| actressdoleful.com/c3/31/f5/c331f53d8cb1f5b6cb7f7b13f9d18a13.js |  172.240.108.68 | 200 OK | 31 kB |
URL GET HTTP/1.1actressdoleful.com/c3/31/f5/c331f53d8cb1f5b6cb7f7b13f9d18a13.js IP172.240.108.68:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectactressdoleful.com Fingerprint2D:0E:60:B8:63:9F:B1:22:4F:1C:82:92:36:74:6A:09:CA:D4:58:8C ValiditySat, 23 Mar 2024 06:03:40 GMT - Fri, 21 Jun 2024 06:03:39 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashfa4609227479840cb1103b50aa500954 589a3e20e11d5e54c76cbcc1e46c8ebc2b167609 bece2dce5d421816d8d878b47ca9118d74688f5aed148e5e2a8ea8bdeef94014
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /c3/31/f5/c331f53d8cb1f5b6cb7f7b13f9d18a13.js HTTP/1.1
Host: actressdoleful.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 18:09:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 81a91968bca8c93ae35d4eb503c43ecb
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hashf7a3aabaedd5c95463e85c2d7682d410 715b2bd7dd959bb3423d71b22c43302b7a18a3a5 55ab8ca84eb2c090ff2a4eb9ebc48ce053c3f38261d66bded94f03719a384335
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 18:09:58 GMT
Last-Modified: Fri, 10 May 2024 16:47:36 GMT
Server: ECAcc (ska/F776)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kDndgLYdmrDAUCqp-plpYXz8NwkhwXMiPwg86fkZqyNlSv6B4BJdlw==
Age: 4942
|
|
| proftrafficcounter.com/stats |  18.185.9.67 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.185.9.67:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash8bc9dbca527cc44ea1fabd415294a511 8a7a91b4f512a85aeac87d2c3c097ef3b1a4ed97 de16950de330fda997ade9c32257de30dc6caac24114b9e9190386dc23a447bd
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
Origin: https://emiliqcatharine.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 18:09:58 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://emiliqcatharine.pages.dev
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=4e00ac15-4fe4-48c5-b206-5d7bd2e73559:1:1; expires=Mon, 08 May 2034 18:09:58 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| emiliqcatharine.pages.dev/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 | 172.66.44.64 | 200 OK | 27 kB |
URL GET HTTP/3emiliqcatharine.pages.dev/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 IP172.66.44.64:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectemiliqcatharine.pages.dev Fingerprint56:EA:E7:0A:F9:9A:DF:68:E3:53:CD:DB:ED:8F:5E:3F:56:77:0A:FB ValidityThu, 09 May 2024 20:22:23 GMT - Wed, 07 Aug 2024 20:22:22 GMT
File typeASCII text, with very long lines (59701) Hash51a8390b47aa0582cf2d9c96c5addee2 b16a640874025d085c38119a1a02a3460f83f2de 98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1
Host: emiliqcatharine.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:09:57 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"9643bcd9e0073506ea0bed1be3828c42"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7OQdR5uikCHhsMc9HuKkb3xsfqAqYs7paMKpCQtbnSC4ZLAdiKVAO%2B%2BC7og%2BXLdnWPGH312o%2BVNmjrlihFj5D9ZVhw6jBhArTYQ%2F7Jf%2F%2BbLz8NBCPBduZ56liweOaS%2FPafU5XeYiTAXWL1RW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be21dbccd0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 | 142.250.74.99 | 200 OK | 7.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 IP142.250.74.99:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://emiliqcatharine.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 01:33:12 GMT
expires: Fri, 09 May 2025 01:33:12 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
age: 146206
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 18.185.9.67 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.185.9.67:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash8bc9dbca527cc44ea1fabd415294a511 8a7a91b4f512a85aeac87d2c3c097ef3b1a4ed97 de16950de330fda997ade9c32257de30dc6caac24114b9e9190386dc23a447bd
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
Origin: https://emiliqcatharine.pages.dev
DNT: 1
Connection: keep-alive
Cookie: uid_id2=4e00ac15-4fe4-48c5-b206-5d7bd2e73559:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 18:09:58 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://emiliqcatharine.pages.dev
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| reconstructcomparison.com/pixel/purst?dl=0&th=0&sc=0&rs=1468&rd=1468&fd=995&bv=24.5.6485&tmpl=70 | 172.240.127.234 | 200 OK | 0 B |
URL GET HTTP/1.1reconstructcomparison.com/pixel/purst?dl=0&th=0&sc=0&rs=1468&rd=1468&fd=995&bv=24.5.6485&tmpl=70 IP172.240.127.234:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectreconstructcomparison.com Fingerprint60:81:37:E0:B8:3D:97:87:09:C4:BD:C0:06:98:6B:78:92:E9:3F:2A ValidityMon, 06 May 2024 12:53:25 GMT - Sun, 04 Aug 2024 12:53:24 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/purst?dl=0&th=0&sc=0&rs=1468&rd=1468&fd=995&bv=24.5.6485&tmpl=70 HTTP/1.1
Host: reconstructcomparison.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 18:09:58 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| emiliqcatharine.pages.dev/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 | 172.66.44.64 | 200 OK | 14 kB |
URL GET HTTP/3emiliqcatharine.pages.dev/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 IP172.66.44.64:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectemiliqcatharine.pages.dev Fingerprint56:EA:E7:0A:F9:9A:DF:68:E3:53:CD:DB:ED:8F:5E:3F:56:77:0A:FB ValidityThu, 09 May 2024 20:22:23 GMT - Wed, 07 Aug 2024 20:22:22 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (9499), with CRLF, LF line terminators Hashd5d4bd355c9d19e071754338c936b23e 49082dbfd6c3e55c272694ae778ada3e259983f4 885daf6354cfcf40690ab654e76c01796e3104789f053a7c5c6168875803e662
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1
Host: emiliqcatharine.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:09:58 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"ca050df71050be11a1d71a1a0a2028d7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rs5LhQOejD0EBeA78S3vrR9nkjWR6QEyXOuy70lPyDpESX%2BN5%2FApvSrcGX0GdKjYeUNaDvvWaiUWJmHXAQM8GEsFSDowOVtknosQsVx32RFBB8NokCvDEWkn18hsnS%2BuG9oTT5abRWWWuQ4W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be2259d260b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| capaciousdrewreligion.com/advertisers.js | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1capaciousdrewreligion.com/advertisers.js IP172.240.108.68:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectcapaciousdrewreligion.com FingerprintBB:9C:12:88:24:43:D4:47:71:3F:F0:A4:BB:E1:85:65:CE:E7:92:E4 ValidityMon, 06 May 2024 02:35:23 GMT - Sun, 04 Aug 2024 02:35:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 18:09:59 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 99d61cd11075d208019fe0d82ff00511
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| herringgloomilytennis.com/76/b1/e6/76b1e60a07741106ab551c8186791238.js | 172.240.127.234 | 200 OK | 16 kB |
URL GET HTTP/1.1herringgloomilytennis.com/76/b1/e6/76b1e60a07741106ab551c8186791238.js IP172.240.127.234:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectherringgloomilytennis.com Fingerprint2A:E0:3F:2A:77:92:96:90:5D:38:27:4E:7F:FC:5D:D2:F9:32:73:11 ValidityMon, 06 May 2024 08:10:21 GMT - Sun, 04 Aug 2024 08:10:20 GMT
File typeJavaScript source, ASCII text, with very long lines (44022), with no line terminators Hashc9e214723da6734024aac5f3cf46b691 3484e3c531c6fe8ffc9b970dd0df8bfeb022171f 69bcab82ab732aed751d2abd4418db0cbea6d5fd7dae82246ee59de6cd371aae
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /76/b1/e6/76b1e60a07741106ab551c8186791238.js HTTP/1.1
Host: herringgloomilytennis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 18:09:59 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4cf9b03be47cd7f7dbecb9755b4c41d0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| herringgloomilytennis.com/watch.458078407020.js?dev=e&key=47e256568502d808b0f4997433da285b&kw=%5B%22alfie%22%2C%22cosetta%22%2C%22-%22%2C%22explore%22%2C%22ideas%22%2C%22tips%22%2C%22guide%22%2C%22and%22%2C%22info%22%2C%22alfie%22%2C%22cosetta%22%5D&pst=1715364659&refer=https%3A%2F%2Femiliqcatharine.pages.dev%2F&res=14.2071&rmtc=t&shu=c7a28298cde7a4c98acd3f7afcd4123b5be6c02cc1de98d1f51a4515c65a2ee2e12519f032add9aace1ed3e1c5fd4c2e9d6f1941bcf73460f77960fd43ce69e9b09f25f5291503221df4135e62ab6a72b6694b98cec83ca35e0a9c14f7a2a4c8&tz=0&uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559%3A1%3A1 | 172.240.127.234 | 200 OK | 2.0 kB |
URL GET HTTP/1.1herringgloomilytennis.com/watch.458078407020.js?dev=e&key=47e256568502d808b0f4997433da285b&kw=%5B%22alfie%22%2C%22cosetta%22%2C%22-%22%2C%22explore%22%2C%22ideas%22%2C%22tips%22%2C%22guide%22%2C%22and%22%2C%22info%22%2C%22alfie%22%2C%22cosetta%22%5D&pst=1715364659&refer=https%3A%2F%2Femiliqcatharine.pages.dev%2F&res=14.2071&rmtc=t&shu=c7a28298cde7a4c98acd3f7afcd4123b5be6c02cc1de98d1f51a4515c65a2ee2e12519f032add9aace1ed3e1c5fd4c2e9d6f1941bcf73460f77960fd43ce69e9b09f25f5291503221df4135e62ab6a72b6694b98cec83ca35e0a9c14f7a2a4c8&tz=0&uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559%3A1%3A1 IP172.240.127.234:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectherringgloomilytennis.com Fingerprint2A:E0:3F:2A:77:92:96:90:5D:38:27:4E:7F:FC:5D:D2:F9:32:73:11 ValidityMon, 06 May 2024 08:10:21 GMT - Sun, 04 Aug 2024 08:10:20 GMT
File typeJavaScript source, ASCII text, with very long lines (2435) Hash48a5bbb6bed49657997a6044ee88a0b3 5c33fc7a79479b490013322813b2f95d32e992b2 dd7d0f106a2716f5f1c5e6304ab64d5ff14fcd9564b0e99ed6310b51517a4af8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.458078407020.js?dev=e&key=47e256568502d808b0f4997433da285b&kw=%5B%22alfie%22%2C%22cosetta%22%2C%22-%22%2C%22explore%22%2C%22ideas%22%2C%22tips%22%2C%22guide%22%2C%22and%22%2C%22info%22%2C%22alfie%22%2C%22cosetta%22%5D&pst=1715364659&refer=https%3A%2F%2Femiliqcatharine.pages.dev%2F&res=14.2071&rmtc=t&shu=c7a28298cde7a4c98acd3f7afcd4123b5be6c02cc1de98d1f51a4515c65a2ee2e12519f032add9aace1ed3e1c5fd4c2e9d6f1941bcf73460f77960fd43ce69e9b09f25f5291503221df4135e62ab6a72b6694b98cec83ca35e0a9c14f7a2a4c8&tz=0&uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559%3A1%3A1 HTTP/1.1
Host: herringgloomilytennis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://emiliqcatharine.pages.dev
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: u_pl=16337114; ain=eyJhbGciOiJIUzI1NiJ9.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.GMnRpTOdPIdEVO-Knrc6p6PLlNwGQDDPZybH6j63K_s
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 18:09:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://emiliqcatharine.pages.dev
Access-Control-Allow-Origin: https://emiliqcatharine.pages.dev
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=4e00ac15-4fe4-48c5-b206-5d7bd2e73559:1:1; expires=Fri, 17 May 2024 18:09:59 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 11 May 2024 18:09:59 GMT; secure; SameSite=None
uncs=1; expires=Sat, 11 May 2024 18:09:59 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sat, 11 May 2024 18:09:59 GMT; secure; SameSite=None
uncs5=1; expires=Sat, 11 May 2024 18:09:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: dea069ce1b03a40e591e84a204388c8a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| emiliqcatharine.pages.dev/favicon.ico | 172.66.44.64 | 200 OK | 14 kB |
URL GET HTTP/3emiliqcatharine.pages.dev/favicon.ico IP172.66.44.64:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectemiliqcatharine.pages.dev Fingerprint56:EA:E7:0A:F9:9A:DF:68:E3:53:CD:DB:ED:8F:5E:3F:56:77:0A:FB ValidityThu, 09 May 2024 20:22:23 GMT - Wed, 07 Aug 2024 20:22:22 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (9499), with CRLF, LF line terminators Hashd5d4bd355c9d19e071754338c936b23e 49082dbfd6c3e55c272694ae778ada3e259983f4 885daf6354cfcf40690ab654e76c01796e3104789f053a7c5c6168875803e662
GET /favicon.ico HTTP/1.1
Host: emiliqcatharine.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=4e00ac15-4fe4-48c5-b206-5d7bd2e73559%3A1%3A1; pp_main_c331f53d8cb1f5b6cb7f7b13f9d18a13=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 18:09:59 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"ca050df71050be11a1d71a1a0a2028d7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=po%2B3ZdC7h3d0zToPPZHNXc%2Fiwre4jLrMxKRTcFxd8I%2BjHBnvfMZZwIEs3BweEH3%2BsNWjXkeY01%2FxhyDCfj%2FVzMN%2BAjNISk26K1UcM04fZzW9QOwCvtlPCHc6SDnFUliXMGOjfvQD47IOmKKd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be22adab30b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.cloudimagesb.com/cti/c9/11/c0/c911c0a120ad25a0b0f51d2b42804521/1627915999.png | 45.133.44.10 | 200 OK | 96 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/c9/11/c0/c911c0a120ad25a0b0f51d2b42804521/1627915999.png IP45.133.44.10:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typePNG image data, 300 x 250, 8-bit/color RGB, non-interlaced Hash0ba904126a4592e4866c657f761ddc25 6b40223686b8ce5bf58ec0375a09de7c0c3bec7a f0e24a117d128140b403f57dc94cf263cf5e6ed39c757f7e0f39988cb32bc00b
GET /cti/c9/11/c0/c911c0a120ad25a0b0f51d2b42804521/1627915999.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 18:09:59 GMT
content-type: image/png
content-length: 96103
server: nginx/1.21.6
last-modified: Mon, 02 Aug 2021 14:53:29 GMT
etag: "610806e9-17767"
expires: Sun, 12 May 2024 18:09:59 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| unseenreport.com/pxf.gif?uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=c331f53d8cb1f5b6cb7f7b13f9d18a13&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 | 192.243.59.20 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=c331f53d8cb1f5b6cb7f7b13f9d18a13&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=c331f53d8cb1f5b6cb7f7b13f9d18a13&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 10 May 2024 18:10:00 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cb3298a914a4fdb52459280c22541a5a
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| unseenreport.com/pxf.gif?uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=76b1e60a07741106ab551c8186791238&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 | 192.243.59.20 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=76b1e60a07741106ab551c8186791238&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=76b1e60a07741106ab551c8186791238&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=18 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 10 May 2024 18:10:00 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 82c8bd53647c690d9db6e6a9d49d1b37
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| kidjackson.com/sbar.json?key=76b1e60a07741106ab551c8186791238&uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559%3A1%3A1 | 192.243.59.12 | 200 OK | 8.1 kB |
URL GET HTTP/1.1kidjackson.com/sbar.json?key=76b1e60a07741106ab551c8186791238&uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559%3A1%3A1 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectkidjackson.com Fingerprint11:38:2D:E6:9A:F0:71:4B:AC:FD:5D:8B:45:11:09:4F:14:0C:11:A3 ValidityMon, 06 May 2024 08:05:47 GMT - Sun, 04 Aug 2024 08:05:46 GMT
Hash9d5b334fe5dc15368c5f4d8570fa5d56 3a73a7f3def54521d4186bfaab55e48659661d6f a635716a7d0ab4839c91141dc0c8f28a6809d2a99ff8ec1d726b957e826176b8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sbar.json?key=76b1e60a07741106ab551c8186791238&uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559%3A1%3A1 HTTP/1.1
Host: kidjackson.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
Origin: https://emiliqcatharine.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 10 May 2024 18:10:00 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://emiliqcatharine.pages.dev
Access-Control-Allow-Origin: https://emiliqcatharine.pages.dev
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=22919410; expires=Sat, 11 May 2024 18:10:00 GMT; secure; SameSite=None
uid_id2=4e00ac15-4fe4-48c5-b206-5d7bd2e73559:1:1; expires=Fri, 17 May 2024 18:10:00 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 11 May 2024 18:10:00 GMT; secure; SameSite=None
uncs=1; expires=Sat, 11 May 2024 18:10:00 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sat, 11 May 2024 18:10:00 GMT; secure; SameSite=None
uncs29=1; expires=Sat, 11 May 2024 18:10:00 GMT; secure; SameSite=None
slec76b1e60a07741106ab551c8186791238=[5210994,5210995]; expires=Fri, 10 May 2024 18:10:05 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3d8b744005d1a87ffd01b3f122367639
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| kidjackson.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSunuxNwR%2FiSYQRPChkZ7t7ZrpnDLgYk5XFTTYmioJ%2FVFfVTMqt7mqq%2BmcyF4MByXEQxGvvN7tZjEH0FgQTmQ0oLAg7nvbgnjx68AeCBw8yk8XFB93vvfpewfe%2Brz7ZzA%2BJj5wenD2vh1IputRuuPXn3%2Fa80%2FU1meSD%2BqATfBC0TtdN8WI3aLgv1F8VbEMv%2Ba7nup7r1VekET09WJqBkOntrtfouo2W3%2FDaLQzM%2F3ubO7DUAS8OyZOQfLpw3zkJySZI4q%2FPCruR6fTUuThXNNMGBd95M9lIdJkgPi57xkEv2Tmahrb7K3ehk%2B05Xejiv8FITonzw11Eyc4RSUTF1pxnpCASRPwRlMUEQk0g6QRMX4fk%2BwRgHBfWkcQ3L2hT0qsPUTpDp2ThwV%2BQ5ZQs%2FHISSfzVGSUH9cta5ZnUicWgV0EOJpD9CdJ8F9mwBlnugmUfQ%2FKfyNKDNSTx1rpVGpIfPNcSrkuZ115s9URrsdVh7cXId4PFNg8j7ouw2W535wJJOYHsTaDECNQ6yGefdJD3HOSpg5gf1JnneaHLGXU7XcaaPBRRwF2Phj2Pem7QQc5mO4yQpSMwNQIz15Caa9iQI5j8e9grFSyvwWZT4rz%2BEQpeoRQEpSUoKUEpCcqMoCyqba6sb6ubXNk88o6yf5Sb1Vhn%2FU26rbO%2BSAioGcHwajM9JE%2FMRHTeu%2FMnNsRBPQwiTwQudcOw5XluQKN222MdrxOEXc9vdmBlBWlr85WHckqeevZHpDNji88Q0V1YtQsmT4Dmz4CWFeiVCsPkDqOxUErSoaFW0UZK%2B8I2uCjAdYU0W0B21dlUh%2BTpuaXr1w0E21v%2B59HVb99vL4OZCqmp8KG8T9BXN8aXdEm2LunSkm%2FW00zGckhndl%2FOaCYWbr0mrpba8NWzdvTFy2wGzMrbbwibrdGEy6RvyZdnJOfCrGjDBPlu1b4loou5vXImN0merl18ZWU1To2wVupkAir3z30OJqfksXvvzt%2FxqXd%2BhTQTmLxCnO%2BRo4DUu2DpNdh0b%2Fm3x6Pz0z9uwWoCo45notRBmVdj40fHh0oSKHHc06iCFccSRGLv3u8PsbGhs9tUVpv2BvqmBppdRxJXKEyFQlWgagSbnxhnqdlb%2Frk5D0SqNo6UqW1FyqhP5yLPfhZWHtTDZtOlQbfthSEVYdTyO73A45T6rcAPAtpEZqe9l6K%2F%2FwUAAP%2F%2FAQAA%2F%2F8p1cnPoQQAAA%3D%3D | 192.243.59.12 | 200 OK | 7 B |
URL GET HTTP/1.1kidjackson.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSunuxNwR%2FiSYQRPChkZ7t7ZrpnDLgYk5XFTTYmioJ%2FVFfVTMqt7mqq%2BmcyF4MByXEQxGvvN7tZjEH0FgQTmQ0oLAg7nvbgnjx68AeCBw8yk8XFB93vvfpewfe%2Brz7ZzA%2BJj5wenD2vh1IputRuuPXn3%2Fa80%2FU1meSD%2BqATfBC0TtdN8WI3aLgv1F8VbEMv%2Ba7nup7r1VekET09WJqBkOntrtfouo2W3%2FDaLQzM%2F3ubO7DUAS8OyZOQfLpw3zkJySZI4q%2FPCruR6fTUuThXNNMGBd95M9lIdJkgPi57xkEv2Tmahrb7K3ehk%2B05Xejiv8FITonzw11Eyc4RSUTF1pxnpCASRPwRlMUEQk0g6QRMX4fk%2BwRgHBfWkcQ3L2hT0qsPUTpDp2ThwV%2BQ5ZQs%2FHISSfzVGSUH9cta5ZnUicWgV0EOJpD9CdJ8F9mwBlnugmUfQ%2FKfyNKDNSTx1rpVGpIfPNcSrkuZ115s9URrsdVh7cXId4PFNg8j7ouw2W535wJJOYHsTaDECNQ6yGefdJD3HOSpg5gf1JnneaHLGXU7XcaaPBRRwF2Phj2Pem7QQc5mO4yQpSMwNQIz15Caa9iQI5j8e9grFSyvwWZT4rz%2BEQpeoRQEpSUoKUEpCcqMoCyqba6sb6ubXNk88o6yf5Sb1Vhn%2FU26rbO%2BSAioGcHwajM9JE%2FMRHTeu%2FMnNsRBPQwiTwQudcOw5XluQKN222MdrxOEXc9vdmBlBWlr85WHckqeevZHpDNji88Q0V1YtQsmT4Dmz4CWFeiVCsPkDqOxUErSoaFW0UZK%2B8I2uCjAdYU0W0B21dlUh%2BTpuaXr1w0E21v%2B59HVb99vL4OZCqmp8KG8T9BXN8aXdEm2LunSkm%2FW00zGckhndl%2FOaCYWbr0mrpba8NWzdvTFy2wGzMrbbwibrdGEy6RvyZdnJOfCrGjDBPlu1b4loou5vXImN0merl18ZWU1To2wVupkAir3z30OJqfksXvvzt%2FxqXd%2BhTQTmLxCnO%2BRo4DUu2DpNdh0b%2Fm3x6Pz0z9uwWoCo45notRBmVdj40fHh0oSKHHc06iCFccSRGLv3u8PsbGhs9tUVpv2BvqmBppdRxJXKEyFQlWgagSbnxhnqdlb%2Frk5D0SqNo6UqW1FyqhP5yLPfhZWHtTDZtOlQbfthSEVYdTyO73A45T6rcAPAtpEZqe9l6K%2F%2FwUAAP%2F%2FAQAA%2F%2F8p1cnPoQQAAA%3D%3D IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectkidjackson.com Fingerprint11:38:2D:E6:9A:F0:71:4B:AC:FD:5D:8B:45:11:09:4F:14:0C:11:A3 ValidityMon, 06 May 2024 08:05:47 GMT - Sun, 04 Aug 2024 08:05:46 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSunuxNwR%2FiSYQRPChkZ7t7ZrpnDLgYk5XFTTYmioJ%2FVFfVTMqt7mqq%2BmcyF4MByXEQxGvvN7tZjEH0FgQTmQ0oLAg7nvbgnjx68AeCBw8yk8XFB93vvfpewfe%2Brz7ZzA%2BJj5wenD2vh1IputRuuPXn3%2Fa80%2FU1meSD%2BqATfBC0TtdN8WI3aLgv1F8VbEMv%2Ba7nup7r1VekET09WJqBkOntrtfouo2W3%2FDaLQzM%2F3ubO7DUAS8OyZOQfLpw3zkJySZI4q%2FPCruR6fTUuThXNNMGBd95M9lIdJkgPi57xkEv2Tmahrb7K3ehk%2B05Xejiv8FITonzw11Eyc4RSUTF1pxnpCASRPwRlMUEQk0g6QRMX4fk%2BwRgHBfWkcQ3L2hT0qsPUTpDp2ThwV%2BQ5ZQs%2FHISSfzVGSUH9cta5ZnUicWgV0EOJpD9CdJ8F9mwBlnugmUfQ%2FKfyNKDNSTx1rpVGpIfPNcSrkuZ115s9URrsdVh7cXId4PFNg8j7ouw2W535wJJOYHsTaDECNQ6yGefdJD3HOSpg5gf1JnneaHLGXU7XcaaPBRRwF2Phj2Pem7QQc5mO4yQpSMwNQIz15Caa9iQI5j8e9grFSyvwWZT4rz%2BEQpeoRQEpSUoKUEpCcqMoCyqba6sb6ubXNk88o6yf5Sb1Vhn%2FU26rbO%2BSAioGcHwajM9JE%2FMRHTeu%2FMnNsRBPQwiTwQudcOw5XluQKN222MdrxOEXc9vdmBlBWlr85WHckqeevZHpDNji88Q0V1YtQsmT4Dmz4CWFeiVCsPkDqOxUErSoaFW0UZK%2B8I2uCjAdYU0W0B21dlUh%2BTpuaXr1w0E21v%2B59HVb99vL4OZCqmp8KG8T9BXN8aXdEm2LunSkm%2FW00zGckhndl%2FOaCYWbr0mrpba8NWzdvTFy2wGzMrbbwibrdGEy6RvyZdnJOfCrGjDBPlu1b4loou5vXImN0merl18ZWU1To2wVupkAir3z30OJqfksXvvzt%2FxqXd%2BhTQTmLxCnO%2BRo4DUu2DpNdh0b%2Fm3x6Pz0z9uwWoCo45notRBmVdj40fHh0oSKHHc06iCFccSRGLv3u8PsbGhs9tUVpv2BvqmBppdRxJXKEyFQlWgagSbnxhnqdlb%2Frk5D0SqNo6UqW1FyqhP5yLPfhZWHtTDZtOlQbfthSEVYdTyO73A45T6rcAPAtpEZqe9l6K%2F%2FwUAAP%2F%2FAQAA%2F%2F8p1cnPoQQAAA%3D%3D HTTP/1.1
Host: kidjackson.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: u_pl=22919410; uid_id2=4e00ac15-4fe4-48c5-b206-5d7bd2e73559:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec76b1e60a07741106ab551c8186791238=[5210994,5210995]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 10 May 2024 18:10:00 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0be2b98227c0024a465734db0f305c6c
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| kidjackson.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fstories%2F1%2Findex.html&l=1125&fd=101 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1kidjackson.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fstories%2F1%2Findex.html&l=1125&fd=101 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectkidjackson.com Fingerprint11:38:2D:E6:9A:F0:71:4B:AC:FD:5D:8B:45:11:09:4F:14:0C:11:A3 ValidityMon, 06 May 2024 08:05:47 GMT - Sun, 04 Aug 2024 08:05:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fstories%2F1%2Findex.html&l=1125&fd=101 HTTP/1.1
Host: kidjackson.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: u_pl=22919410; uid_id2=4e00ac15-4fe4-48c5-b206-5d7bd2e73559:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec76b1e60a07741106ab551c8186791238=[5210994,5210995]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 10 May 2024 18:10:00 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com/sb/interstitial/sweep/default/stories/1/img/icon.png |  188.114.97.1 | 200 OK | 12 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/interstitial/sweep/default/stories/1/img/icon.png IP188.114.97.1:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typePNG image data, 230 x 253, 8-bit colormap, non-interlaced Hashb1f546ae7b0fbf8f3d19946146456d8a 37792f4d6fb3482b3d0281139a61e2e426fa3056 2a0b851026a70a5da3b5f2fe9e7f5d098c4126c035a68de8e90f8408bab6fd33
GET /sb/interstitial/sweep/default/stories/1/img/icon.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 18:10:00 GMT
content-type: image/png
content-length: 11963
last-modified: Fri, 19 Jan 2024 14:17:32 GMT
etag: "65aa847c-2ebb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 870720
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2BXZUlZSg%2BvhrKuzhJGsgiQXGrF1IPPlHD%2FjIWwBrNp6IcQ1%2BeMTg5mLfcggD6sTowkToafh7Er2yUFWMJAlLaJ9f%2FAvRhTIvRHohXZ5jsE%2B%2BEAeoW%2FWeIVQlaqHxi76acxzt7l8LtC7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be2341fde5691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/interstitial/sweep/default/stories/1/css/style.css | 188.114.97.1 | 200 OK | 553 B |
URL GET HTTP/2cdn.creative-bars1.com/sb/interstitial/sweep/default/stories/1/css/style.css IP188.114.97.1:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash09e402648e8c3edf74a22296eec8ed6e 50f3fccaf2074366bd61b4925cdad604f951c17b 4cf2b716e0c42dfcdbb8bb614c9011874da5d744edc1db3a9bc9bea28e13301d
GET /sb/interstitial/sweep/default/stories/1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
Origin: https://emiliqcatharine.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 18:10:01 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:17:32 GMT
etag: W/"65aa847c-59a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XPWUJhU%2B33VRukQ5rVNzIf5r1P8ZWpzu90Fx7hAFzFW5Lb8z7Pj8eUFFQC8Fb%2F6P9jXy8zze%2Bk0428au8tMKilNNfiDD5wwDLnBoyVkCzD%2BfrRqPcoS0GGdtoPs013Ow1CCYCEt%2Bf1IX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be2339f435691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.99 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.99:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://emiliqcatharine.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 10 May 2024 06:08:19 GMT
expires: Sat, 10 May 2025 06:08:19 GMT
cache-control: public, max-age=31536000
age: 43302
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.170 | 200 OK | 717 B |
URL GET HTTP/3fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.170:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash5e48f11f5e65274412215f94f73f8c49 4dd35e5b5136df76bd7ff9da1f119d0ec0e57ff7 40992eb57d95a0165a6d56399cd9afd60cc2cac6f06579b8d87079ccaab91e29
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 18:10:00 GMT
date: Fri, 10 May 2024 18:10:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| kidjackson.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSS4gcVRR9NZmdgh%2FiSoQWXChkeqq6u%2FpjwMGYjAxOMjFRFPzxftV5zqt6xXv16fTGYECybARxW3N6kmAMorsgmEhPQGFAmHY1C2fl0oUfCC5cSHcGBy9U3XvfuQ%2FOPed9spUfkAZyun%2F6rBkqrelyWPdrz78dBCdr6yrJB7VBt%2F1Bu3WyZosXe%2B26%2F0LtVck3zXLDD3w%2F8IPaqrIyMoPlGQiV3u4F9Z5fbzXqQdjCwP6%2Fd7kHRz2I4oA8CSWmi%2Fe941B8giT%2B%2BrR0m5lJT5yJc00zY1GIm28mm4kpE8RHZWQ9RMnNw2kYt7d6Fya5PqcLU%2Fw3yNSUeD%2FcBUtuHpIEK7bnPJmGTMDEIyiLCaSeQNEJuLkKJfYIwAXObSCJb5wztqSXH6J0hk7J4oO%2FoMopWfzlOJL4q1NaDWoXjc4zZRKHQVRBDSZQ%2FQnSfAfZcAGq3AHPPoYSP5HlB%2BtI4u0Npw2U2H%2BuJX2f8iBcakWytdTq8nCJNfz2Uig6TDRkpxmGvblASk2gogm0HIE6D%2FnsUx7yyEOeeojFfo0HQdDxBad%2Bt8d5U3Qkaws%2FoJ0ooIHf7iLnsx1GyNIRuB6B2ytI7RVsqhFs%2Fj3cpQpOLMBlU%2BK9%2FhEKUaGUBKUjKClBqQjKjKAsqutCu4arbgjtchYc5sZhblZjk%2FW36HWT9WVCQO0IVlRb6QF5Yiai996dP7Ep92udNgtk26d%2Bp9MKAr9NWRgGvBt0251e0Gh24VQF5RbmKw%2FVlDz17I9IZ8YWn4HRHTi9A66OgebPgJYV6KUKw%2BQOp7HUWtGhpU7Tekr70tWFLCBMhTRbRHbZ29IH5Om5pRtXLSTfXfnn0bVv3w9XwG2F1Fb4UN0n6Otr4wumJNsXTOnINxtppmI1pDO7L2Y0k4u3XpOXS2PF2mk3%2BuJlPgNm5e03pMvWaSJU0nfky1NKCGlXjeWSfLfm3pLsfO4uncptkqfr519ZXYtTK51TJpmAqr0zn4OrKXns3rvzd3zinV%2Bh7AQ2rxDnu%2BQwoMwOeHoFLt1d%2Be1xdnb6xy04Q2D10QxLPZR5NbYNdnSoFYGWRz1lFZw8koDJ3Xu%2FP8TGls5uU1VtuWvo2wXQ7CqSuEJhKxS6AtUjuPzYOEvt7srPzXmA6YUx03Zhm2mrP52LPPs5OLVfa%2Fqiw2QkO0y2wlYkuWBhyHwecdYU3S5H5qbRS%2BzvfwEAAP%2F%2FAQAA%2F%2F%2BpARwnoQQAAA%3D%3D | 192.243.59.12 | 200 OK | 7 B |
URL GET HTTP/1.1kidjackson.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSS4gcVRR9NZmdgh%2FiSoQWXChkeqq6u%2FpjwMGYjAxOMjFRFPzxftV5zqt6xXv16fTGYECybARxW3N6kmAMorsgmEhPQGFAmHY1C2fl0oUfCC5cSHcGBy9U3XvfuQ%2FOPed9spUfkAZyun%2F6rBkqrelyWPdrz78dBCdr6yrJB7VBt%2F1Bu3WyZosXe%2B26%2F0LtVck3zXLDD3w%2F8IPaqrIyMoPlGQiV3u4F9Z5fbzXqQdjCwP6%2Fd7kHRz2I4oA8CSWmi%2Fe941B8giT%2B%2BrR0m5lJT5yJc00zY1GIm28mm4kpE8RHZWQ9RMnNw2kYt7d6Fya5PqcLU%2Fw3yNSUeD%2FcBUtuHpIEK7bnPJmGTMDEIyiLCaSeQNEJuLkKJfYIwAXObSCJb5wztqSXH6J0hk7J4oO%2FoMopWfzlOJL4q1NaDWoXjc4zZRKHQVRBDSZQ%2FQnSfAfZcAGq3AHPPoYSP5HlB%2BtI4u0Npw2U2H%2BuJX2f8iBcakWytdTq8nCJNfz2Uig6TDRkpxmGvblASk2gogm0HIE6D%2FnsUx7yyEOeeojFfo0HQdDxBad%2Bt8d5U3Qkaws%2FoJ0ooIHf7iLnsx1GyNIRuB6B2ytI7RVsqhFs%2Fj3cpQpOLMBlU%2BK9%2FhEKUaGUBKUjKClBqQjKjKAsqutCu4arbgjtchYc5sZhblZjk%2FW36HWT9WVCQO0IVlRb6QF5Yiai996dP7Ep92udNgtk26d%2Bp9MKAr9NWRgGvBt0251e0Gh24VQF5RbmKw%2FVlDz17I9IZ8YWn4HRHTi9A66OgebPgJYV6KUKw%2BQOp7HUWtGhpU7Tekr70tWFLCBMhTRbRHbZ29IH5Om5pRtXLSTfXfnn0bVv3w9XwG2F1Fb4UN0n6Otr4wumJNsXTOnINxtppmI1pDO7L2Y0k4u3XpOXS2PF2mk3%2BuJlPgNm5e03pMvWaSJU0nfky1NKCGlXjeWSfLfm3pLsfO4uncptkqfr519ZXYtTK51TJpmAqr0zn4OrKXns3rvzd3zinV%2Bh7AQ2rxDnu%2BQwoMwOeHoFLt1d%2Be1xdnb6xy04Q2D10QxLPZR5NbYNdnSoFYGWRz1lFZw8koDJ3Xu%2FP8TGls5uU1VtuWvo2wXQ7CqSuEJhKxS6AtUjuPzYOEvt7srPzXmA6YUx03Zhm2mrP52LPPs5OLVfa%2Fqiw2QkO0y2wlYkuWBhyHwecdYU3S5H5qbRS%2BzvfwEAAP%2F%2FAQAA%2F%2F%2BpARwnoQQAAA%3D%3D IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectkidjackson.com Fingerprint11:38:2D:E6:9A:F0:71:4B:AC:FD:5D:8B:45:11:09:4F:14:0C:11:A3 ValidityMon, 06 May 2024 08:05:47 GMT - Sun, 04 Aug 2024 08:05:46 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSS4gcVRR9NZmdgh%2FiSoQWXChkeqq6u%2FpjwMGYjAxOMjFRFPzxftV5zqt6xXv16fTGYECybARxW3N6kmAMorsgmEhPQGFAmHY1C2fl0oUfCC5cSHcGBy9U3XvfuQ%2FOPed9spUfkAZyun%2F6rBkqrelyWPdrz78dBCdr6yrJB7VBt%2F1Bu3WyZosXe%2B26%2F0LtVck3zXLDD3w%2F8IPaqrIyMoPlGQiV3u4F9Z5fbzXqQdjCwP6%2Fd7kHRz2I4oA8CSWmi%2Fe941B8giT%2B%2BrR0m5lJT5yJc00zY1GIm28mm4kpE8RHZWQ9RMnNw2kYt7d6Fya5PqcLU%2Fw3yNSUeD%2FcBUtuHpIEK7bnPJmGTMDEIyiLCaSeQNEJuLkKJfYIwAXObSCJb5wztqSXH6J0hk7J4oO%2FoMopWfzlOJL4q1NaDWoXjc4zZRKHQVRBDSZQ%2FQnSfAfZcAGq3AHPPoYSP5HlB%2BtI4u0Npw2U2H%2BuJX2f8iBcakWytdTq8nCJNfz2Uig6TDRkpxmGvblASk2gogm0HIE6D%2FnsUx7yyEOeeojFfo0HQdDxBad%2Bt8d5U3Qkaws%2FoJ0ooIHf7iLnsx1GyNIRuB6B2ytI7RVsqhFs%2Fj3cpQpOLMBlU%2BK9%2FhEKUaGUBKUjKClBqQjKjKAsqutCu4arbgjtchYc5sZhblZjk%2FW36HWT9WVCQO0IVlRb6QF5Yiai996dP7Ep92udNgtk26d%2Bp9MKAr9NWRgGvBt0251e0Gh24VQF5RbmKw%2FVlDz17I9IZ8YWn4HRHTi9A66OgebPgJYV6KUKw%2BQOp7HUWtGhpU7Tekr70tWFLCBMhTRbRHbZ29IH5Om5pRtXLSTfXfnn0bVv3w9XwG2F1Fb4UN0n6Otr4wumJNsXTOnINxtppmI1pDO7L2Y0k4u3XpOXS2PF2mk3%2BuJlPgNm5e03pMvWaSJU0nfky1NKCGlXjeWSfLfm3pLsfO4uncptkqfr519ZXYtTK51TJpmAqr0zn4OrKXns3rvzd3zinV%2Bh7AQ2rxDnu%2BQwoMwOeHoFLt1d%2Be1xdnb6xy04Q2D10QxLPZR5NbYNdnSoFYGWRz1lFZw8koDJ3Xu%2FP8TGls5uU1VtuWvo2wXQ7CqSuEJhKxS6AtUjuPzYOEvt7srPzXmA6YUx03Zhm2mrP52LPPs5OLVfa%2Fqiw2QkO0y2wlYkuWBhyHwecdYU3S5H5qbRS%2BzvfwEAAP%2F%2FAQAA%2F%2F%2BpARwnoQQAAA%3D%3D HTTP/1.1
Host: kidjackson.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: u_pl=22919410; uid_id2=4e00ac15-4fe4-48c5-b206-5d7bd2e73559:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec76b1e60a07741106ab551c8186791238=[5210994,5210995]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 10 May 2024 18:10:01 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d20105127ad05c061dd8421a9ff47aa4
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| kidjackson.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fstories%2F1%2Fcss%2Fanimate.css&l=78693&fd=349 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1kidjackson.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fstories%2F1%2Fcss%2Fanimate.css&l=78693&fd=349 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectkidjackson.com Fingerprint11:38:2D:E6:9A:F0:71:4B:AC:FD:5D:8B:45:11:09:4F:14:0C:11:A3 ValidityMon, 06 May 2024 08:05:47 GMT - Sun, 04 Aug 2024 08:05:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fstories%2F1%2Fcss%2Fanimate.css&l=78693&fd=349 HTTP/1.1
Host: kidjackson.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: u_pl=22919410; uid_id2=4e00ac15-4fe4-48c5-b206-5d7bd2e73559:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec76b1e60a07741106ab551c8186791238=[5210994,5210995]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 10 May 2024 18:10:01 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| kidjackson.com/pixel/sbs?c=1 | 192.243.59.20 | 200 OK | 0 B |
URL GET HTTP/1.1kidjackson.com/pixel/sbs?c=1 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectkidjackson.com Fingerprint11:38:2D:E6:9A:F0:71:4B:AC:FD:5D:8B:45:11:09:4F:14:0C:11:A3 ValidityMon, 06 May 2024 08:05:47 GMT - Sun, 04 Aug 2024 08:05:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbs?c=1 HTTP/1.1
Host: kidjackson.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: u_pl=22919410; uid_id2=4e00ac15-4fe4-48c5-b206-5d7bd2e73559:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec76b1e60a07741106ab551c8186791238=[5210994,5210995]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 10 May 2024 18:10:01 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| emiliqcatharine.pages.dev/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 172.66.44.64 | 200 OK | 88 kB |
URL GET HTTP/3emiliqcatharine.pages.dev/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP172.66.44.64:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectemiliqcatharine.pages.dev Fingerprint56:EA:E7:0A:F9:9A:DF:68:E3:53:CD:DB:ED:8F:5E:3F:56:77:0A:FB ValidityThu, 09 May 2024 20:22:23 GMT - Wed, 07 Aug 2024 20:22:22 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: emiliqcatharine.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:09:57 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4faaa9d1e8ac6b951abd4ab674ea9ec1"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2FqrmWx4PfKJWhcpX83tPctsGSvENsUS4Vn1iCrmWrriNxrnXRkK%2FkefQRZi6GnGSSv8TmoVgM3LTpUd6uSsGJWGAQ4unTLMfVxeiyFDQ%2BsAOGYOVt7ZoR0B%2BX73QWDW3lYoChu%2BNxCX9lAM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be21dbcd30b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Poppins&display=swap | 142.250.74.170 | 200 OK | 781 B |
URL GET HTTP/2fonts.googleapis.com/css?family=Poppins&display=swap IP142.250.74.170:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (799), with no line terminators Hashf2734c367eb54d2729867445e0ea79a8 18f8b32901dae48bedc55cc12baca116e56e6bb7 d5f6fe55368116052648d76167ba4c103db2e0e52680340cd0cb014d3f6cf1d4
GET /css?family=Poppins&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 18:09:57 GMT
date: Fri, 10 May 2024 18:09:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| kidjackson.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fstories%2F1%2Fcss%2Fstyle.css&l=1434&fd=344 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1kidjackson.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fstories%2F1%2Fcss%2Fstyle.css&l=1434&fd=344 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectkidjackson.com Fingerprint11:38:2D:E6:9A:F0:71:4B:AC:FD:5D:8B:45:11:09:4F:14:0C:11:A3 ValidityMon, 06 May 2024 08:05:47 GMT - Sun, 04 Aug 2024 08:05:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fstories%2F1%2Fcss%2Fstyle.css&l=1434&fd=344 HTTP/1.1
Host: kidjackson.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: u_pl=22919410; uid_id2=4e00ac15-4fe4-48c5-b206-5d7bd2e73559:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec76b1e60a07741106ab551c8186791238=[5210994,5210995]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 10 May 2024 18:10:01 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com/sb/interstitial/sweep/default/stories/1/js/jquery.min.js | 188.114.97.1 | 200 OK | 87 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/interstitial/sweep/default/stories/1/js/jquery.min.js IP188.114.97.1:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeJavaScript source, ASCII text, with very long lines (32058) Hashc9f5aeeca3ad37bf2aa006139b935f0a 1055018c28ab41087ef9ccefe411606893dabea2 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de
GET /sb/interstitial/sweep/default/stories/1/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 18:10:00 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:17:32 GMT
etag: W/"65aa847c-15283"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 870720
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SB2u7EIwT%2BKdu0lX8yXS%2ByU8kJxc279PuIWsmGpbN1G4RtZKM8cK8VPPz8jVet91tPvaF1oS1Wf6vGi6mWnrv6VWYsIXZx0WpM076EF%2FQ6x3dPhFEca2RCPmIJgi96cLIMNqxZw1aOr4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be2342ff15691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/interstitial/sweep/default/stories/1/js/script.js | 188.114.97.1 | 200 OK | 321 B |
URL GET HTTP/2cdn.creative-bars1.com/sb/interstitial/sweep/default/stories/1/js/script.js IP188.114.97.1:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeASCII text, with very long lines (343), with no line terminators Hash4f46dc256e627bbc1fa54e2996e30b25 56ff1d7676599e3d1ddbee84dad29f2a2bece6ce 6933ea1db439c96d670e6ce25bcbfa19052ce0626fee500df36d11167636d6c3
GET /sb/interstitial/sweep/default/stories/1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
Origin: https://emiliqcatharine.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 18:10:01 GMT
content-type: application/javascript
last-modified: Fri, 19 Jan 2024 14:17:32 GMT
etag: W/"65aa847c-141"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=05KxTf1VRuaS1%2FkHcVTZX2h5DKWl5wn9dvFUDU7hui4ZXqkSsbSSAVk6y21rpMPC8gRGz6NMu%2FD%2FYdz7e35P89Ej1vlSQB3RJNUqBND2rAMrqw%2FP5gONtTcQk7OstFvlJdDcT%2B3RnOak"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be23509c15691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| actressdoleful.com/47e256568502d808b0f4997433da285b/invoke.js | 172.240.108.68 | 200 OK | 31 kB |
URL GET HTTP/1.1actressdoleful.com/47e256568502d808b0f4997433da285b/invoke.js IP172.240.108.68:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectactressdoleful.com Fingerprint2D:0E:60:B8:63:9F:B1:22:4F:1C:82:92:36:74:6A:09:CA:D4:58:8C ValiditySat, 23 Mar 2024 06:03:40 GMT - Fri, 21 Jun 2024 06:03:39 GMT
File typeJavaScript source, ASCII text, with very long lines (31375), with no line terminators Hashb143b3cac5c252aa6fbe82075d443763 62aa0140ab88c13687a88bf1c32eca0404a44acc 9549ac88c08b4c2056c2c5ae74b7912a5b396768e408ef7b747f722951d91bff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /47e256568502d808b0f4997433da285b/invoke.js HTTP/1.1
Host: actressdoleful.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 18:09:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 540d01bcd905b1b300fbdc3a7a68903e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| emiliqcatharine.pages.dev/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 172.66.44.64 | 200 OK | 14 kB |
URL GET HTTP/3emiliqcatharine.pages.dev/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP172.66.44.64:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectemiliqcatharine.pages.dev Fingerprint56:EA:E7:0A:F9:9A:DF:68:E3:53:CD:DB:ED:8F:5E:3F:56:77:0A:FB ValidityThu, 09 May 2024 20:22:23 GMT - Wed, 07 Aug 2024 20:22:22 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: emiliqcatharine.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:09:57 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"ff416357a541c2641e2808b797569af3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EN7n1jj%2B8KZsmvM84vn2glsAj10s0wteDEbAy4Tyk5Xr9Y2KHLgT98dtdoYtdKPHVh41DLLFZgmIA4irDMrP%2Fw4cLPpR4Alt%2FDRnGAJ3K1VgB9YJZ%2BRwIwAEzXV5yg70vxolSbshyE%2FSS%2FH7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be21dccd70b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| downstairsnegotiatebarren.com/sfp.js | 188.114.97.1 | 200 OK | 86 kB |
URL GET HTTP/3downstairsnegotiatebarren.com/sfp.js IP188.114.97.1:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint5D:DB:CB:C6:CE:2A:8B:34:7D:BC:43:74:33:1D:5F:77:48:F7:BC:1B ValidityThu, 02 May 2024 21:26:34 GMT - Wed, 31 Jul 2024 21:26:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:09:59 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 030b3e7229babc507987f339b7d1cf03
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 10 May 2024 18:09:59 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F8YlzYBT%2F4fILCm6tIGlmjKs%2F1CdF7jHZGwsZYf7MCTdtK1oiL7cCKQEvPovh8S00KBu8leRBaPzYlUIOxlVb5Tkc9fFF9odQzHbGg%2Bi02%2BMpGxERqiDKvGEfDpwNun%2FxNZs%2B6nHha5ia%2BV9evRdBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be22a0a3c56c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/interstitial/sweep/default/stories/1/css/animate.css | 188.114.97.1 | 200 OK | 79 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/interstitial/sweep/default/stories/1/css/animate.css IP188.114.97.1:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash5982c5377696d20476871062646b253f 8bf2c93fa9ccc908f7df0fb7abb911bbac3e4242 4e23a6449e6ef4614f0107cecf5c9eda75d2041c7c71f4a55d45f2a7e75450f4
GET /sb/interstitial/sweep/default/stories/1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
Origin: https://emiliqcatharine.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 18:10:01 GMT
content-type: text/css
last-modified: Fri, 19 Jan 2024 14:17:32 GMT
etag: W/"65aa847c-13365"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dU6ZA8PwcHie9%2BWJSUwVMeNMAcOVurdfAq86GQkuOunFsDcjw3jdzlqSp%2F7I41XFN%2FkhQtvcl9jJ3tW518ffZC0HczXSTX9W5XoLGbf%2FMUsV77Cb3PfvvYzZw%2FcRgY0yAPChfaQNrI1K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be2338f3b5691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/interstitial/sweep/default/stories/1/img/close.svg | 188.114.97.1 | 200 OK | 1.3 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/interstitial/sweep/default/stories/1/img/close.svg IP188.114.97.1:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeSVG Scalable Vector Graphics image Hash5ff33e884803785a8002a2aa5fa03b0e a04406f2592e23e648bee499477f823da0c48362 6ba65121162b5b03e75501501ddaa928f73be8d1fe81c032a4879561de63ff58
GET /sb/interstitial/sweep/default/stories/1/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 18:10:00 GMT
content-type: image/svg+xml
last-modified: Fri, 19 Jan 2024 14:17:32 GMT
etag: W/"65aa847c-4ff"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2159822
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rqhXAI%2BYbYaOh7PsUx%2FrM3yfKG1iTeI2t2Pn9IMkhDZe1SpyqerDGsHh4vFcDTvsNvQQZd4R33D%2BITfmNx8FM4rENT5YIwT0cMVJXymqcD3OoCNHsj91llAseKJNTHHEd82a8vAhm62V"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be2340fd45691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| kidjackson.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fstories%2F1%2Fjs%2Fscript.js&l=321&fd=161 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1kidjackson.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fstories%2F1%2Fjs%2Fscript.js&l=321&fd=161 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectkidjackson.com Fingerprint11:38:2D:E6:9A:F0:71:4B:AC:FD:5D:8B:45:11:09:4F:14:0C:11:A3 ValidityMon, 06 May 2024 08:05:47 GMT - Sun, 04 Aug 2024 08:05:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Finterstitial%2Fsweep%2Fdefault%2Fstories%2F1%2Fjs%2Fscript.js&l=321&fd=161 HTTP/1.1
Host: kidjackson.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: u_pl=22919410; uid_id2=4e00ac15-4fe4-48c5-b206-5d7bd2e73559:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec76b1e60a07741106ab551c8186791238=[5210994,5210995]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 10 May 2024 18:10:01 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| emiliqcatharine.pages.dev/wp-content/plugins/advanced-random-posts-widget/assets/css/arpw-frontend.css?ver=6.5.2 | 172.66.44.64 | 200 OK | 275 B |
URL GET HTTP/3emiliqcatharine.pages.dev/wp-content/plugins/advanced-random-posts-widget/assets/css/arpw-frontend.css?ver=6.5.2 IP172.66.44.64:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectemiliqcatharine.pages.dev Fingerprint56:EA:E7:0A:F9:9A:DF:68:E3:53:CD:DB:ED:8F:5E:3F:56:77:0A:FB ValidityThu, 09 May 2024 20:22:23 GMT - Wed, 07 Aug 2024 20:22:22 GMT
File typeASCII text, with very long lines (312), with no line terminators Hash58e671c19d0c80d4cd0dfc871532c81d 1236a814bc62bb0f3eaa97ff3b3464969211d835 6ee0f5e3cc7aff02c7f1ff31581494303213619f7f31004c7c2a748891592301
GET /wp-content/plugins/advanced-random-posts-widget/assets/css/arpw-frontend.css?ver=6.5.2 HTTP/1.1
Host: emiliqcatharine.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:09:57 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"89495a62273346014c21c363f32c166b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yG2RmMvI%2FAzZ3JSPnetHP3qn7EmLVgBzP8lzRX20cJrkd4Lzbs0VrGO%2Fs15VLVc%2FAvVBt8mKfhe9EVzAT849XR3CIF2zq%2F99UCjGCoV2phQZl1rtMhr5nGOGq%2Ba7j4kxSivUleNJYA8j0GlV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be21dbcd10b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| emiliqcatharine.pages.dev/wp-content/themes/travel-monster/style.min.css?ver=1.1.6 | 172.66.44.64 | 200 OK | 380 kB |
URL GET HTTP/3emiliqcatharine.pages.dev/wp-content/themes/travel-monster/style.min.css?ver=1.1.6 IP172.66.44.64:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectemiliqcatharine.pages.dev Fingerprint56:EA:E7:0A:F9:9A:DF:68:E3:53:CD:DB:ED:8F:5E:3F:56:77:0A:FB ValidityThu, 09 May 2024 20:22:23 GMT - Wed, 07 Aug 2024 20:22:22 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size380 kB (379839 bytes) Hash632fecc59f2ca545193fb7666b06660c 96e8cd0935da2b8ef4a7eae8f5aa2157accca162 28c4159a68e83a66b97e4ad6a1237c0479eb3e0d8884b12df24868ef640b6de0
GET /wp-content/themes/travel-monster/style.min.css?ver=1.1.6 HTTP/1.1
Host: emiliqcatharine.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:09:57 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"a70ae93cb0b9c8bbbc770434fe9786aa"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bl751zy9bR2Pmjaf4VEAJ0SlFNu%2B14zpQphj0YoZmy4EsqKmjtldNESz%2Baq6YeKz0peWB3XEMPlmlQm8JHVtXsYcgr3CYrmL4OKKN%2Fy4y4dadEeJeomeJrO2Dhm4xDbiyhVDvzRHy%2BFLfD56"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be21dbcd00b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| emiliqcatharine.pages.dev/wp-content/plugins/wp-meta-and-date-remover/assets/js/inspector.js?ver=1.1 | 172.66.44.64 | 200 OK | 3.9 kB |
URL GET HTTP/3emiliqcatharine.pages.dev/wp-content/plugins/wp-meta-and-date-remover/assets/js/inspector.js?ver=1.1 IP172.66.44.64:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectemiliqcatharine.pages.dev Fingerprint56:EA:E7:0A:F9:9A:DF:68:E3:53:CD:DB:ED:8F:5E:3F:56:77:0A:FB ValidityThu, 09 May 2024 20:22:23 GMT - Wed, 07 Aug 2024 20:22:22 GMT
File typeJavaScript source, ASCII text, with very long lines (4077), with no line terminators Hash0107360725310915a1fd69ea43e81151 f8c18be2fe6c9fa7e412254387f614d2b8b05b54 18da3b371350a20b6fd8f70d0b6541c2826076fbd3f5663bc238dde7ac76142a
GET /wp-content/plugins/wp-meta-and-date-remover/assets/js/inspector.js?ver=1.1 HTTP/1.1
Host: emiliqcatharine.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:09:57 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"155e673a0ef0fa0671bf62a6b4137ed9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7AlZljesAnO5fnB9yE3FS2sAj%2BcYbRi5MVJ7j849VuFBKGwyphW3A1H8E4MfBQnl1ULMwn%2F1qSPzmMXGpdDV3kNx3J6z5Yk81nUAHO5Caw2FljWqw%2Bgm2QlJZreBery35yVHakOAD8quIvgj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be21ddcf10b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| emiliqcatharine.pages.dev/wp-content/themes/travel-monster/js/custom.min.js?ver=1.1.6 | 172.66.44.64 | 200 OK | 11 kB |
URL GET HTTP/3emiliqcatharine.pages.dev/wp-content/themes/travel-monster/js/custom.min.js?ver=1.1.6 IP172.66.44.64:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectemiliqcatharine.pages.dev Fingerprint56:EA:E7:0A:F9:9A:DF:68:E3:53:CD:DB:ED:8F:5E:3F:56:77:0A:FB ValidityThu, 09 May 2024 20:22:23 GMT - Wed, 07 Aug 2024 20:22:22 GMT
File typeJavaScript source, ASCII text, with very long lines (10517) Hash959da6c2fff1f29fddb5ca988d737b15 7d96348695a64e94fb5bce6a0b7f08d990cff5d7 3970b72d962e5e3b083834c7c2d68052d8f1f91220251cc09d65223c8d8c8b6b
GET /wp-content/themes/travel-monster/js/custom.min.js?ver=1.1.6 HTTP/1.1
Host: emiliqcatharine.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 18:09:57 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"d3edc58217bb9bc136d747bd3f9b2571"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qw1rU9iy%2B0Nq7tN4u7AzKGRFia81BPfRrsLfaEzpj1SBz4T34cs6uN2gQdsKfQ8ujLeKyvKBLwITgTPhhZMD6U2xL1FSYijbK81snHt9msGTOQTX%2FZLA11bvZBMZfybzHo8P4%2FwDALr1rBzx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be21ddcf50b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| emiliqcatharine.pages.dev/ | 172.66.44.64 | 200 OK | 71 kB |
URL User Request GET HTTP/2emiliqcatharine.pages.dev/ IP172.66.44.64:443
CertificateIssuerGoogle Trust Services LLC Subjectemiliqcatharine.pages.dev Fingerprint56:EA:E7:0A:F9:9A:DF:68:E3:53:CD:DB:ED:8F:5E:3F:56:77:0A:FB ValidityThu, 09 May 2024 20:22:23 GMT - Wed, 07 Aug 2024 20:22:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: emiliqcatharine.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 18:09:57 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"ca050df71050be11a1d71a1a0a2028d7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WpimBvoebnIuoaylR4jeIQEQxS42esDQzpuXGV28t%2BUl4069057BNHcRrgq%2FxWMq01%2B1vMyyCmPkb5gKePkV8d9XCr1VahHmcquvy9KGcY80JAwzHTsWzPWw%2F4PT9rHGQ2zGwBDgkpYmWLFG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be21ad9c6b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| downstairsnegotiatebarren.com/sfp.js | 188.114.97.1 | 200 OK | 86 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP188.114.97.1:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint5D:DB:CB:C6:CE:2A:8B:34:7D:BC:43:74:33:1D:5F:77:48:F7:BC:1B ValidityThu, 02 May 2024 21:26:34 GMT - Wed, 31 Jul 2024 21:26:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 18:09:59 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 9c6840ab9aa64504970b4f4a100c27ae
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 10 May 2024 18:09:58 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u%2FGaOsbn9dz6GBFqnFge0bbXK8RtBw0ZcMtc1nvymwr7%2BKF4b8RIgdnxVWZ%2BY98d9PDqVvyy0Xmp8Rc6UHUU8yMzXdksXXuOp5rcXWmrgfOF09fv9KHuL%2BsGiQtvYTKR%2FN10m4HwBhcSvZiqbk7AQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881be223fb49b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| herringgloomilytennis.com/watch.458078407020.js?key=47e256568502d808b0f4997433da285b&kw=%5B%22alfie%22%2C%22cosetta%22%2C%22-%22%2C%22explore%22%2C%22ideas%22%2C%22tips%22%2C%22guide%22%2C%22and%22%2C%22info%22%2C%22alfie%22%2C%22cosetta%22%5D&refer=https%3A%2F%2Femiliqcatharine.pages.dev%2F&tz=0&dev=e&res=14.2071&uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559%3A1%3A1 | 172.240.127.234 | 307 Temporary Redirect | 3.3 kB |
URL GET HTTP/1.1herringgloomilytennis.com/watch.458078407020.js?key=47e256568502d808b0f4997433da285b&kw=%5B%22alfie%22%2C%22cosetta%22%2C%22-%22%2C%22explore%22%2C%22ideas%22%2C%22tips%22%2C%22guide%22%2C%22and%22%2C%22info%22%2C%22alfie%22%2C%22cosetta%22%5D&refer=https%3A%2F%2Femiliqcatharine.pages.dev%2F&tz=0&dev=e&res=14.2071&uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559%3A1%3A1 IP172.240.127.234:443
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectherringgloomilytennis.com Fingerprint2A:E0:3F:2A:77:92:96:90:5D:38:27:4E:7F:FC:5D:D2:F9:32:73:11 ValidityMon, 06 May 2024 08:10:21 GMT - Sun, 04 Aug 2024 08:10:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.458078407020.js?key=47e256568502d808b0f4997433da285b&kw=%5B%22alfie%22%2C%22cosetta%22%2C%22-%22%2C%22explore%22%2C%22ideas%22%2C%22tips%22%2C%22guide%22%2C%22and%22%2C%22info%22%2C%22alfie%22%2C%22cosetta%22%5D&refer=https%3A%2F%2Femiliqcatharine.pages.dev%2F&tz=0&dev=e&res=14.2071&uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559%3A1%3A1 HTTP/1.1
Host: herringgloomilytennis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
Origin: https://emiliqcatharine.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Fri, 10 May 2024 18:09:59 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://emiliqcatharine.pages.dev
Access-Control-Allow-Origin: https://emiliqcatharine.pages.dev
Access-Control-Allow-Credentials: true
Location: https://herringgloomilytennis.com/watch.458078407020.js?dev=e&key=47e256568502d808b0f4997433da285b&kw=%5B%22alfie%22%2C%22cosetta%22%2C%22-%22%2C%22explore%22%2C%22ideas%22%2C%22tips%22%2C%22guide%22%2C%22and%22%2C%22info%22%2C%22alfie%22%2C%22cosetta%22%5D&pst=1715364659&refer=https%3A%2F%2Femiliqcatharine.pages.dev%2F&res=14.2071&rmtc=t&shu=c7a28298cde7a4c98acd3f7afcd4123b5be6c02cc1de98d1f51a4515c65a2ee2e12519f032add9aace1ed3e1c5fd4c2e9d6f1941bcf73460f77960fd43ce69e9b09f25f5291503221df4135e62ab6a72b6694b98cec83ca35e0a9c14f7a2a4c8&tz=0&uuid=4e00ac15-4fe4-48c5-b206-5d7bd2e73559%3A1%3A1
Set-Cookie: u_pl=16337114; expires=Sat, 11 May 2024 18:09:59 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjMzNzExNCwiayI6IjQ3ZTI1NjU2ODUwMmQ4MDhiMGY0OTk3NDMzZGEyODViIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxMzg0OTA0LCJwaWQiOjk1ODkzLCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjMsImFpZCI6NSwicHQiOjQsInBrIjoicGt6Z2Rpc2RzIiwiY3BrcyI6eyIyOCI6IjM3ZWIzYzg4MDE5Yjg1OGZhYWZhMmZiMWQ5ODIwNDRlIiwiMjkiOiI3NmIxZTYwYTA3NzQxMTA2YWI1NTFjODE4Njc5MTIzOCJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9lbWlsaXFjYXRoYXJpbmUucGFnZXMuZGV2LyIsImFyIjpbXX19.GMnRpTOdPIdEVO-Knrc6p6PLlNwGQDDPZybH6j63K_s; expires=Fri, 10 May 2024 18:10:59 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 34607a5a43f67f3917c34186a3d71f46
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.barscreative1.com/sb/interstitial/sweep/default/stories/1/index.html | 45.133.44.3 | 200 OK | 1.1 kB |
URL GET HTTP/2cdn.barscreative1.com/sb/interstitial/sweep/default/stories/1/index.html IP45.133.44.3:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://emiliqcatharine.pages.dev/ CertificateIssuerLet's Encrypt Subjectcdn.barscreative1.com Fingerprint08:55:F0:C8:EA:24:54:0D:3C:B9:2C:95:3E:DC:BF:FB:A8:76:BA:BC ValidityThu, 09 May 2024 03:01:15 GMT - Wed, 07 Aug 2024 03:01:14 GMT
File typeHTML document, ASCII text, with very long lines (1191), with no line terminators Hash3cb5e6c9f01bfa7cb22cea97b0b797bd e7d11b7e73cef3077f1fd9422b02887a0a9b92a3 ff16f3fe2fabcd2e6ff096ae0c0c535ea1b9e3ad821158fe96dd38a673a24ca8
GET /sb/interstitial/sweep/default/stories/1/index.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://emiliqcatharine.pages.dev/
Origin: https://emiliqcatharine.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 18:10:00 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Fri, 19 Jan 2024 14:17:32 GMT
etag: W/"65aa847c-465"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Fri, 10 May 2024 19:10:00 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
|
|