6d8f9cff3d33d428894
GET /s/player/f92087f2/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/J5qWP-EMSRQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97847
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 07:21:52 GMT
expires: Wed, 16 Apr 2025 07:21:52 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 Apr 2024 04:18:33 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 179799
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/galleria/themes/classic/galleria.classic.css | 192.185.111.226 | 200 OK | 1.1 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/galleria/themes/classic/galleria.classic.css IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
Hashe8e696dbcdc36621451243af7dfa8753 787e3adaa127c8adf98ecae9264776d2a703653b d3acef16ddaba5105b5bcc8c86ca44aad4e46977bea4479b6991588e6069cf00
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/galleria/themes/classic/galleria.classic.css HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 20 Oct 2011 19:08:22 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1082
content-type: text/css
date: Thu, 18 Apr 2024 09:18:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.youtube.com/s/player/f92087f2/player_ias.vflset/en_US/base.js | 142.250.74.14 | 200 OK | 809 kB |
URL GET HTTP/3www.youtube.com/s/player/f92087f2/player_ias.vflset/en_US/base.js IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (555) Size809 kB (809144 bytes) Hash0d2406f6a79bde4d11ad5f70b18ba433 699a5d887b0557a5f788fea125e4260cf41fdb55 001b4c1ed0ccce6c39372a81fc4e9464950f77c72fd53aea1f78f999c0dd9bd3
GET /s/player/f92087f2/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/J5qWP-EMSRQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 809144
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 07:25:31 GMT
expires: Wed, 16 Apr 2025 07:25:31 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 Apr 2024 04:18:33 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 179580
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 15 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0 Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:43:03 GMT
expires: Fri, 18 Apr 2025 02:43:03 GMT
cache-control: public, max-age=31536000
age: 23728
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0 Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:25:07 GMT
expires: Fri, 11 Apr 2025 17:25:07 GMT
cache-control: public, max-age=31536000
age: 575604
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true | 142.250.74.74 | 200 OK | 23 B |
URL GET HTTP/2maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true IP142.250.74.74:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hash8a80554c91d9fca8acb82f023de02f11 5f36b2ea290645ee34d943220a14b54ee5ea5be5 ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.n-psy-t.com
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 18 Apr 2024 09:18:31 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.n-psy-t.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/favicon.ico | 192.185.111.226 | 302 Found | 0 B |
URL GET HTTP/2www.n-psy-t.com/favicon.ico IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
link: <https://www.n-psy-t.com/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
location: https://www.n-psy-t.com/wp-includes/images/w-logo-blue-white-bg.png
content-length: 0
content-type: text/html; charset=UTF-8
date: Thu, 18 Apr 2024 09:18:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-includes/images/w-logo-blue-white-bg.png | 192.185.111.226 | 200 OK | 4.1 kB |
URL GET HTTP/2www.n-psy-t.com/wp-includes/images/w-logo-blue-white-bg.png IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typePNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced Hash000bf649cc8f6bf27cfb04d1bcdcd3c7 d73d2f6d74ec6cdcbae07955592962e77d8ae814 6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.n-psy-t.com/
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 13 Jun 2020 21:39:37 GMT
accept-ranges: bytes
content-length: 4119
content-type: image/png
date: Thu, 18 Apr 2024 09:18:31 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.74.74 | 200 OK | 0 B |
URL POST HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.74.74:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 18 Apr 2024 09:18:32 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.74.74 | 200 OK | 42 kB |
URL POST HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.74.74:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hash3cf47fae94b7d78bb68f2830dd242f3c 97fdc606d9551cd99a4cd798464c7c0563716181 f933f02231dc646c369617772313fce20a356c8a8a28723f7ee8fd19f719a252
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 18 Apr 2024 09:18:32 GMT
server: ESF
cache-control: private
content-length: 41905
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| i.ytimg.com/vi/J5qWP-EMSRQ/sddefault.jpg | 142.250.74.118 | 200 OK | 34 kB |
URL GET HTTP/2i.ytimg.com/vi/J5qWP-EMSRQ/sddefault.jpg IP142.250.74.118:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subjectedgestatic.com Fingerprint78:1A:D9:37:F2:33:3C:A9:0F:4C:4A:E8:40:9E:55:8E:02:75:1E:15 ValidityMon, 04 Mar 2024 06:35:07 GMT - Mon, 27 May 2024 06:35:06 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3 Hashe28e2d1f5873a390449d2dcf20667452 2ed2cbdcf0a989b4ffdf0324aae708dca328646e 47b5f280b316235d57b200722c3acd1969a458927b2c087056c39b0883283510
GET /vi/J5qWP-EMSRQ/sddefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 33835
date: Thu, 18 Apr 2024 09:18:32 GMT
expires: Thu, 18 Apr 2024 11:18:32 GMT
cache-control: public, max-age=7200
etag: "1324159369"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.youtube.com/s/player/f92087f2/player_ias.vflset/en_US/remote.js | 142.250.74.14 | 200 OK | 34 kB |
URL GET HTTP/3www.youtube.com/s/player/f92087f2/player_ias.vflset/en_US/remote.js IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (543) Hash462a38de456c9bf85d5fbf305ad911aa 21c5b449394b4f4e1ce291307e01db301405d0e0 308f0e0c362d5cc2a3852a351a7c12929a4601a120d7bacbf3f72d984b694c83
GET /s/player/f92087f2/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/J5qWP-EMSRQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33854
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 07:28:32 GMT
expires: Wed, 16 Apr 2025 07:28:32 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 16 Apr 2024 04:18:33 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 179400
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.74.74 | 200 OK | 0 B |
URL OPTIONS HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.74.74:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 18 Apr 2024 09:18:32 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/js/th/miBSy5jQPJh1sa2HAK-WLAAFHwiuSy-Xwy9oQisegJw.js | 142.250.74.164 | 200 OK | 20 kB |
URL GET HTTP/2www.google.com/js/th/miBSy5jQPJh1sa2HAK-WLAAFHwiuSy-Xwy9oQisegJw.js IP142.250.74.164:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCC:CC:99:46:65:6C:77:0B:C8:AA:AD:5E:58:B6:2D:19:B2:C7:0B:06 ValidityMon, 04 Mar 2024 07:19:07 GMT - Mon, 27 May 2024 07:19:06 GMT
File typeJavaScript source, ASCII text, with very long lines (51811) Hash5145e2908423fe4aac30cdd17c12277c bd8117e06b0151b88d0867008d51c5b6f225bf56 9a2052cb98d03c9875b1ad8700af962c00051f08ae4b2f97c32f68422b1e809c
GET /js/th/miBSy5jQPJh1sa2HAK-WLAAFHwiuSy-Xwy9oQisegJw.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 20259
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Apr 2024 05:03:48 GMT
expires: Thu, 17 Apr 2025 05:03:48 GMT
cache-control: public, max-age=31536000
age: 101684
last-modified: Thu, 04 Apr 2024 18:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.74.74 | 200 OK | 114 B |
URL OPTIONS HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.74.74:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hash46e2e932b41d083de8e3aead6f3d1bbd 9912078aadc04f90e36eee6a48d2a415370c87e2 edde9d30a4da963ccb1dd1b1e50a2f5784c01f0c72508fd59fc04e2895bbac59
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 928
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 18 Apr 2024 09:18:32 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.youtube.com/generate_204?5_fqnQ | 142.250.74.14 | 204 No Content | 0 B |
URL GET HTTP/3www.youtube.com/generate_204?5_fqnQ IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?5_fqnQ HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/J5qWP-EMSRQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Thu, 18 Apr 2024 09:18:32 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| yt3.ggpht.com/ytc/AIdro_mbCAl6WHQ3sH1g_wgAuD5dxlPA_9CRhnNDQMzI9NpYzg=s68-c-k-c0x00ffffff-no-rj | 142.250.74.97 | 200 OK | 3.6 kB |
URL GET HTTP/2yt3.ggpht.com/ytc/AIdro_mbCAl6WHQ3sH1g_wgAuD5dxlPA_9CRhnNDQMzI9NpYzg=s68-c-k-c0x00ffffff-no-rj IP142.250.74.97:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com FingerprintE0:0C:38:A4:4D:4F:CB:42:05:30:9A:C4:60:B3:64:3F:EF:43:D1:2F ValidityMon, 04 Mar 2024 07:14:32 GMT - Mon, 27 May 2024 07:14:31 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3 Hashdbd3d46e18fb469e97e844cb589cf7c0 e6c53e85b5bc4cc59b480dc48e06238c1d3fec18 246038c5d9eddce1ea76791656b62d700299e97a58288366b27143eae927c418
GET /ytc/AIdro_mbCAl6WHQ3sH1g_wgAuD5dxlPA_9CRhnNDQMzI9NpYzg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v6"
expires: Fri, 19 Apr 2024 09:18:33 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Thu, 18 Apr 2024 09:18:33 GMT
server: fife
content-length: 3597
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 | 142.250.74.14 | 200 OK | 31 B |
URL POST HTTP/3www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
Hash5e1fa6fd9abd549a576f3f24b1d3c8d4 d5335d7f7d33be6a0b663f03b2df4df2521c4a87 d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1713431914470
Content-Type: application/json
X-Goog-Visitor-Id: CgthNlYxckZPNkNOVSjnyoOxBjIOCgJOTxIIEgQSAgsMIFY%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240415.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1713431911533&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 10887
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/J5qWP-EMSRQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Thu, 18 Apr 2024 09:18:34 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.google.com/maps-api-v3/api/js/56/8/common.js | 142.250.74.14 | 200 OK | 57 kB |
URL GET HTTP/3maps.google.com/maps-api-v3/api/js/56/8/common.js IP142.250.74.14:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (6747) Hash418ecbb83c2df2a704fdec98cba736bf 0b0535ebe27dfcef7437bc75cf33648c61be3dbe cf0c03bd0efee39705d10989e116ce08d2810c4ed1b578b6451dd26a34beede5
GET /maps-api-v3/api/js/56/8/common.js HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 57388
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Apr 2024 17:31:11 GMT
expires: Thu, 17 Apr 2025 17:31:11 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 Apr 2024 17:52:08 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 56844
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.google.com/maps-api-v3/api/js/56/8/util.js | 142.250.74.14 | 200 OK | 57 kB |
URL GET HTTP/3maps.google.com/maps-api-v3/api/js/56/8/util.js IP142.250.74.14:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typeJavaScript source, ASCII text, with very long lines (562) Hash6cc4537f5b0fb2554830940d2ef390c1 deae273e7dca2c26ffb13cd11c32280462fc351e c2f957bdab42c74b2dfa9f67e6fb1866edb41034f319d84ca185e5c0f1985f58
GET /maps-api-v3/api/js/56/8/util.js HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 57059
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Apr 2024 17:31:11 GMT
expires: Thu, 17 Apr 2025 17:31:11 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 Apr 2024 17:52:08 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 56844
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 | 142.250.74.14 | 200 OK | 31 B |
URL POST HTTP/3www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 IP142.250.74.14:443
Requested byhttps://www.youtube.com/embed/J5qWP-EMSRQ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
Hash5e1fa6fd9abd549a576f3f24b1d3c8d4 d5335d7f7d33be6a0b663f03b2df4df2521c4a87 d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1713431936817
Content-Type: application/json
X-Goog-Visitor-Id: CgthNlYxckZPNkNOVSjnyoOxBjIOCgJOTxIIEgQSAgsMIFY%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20240415.01.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1713431911533&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C560%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 932
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/J5qWP-EMSRQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Thu, 18 Apr 2024 09:18:56 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/galleria/galleria-1.2.3.js?ver=1.2 | 192.185.111.226 | 200 OK | 123 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/galleria/galleria-1.2.3.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
Size123 kB (122956 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/galleria/galleria-1.2.3.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Thu, 14 Apr 2011 21:14:22 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/timthumb.php?src=https://www.n-psy-t.com/wp-content/uploads/2011/12/banner-expertise.jpg&h=447&w=960&zc=1 | 192.185.111.226 | 200 OK | 65 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/timthumb.php?src=https://www.n-psy-t.com/wp-content/uploads/2011/12/banner-expertise.jpg&h=447&w=960&zc=1 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 960x447, components 3 Hash46ddbc86bffe1c9f2a4f865a7b20eaae 860682b56e28accc59a8bbd76a5272a9f1ede241 8cd8f66eb32ff70691c401ac937ada3c3a1510b306cf73f3b74d18086de15c28
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/timthumb.php?src=https://www.n-psy-t.com/wp-content/uploads/2011/12/banner-expertise.jpg&h=447&w=960&zc=1 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Sun, 28 Apr 2024 09:18:30 GMT
last-modified: Thu, 18 Apr 2024 09:18:30 GMT
vary: Accept-Encoding
content-encoding: gzip
content-type: image/jpeg
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/video.js?ver=1.2 | 192.185.111.226 | 200 OK | 65 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/video.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text, with very long lines (809) Hash75397017e534737841a6ac324df4882a 2121249138e602482e016ec24164c725d485010a cf2feb0632fe46140188fb1a610eac8a5fdd49a41e7419f4643306bc5be89f2f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/video.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 23 Nov 2010 12:36:42 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?ver=6.4.4 | 142.250.74.106 | 400 Bad Request | 0 B |
URL GET HTTP/2fonts.googleapis.com/css?ver=6.4.4 IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /css?ver=6.4.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 400 Bad Request
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 18 Apr 2024 09:18:30 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.4 | 192.185.111.226 | 200 OK | 110 kB |
URL GET HTTP/2www.n-psy-t.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.4 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
Size110 kB (110147 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.4 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Thu, 01 Feb 2024 08:23:08 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 192.185.111.226 | 200 OK | 88 kB |
URL GET HTTP/2www.n-psy-t.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 17 Nov 2023 19:28:43 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/js/jquery-ui.js?ver=1.2 | 192.185.111.226 | 200 OK | 72 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/js/jquery-ui.js?ver=1.2 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJavaScript source, ASCII text, with very long lines (640) Hash6ddfa812d9c5aec3289880907fc55764 4e2f419bca16c653cc54985088ce748338552451 7fca1dc471ca928e19f6cafd32a8c0a746a9defe680d21f66a4c60da12bc5fa0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/js/jquery-ui.js?ver=1.2 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 21 Sep 2010 05:26:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.n-psy-t.com/wp-content/themes/ovid/timthumb.php?src=https://www.n-psy-t.com/wp-content/uploads/2011/12/banner-results.jpg&h=447&w=960&zc=1 | 192.185.111.226 | 200 OK | 79 kB |
URL GET HTTP/2www.n-psy-t.com/wp-content/themes/ovid/timthumb.php?src=https://www.n-psy-t.com/wp-content/uploads/2011/12/banner-results.jpg&h=447&w=960&zc=1 IP192.185.111.226:443 ASN#19871 NETWORK-SOLUTIONS-HOSTING
CertificateIssuerLet's Encrypt Subject*.n-psy-t.com Fingerprint33:64:87:4F:59:27:1B:64:E3:F4:F0:A1:E6:EE:7F:38:7E:A2:03:B5 ValidityWed, 20 Mar 2024 20:18:24 GMT - Tue, 18 Jun 2024 20:18:23 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 960x447, components 3 Hash7403138fc41c21db0e1bef8f34cc7510 1f5293b5555c34c4e1ceed10071cfb42dd72e404 3d6c767e573bed870530508625dc74bb0d0f728c3f4d4a4a93cd8f2d2231c2d7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/ovid/timthumb.php?src=https://www.n-psy-t.com/wp-content/uploads/2011/12/banner-results.jpg&h=447&w=960&zc=1 HTTP/1.1
Host: www.n-psy-t.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Cookie: PHPSESSID=c2848f880fd347f8f3a5f22a89831c16
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Sun, 28 Apr 2024 09:18:30 GMT
last-modified: Thu, 18 Apr 2024 09:18:30 GMT
vary: Accept-Encoding
content-encoding: gzip
content-type: image/jpeg
date: Thu, 18 Apr 2024 09:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.youtube.com/embed/J5qWP-EMSRQ | 142.250.74.14 | 200 OK | 91 kB |
URL GET HTTP/3www.youtube.com/embed/J5qWP-EMSRQ IP142.250.74.14:443
CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/J5qWP-EMSRQ HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.n-psy-t.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 18 Apr 2024 09:18:31 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
origin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=eu72MzxdwpU; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=a6V1rFO6CNU; Domain=.youtube.com; Expires=Tue, 15-Oct-2024 09:18:31 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxIIEgQSAgsMIFY%3D; Domain=.youtube.com; Expires=Tue, 15-Oct-2024 09:18:31 GMT; Path=/; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|