| cdn.staticsoe.com/uploads/0/theme/default/assets/theme.css?v=66eda0dd6672bd051feb0d39b9f9197e |  104.18.169.76 | 200 OK | 38 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/assets/theme.css?v=66eda0dd6672bd051feb0d39b9f9197e IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash66eda0dd6672bd051feb0d39b9f9197e fce0d05f5389afdf45501d1ca44b13b4edbbd1e6 ccfdc21df473396a2dd78496fd4c04b5703ab0f516959898c75cdeb668c2c97f
GET /uploads/0/theme/default/assets/theme.css?v=66eda0dd6672bd051feb0d39b9f9197e HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://drmartensuk.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 10:04:00 GMT
content-type: text/css
vary: Accept-Encoding, Origin
x-oss-request-id: 661F7B2E91795F38360AE909
last-modified: Wed, 17 Apr 2024 07:16:48 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3603105492076268374
x-oss-storage-class: Standard
content-md5: Zu2g3WZyvQUf6w05ufkZfg==
x-oss-server-time: 2
cf-cache-status: HIT
age: 57029
expires: Fri, 26 Apr 2024 10:04:00 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 8763d4052e3a56bd-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/arimo/v17/P5sfzZCDf9_T_3cV7NCUECyoxNk37cxcABrB.woff2 |  216.58.207.227 | 200 OK | 10 kB |
URL GET HTTP/2fonts.gstatic.com/s/arimo/v17/P5sfzZCDf9_T_3cV7NCUECyoxNk37cxcABrB.woff2 IP216.58.207.227:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 9976, version 1.0 Hash88caac5d9efdb82513f4627521152d62 ecd66a42c11807e4fd548f209bc290fea5096361 e2e100dccf35fc8fbda8298d47d2719362a984ff46eebf871a878376224071df
GET /s/arimo/v17/P5sfzZCDf9_T_3cV7NCUECyoxNk37cxcABrB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://drmartensuk.vip
DNT: 1
Connection: keep-alive
Referer: https://drmartensuk.vip/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 23:11:33 GMT
expires: Tue, 15 Apr 2025 23:11:33 GMT
cache-control: public, max-age=31536000
age: 211947
last-modified: Thu, 28 Jan 2021 23:11:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| drmartensuk.vip/homeapi/collect | 104.16.198.133 | 200 OK | 9.8 kB |
URL POST HTTP/2drmartensuk.vip/homeapi/collect IP104.16.198.133:443
CertificateIssuerCloudflare, Inc. Subjectdrmartensuk.vip Fingerprint20:9C:50:86:71:B4:4C:2B:77:6C:4C:83:FD:84:DC:F4:58:26:FD:03 ValidityFri, 14 Jul 2023 00:00:00 GMT - Fri, 12 Jul 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash8609d2d0bb1574442a6fe2e4a54514bb d9a9b0d58d6397f0b19a58b7fc6ae20a5fa98f97 9b636f4a797ff20c36062a3fce5c4dc3799d92ae84daf99a87cb00df4c80deea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /homeapi/collect HTTP/1.1
Host: drmartensuk.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://drmartensuk.vip/
Content-Type: application/json
Content-Length: 545
Origin: https://drmartensuk.vip
DNT: 1
Connection: keep-alive
Cookie: oemsaas_global_visit_id=DA373C0E-AB78-8405-7F1B-648A72A42715; oemsaas_checkout_visit_id=A27B5DCF-C8C8-9147-7684-285EDC5224C4; oemsaas_global_visit_session=6E05B466-33F2-3E6A-D5C1-BFC4B5E86D13; PHPSESSID=bf9a58b487523a983ad48929178e692e; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2010%3A04%3A00
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 10:04:00 GMT
content-type: text/html;charset=utf-8
trace_id: 6893875E-401E-0CAD-E663-C9CBBBC39F34
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8763d4065c5db4f1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| | 104.16.198.133 | 200 OK | 209 kB |
URL User Request GET HTTP/2IP104.16.198.133:443
CertificateIssuerCloudflare, Inc. Subjectdrmartensuk.vip Fingerprint20:9C:50:86:71:B4:4C:2B:77:6C:4C:83:FD:84:DC:F4:58:26:FD:03 ValidityFri, 14 Jul 2023 00:00:00 GMT - Fri, 12 Jul 2024 23:59:59 GMT
Size209 kB (209161 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: drmartensuk.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 10:03:59 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
execution-time: 0.0455689430
set-cookie: oemsaas_global_visit_id=DA373C0E-AB78-8405-7F1B-648A72A42715; expires=Sun, 16-Apr-2034 10:03:59 GMT; Max-Age=315360000; path=/
oemsaas_checkout_visit_id=A27B5DCF-C8C8-9147-7684-285EDC5224C4; expires=Sun, 16-Apr-2034 10:03:59 GMT; Max-Age=315360000; path=/
oemsaas_global_visit_session=6E05B466-33F2-3E6A-D5C1-BFC4B5E86D13; expires=Fri, 19-Apr-2024 10:03:59 GMT; Max-Age=86400; path=/
PHPSESSID=bf9a58b487523a983ad48929178e692e; path=/
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8763d3ff3c36b4f1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/0/theme/default/assets/collect.js?v=96afd8ae933a668f3daf26bd95bc95a6 | 104.18.169.76 | 200 OK | 28 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/assets/collect.js?v=96afd8ae933a668f3daf26bd95bc95a6 IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/0/theme/default/assets/collect.js?v=96afd8ae933a668f3daf26bd95bc95a6 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://drmartensuk.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 10:04:00 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 661F9E369979C733391343F2
last-modified: Wed, 17 Apr 2024 07:16:50 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16609357670485251830
x-oss-storage-class: Standard
content-md5: lq/YrpM6Zo89rya9lbyVpg==
x-oss-server-time: 3
cf-cache-status: HIT
age: 57029
expires: Fri, 26 Apr 2024 10:04:00 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 8763d4052e3d56bd-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdn.staticsoe.com/uploads/0/theme/default/public_assets/public.js?v=5c945293da0fe6770b60caf3ca010bc5 | 104.18.169.76 | 200 OK | 484 kB |
URL GET HTTP/2cdn.staticsoe.com/uploads/0/theme/default/public_assets/public.js?v=5c945293da0fe6770b60caf3ca010bc5 IP104.18.169.76:443
CertificateIssuerCloudflare, Inc. Subjectcdn.staticsoe.com Fingerprint81:12:7B:A0:28:A4:6D:E5:44:00:F3:A3:14:8C:B8:2C:42:34:DA:CD ValidityWed, 14 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Size484 kB (483701 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/0/theme/default/public_assets/public.js?v=5c945293da0fe6770b60caf3ca010bc5 HTTP/1.1
Host: cdn.staticsoe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://drmartensuk.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 10:04:00 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-oss-request-id: 661F775EC3F24534348C96F7
last-modified: Wed, 17 Apr 2024 07:16:44 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9134437363252466855
x-oss-storage-class: Standard
content-md5: 7HD++FdusuHL3gpCkhOVMA==
x-oss-server-time: 8
cf-cache-status: HIT
age: 57029
expires: Fri, 26 Apr 2024 10:04:00 GMT
cache-control: public, max-age=691200
server: cloudflare
cf-ray: 8763d4052e4256bd-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| drmartensuk.vip/homeapi/facebook | 104.16.198.133 | 200 OK | 86 B |
URL POST HTTP/2drmartensuk.vip/homeapi/facebook IP104.16.198.133:443
CertificateIssuerCloudflare, Inc. Subjectdrmartensuk.vip Fingerprint20:9C:50:86:71:B4:4C:2B:77:6C:4C:83:FD:84:DC:F4:58:26:FD:03 ValidityFri, 14 Jul 2023 00:00:00 GMT - Fri, 12 Jul 2024 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash47ffcf81d2bf2d8ade8f43ef2d18b841 28e7f14656c92bcd60180d8c3b9582108e0a480f d141cf4b9d9eacd0661a685147fe2460abb2f55231f15ca2068725a923763641
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /homeapi/facebook HTTP/1.1
Host: drmartensuk.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://drmartensuk.vip/
Content-Type: text/plain;charset=UTF-8
Content-Length: 433
Origin: https://drmartensuk.vip
DNT: 1
Connection: keep-alive
Cookie: oemsaas_global_visit_id=DA373C0E-AB78-8405-7F1B-648A72A42715; oemsaas_checkout_visit_id=A27B5DCF-C8C8-9147-7684-285EDC5224C4; oemsaas_global_visit_session=6E05B466-33F2-3E6A-D5C1-BFC4B5E86D13; PHPSESSID=bf9a58b487523a983ad48929178e692e; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2010%3A04%3A00
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 10:04:00 GMT
content-type: application/json
trace-id: E829F5F3-DD4D-8C3A-E959-8A628A8E1919
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8763d4063c46b4f1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| sc-static.net/scevent.min.js | 54.230.82.240 | 200 OK | 46 kB |
URL GET HTTP/2sc-static.net/scevent.min.js IP54.230.82.240:443
CertificateIssuerAmazon Subjectsc-static.net FingerprintE4:8A:DF:2D:95:33:E5:93:D4:43:8A:14:06:EA:EA:E8:AD:29:20:0F ValidityThu, 21 Dec 2023 00:00:00 GMT - Sat, 18 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (27992) Hash264bae03f1d598bca141e0840046b194 721f3a0714d44e5cb641fc99ad12b955130a88e3 f563aec552103867adcb967e41b1699c9d15e1aa257c7a210f70f5cd71e6a0ef
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://drmartensuk.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 19297
server: CloudFront
date: Thu, 18 Apr 2024 10:04:00 GMT
access-control-allow-headers: Content-Type
access-control-allow-origin: *
content-encoding: gzip
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=38b33afdb36f494aa03f175381ce5c1b;max-age=86400;expires=Fri, 19 Apr 2024 10:04:00 GMT;Path=/scevent.min.js;Secure;SameSite=None
x-cache: Miss from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SxkDWmr351qDHLJqlyJNSEUL8s6YKHSu4ihdYau_Qr6RySEkWFb3yQ==
X-Firefox-Spdy: h2
|
|
| drmartensuk.vip/favicon.ico | 104.16.198.133 | 200 OK | 70 B |
URL GET HTTP/2drmartensuk.vip/favicon.ico IP104.16.198.133:443
CertificateIssuerCloudflare, Inc. Subjectdrmartensuk.vip Fingerprint20:9C:50:86:71:B4:4C:2B:77:6C:4C:83:FD:84:DC:F4:58:26:FD:03 ValidityFri, 14 Jul 2023 00:00:00 GMT - Fri, 12 Jul 2024 23:59:59 GMT
File typeMS Windows icon resource - 1 icon, 1x1, 32 bits/pixel Hash735ddbd8a50494b34bbed5fe68727c42 ab6c96f55f6f9383c8c73f2838d07398529a4b8f 23d7bcc5e68b94d6e03382ac1d9a14ab2d0134772682ae0dd1b2e8b4c85afc51
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: drmartensuk.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://drmartensuk.vip/
DNT: 1
Connection: keep-alive
Cookie: oemsaas_global_visit_id=DA373C0E-AB78-8405-7F1B-648A72A42715; oemsaas_checkout_visit_id=A27B5DCF-C8C8-9147-7684-285EDC5224C4; oemsaas_global_visit_session=6E05B466-33F2-3E6A-D5C1-BFC4B5E86D13; PHPSESSID=bf9a58b487523a983ad48929178e692e; oemcart_client_user_agent=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0; oemcart_client_pre_url=; oemcart_client_timezone=Etc%252FUTC; oemcart_client_screen_size=1280X1024; oemcart_client_broswer_language=en-US; oemcart_client_viewport_size=1280X1024; oemcart_client_broswer_date_time=2024-04-18%2010%3A04%3A00; _scid=f4dfdd76-8589-49db-b18b-02c56f6fa111; _scid_r=f4dfdd76-8589-49db-b18b-02c56f6fa111
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 10:04:01 GMT
content-type: image/x-icon
last-modified: Sat, 12 Feb 2022 05:23:27 GMT
etag: W/"6207444f-46"
cf-cache-status: MISS
expires: Thu, 18 Apr 2024 14:04:01 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 8763d408af2db4f1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|