| cdnjs.cloudflare.com/ajax/libs/script.js/2.0.2/script.min.js |  104.17.24.14 | 200 OK | 684 B |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/script.js/2.0.2/script.min.js IP104.17.24.14:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1233) Hash0425e414c5c771ea19751d344586a945 0cd64d6a8b8c87bb47b008e2ef4181a07c1ed93a 674f5eaec7036971b28f595dc5fd4d55a93994e282ab2a232d2486d30640d453
GET /ajax/libs/script.js/2.0.2/script.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ohiorizz-juniors-projects-5b55c027.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 18:11:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 684
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fcb-594"
last-modified: Mon, 04 May 2020 16:16:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 607578
expires: Sun, 27 Apr 2025 18:11:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=20D4t9BhD4K4u%2F3gGYClTeI3VnL2duT%2BmJh7L6PuqtcvEPRbD7zfVxoZUkyb72DGPZDHfWCzWC4sa2D9aTDrojFs4G4DC7WMY5nF4Mmr4E3zptSNdAPhsv8YMPJfCS9wIwqGgWDt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 88032c1ca8d3712e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/particles.js/2.0.0/particles.min.js |  151.101.129.229 | 200 OK | 6.4 kB |
URL GET HTTP/2cdn.jsdelivr.net/particles.js/2.0.0/particles.min.js IP151.101.129.229:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeASCII text, with very long lines (23002) Hash00debcf6cf0789a19cee2278011afcd4 8017f8b1869077db728573f1ca4684a00af69462 faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6
GET /particles.js/2.0.0/particles.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"5b44-gBf4sYaQd9tyhXPxykaEoAr2lGI"
content-encoding: br
accept-ranges: bytes
date: Tue, 07 May 2024 18:11:24 GMT
age: 2748473
x-served-by: cache-fra-eddf8230124-FRA, cache-hel1410030-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6363
X-Firefox-Spdy: h2
|
|
| ohiorizz-juniors-projects-5b55c027.vercel.app/assets/js/index.js | 76.76.21.98 | 200 OK | 918 B |
URL GET HTTP/2ohiorizz-juniors-projects-5b55c027.vercel.app/assets/js/index.js IP76.76.21.98:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Hash815340f4d0164925524b313679698dae d77f83ff8bad8f196341892068e29e26805131dc 4639aa1a5a7aa1f4dec1769536f09b7803885243623c577c4cd27c32e4f526e2
GET /assets/js/index.js HTTP/1.1
Host: ohiorizz-juniors-projects-5b55c027.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0
content-type: application/javascript; charset=UTF-8
date: Tue, 07 May 2024 18:11:24 GMT
etag: W/"396-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-robots-tag: noindex
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::8sff6-1715105484266-0673844dcf5e
content-length: 918
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-6YEQ7Q0XRC | 142.250.74.40 | 200 OK | 102 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-6YEQ7Q0XRC IP142.250.74.40:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size102 kB (101777 bytes) Hash4800292ff1f516e03c1bfc0c276cc6b1 72a527e651efc019714fa7c210aed50a1666f01c cce89c76a4a5d7d99e652849dee150c847ef17d83f26c069a4e60c1474bd5089
GET /gtag/js?id=G-6YEQ7Q0XRC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 07 May 2024 18:11:24 GMT
expires: Tue, 07 May 2024 18:11:24 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101777
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap-icons@1.11.1/font/bootstrap-icons.css | 151.101.129.229 | 200 OK | 14 kB |
URL GET HTTP/3cdn.jsdelivr.net/npm/bootstrap-icons@1.11.1/font/bootstrap-icons.css IP151.101.129.229:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
Hashedf74488a993c84b266b2de3b9c14456 1bec138083d3b27ff687a9d41b80b797cf20b709 bb6fd8cd85394cb367e8ac58e47292f2d68eb288fa12fab68e65430a5ddfce48
GET /npm/bootstrap-icons@1.11.1/font/bootstrap-icons.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 13601
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.11.1
x-jsd-version-type: version
etag: W/"17fcf-G+wTgIPTsn/2h6nUG4C3l88gtwk"
content-encoding: br
accept-ranges: bytes
date: Tue, 07 May 2024 18:11:24 GMT
age: 18204036
x-served-by: cache-fra-eddf8230023-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| ohiorizz-juniors-projects-5b55c027.vercel.app/ | 76.76.21.98 | 200 OK | 4.3 kB |
URL User Request GET HTTP/2ohiorizz-juniors-projects-5b55c027.vercel.app/ IP76.76.21.98:443
CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeHTML document, ASCII text, with very long lines (1321), with CRLF line terminators Hashc9842a274ec6ebf98dce14f8fe1b38ec 60a88d49b894e7a45400d13a36ff4d3dfa611ea9 48086ed9b48151d658ae5e6b8e341b00b2c7013b0e76c0e743faf247fec7bcb2
GET / HTTP/1.1
Host: ohiorizz-juniors-projects-5b55c027.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: text/html; charset=UTF-8
date: Tue, 07 May 2024 18:11:24 GMT
etag: W/"10e3-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-robots-tag: noindex
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::4vvs5-1715105483564-76a7ea8643ad
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 | 142.250.74.99 | 200 OK | 7.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 IP142.250.74.99:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ohiorizz-juniors-projects-5b55c027.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 02:03:08 GMT
expires: Sat, 03 May 2025 02:03:08 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
age: 403696
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ohiorizz-juniors-projects-5b55c027.vercel.app/assets/img/doge.jpg | 76.76.21.98 | 200 OK | 161 kB |
URL GET HTTP/2ohiorizz-juniors-projects-5b55c027.vercel.app/assets/img/doge.jpg IP76.76.21.98:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced Size161 kB (161047 bytes) Hashcbe82ad0ec43e65e4a719b948671363f cddce4d89b7bf7db9f67da2f22298b6e6ddb92f6 9db80503b85162c27925392488e655a82d77bd55b9cf01fa411db718bdb3f975
GET /assets/img/doge.jpg HTTP/1.1
Host: ohiorizz-juniors-projects-5b55c027.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0
content-type: image/jpeg
date: Tue, 07 May 2024 18:11:24 GMT
etag: W/"76e7-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-robots-tag: noindex
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::jrrhx-1715105484260-2efc70adc46f
X-Firefox-Spdy: h2
|
|
| ohiorizz-juniors-projects-5b55c027.vercel.app/uv/uv.handler.js | 76.76.21.98 | 200 OK | 7.9 kB |
URL GET HTTP/2ohiorizz-juniors-projects-5b55c027.vercel.app/uv/uv.handler.js IP76.76.21.98:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashf851487bd084c494d1c978b75b57e3f5 cbcf9e251be077638a0d4b3b8be69bcd1d5d5e8f c5e8a39d09280aeaac25c2548543e53ea74ad041f8932f1f3d702d8223d9c46c
GET /uv/uv.handler.js HTTP/1.1
Host: ohiorizz-juniors-projects-5b55c027.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Tue, 07 May 2024 18:11:24 GMT
etag: W/"9dbf-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-robots-tag: noindex
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::lcqgx-1715105484488-60ac6dd2c5ba
X-Firefox-Spdy: h2
|
|
| pl22991509.profitablegatecpm.com/df/d2/e1/dfd2e1c094b00a158058ce0068d7df84.js | 172.240.108.84 | 200 OK | 16 kB |
URL GET HTTP/1.1pl22991509.profitablegatecpm.com/df/d2/e1/dfd2e1c094b00a158058ce0068d7df84.js IP172.240.108.84:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subjectprofitablegatecpm.com Fingerprint9D:FB:8C:AD:4D:64:98:6B:85:78:33:54:E7:A3:BB:10:ED:77:63:30 ValidityFri, 05 Apr 2024 18:10:33 GMT - Thu, 04 Jul 2024 18:10:32 GMT
File typeJavaScript source, ASCII text, with very long lines (44167), with no line terminators Hashe845fc5d0cf8a69559a6da5672b6bd6d 3b5f80751ae4623121db93e2705d198e9ca112af 4c49828fb657d646923a70c2338dfc0ce6692b501da5231994c8a1dffdee68de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /df/d2/e1/dfd2e1c094b00a158058ce0068d7df84.js HTTP/1.1
Host: pl22991509.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 07 May 2024 18:11:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 80be03f13bc3366ee6648d69d75033d9
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash3a1e61864f6877260287982fa7e36085 6d426b2327915af4f120ff6b18ebd20ed03c2a2b 9ee2ee3f0b60937becb4aa057c348332dd277e32b268f5c0ea260c0d2a2af498
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 07 May 2024 18:11:25 GMT
Last-Modified: Tue, 07 May 2024 16:49:26 GMT
Server: ECAcc (ska/F73C)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mzn-lRwA7kAVTP8Q184ji3Nj9fGXaSeqDvfeOqn4rirGYnhS7Tq1Bg==
Age: 4919
|
|
| proftrafficcounter.com/stats |  18.185.9.67 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.185.9.67:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash530d41eaf00451f421eeda941665dcb1 fb39991ee6cbfcf25c89096ade3885b14af98936 c31b2a45ed45a91318cf8ec81747ed6080b67bbb0305712225aad372cd14b8a0
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ohiorizz-juniors-projects-5b55c027.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 18:11:25 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://ohiorizz-juniors-projects-5b55c027.vercel.app
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=646612bc-b9b5-4be8-9e10-2048e337da27:3:1; expires=Fri, 05 May 2034 18:11:25 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| ohiorizz-juniors-projects-5b55c027.vercel.app/uv/uv.config.js | 76.76.21.98 | 200 OK | 291 B |
URL GET HTTP/2ohiorizz-juniors-projects-5b55c027.vercel.app/uv/uv.config.js IP76.76.21.98:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with CRLF line terminators Hash71ce42fbda3e2abed32e5320a8812cf7 7a01f9a81b957816121a98421c99c50f63b09b23 71cbd5a515918f868cea099f452f35e50576df2494866b5aa16a7fea8b0371ed
GET /uv/uv.config.js HTTP/1.1
Host: ohiorizz-juniors-projects-5b55c027.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Cookie: _ga_6YEQ7Q0XRC=GS1.1.1715105484.1.0.1715105484.0.0.0; _ga=GA1.1.477201715.1715105485
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0
content-type: application/javascript; charset=UTF-8
date: Tue, 07 May 2024 18:11:25 GMT
etag: W/"123-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-robots-tag: noindex
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::4vvs5-1715105485256-abe7592b386f
content-length: 291
X-Firefox-Spdy: h2
|
|
| disclosestockingsprestigious.com/29/fa/b7/29fab7886bf7b6e324633f506204e65d.js | 192.243.59.20 | 200 OK | 31 kB |
URL GET HTTP/1.1disclosestockingsprestigious.com/29/fa/b7/29fab7886bf7b6e324633f506204e65d.js IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subjectdisclosestockingsprestigious.com Fingerprint20:72:8C:30:EF:A7:E9:42:F4:69:4D:6F:83:5A:F6:44:B2:14:1F:F6 ValidityMon, 29 Apr 2024 13:01:45 GMT - Sun, 28 Jul 2024 13:01:44 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash1937957b66a4b80d3043a9a22d65ecf3 161fb0d07fa90bf2d89e5dc0b0c0e0edd355c3e8 43b6bb09649c35df74edd9780b90a15d919e0b5bde88eb65ac0055c8e023f23b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /29/fa/b7/29fab7886bf7b6e324633f506204e65d.js HTTP/1.1
Host: disclosestockingsprestigious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 07 May 2024 18:11:25 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0b4d6391f9fc1e043b32b2f1ee7829dd
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| downstairsnegotiatebarren.com/sfp.js |  188.114.97.1 | 200 OK | 36 kB |
URL GET HTTP/3downstairsnegotiatebarren.com/sfp.js IP188.114.97.1:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint5D:DB:CB:C6:CE:2A:8B:34:7D:BC:43:74:33:1D:5F:77:48:F7:BC:1B ValidityThu, 02 May 2024 21:26:34 GMT - Wed, 31 Jul 2024 21:26:33 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 18:11:25 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 5ccd27bb05cdbdf37b057e5e993f2400
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 07 May 2024 18:11:25 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jMPoWhCIzJdH4Dm3IVDBwiag5zYZUveZiJ2UkYKSYvrwGt2DwdKgQD10RohU%2FPq9GoZ%2BRM7MONi4w325S%2B13Pw4N5iP4tvtjb6Hw6WnoPdrmXzdI101LwXQuuE6g6k7%2BcYXk37N9p1bHoRQl15Mr%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88032c254c0f1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| feudalplastic.com/pixel/purst?dl=0&th=0&sc=0&rs=2094&rd=2094&fd=630&bv=24.5.6485&tmpl=70 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1feudalplastic.com/pixel/purst?dl=0&th=0&sc=0&rs=2094&rd=2094&fd=630&bv=24.5.6485&tmpl=70 IP172.240.108.68:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subjectfeudalplastic.com Fingerprint1D:80:AF:E2:81:A7:77:93:2F:DE:4D:9D:B6:42:F5:8B:EA:BB:0F:A7 ValidityMon, 06 May 2024 08:13:24 GMT - Sun, 04 Aug 2024 08:13:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=2094&rd=2094&fd=630&bv=24.5.6485&tmpl=70 HTTP/1.1
Host: feudalplastic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 07 May 2024 18:11:26 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| disclosestockingsprestigious.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRSedXJDQgL1ViH5wKFIxNld22u7PVSUEhQITdUWwQWh%2BWVnyHhnNbPjdXKqiIR6tPgLNp%2BTRkCL2isSFXIqcYhUqeaUA7nwH4DUM7KxMLzDvPfm%2B0b65nvvm0N%2FQWJ4en7zE7OvtKbrzVpYvfJ5FF2rbqnUD6vDdvJl0rhWtYOrnaQWvlP9UPJdsx6HURhGYVTdUFZ2zXB9BkJljzpRrRPWGnEtajYwtP%2FvnQ%2FgaAAxuCBvQonp6vPgEhSfIO0%2FuSndbm6ydz%2Foe01zYzEQJ5%2Bmu6kpUvSXZdcG6KYnCzaMe7nxDCY9nsuFGfxLZGpKgl%2BfgaUnC5Fgg6O5TqYhUzDxGorBBFJPoOgE3BxAiZcE4AK3tpH2H94ytqB7%2F6B0hk7J6qu%2FoIopWf39EtL%2Bjze0GlbvGu1zZVKHYbeEGk6gehNk%2FhT5fgWqOAXPv4YSL8j6qy2k%2FaNtpw2UOH87aSRJFDO%2BxjqsudZgsr3WkVG4FoeNtqzXW4LGrblBSk2guhNoOQJ1K%2FAugFcBfDeAzwL0xXmVR1HUCgWnYbvDeV20JEtEGNFWN6JRmLTh%2BewPI%2BTZCFyPwO19ZPY%2BdtUI1v8Ct1PCiQAuJxiIEoUkKBxBQQkKRVDkBMWgPBbaxa58KLTzLFrkeJHr5djkvUN6bPKeTAmoHcGK8jC7IG%2FMDAy%2B%2BKiCXXleFV0Ry4iHnQYLQxo122GzzWUYJm3REt12A06VUK4C6gLsqynpkMfI1JRcrh2A0VM4fQquVkD9W6BFCbpTYj99LNPazl6WyRrXnkGYElm%2BinwvONQX5PJ8hpvbTyD52fU%2F6vMAtyUyW%2BIr9Zygpx%2BM75iCHN0xhSNPt7Nc9dU%2Bnc33bk5zufL9x3KvMFZs3nSj797jM2BWPronXb5FU6HSniM%2F3FBCSLthLJfk5033mWS3vdu54W3qs63b729s9jMrnVMmnYDOVvVPC66m5PXL9%2Bare%2BWnbSg7gfUl%2Bv6MLALKTMCz%2B3DZUr8zBFYvOSwLUPhybGO2vNSKQMtlT1kJ95%2BeLeuxpbPXVJWH7gF6tgKaHyDtlxjYEgNdguoRnF8Z55k9u%2F7bQgbTlTHTtnLEtNXfzm2eHU%2Fh1Hm1Va%2BHNOk0o1aLyhZrxO1uEglK40YSJwmtI3fT7tX0xd8AAAD%2F%2FwEAAP%2F%2FX0ckdZQEAAA%3D | 192.243.59.20 | 200 OK | 7 B |
URL GET HTTP/1.1disclosestockingsprestigious.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRSedXJDQgL1ViH5wKFIxNld22u7PVSUEhQITdUWwQWh%2BWVnyHhnNbPjdXKqiIR6tPgLNp%2BTRkCL2isSFXIqcYhUqeaUA7nwH4DUM7KxMLzDvPfm%2B0b65nvvm0N%2FQWJ4en7zE7OvtKbrzVpYvfJ5FF2rbqnUD6vDdvJl0rhWtYOrnaQWvlP9UPJdsx6HURhGYVTdUFZ2zXB9BkJljzpRrRPWGnEtajYwtP%2FvnQ%2FgaAAxuCBvQonp6vPgEhSfIO0%2FuSndbm6ydz%2Foe01zYzEQJ5%2Bmu6kpUvSXZdcG6KYnCzaMe7nxDCY9nsuFGfxLZGpKgl%2BfgaUnC5Fgg6O5TqYhUzDxGorBBFJPoOgE3BxAiZcE4AK3tpH2H94ytqB7%2F6B0hk7J6qu%2FoIopWf39EtL%2Bjze0GlbvGu1zZVKHYbeEGk6gehNk%2FhT5fgWqOAXPv4YSL8j6qy2k%2FaNtpw2UOH87aSRJFDO%2BxjqsudZgsr3WkVG4FoeNtqzXW4LGrblBSk2guhNoOQJ1K%2FAugFcBfDeAzwL0xXmVR1HUCgWnYbvDeV20JEtEGNFWN6JRmLTh%2BewPI%2BTZCFyPwO19ZPY%2BdtUI1v8Ct1PCiQAuJxiIEoUkKBxBQQkKRVDkBMWgPBbaxa58KLTzLFrkeJHr5djkvUN6bPKeTAmoHcGK8jC7IG%2FMDAy%2B%2BKiCXXleFV0Ry4iHnQYLQxo122GzzWUYJm3REt12A06VUK4C6gLsqynpkMfI1JRcrh2A0VM4fQquVkD9W6BFCbpTYj99LNPazl6WyRrXnkGYElm%2BinwvONQX5PJ8hpvbTyD52fU%2F6vMAtyUyW%2BIr9Zygpx%2BM75iCHN0xhSNPt7Nc9dU%2Bnc33bk5zufL9x3KvMFZs3nSj797jM2BWPronXb5FU6HSniM%2F3FBCSLthLJfk5033mWS3vdu54W3qs63b729s9jMrnVMmnYDOVvVPC66m5PXL9%2Bare%2BWnbSg7gfUl%2Bv6MLALKTMCz%2B3DZUr8zBFYvOSwLUPhybGO2vNSKQMtlT1kJ95%2BeLeuxpbPXVJWH7gF6tgKaHyDtlxjYEgNdguoRnF8Z55k9u%2F7bQgbTlTHTtnLEtNXfzm2eHU%2Fh1Hm1Va%2BHNOk0o1aLyhZrxO1uEglK40YSJwmtI3fT7tX0xd8AAAD%2F%2FwEAAP%2F%2FX0ckdZQEAAA%3D IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subjectdisclosestockingsprestigious.com Fingerprint20:72:8C:30:EF:A7:E9:42:F4:69:4D:6F:83:5A:F6:44:B2:14:1F:F6 ValidityMon, 29 Apr 2024 13:01:45 GMT - Sun, 28 Jul 2024 13:01:44 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz28bRRSedXJDQgL1ViH5wKFIxNld22u7PVSUEhQITdUWwQWh%2BWVnyHhnNbPjdXKqiIR6tPgLNp%2BTRkCL2isSFXIqcYhUqeaUA7nwH4DUM7KxMLzDvPfm%2B0b65nvvm0N%2FQWJ4en7zE7OvtKbrzVpYvfJ5FF2rbqnUD6vDdvJl0rhWtYOrnaQWvlP9UPJdsx6HURhGYVTdUFZ2zXB9BkJljzpRrRPWGnEtajYwtP%2FvnQ%2FgaAAxuCBvQonp6vPgEhSfIO0%2FuSndbm6ydz%2Foe01zYzEQJ5%2Bmu6kpUvSXZdcG6KYnCzaMe7nxDCY9nsuFGfxLZGpKgl%2BfgaUnC5Fgg6O5TqYhUzDxGorBBFJPoOgE3BxAiZcE4AK3tpH2H94ytqB7%2F6B0hk7J6qu%2FoIopWf39EtL%2Bjze0GlbvGu1zZVKHYbeEGk6gehNk%2FhT5fgWqOAXPv4YSL8j6qy2k%2FaNtpw2UOH87aSRJFDO%2BxjqsudZgsr3WkVG4FoeNtqzXW4LGrblBSk2guhNoOQJ1K%2FAugFcBfDeAzwL0xXmVR1HUCgWnYbvDeV20JEtEGNFWN6JRmLTh%2BewPI%2BTZCFyPwO19ZPY%2BdtUI1v8Ct1PCiQAuJxiIEoUkKBxBQQkKRVDkBMWgPBbaxa58KLTzLFrkeJHr5djkvUN6bPKeTAmoHcGK8jC7IG%2FMDAy%2B%2BKiCXXleFV0Ry4iHnQYLQxo122GzzWUYJm3REt12A06VUK4C6gLsqynpkMfI1JRcrh2A0VM4fQquVkD9W6BFCbpTYj99LNPazl6WyRrXnkGYElm%2BinwvONQX5PJ8hpvbTyD52fU%2F6vMAtyUyW%2BIr9Zygpx%2BM75iCHN0xhSNPt7Nc9dU%2Bnc33bk5zufL9x3KvMFZs3nSj797jM2BWPronXb5FU6HSniM%2F3FBCSLthLJfk5033mWS3vdu54W3qs63b729s9jMrnVMmnYDOVvVPC66m5PXL9%2Bare%2BWnbSg7gfUl%2Bv6MLALKTMCz%2B3DZUr8zBFYvOSwLUPhybGO2vNSKQMtlT1kJ95%2BeLeuxpbPXVJWH7gF6tgKaHyDtlxjYEgNdguoRnF8Z55k9u%2F7bQgbTlTHTtnLEtNXfzm2eHU%2Fh1Hm1Va%2BHNOk0o1aLyhZrxO1uEglK40YSJwmtI3fT7tX0xd8AAAD%2F%2FwEAAP%2F%2FX0ckdZQEAAA%3D HTTP/1.1
Host: disclosestockingsprestigious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Cookie: u_pl=22891010; uid_id2=646612bc-b9b5-4be8-9e10-2048e337da27:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 07 May 2024 18:11:26 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1fbb95e82589b288821941d1670437ba
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| ohiorizz-juniors-projects-5b55c027.vercel.app/worker.js | 76.76.21.98 | 500 Internal Server Error | 28 B |
URL GET HTTP/2ohiorizz-juniors-projects-5b55c027.vercel.app/worker.js IP76.76.21.98:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with no line terminators Hash7305135e8c8844dec3bdaf6071604de8 76fae8ae6068e24b7fb57128fc00b8b867c56985 6a38227859da1b654cfdd0e54846f0692ed50f02be2c464feaaf15f123d53d6a
GET /worker.js HTTP/1.1
Host: ohiorizz-juniors-projects-5b55c027.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Cookie: _ga_6YEQ7Q0XRC=GS1.1.1715105484.1.0.1715105484.0.0.0; _ga=GA1.1.477201715.1715105485; dom3ic8zudi28v8lr6fgphwffqoz0j6c=646612bc-b9b5-4be8-9e10-2048e337da27%3A3%3A1; sb_main_dfd2e1c094b00a158058ce0068d7df84=1; sb_count_dfd2e1c094b00a158058ce0068d7df84=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 500 Internal Server Error
age: 0
cache-control: public, max-age=0, must-revalidate
content-type: text/html; charset=utf-8
date: Tue, 07 May 2024 18:11:26 GMT
etag: W/"1c-dvrormBo4kt/tXEo/AC4uGfFaYU"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-robots-tag: noindex
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::zg59g-1715105486290-e0b5a22d056d
content-length: 28
X-Firefox-Spdy: h2
|
|
| disclosestockingsprestigious.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=221 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1disclosestockingsprestigious.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=221 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subjectdisclosestockingsprestigious.com Fingerprint20:72:8C:30:EF:A7:E9:42:F4:69:4D:6F:83:5A:F6:44:B2:14:1F:F6 ValidityMon, 29 Apr 2024 13:01:45 GMT - Sun, 28 Jul 2024 13:01:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F2f%2F33%2F17%2F2f3317da28d2a6ed09610d2d267aa136%2F1648542458.html&l=2977&fd=221 HTTP/1.1
Host: disclosestockingsprestigious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Cookie: u_pl=22891010; uid_id2=646612bc-b9b5-4be8-9e10-2048e337da27:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 07 May 2024 18:11:26 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/img/close.png | 172.67.141.24 | 200 OK | 6.0 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/img/close.png IP172.67.141.24:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typePNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced Hashc489ce2c491a22ee37a55e26a92dfd73 2fa588ab09e94dd902e5bd24b48f98ad1949c9d6 1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd
GET /sb/chat/mob/ssp/1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 18:11:26 GMT
content-type: image/png
content-length: 5982
last-modified: Mon, 21 Feb 2022 08:25:06 GMT
etag: "62134c62-175e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 603182
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FOeYEMWxaZMrrkyGhhQDRKoE%2BYAla%2FlBl9DErAH%2FxFWWO1QuhBj4BLKdU6BdNtjhBGsx3w8LdXdGlsOJ4%2F51cdGSx6E0QkCrE64yDaSOg2qz60jWPRbRthA0X9EPheLPACT%2FZKIn8o%2B8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88032c2bca347131-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png | 45.133.44.9 | 200 OK | 14 kB |
URL GET HTTP/2cdn.cloudimagesb.com/si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash962ac416cce3fad636d4904386c8d3d4 811166fceb971353dc6a9ea3a153367f20b47592 ec6c8e1c030499a846897265d0c1f66dedc6ece17c1ea6006b700faf37e73555
GET /si/52/3a/8c/523a8ce104cfc3373cd17ab1c0e5131b/1701651901.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 18:11:26 GMT
content-type: image/png
content-length: 14496
server: nginx/1.21.6
last-modified: Mon, 04 Dec 2023 01:05:10 GMT
etag: "656d25c6-38a0"
expires: Thu, 09 May 2024 18:11:26 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ohiorizz-juniors-projects-5b55c027.vercel.app/assets/js/main.js | 76.76.21.98 | 200 OK | 33 kB |
URL GET HTTP/2ohiorizz-juniors-projects-5b55c027.vercel.app/assets/js/main.js IP76.76.21.98:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hash3e4cc484de5085067f418f10b033bf0c d30c5d4605368f5d0668a614c72c5dbbea5ddcde 57528457c0d3711ac15310a57d37255d4fbbc5b5924cc5510fd668923c68e63c
GET /assets/js/main.js HTTP/1.1
Host: ohiorizz-juniors-projects-5b55c027.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Tue, 07 May 2024 18:11:24 GMT
etag: W/"e66-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-robots-tag: noindex
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::zg59g-1715105484261-94cb6cd98022
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/style.css | 172.67.141.24 | 200 OK | 1.1 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/style.css IP172.67.141.24:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash630f303dfe147dec2c4a226287393b69 3e9f8270b84e09595181bd55de6785a89f53ba10 967d085a33a12064d83cb38f582c3e418e021a2d523dd9597bb75dc00589fec7
GET /sb/chat/mob/ssp/1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ohiorizz-juniors-projects-5b55c027.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 18:11:26 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 08:25:04 GMT
etag: W/"62134c60-1209"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m4CHOQeCy5FCiRZ8mZMmAmMxCHUIO7WB3txHz1harEkg2tR6Mgn3hruh%2BkoEjd5zjUbrwpYMcyqxahhTrPizlc4fUsxj3AgqTpH07Z29hDC0KUsQIKZ6Nct1s1QhSheaMzj9juFvqPyP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88032c2b28f57131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| unseenreport.com/pxf.gif?uuid=646612bc-b9b5-4be8-9e10-2048e337da27&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=29fab7886bf7b6e324633f506204e65d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 | 192.243.61.225 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=646612bc-b9b5-4be8-9e10-2048e337da27&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=29fab7886bf7b6e324633f506204e65d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=646612bc-b9b5-4be8-9e10-2048e337da27&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=29fab7886bf7b6e324633f506204e65d&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 07 May 2024 18:11:27 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8eb40f46deac6e8e4b4db22fd970cbdb
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.barscreative1.com/sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html | 45.133.44.4 | 200 OK | 662 B |
URL GET HTTP/2cdn.barscreative1.com/sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html IP45.133.44.4:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subjectcdn.barscreative1.com FingerprintF6:54:F4:B9:EB:AD:1E:FA:8F:76:B9:75:20:9B:41:57:32:37:94:E3 ValiditySun, 10 Mar 2024 03:01:32 GMT - Sat, 08 Jun 2024 03:01:31 GMT
File typegzip compressed data, from Unix Hash6908d1a773061ad8882ad371b87f9c16 88d08158baef410e3cd1cafb7fbb366405cd9109 76b404772b17bf675e11cafa9669c46d7c8a6c1c11ed6156629a3b9c837c4deb
GET /sb/au/2f/33/17/2f3317da28d2a6ed09610d2d267aa136/1648542458.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ohiorizz-juniors-projects-5b55c027.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 18:11:26 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Tue, 29 Mar 2022 08:27:42 GMT
etag: W/"6242c2fe-ba1"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Tue, 07 May 2024 19:11:26 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|
| disclosestockingsprestigious.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=353 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1disclosestockingsprestigious.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=353 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subjectdisclosestockingsprestigious.com Fingerprint20:72:8C:30:EF:A7:E9:42:F4:69:4D:6F:83:5A:F6:44:B2:14:1F:F6 ValidityMon, 29 Apr 2024 13:01:45 GMT - Sun, 28 Jul 2024 13:01:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fjs%2Fscript.js&l=382&fd=353 HTTP/1.1
Host: disclosestockingsprestigious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Cookie: u_pl=22891010; uid_id2=646612bc-b9b5-4be8-9e10-2048e337da27:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 07 May 2024 18:11:27 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.99 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.99:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ohiorizz-juniors-projects-5b55c027.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 06:08:19 GMT
expires: Sat, 03 May 2025 06:08:19 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 388988
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.99 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.99:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ohiorizz-juniors-projects-5b55c027.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 10:46:32 GMT
expires: Wed, 07 May 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 26695
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.106 | 200 OK | 724 B |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.106:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hashe949f107146f80ef61a5f3d3a8ba72c3 135706ca8eceb5af199775e7827468377051e1c6 e211d6a233a3d6a04d6f4b079c172917eca909259edd7399eeebfb1098059640
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 07 May 2024 18:11:26 GMT
date: Tue, 07 May 2024 18:11:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| disclosestockingsprestigious.com/pixel/sbs?c=1 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1disclosestockingsprestigious.com/pixel/sbs?c=1 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subjectdisclosestockingsprestigious.com Fingerprint20:72:8C:30:EF:A7:E9:42:F4:69:4D:6F:83:5A:F6:44:B2:14:1F:F6 ValidityMon, 29 Apr 2024 13:01:45 GMT - Sun, 28 Jul 2024 13:01:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbs?c=1 HTTP/1.1
Host: disclosestockingsprestigious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Cookie: u_pl=22891010; uid_id2=646612bc-b9b5-4be8-9e10-2048e337da27:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 07 May 2024 18:11:27 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| unseenreport.com/pxf.gif?uuid=646612bc-b9b5-4be8-9e10-2048e337da27&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=dfd2e1c094b00a158058ce0068d7df84&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=646612bc-b9b5-4be8-9e10-2048e337da27&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=dfd2e1c094b00a158058ce0068d7df84&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=646612bc-b9b5-4be8-9e10-2048e337da27&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=dfd2e1c094b00a158058ce0068d7df84&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 07 May 2024 18:11:27 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a7c2d5385f2f6c84d040baf252ce23f7
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| ohiorizz-juniors-projects-5b55c027.vercel.app/assets/js/anym.js | 76.76.21.98 | 200 OK | 1.9 kB |
URL GET HTTP/2ohiorizz-juniors-projects-5b55c027.vercel.app/assets/js/anym.js IP76.76.21.98:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (2037), with no line terminators Hash4a22ad7ac8e80432ad1818f572e4d651 5cd9323bb41d58db37c36a12cace0065f84dd684 27330043a8ce7dcde02a22d1b720fd93275768766c9b5dbd64fd183801f3e338
GET /assets/js/anym.js HTTP/1.1
Host: ohiorizz-juniors-projects-5b55c027.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Tue, 07 May 2024 18:11:24 GMT
etag: W/"771-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-robots-tag: noindex
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::xnwt8-1715105484259-458b68d5940f
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/jquery.min.js | 172.67.141.24 | 200 OK | 90 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/jquery.min.js IP172.67.141.24:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hash561acb3e541133bbdd2c0c19f8ee35a1 ffd1353cf3f77d25f801c84d8208613eb0d3d548 9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc
GET /sb/chat/mob/ssp/1/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 18:11:26 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 08:25:09 GMT
etag: W/"62134c65-15d94"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 611630
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iymq9HEtDrDHZHmNwl898SB%2F99%2B7Z%2BykM60P%2BxUgwUq3AS1nluAdTPwmjYXy7etGLXajv0u1Vjo6Sd9rZVXG0WxI7rG%2FP2BGJec9tzc%2Bo8bkpo8kVqxGwmS0dlrkd2BJdr21wVSLkKMz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88032c2bda4e7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ohiorizz-juniors-projects-5b55c027.vercel.app/assets/css/menu.css | 76.76.21.98 | 200 OK | 1.2 kB |
URL GET HTTP/2ohiorizz-juniors-projects-5b55c027.vercel.app/assets/css/menu.css IP76.76.21.98:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (1298), with no line terminators Hashee57e56f32611c0095c6749708aebd14 f326b138f92fd7b9899a07a992a3f91f42fbbc18 315b914e4945c9b1a41b04c9c4b971377a41bc65fc79fc04de28e13e59bbe38b
GET /assets/css/menu.css HTTP/1.1
Host: ohiorizz-juniors-projects-5b55c027.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: text/css; charset=UTF-8
date: Tue, 07 May 2024 18:11:24 GMT
etag: W/"4a4-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-robots-tag: noindex
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::lcqgx-1715105484262-e299afbf9746
X-Firefox-Spdy: h2
|
|
| disclosestockingsprestigious.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=193 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1disclosestockingsprestigious.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=193 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subjectdisclosestockingsprestigious.com Fingerprint20:72:8C:30:EF:A7:E9:42:F4:69:4D:6F:83:5A:F6:44:B2:14:1F:F6 ValidityMon, 29 Apr 2024 13:01:45 GMT - Sun, 28 Jul 2024 13:01:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fanimate.css&l=79313&fd=193 HTTP/1.1
Host: disclosestockingsprestigious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Cookie: u_pl=22891010; uid_id2=646612bc-b9b5-4be8-9e10-2048e337da27:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 07 May 2024 18:11:26 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| disclosestockingsprestigious.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRS%2Bb5KdICjdBWEWLiqYyXvze9pFMcZINDalrehG5P56k2vuvPu49915k6yCAely8C94%2BSZpUFtpt4JFJgUXgULHVRZm43%2Bg0LXMODh6Fvecc7%2Fvwne%2Fc7459lekCk8vNz4xB0prutaohOXrn0fRzfK2SvygPGg3v2zWb5Zt%2F0anWQnfKX8o%2BZ5Zq4ZRGEZhVN5UVsZmsDYFodJHnajSCSv1aiVq1DGw%2F%2B%2BdD%2BBoANG%2FIm9Cicny8%2BAaFB8j6T3ZkG4vM%2Bm7H%2FS8ppmx6IuzT5O9xOQJeosytgHi5GzOhnEvN5%2FBJKczuTD9f4lMTUjw6zOw5GwuEqx%2FMtPJNGQCJl5D3h9D6jEUHYObIyjxkgBc4PYOkt7D28bmdP8flE7RCVl%2B9RdUPiHLv19D0vtxXatB%2BZ7RPlMmcRjEBdRgDNUdI%2FXnyA5KUPk5ePY1lHhB1l5tI%2Bmd7DhtoMTl2816sxlVGV9lHdZYrTPZXu3IKFythvW2rNVaglZbM4OUGkPFY2g5BHVL8C6AVwF8HMCnAXrissyjKGqFgtOw3eG8JlqSNUUY0VYc0ShstuH59A9DZOkQXA%2FB7SFSe4g9NYT1v8DtFnAigMsI%2BqJALglyR5BTglwR5BlB3i9OhXZVVzwU2nkWzXN1nmvFyGTdY3pqsq5MCKgdworiOL0ib0wNDL74qIQ9eVkWsajKiIedOgtDGjXaYaPNZRg226Il4nYdThVQrgTqAhyoCemQx0jVhKxUjsDoOZw%2BB1dLoP4t0LwA3S1wkDyWSWV3P01lhWvPIEyBNFtGth8c6yuyMpvh1s4TSH5x64%2FaLMBtgdQW%2BEo9J%2BjqB6O7Jicnd03uyNOdNFM9dUCn872X0Uwuff%2Bx3M%2BNFVsbbvjde3wKTMtH96XLtmkiVNJ15Id1JYS0m8ZySX7ecp9Jdse73XVvE59u33l%2Fc6uXWumcMskYdLqqf1pwNSGvr9yfre71n3ag7BjWF%2Bj5CzIPKDMGTw%2Fh0oV%2BZwisXnBYGiD3xchW2eJSKwItFz1lBdx%2FeraoR5ZOX1NVHLsH6NoSaHaEpFegbwv0dQGqh3B%2BaZSl9uLWb3MZTJdGTNvSCdNWfzuzeXo8hVOX5VooWkzGssVkvVGPJRes0WAhjzmriXabI3OT%2BEby4m8AAAD%2F%2FwEAAP%2F%2F35PxnZQEAAA%3D | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1disclosestockingsprestigious.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRS%2Bb5KdICjdBWEWLiqYyXvze9pFMcZINDalrehG5P56k2vuvPu49915k6yCAely8C94%2BSZpUFtpt4JFJgUXgULHVRZm43%2Bg0LXMODh6Fvecc7%2Fvwne%2Fc7459lekCk8vNz4xB0prutaohOXrn0fRzfK2SvygPGg3v2zWb5Zt%2F0anWQnfKX8o%2BZ5Zq4ZRGEZhVN5UVsZmsDYFodJHnajSCSv1aiVq1DGw%2F%2B%2BdD%2BBoANG%2FIm9Cicny8%2BAaFB8j6T3ZkG4vM%2Bm7H%2FS8ppmx6IuzT5O9xOQJeosytgHi5GzOhnEvN5%2FBJKczuTD9f4lMTUjw6zOw5GwuEqx%2FMtPJNGQCJl5D3h9D6jEUHYObIyjxkgBc4PYOkt7D28bmdP8flE7RCVl%2B9RdUPiHLv19D0vtxXatB%2BZ7RPlMmcRjEBdRgDNUdI%2FXnyA5KUPk5ePY1lHhB1l5tI%2Bmd7DhtoMTl2816sxlVGV9lHdZYrTPZXu3IKFythvW2rNVaglZbM4OUGkPFY2g5BHVL8C6AVwF8HMCnAXrissyjKGqFgtOw3eG8JlqSNUUY0VYc0ShstuH59A9DZOkQXA%2FB7SFSe4g9NYT1v8DtFnAigMsI%2BqJALglyR5BTglwR5BlB3i9OhXZVVzwU2nkWzXN1nmvFyGTdY3pqsq5MCKgdworiOL0ib0wNDL74qIQ9eVkWsajKiIedOgtDGjXaYaPNZRg226Il4nYdThVQrgTqAhyoCemQx0jVhKxUjsDoOZw%2BB1dLoP4t0LwA3S1wkDyWSWV3P01lhWvPIEyBNFtGth8c6yuyMpvh1s4TSH5x64%2FaLMBtgdQW%2BEo9J%2BjqB6O7Jicnd03uyNOdNFM9dUCn872X0Uwuff%2Bx3M%2BNFVsbbvjde3wKTMtH96XLtmkiVNJ15Id1JYS0m8ZySX7ecp9Jdse73XVvE59u33l%2Fc6uXWumcMskYdLqqf1pwNSGvr9yfre71n3ag7BjWF%2Bj5CzIPKDMGTw%2Fh0oV%2BZwisXnBYGiD3xchW2eJSKwItFz1lBdx%2FeraoR5ZOX1NVHLsH6NoSaHaEpFegbwv0dQGqh3B%2BaZSl9uLWb3MZTJdGTNvSCdNWfzuzeXo8hVOX5VooWkzGssVkvVGPJRes0WAhjzmriXabI3OT%2BEby4m8AAAD%2F%2FwEAAP%2F%2F35PxnZQEAAA%3D IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subjectdisclosestockingsprestigious.com Fingerprint20:72:8C:30:EF:A7:E9:42:F4:69:4D:6F:83:5A:F6:44:B2:14:1F:F6 ValidityMon, 29 Apr 2024 13:01:45 GMT - Sun, 28 Jul 2024 13:01:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRS%2Bb5KdICjdBWEWLiqYyXvze9pFMcZINDalrehG5P56k2vuvPu49915k6yCAely8C94%2BSZpUFtpt4JFJgUXgULHVRZm43%2Bg0LXMODh6Fvecc7%2Fvwne%2Fc7459lekCk8vNz4xB0prutaohOXrn0fRzfK2SvygPGg3v2zWb5Zt%2F0anWQnfKX8o%2BZ5Zq4ZRGEZhVN5UVsZmsDYFodJHnajSCSv1aiVq1DGw%2F%2B%2BdD%2BBoANG%2FIm9Cicny8%2BAaFB8j6T3ZkG4vM%2Bm7H%2FS8ppmx6IuzT5O9xOQJeosytgHi5GzOhnEvN5%2FBJKczuTD9f4lMTUjw6zOw5GwuEqx%2FMtPJNGQCJl5D3h9D6jEUHYObIyjxkgBc4PYOkt7D28bmdP8flE7RCVl%2B9RdUPiHLv19D0vtxXatB%2BZ7RPlMmcRjEBdRgDNUdI%2FXnyA5KUPk5ePY1lHhB1l5tI%2Bmd7DhtoMTl2816sxlVGV9lHdZYrTPZXu3IKFythvW2rNVaglZbM4OUGkPFY2g5BHVL8C6AVwF8HMCnAXrissyjKGqFgtOw3eG8JlqSNUUY0VYc0ShstuH59A9DZOkQXA%2FB7SFSe4g9NYT1v8DtFnAigMsI%2BqJALglyR5BTglwR5BlB3i9OhXZVVzwU2nkWzXN1nmvFyGTdY3pqsq5MCKgdworiOL0ib0wNDL74qIQ9eVkWsajKiIedOgtDGjXaYaPNZRg226Il4nYdThVQrgTqAhyoCemQx0jVhKxUjsDoOZw%2BB1dLoP4t0LwA3S1wkDyWSWV3P01lhWvPIEyBNFtGth8c6yuyMpvh1s4TSH5x64%2FaLMBtgdQW%2BEo9J%2BjqB6O7Jicnd03uyNOdNFM9dUCn872X0Uwuff%2Bx3M%2BNFVsbbvjde3wKTMtH96XLtmkiVNJ15Id1JYS0m8ZySX7ecp9Jdse73XVvE59u33l%2Fc6uXWumcMskYdLqqf1pwNSGvr9yfre71n3ag7BjWF%2Bj5CzIPKDMGTw%2Fh0oV%2BZwisXnBYGiD3xchW2eJSKwItFz1lBdx%2FeraoR5ZOX1NVHLsH6NoSaHaEpFegbwv0dQGqh3B%2BaZSl9uLWb3MZTJdGTNvSCdNWfzuzeXo8hVOX5VooWkzGssVkvVGPJRes0WAhjzmriXabI3OT%2BEby4m8AAAD%2F%2FwEAAP%2F%2F35PxnZQEAAA%3D HTTP/1.1
Host: disclosestockingsprestigious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Cookie: u_pl=22891010; uid_id2=646612bc-b9b5-4be8-9e10-2048e337da27:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 07 May 2024 18:11:27 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1baf79fa3aad4124a271c0d978064d15
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| ohiorizz-juniors-projects-5b55c027.vercel.app/assets/js/particles.js | 76.76.21.98 | 200 OK | 23 kB |
URL GET HTTP/2ohiorizz-juniors-projects-5b55c027.vercel.app/assets/js/particles.js IP76.76.21.98:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/js/particles.js HTTP/1.1
Host: ohiorizz-juniors-projects-5b55c027.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Tue, 07 May 2024 18:11:24 GMT
etag: W/"584d-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-robots-tag: noindex
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::v9tc6-1715105484265-96d2179af05c
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap-icons@1.11.1/font/fonts/bootstrap-icons.woff2?2820a3852bdb9a5832199cc61cec4e65 | 151.101.129.229 | 200 OK | 131 kB |
URL GET HTTP/3cdn.jsdelivr.net/npm/bootstrap-icons@1.11.1/font/fonts/bootstrap-icons.woff2?2820a3852bdb9a5832199cc61cec4e65 IP151.101.129.229:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 130608, version 1.0 Size131 kB (130608 bytes) Hashed62b9f1e0c75121f4d797a4a85730a2 d33714cb0836ea9ebe02f4ccc22806593903167a bacd70afda7da1deac2bbd49b5717a4dd133bcd59c379525d705b8492f678e95
GET /npm/bootstrap-icons@1.11.1/font/fonts/bootstrap-icons.woff2?2820a3852bdb9a5832199cc61cec4e65 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ohiorizz-juniors-projects-5b55c027.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://cdn.jsdelivr.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-length: 130608
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: font/woff2
x-jsd-version: 1.11.1
x-jsd-version-type: version
etag: W/"1fe30-0zcUywg26p6+AvTMwigGWTkDFno"
accept-ranges: bytes
date: Tue, 07 May 2024 18:11:24 GMT
age: 2661186
x-served-by: cache-fra-etou8220153-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/animate.css | 172.67.141.24 | 200 OK | 79 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/css/animate.css IP172.67.141.24:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hashfc638645a938f69e69360c75335ffd1a 143132fb8361c3ad0acf88cb70bf0b07c0ecc2d4 7ef76aab275d0221c68602d18f81b4285b280756f0f71d535ed8b5b889bc2f90
GET /sb/chat/mob/ssp/1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ohiorizz-juniors-projects-5b55c027.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 18:11:26 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 08:25:04 GMT
etag: W/"62134c60-135d1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j1ri7eJz8iHoGN9FKKE52huXdgllXqfy0xthy%2Fn7NS%2FyZy4ZjxoIseMDmeN9cqJlc2WS7VZHvlZELZIziEHN%2FX6ziV2%2BFRhnWnUFt6I88UENiG7ODa4V4hHfKxoKhIpaHAh5DSxyF0rB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88032c2b28f17131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| disclosestockingsprestigious.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=321 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1disclosestockingsprestigious.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=321 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subjectdisclosestockingsprestigious.com Fingerprint20:72:8C:30:EF:A7:E9:42:F4:69:4D:6F:83:5A:F6:44:B2:14:1F:F6 ValidityMon, 29 Apr 2024 13:01:45 GMT - Sun, 28 Jul 2024 13:01:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fchat%2Fmob%2Fssp%2F1%2Fcss%2Fstyle.css&l=4617&fd=321 HTTP/1.1
Host: disclosestockingsprestigious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Cookie: u_pl=22891010; uid_id2=646612bc-b9b5-4be8-9e10-2048e337da27:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 07 May 2024 18:11:26 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| ohiorizz-juniors-projects-5b55c027.vercel.app/assets/css/app.css | 76.76.21.98 | 200 OK | 6.0 kB |
URL GET HTTP/2ohiorizz-juniors-projects-5b55c027.vercel.app/assets/css/app.css IP76.76.21.98:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (6632), with no line terminators Hash61c4fb4622218c1d63c34c9e18da25d3 b8dcf55940f33fb38f5bd91560c521b30d62d498 5b0be2b2f0cb579183079ec9948c62544e6f0e8aefe4020f7d6a5d498b63f69a
GET /assets/css/app.css HTTP/1.1
Host: ohiorizz-juniors-projects-5b55c027.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: text/css; charset=UTF-8
date: Tue, 07 May 2024 18:11:24 GMT
etag: W/"177c-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-robots-tag: noindex
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::65r47-1715105484256-7f0e69b1c159
X-Firefox-Spdy: h2
|
|
| ohiorizz-juniors-projects-5b55c027.vercel.app/assets/js/functions.js | 76.76.21.98 | 200 OK | 7.5 kB |
URL GET HTTP/2ohiorizz-juniors-projects-5b55c027.vercel.app/assets/js/functions.js IP76.76.21.98:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (8179), with no line terminators Hashcf3f70fb65205d2a3590b20b6187d3d2 1738ee1312394b94880ff0bac423405afc93deae a885bf3bfe57b6b8c827e6f157ed7686da0c42feba4e50f3e09c9ff142f28f02
GET /assets/js/functions.js HTTP/1.1
Host: ohiorizz-juniors-projects-5b55c027.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Tue, 07 May 2024 18:11:24 GMT
etag: W/"1d2f-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-robots-tag: noindex
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::4vvs5-1715105484259-fa5de23f41d1
X-Firefox-Spdy: h2
|
|
| ohiorizz-juniors-projects-5b55c027.vercel.app/uv/uv.bundle.js | 76.76.21.98 | 200 OK | 1.8 MB |
URL GET HTTP/2ohiorizz-juniors-projects-5b55c027.vercel.app/uv/uv.bundle.js IP76.76.21.98:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Size1.8 MB (1809191 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uv/uv.bundle.js HTTP/1.1
Host: ohiorizz-juniors-projects-5b55c027.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Tue, 07 May 2024 18:11:24 GMT
etag: W/"1b9b27-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-robots-tag: noindex
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::zg59g-1715105484691-6c76a61661cd
X-Firefox-Spdy: h2
|
|
| disclosestockingsprestigious.com/sbar.json?key=dfd2e1c094b00a158058ce0068d7df84&uuid=646612bc-b9b5-4be8-9e10-2048e337da27%3A3%3A1 | 192.243.59.20 | 200 OK | 12 kB |
URL GET HTTP/1.1disclosestockingsprestigious.com/sbar.json?key=dfd2e1c094b00a158058ce0068d7df84&uuid=646612bc-b9b5-4be8-9e10-2048e337da27%3A3%3A1 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subjectdisclosestockingsprestigious.com Fingerprint20:72:8C:30:EF:A7:E9:42:F4:69:4D:6F:83:5A:F6:44:B2:14:1F:F6 ValidityMon, 29 Apr 2024 13:01:45 GMT - Sun, 28 Jul 2024 13:01:44 GMT
Hashba72855115520e26c43fb48cc4d3bbed 23094b6593b38b38182921123691c4f149c17cb5 d18b9e16b853d8191f22deb5943e3c8c3be210f362083bdfe501567f02fe801f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sbar.json?key=dfd2e1c094b00a158058ce0068d7df84&uuid=646612bc-b9b5-4be8-9e10-2048e337da27%3A3%3A1 HTTP/1.1
Host: disclosestockingsprestigious.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ohiorizz-juniors-projects-5b55c027.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 07 May 2024 18:11:26 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app
Access-Control-Allow-Origin: https://ohiorizz-juniors-projects-5b55c027.vercel.app
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=22891010; expires=Wed, 08 May 2024 18:11:25 GMT; secure; SameSite=None
uid_id2=646612bc-b9b5-4be8-9e10-2048e337da27:3:1; expires=Tue, 14 May 2024 18:11:25 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 08 May 2024 18:11:26 GMT; secure; SameSite=None
uncs=1; expires=Wed, 08 May 2024 18:11:26 GMT; secure; SameSite=None
pdhtkv29=true; expires=Wed, 08 May 2024 18:11:26 GMT; secure; SameSite=None
uncs29=1; expires=Wed, 08 May 2024 18:11:26 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 90236bdb5ee05f82619f974ea5d6b305
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/script.js | 172.67.141.24 | 200 OK | 382 B |
URL GET HTTP/2cdn.creative-bars1.com/sb/chat/mob/ssp/1/js/script.js IP172.67.141.24:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (411), with no line terminators Hash9ffae600059bf4e6adb35ebb274ae385 6130e466c04551baa2a5d650e6bd5a87daba73a7 a7d15e051fb3d3c31494683306bb7752478354894825b110d26d333cbeaaeb39
GET /sb/chat/mob/ssp/1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ohiorizz-juniors-projects-5b55c027.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 18:11:27 GMT
content-type: application/javascript
last-modified: Mon, 21 Feb 2022 08:25:08 GMT
etag: W/"62134c64-17e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B1wzHXfKtYG7XhFfPOodWDufQbsArpWaA1MTFHsWzBoOny%2BoMuzLbKehd%2B2WebOJ32QDMhNJ7yflWsQ0M0oODiS6gEm01PdTO3mtMRs%2BR8oLs%2FatzfJmcdPbZ84klYOxUkTvWit7sc%2FP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88032c2cdbcb7131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ohiorizz-juniors-projects-5b55c027.vercel.app/assets/js/themes.js | 76.76.21.98 | 200 OK | 7.6 kB |
URL GET HTTP/2ohiorizz-juniors-projects-5b55c027.vercel.app/assets/js/themes.js IP76.76.21.98:443
Requested byhttps://ohiorizz-juniors-projects-5b55c027.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (7783), with no line terminators Hash0e9fa7a9c668b4aba84b0b9a19494639 ba80897a6a390b318702af380a30b4b16930bdcd 11f06271f1d96a1b8d71a98116528df77d35ee8bff5bb93048d5d00ddf200851
GET /assets/js/themes.js HTTP/1.1
Host: ohiorizz-juniors-projects-5b55c027.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ohiorizz-juniors-projects-5b55c027.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 0
cache-control: public, max-age=0
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Tue, 07 May 2024 18:11:24 GMT
etag: W/"1d8b-1668f272800"
last-modified: Sat, 20 Oct 2018 01:46:40 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-powered-by: Express
x-robots-tag: noindex
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::x5854-1715105484265-d4b10c7640f2
X-Firefox-Spdy: h2
|
|