| |  172.67.174.209 | 200 OK | 8.0 kB |
URL User Request GET HTTP/2IP172.67.174.209:443
CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators Hashe86744d6d459dfbe53b8b653b5127012 f257c3e6c797cf22d0debdfec9252f68415de167 b088a734857762146093e62f3306b27577c2d25b986ea87bb492430f2e78e7ef
GET /4781 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
link: <https://luxelinks.xyz/wp-json/>; rel="https://api.w.org/", <https://luxelinks.xyz/wp-json/wp/v2/posts/4781>; rel="alternate"; type="application/json", <https://luxelinks.xyz/?p=4781>; rel=shortlink
x-litespeed-cache: hit
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rrH11veKUxhMB4MoUnVSIEqOPSM4J6S%2FGHnuWq6CP%2B5sLbyRtlmGD1ASaPcjkNhILA50cS8CppN3q9Yz4mTxKSRwUhHkiRAJFBojsO8MbuoEum995swDI1m%2FvGUgkje1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf2bf941b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.67 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.67:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://luxelinks.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 09:28:37 GMT
expires: Sun, 04 May 2025 09:28:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 506306
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| luxelinks.xyz/wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 | 172.67.174.209 | 200 OK | 5.4 kB |
URL GET HTTP/3luxelinks.xyz/wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/javascript
cache-control: public, max-age=31557600
expires: Fri, 09 May 2025 00:34:20 GMT
last-modified: Tue, 13 Feb 2024 14:36:08 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 127963
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qlBPFETrhZspE1hOjDcBrV5rkoRvw8%2BIvc7DK01LxnAqthW5QlG%2BdPjBcWsnfzwKbxAe2Fn2qPkK0nMkFty9rs2mZLg8X8cAXK2SPh%2Fa%2BEUsJiBKDfX9VMinNA36WM5P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf30ac385684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| luxelinks.xyz/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 172.67.174.209 | 200 OK | 5.5 kB |
URL GET HTTP/3luxelinks.xyz/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/javascript
cache-control: public, max-age=31557600
expires: Wed, 07 May 2025 08:45:08 GMT
last-modified: Fri, 09 Jun 2023 05:49:24 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 271315
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BJd8qWHiZ7Inoq5aAVnZKP2XxKcY4HfOKzFPtLVEg6gvLkOsFnXkGn2CZ7pDCO5DbmAnEIpI%2FbZG%2BLpgEQn3fzHcSxWhdS%2B4emZyYwWKbOolMx%2F6uvDqRH%2FbvqFv4a9q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf2e8a4c5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-s.woff2 | 142.250.74.67 | 200 OK | 31 kB |
URL GET HTTP/2fonts.gstatic.com/s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-s.woff2 IP142.250.74.67:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 31052, version 1.0 Hash5c4f357d4926fc197d43abc63b7fca8c 686af7000d038d7479ed36b48a8ebb0ea9b98aea 1393acc632c160def86b45c2521c8ee742b7e6239d0d90fb95f51d55cf48b9c3
GET /s/nunitosans/v15/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-s.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://luxelinks.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31052
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 08:53:08 GMT
expires: Sat, 03 May 2025 08:53:08 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 27 Apr 2023 00:27:41 GMT
content-type: font/woff2
age: 594835
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| luxelinks.xyz/wp-content/themes/allium/css/fontawesome-all.css?ver=6.5.3 | 172.67.174.209 | 200 OK | 13 kB |
URL GET HTTP/3luxelinks.xyz/wp-content/themes/allium/css/fontawesome-all.css?ver=6.5.3 IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
Hash50afbfa5d3da88697206734a56cc1f6d c806bd0a002db98aed83509e737e5a527298eb3a 054175fd1241944b5b6cc8aa44aa51904aaa24617a9d866478f10344ac818901
GET /wp-content/themes/allium/css/fontawesome-all.css?ver=6.5.3 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/css
cache-control: public, max-age=31557600
expires: Fri, 09 May 2025 20:12:23 GMT
last-modified: Sat, 23 Mar 2024 09:12:20 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 57280
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=goNs9ksLs3gdVrN9yBiPhC2%2Bv2b0t7vC9rJOf5x4tI2WbJ9T5WIk3ZKvS86yKpnHufgs7yx5auV%2F5gFtVm0Ll3dHy2gR8Qk0irPVpKBfYoZzZ7rKdYO1TE5wHFLhcLpE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf2e8a355684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| s.w.org/images/core/emoji/15.0.3/svg/2b07.svg | 192.0.77.48 | 200 OK | 240 B |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/2b07.svg IP192.0.77.48:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash31abf4145cf7c27ea0e1a2e4328283fd 31b41df44c3940427468f22c4191afab15d393a2 f534b7b1961a07619a8e1466ee3ac41144e416a276b521ba453ed7b5416ca53e
GET /images/core/emoji/15.0.3/svg/2b07.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 06:07:03 GMT
content-type: image/svg+xml
content-length: 240
last-modified: Tue, 30 Jan 2024 01:15:39 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 2
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| luxelinks.xyz/wp-content/themes/allium/js/enquire.js?ver=2.1.6 | 172.67.174.209 | 200 OK | 3.5 kB |
URL GET HTTP/3luxelinks.xyz/wp-content/themes/allium/js/enquire.js?ver=2.1.6 IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
File typeJavaScript source, ASCII text, with very long lines (847) Hash195a55c1b236364adf771828fbd19629 16138fec5ab27544271141d789ae6d95fd40a72c 6a9ffd212b49ebb3c4972bf0596b49e6e82d8df757a3a989d4cff99b20d64526
GET /wp-content/themes/allium/js/enquire.js?ver=2.1.6 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/javascript
cache-control: public, max-age=31557600
expires: Fri, 09 May 2025 00:22:42 GMT
last-modified: Sat, 23 Mar 2024 09:12:20 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 128661
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f0r2b7h9vXWVuaQIk2jzE3Humikg4YT07YCPybaqom4sa9QdNVeS4ixGx3ktwj7XrJrx1ucC5ISV2DE22Q0%2Bfy0%2FZ1Mmg60K9j2bqxts6dzFiy8t74hgrkvRC2TPq0BX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf2e9a5c5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| pl23268180.highcpmgate.com/6cd5af3c622eb173e0b971f103c5f257/invoke.js | 192.243.59.12 | 200 OK | 9.8 kB |
URL GET HTTP/1.1pl23268180.highcpmgate.com/6cd5af3c622eb173e0b971f103c5f257/invoke.js IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjecthighcpmgate.com FingerprintE7:53:32:23:DA:D6:BE:EB:98:90:05:4B:AC:AC:8C:89:F2:4D:FB:2E ValidityFri, 19 Apr 2024 10:31:16 GMT - Thu, 18 Jul 2024 10:31:15 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (26584), with no line terminators Hash7808a892019d9f5df3f40b932188098c db1e856aad140c63e339b6d6d52a7f04a05b242d f7ca1ba2d1598c206bd1289df3a27cc7064921edbaa2f5e01e5cfcc08ee5401a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /6cd5af3c622eb173e0b971f103c5f257/invoke.js HTTP/1.1
Host: pl23268180.highcpmgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 10 May 2024 06:07:04 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1bf4e3e2dc01725b93e6534d71ea36ce
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| luxelinks.xyz/wp-content/uploads/2024/03/cropped-j1-192x192.png | 172.67.174.209 | 200 OK | 8.9 kB |
URL GET HTTP/3luxelinks.xyz/wp-content/uploads/2024/03/cropped-j1-192x192.png IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash9cf1695b391fb592f1989f5d12ad603b a00b64e7904f4dbd1fc22bec0d23b560878b456f 778bae0682a7cae6ac412a36d20ef9425c897d9454278a2922922196b34580c7
GET /wp-content/uploads/2024/03/cropped-j1-192x192.png HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:04 GMT
content-type: image/png
content-length: 8918
cache-control: public, max-age=31557600
expires: Fri, 09 May 2025 12:04:59 GMT
last-modified: Sat, 23 Mar 2024 10:40:15 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 86524
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8X71xgox5PRwSj%2BHG1zMXBah90ve%2BUQMcr9B%2FDyqbyER3V1hZ2lZIrgFDSznQJ4jrFs5XUQvL5yNLJm4RL18Toj2MBC4tz%2FSgbt1%2FOellUwgY3S0XenD4LlRTHbmWzhj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8817bf32ee185684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| luxelinks.xyz/wp-content/uploads/2024/03/cropped-j1-32x32.png | 172.67.174.209 | 200 OK | 1.6 kB |
URL GET HTTP/3luxelinks.xyz/wp-content/uploads/2024/03/cropped-j1-32x32.png IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hash759dc25e7bf8cb2aa8bed1325e2bf7b6 42869d28313a3e6d4b28f130cbb0baaba84f0de8 b8cbfb2fe211c0cee9a001ad81bb221756d43a8207a4cc7db8fa9366244e96bf
GET /wp-content/uploads/2024/03/cropped-j1-32x32.png HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:04 GMT
content-type: image/png
content-length: 1569
cache-control: public, max-age=31557600
expires: Fri, 09 May 2025 05:22:05 GMT
last-modified: Sat, 23 Mar 2024 10:40:15 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 110699
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bZW%2FLQVsUT5i2202Qq%2B7jUKbH81aCzLXg%2BNDFEzu5CKKDNWQQjX0CjBVc7P12%2FkM8S9BdVQsXlPmmq6Y46XSmagT4uaK%2Bid7qM4RaSk%2Bgnts6ndR89B3X8qR%2F1nh02kL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8817bf32ee1b5684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ocsp.r2m03.amazontrust.com/ | 54.230.218.11 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP54.230.218.11:0
Hashc1ae368dfcd18c3fe0a38f18783ecfe1 591b78d8c937af6063def58fa5d376d07e7d005e 58ceb2cb03a41de3ae12171e7359276ed8fcbc1881b071c2783b782667cf124b
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 06:07:04 GMT
Last-Modified: Fri, 10 May 2024 04:53:33 GMT
Server: ECAcc (ska/F757)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: woKWqxVzgdtSj7r0c8UsZ8BdVq9XqJhOEN95clbZdoXZ1lD2mPSZxw==
Age: 4411
|
|
| proftrafficcounter.com/stats |  52.29.105.35 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP52.29.105.35:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash0e53964306aa6a1836ac740eebe6a8a4 24cb7b6eb9090a41efd64ee7ba95e7480995ac01 0db988e6f53866379a20229281423559d7ba6f13a27f87df453e3aab4d092ef5
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxelinks.xyz
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 06:07:04 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://luxelinks.xyz
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=f65951b9-af56-4b30-9cf1-72e663016625:1:1; expires=Mon, 08 May 2034 06:07:04 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| luxelinks.xyz/wp-content/themes/allium/js/superfish.js?ver=1.7.10 | 172.67.174.209 | 200 OK | 3.0 kB |
URL GET HTTP/3luxelinks.xyz/wp-content/themes/allium/js/superfish.js?ver=1.7.10 IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
File typeJavaScript source, ASCII text Hash8b12c3599c509917e3e3455aec737dcd 3933f6e45d7f1c09780811d94de864f7ad164894 5c94aadfbe04dda0b0b5e2caa901efbab78ea6092ca3fa63d849c7e66688269f
GET /wp-content/themes/allium/js/superfish.js?ver=1.7.10 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/javascript
last-modified: Sat, 23 Mar 2024 09:12:20 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: HIT
age: 754190
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MyZUo70GJYiX8jG2NWKg0jFtXH7ypJD4dncghH6AN5pEvhZGEZJCKResVgmWa9S5D0lNQ80tEJPGmtfjHaiuc69Xkau2ojmyNG9n2NZU80bWVuM%2Bv%2BzIGF0KEJOe7OW9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf2e9a605684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hangnailhasten.com/ntv.json?key=6cd5af3c622eb173e0b971f103c5f257&vstc=2 | 172.240.253.132 | 200 OK | 8.5 kB |
URL GET HTTP/1.1hangnailhasten.com/ntv.json?key=6cd5af3c622eb173e0b971f103c5f257&vstc=2 IP172.240.253.132:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjecthangnailhasten.com Fingerprint9B:47:58:C5:81:76:13:D4:45:29:13:37:43:29:F6:10:87:1D:2E:F6 ValidityMon, 06 May 2024 08:32:24 GMT - Sun, 04 Aug 2024 08:32:23 GMT
Hash7beb20975fd00c8afd381b9743889345 673c8f434f054fd4e4dd4c35f2f63112ad4755bd 978ce8646122db9dd7d43984d5eece8c7a0f9b16d559163b7eaad7f088ce3ed9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ntv.json?key=6cd5af3c622eb173e0b971f103c5f257&vstc=2 HTTP/1.1
Host: hangnailhasten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxelinks.xyz
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 06:07:04 GMT
Content-Type: application/json
Content-Length: 8482
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://luxelinks.xyz
Access-Control-Allow-Origin: https://luxelinks.xyz
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=23167681; expires=Sat, 11 May 2024 06:07:04 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 11 May 2024 06:07:04 GMT; secure; SameSite=None
uncs=1; expires=Sat, 11 May 2024 06:07:04 GMT; secure; SameSite=None
pdhtkv49=true; expires=Sat, 11 May 2024 06:07:04 GMT; secure; SameSite=None
uncs49=1; expires=Sat, 11 May 2024 06:07:04 GMT; secure; SameSite=None
nlec6cd5af3c622eb173e0b971f103c5f257=[2229329,2229337]; expires=Fri, 10 May 2024 06:07:09 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d779d59e4c3a751d7f2b8245418e074a
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.67 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.67:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://luxelinks.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 01:55:00 GMT
expires: Fri, 09 May 2025 01:55:00 GMT
cache-control: public, max-age=31536000
age: 101525
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| hangnailhasten.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSujnNaL%2F7Ymx4GQVCQSXdPpiezy7K4xkgwbvaH4nqS6qrqSTnVXU1V1%2FQkp7ALkuPgTb10vkk2qMuiRw8uOllYJChkLpKD%2BQ88CYtHmTE4%2BqD7va%2B%2Br%2BB779Wne%2B6MhHD0dOU9vS2Voouthl9%2F7U4QXK6vy8wN6oPl6ONo6XLd9C91oob%2Fev0dwXp6MfQD3w%2F8oL4qjUj0YHFKQuYPOkGj4zeWwkbQWsLA%2FB9b58FSD7x%2FRl6A5JPaY%2B8iJBsjS79dEbZX6PyNt1OnaKEN%2Bvzwg6yX6TJDOi8T4yHJDs%2FV0PZk9RF0djCzC93%2FVxjLCfGePEKcHZ6bRNzfn%2FmMFUSGmD%2BLsj%2BGUGNIOgbT9yD5CQEYx%2FUNZOn969qUdOsflk7ZCak9%2FROynJDa7xeRpQ%2BvKTmo39bKFVJnFoOkghyMIbtj5O4IxfYCZHkEVtyF5L%2BSxafryNL9Das0JK9mvUs5hkzGUGIIaj246Sc9uMSDyz2k%2FLTOgiBo%2B5xRf7nDWJO3RRxxP6DtJKCBHy3Dsam9IYp8CKaGYGYHudlBTw5h3I%2BwmxUs92CLCfFu7qDPK5SCoLQEJSUoJUFZEJT96oArG9rqPlfWxcF5Ds9zsxrportHD3TRFRkBNUMYXu3lZ%2BT56Xw8evcn9MRpPWK8RZMmi8JQxEG7Kfy40w6SwG%2ByVhK22rCygrQLs5a35YRc6t1BLifk5cUvEdMjWHUEJj1QF4CWFehmhe3sIZOZSKlyA9FgCQfXFfKihmLL21Nn5KXZjl6p3YRgx1efXLiSj367AGYq5KbCJ%2FIxQVftjm7pkuzf0qUl323khUzlNp3u73ZBC%2FHM1%2B%2BKrVIbvrZih1%2B9yabEtHzwvrDFOs24zLqWfHNNci7MqjZMkB%2FW7IcivuHs5jVnMpev33hrdS3NjbBW6mwMKk82%2FgKTE1J79cXZw3zulz8gzRjGVUjdMTkPSH0Elu%2FA5nP3VhMYNdfEuYfSVSMTxvNDJQmUmGMaV7D%2FwfG8Hhk6vU1ltWd30TULoMU9ZGmFvqnQVxWoGsK6C6MiN8dXf%2F58Gl8gVgujWJmF%2FVgZ9dlsyNPfR7DytN5uNn0adVpBu01FO14Kl5Mo4JSGS1EYRbSJwk6SK9%2Fv%2Fg0AAP%2F%2FAQAA%2F%2F%2FNgBajcgQAAA%3D%3D | 172.240.253.132 | 200 OK | 7 B |
URL GET HTTP/1.1hangnailhasten.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSujnNaL%2F7Ymx4GQVCQSXdPpiezy7K4xkgwbvaH4nqS6qrqSTnVXU1V1%2FQkp7ALkuPgTb10vkk2qMuiRw8uOllYJChkLpKD%2BQ88CYtHmTE4%2BqD7va%2B%2Br%2BB779Wne%2B6MhHD0dOU9vS2Voouthl9%2F7U4QXK6vy8wN6oPl6ONo6XLd9C91oob%2Fev0dwXp6MfQD3w%2F8oL4qjUj0YHFKQuYPOkGj4zeWwkbQWsLA%2FB9b58FSD7x%2FRl6A5JPaY%2B8iJBsjS79dEbZX6PyNt1OnaKEN%2Bvzwg6yX6TJDOi8T4yHJDs%2FV0PZk9RF0djCzC93%2FVxjLCfGePEKcHZ6bRNzfn%2FmMFUSGmD%2BLsj%2BGUGNIOgbT9yD5CQEYx%2FUNZOn969qUdOsflk7ZCak9%2FROynJDa7xeRpQ%2BvKTmo39bKFVJnFoOkghyMIbtj5O4IxfYCZHkEVtyF5L%2BSxafryNL9Das0JK9mvUs5hkzGUGIIaj246Sc9uMSDyz2k%2FLTOgiBo%2B5xRf7nDWJO3RRxxP6DtJKCBHy3Dsam9IYp8CKaGYGYHudlBTw5h3I%2BwmxUs92CLCfFu7qDPK5SCoLQEJSUoJUFZEJT96oArG9rqPlfWxcF5Ds9zsxrportHD3TRFRkBNUMYXu3lZ%2BT56Xw8evcn9MRpPWK8RZMmi8JQxEG7Kfy40w6SwG%2ByVhK22rCygrQLs5a35YRc6t1BLifk5cUvEdMjWHUEJj1QF4CWFehmhe3sIZOZSKlyA9FgCQfXFfKihmLL21Nn5KXZjl6p3YRgx1efXLiSj367AGYq5KbCJ%2FIxQVftjm7pkuzf0qUl323khUzlNp3u73ZBC%2FHM1%2B%2BKrVIbvrZih1%2B9yabEtHzwvrDFOs24zLqWfHNNci7MqjZMkB%2FW7IcivuHs5jVnMpev33hrdS3NjbBW6mwMKk82%2FgKTE1J79cXZw3zulz8gzRjGVUjdMTkPSH0Elu%2FA5nP3VhMYNdfEuYfSVSMTxvNDJQmUmGMaV7D%2FwfG8Hhk6vU1ltWd30TULoMU9ZGmFvqnQVxWoGsK6C6MiN8dXf%2F58Gl8gVgujWJmF%2FVgZ9dlsyNPfR7DytN5uNn0adVpBu01FO14Kl5Mo4JSGS1EYRbSJwk6SK9%2Fv%2Fg0AAP%2F%2FAQAA%2F%2F%2FNgBajcgQAAA%3D%3D IP172.240.253.132:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjecthangnailhasten.com Fingerprint9B:47:58:C5:81:76:13:D4:45:29:13:37:43:29:F6:10:87:1D:2E:F6 ValidityMon, 06 May 2024 08:32:24 GMT - Sun, 04 Aug 2024 08:32:23 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSujnNaL%2F7Ymx4GQVCQSXdPpiezy7K4xkgwbvaH4nqS6qrqSTnVXU1V1%2FQkp7ALkuPgTb10vkk2qMuiRw8uOllYJChkLpKD%2BQ88CYtHmTE4%2BqD7va%2B%2Br%2BB779Wne%2B6MhHD0dOU9vS2Voouthl9%2F7U4QXK6vy8wN6oPl6ONo6XLd9C91oob%2Fev0dwXp6MfQD3w%2F8oL4qjUj0YHFKQuYPOkGj4zeWwkbQWsLA%2FB9b58FSD7x%2FRl6A5JPaY%2B8iJBsjS79dEbZX6PyNt1OnaKEN%2Bvzwg6yX6TJDOi8T4yHJDs%2FV0PZk9RF0djCzC93%2FVxjLCfGePEKcHZ6bRNzfn%2FmMFUSGmD%2BLsj%2BGUGNIOgbT9yD5CQEYx%2FUNZOn969qUdOsflk7ZCak9%2FROynJDa7xeRpQ%2BvKTmo39bKFVJnFoOkghyMIbtj5O4IxfYCZHkEVtyF5L%2BSxafryNL9Das0JK9mvUs5hkzGUGIIaj246Sc9uMSDyz2k%2FLTOgiBo%2B5xRf7nDWJO3RRxxP6DtJKCBHy3Dsam9IYp8CKaGYGYHudlBTw5h3I%2BwmxUs92CLCfFu7qDPK5SCoLQEJSUoJUFZEJT96oArG9rqPlfWxcF5Ds9zsxrportHD3TRFRkBNUMYXu3lZ%2BT56Xw8evcn9MRpPWK8RZMmi8JQxEG7Kfy40w6SwG%2ByVhK22rCygrQLs5a35YRc6t1BLifk5cUvEdMjWHUEJj1QF4CWFehmhe3sIZOZSKlyA9FgCQfXFfKihmLL21Nn5KXZjl6p3YRgx1efXLiSj367AGYq5KbCJ%2FIxQVftjm7pkuzf0qUl323khUzlNp3u73ZBC%2FHM1%2B%2BKrVIbvrZih1%2B9yabEtHzwvrDFOs24zLqWfHNNci7MqjZMkB%2FW7IcivuHs5jVnMpev33hrdS3NjbBW6mwMKk82%2FgKTE1J79cXZw3zulz8gzRjGVUjdMTkPSH0Elu%2FA5nP3VhMYNdfEuYfSVSMTxvNDJQmUmGMaV7D%2FwfG8Hhk6vU1ltWd30TULoMU9ZGmFvqnQVxWoGsK6C6MiN8dXf%2F58Gl8gVgujWJmF%2FVgZ9dlsyNPfR7DytN5uNn0adVpBu01FO14Kl5Mo4JSGS1EYRbSJwk6SK9%2Fv%2Fg0AAP%2F%2FAQAA%2F%2F%2FNgBajcgQAAA%3D%3D HTTP/1.1
Host: hangnailhasten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Cookie: u_pl=23167681; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec6cd5af3c622eb173e0b971f103c5f257=[2229329,2229337]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 06:07:05 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 849f7540cb1e8a99e55814246e30dc0d
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.cloudimagesb.com/cti/d6/e8/37/d6e83777d7311d26f1ac5b2b62a81218/1588233535.jpg | 45.133.44.10 | 200 OK | 28 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/d6/e8/37/d6e83777d7311d26f1ac5b2b62a81218/1588233535.jpg IP45.133.44.10:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3 Hash1dcde64d47d24d151a1433ecf4403dd7 443d6704b5a294e000084d7a8ac823e526093928 d11bcd65a82589c2c31d6fd87cb16ec673dd5640462ad3d20ff53e014a435376
GET /cti/d6/e8/37/d6e83777d7311d26f1ac5b2b62a81218/1588233535.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 06:07:05 GMT
content-type: image/jpeg
content-length: 27832
server: nginx/1.21.6
last-modified: Thu, 30 Apr 2020 07:58:58 GMT
etag: "5eaa8542-6cb8"
expires: Sun, 12 May 2024 06:07:05 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg | 45.133.44.10 | 200 OK | 32 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg IP45.133.44.10:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 321x240, components 3 Hash3528385dd0c31dbd2e5bfc4af7a6bec5 832c580ffd7711115d6c036ab4232f5bd88480a4 bfbfeebfcb679ca578055235614cc679b0757bad272996ef89b7fd5615a2db75
GET /cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 06:07:05 GMT
content-type: image/jpeg
content-length: 32471
server: nginx/1.21.6
last-modified: Thu, 30 Apr 2020 07:58:05 GMT
etag: "5eaa850d-7ed7"
expires: Sun, 12 May 2024 06:07:05 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| luxelinks.xyz/wp-content/plugins/wp-meta-and-date-remover/assets/js/inspector.js?ver=1.1 | 172.67.174.209 | 200 OK | 1.3 kB |
URL GET HTTP/3luxelinks.xyz/wp-content/plugins/wp-meta-and-date-remover/assets/js/inspector.js?ver=1.1 IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
File typeJavaScript source, ASCII text Hashdd5ae6bc707588fef1ed7e01dbdbe20f bde44294a64da36bd3382ab6646a976299156fea 756530782672d6af0bec6df0d11aaa9f36ee2ed6e2337e42620b447a718ed8ec
GET /wp-content/plugins/wp-meta-and-date-remover/assets/js/inspector.js?ver=1.1 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/javascript
last-modified: Sun, 24 Mar 2024 12:53:06 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: HIT
age: 749491
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l9ZiZ0Tj4FRddU0wRxB%2BK2HDYBk2ZmtRT3juGrQ0oZkOqm6GW0RqqHmY4Kx%2FoL0tRsjSEqXhM%2BjzV%2BeeO3AmJo2uRda9I11O%2FelrLJmbxjpI726j92wi2JcVGHAMirlM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf2e9a5b5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hangnailhasten.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSujnOKF3%2FsTQ%2BDICjIpHsmM5PssizGGAnGzf5QXE9Sv3pSTnVXU9U1Pckp7ILkOHhTL51vkg3qsujRg4tOFhYJCpmL5GD%2BA0%2FC4lFmDI4%2B6H7vq%2B8r%2BN579em%2BPyd1eHq2%2Bp7ZUVrThWYtrL52J4quVDdU6vvV%2FlLr49bilartXV5u1cLXq%2B9I3jUL9TAKwyiMqmvKytj0FyYkVPZgOaoth7XFei1qLqJv%2F4%2BdD%2BBoANE7Jy9AiXHlcXAJio%2BQJt%2BuStfNTfbG24nXNDcWPXH0QdpNTZEimZWxDRCnRxdqGHe69ggmPZzahen9K2RqTIInj8DSowuTYL2DqU%2BmIVMw8SyK3ghSj6DoCNzcgxKnBOAC1zeRJvevG1vQ7X9YOmHHpPL0T6hiTCq%2FX0KaPFzRql%2B9bbTPlUkd%2BnEJ1R9BdUbI%2FDHynTmo4hg8vwslfiULTzeQJgebThsoUU57V2oEFY%2Bg5QDUBfCTTwXwcQCfBUjEWZVHUdQOBafh0jLnDdGWrCXCiLbjiEZhawmeT%2BwNkGcDcD0At7vI7C66agDrf4TbKuFEAJePSXBzFz1RopAEhSMoKEGhCIqcoOiVh0K7uivvC%2B08iy5y%2FSI3yqHJO%2Fv00OQdmRJQO4AV5X52Tp6fzCegd39CV55VW1w0adzgrXpdsqjdkCFbbkdxFDZ4M64323CqhHJz05Z31Jhc7t5Bpsbk5YUvwegxnD4GVwGoj0CLEnSrxE76kKtUJlT7vqzxWECYElleQb4d7Otz8tJ0R69UbkLyk2tP5q9mw9%2FmwW2JzJb4RD0m6Oi94S1TkINbpnDku80sV4naoZP93c5pLp%2F5%2Bl25XRgr1lfd4Ks3%2BYSYlA%2Fely7foKlQaceRb1aUENKuGcsl%2BWHdfSjZDe%2B2VrxNfbZx46219SSz0jll0hGoOt38C1yNSeXVF6cP87lf%2FoCyI1hfIvEn5CKgzDF4tguXzdw7Q2D1TMOyAIUvh7bOZodaEWg5w5SVcP%2FBbFYPLZ3cpqrcd3vo2DnQ%2FB7SpETPlujpElQP4Pz8MM%2FsybWfP5%2FEF2B6bsi0nTtg2urPpkOe%2FD6CU2fVRijaTMayzeRiczGWXLBmk4U85qwhlpY4cjeOr36%2F9zcAAAD%2F%2FwEAAP%2F%2FTVTDS3IEAAA%3D | 192.243.61.225 | 200 OK | 7 B |
URL GET HTTP/1.1hangnailhasten.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSujnOKF3%2FsTQ%2BDICjIpHsmM5PssizGGAnGzf5QXE9Sv3pSTnVXU9U1Pckp7ILkOHhTL51vkg3qsujRg4tOFhYJCpmL5GD%2BA0%2FC4lFmDI4%2B6H7vq%2B8r%2BN579em%2BPyd1eHq2%2Bp7ZUVrThWYtrL52J4quVDdU6vvV%2FlLr49bilartXV5u1cLXq%2B9I3jUL9TAKwyiMqmvKytj0FyYkVPZgOaoth7XFei1qLqJv%2F4%2BdD%2BBoANE7Jy9AiXHlcXAJio%2BQJt%2BuStfNTfbG24nXNDcWPXH0QdpNTZEimZWxDRCnRxdqGHe69ggmPZzahen9K2RqTIInj8DSowuTYL2DqU%2BmIVMw8SyK3ghSj6DoCNzcgxKnBOAC1zeRJvevG1vQ7X9YOmHHpPL0T6hiTCq%2FX0KaPFzRql%2B9bbTPlUkd%2BnEJ1R9BdUbI%2FDHynTmo4hg8vwslfiULTzeQJgebThsoUU57V2oEFY%2Bg5QDUBfCTTwXwcQCfBUjEWZVHUdQOBafh0jLnDdGWrCXCiLbjiEZhawmeT%2BwNkGcDcD0At7vI7C66agDrf4TbKuFEAJePSXBzFz1RopAEhSMoKEGhCIqcoOiVh0K7uivvC%2B08iy5y%2FSI3yqHJO%2Fv00OQdmRJQO4AV5X52Tp6fzCegd39CV55VW1w0adzgrXpdsqjdkCFbbkdxFDZ4M64323CqhHJz05Z31Jhc7t5Bpsbk5YUvwegxnD4GVwGoj0CLEnSrxE76kKtUJlT7vqzxWECYElleQb4d7Otz8tJ0R69UbkLyk2tP5q9mw9%2FmwW2JzJb4RD0m6Oi94S1TkINbpnDku80sV4naoZP93c5pLp%2F5%2Bl25XRgr1lfd4Ks3%2BYSYlA%2Fely7foKlQaceRb1aUENKuGcsl%2BWHdfSjZDe%2B2VrxNfbZx46219SSz0jll0hGoOt38C1yNSeXVF6cP87lf%2FoCyI1hfIvEn5CKgzDF4tguXzdw7Q2D1TMOyAIUvh7bOZodaEWg5w5SVcP%2FBbFYPLZ3cpqrcd3vo2DnQ%2FB7SpETPlujpElQP4Pz8MM%2FsybWfP5%2FEF2B6bsi0nTtg2urPpkOe%2FD6CU2fVRijaTMayzeRiczGWXLBmk4U85qwhlpY4cjeOr36%2F9zcAAAD%2F%2FwEAAP%2F%2FTVTDS3IEAAA%3D IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjecthangnailhasten.com Fingerprint9B:47:58:C5:81:76:13:D4:45:29:13:37:43:29:F6:10:87:1D:2E:F6 ValidityMon, 06 May 2024 08:32:24 GMT - Sun, 04 Aug 2024 08:32:23 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSujnOKF3%2FsTQ%2BDICjIpHsmM5PssizGGAnGzf5QXE9Sv3pSTnVXU9U1Pckp7ILkOHhTL51vkg3qsujRg4tOFhYJCpmL5GD%2BA0%2FC4lFmDI4%2B6H7vq%2B8r%2BN579em%2BPyd1eHq2%2Bp7ZUVrThWYtrL52J4quVDdU6vvV%2FlLr49bilartXV5u1cLXq%2B9I3jUL9TAKwyiMqmvKytj0FyYkVPZgOaoth7XFei1qLqJv%2F4%2BdD%2BBoANE7Jy9AiXHlcXAJio%2BQJt%2BuStfNTfbG24nXNDcWPXH0QdpNTZEimZWxDRCnRxdqGHe69ggmPZzahen9K2RqTIInj8DSowuTYL2DqU%2BmIVMw8SyK3ghSj6DoCNzcgxKnBOAC1zeRJvevG1vQ7X9YOmHHpPL0T6hiTCq%2FX0KaPFzRql%2B9bbTPlUkd%2BnEJ1R9BdUbI%2FDHynTmo4hg8vwslfiULTzeQJgebThsoUU57V2oEFY%2Bg5QDUBfCTTwXwcQCfBUjEWZVHUdQOBafh0jLnDdGWrCXCiLbjiEZhawmeT%2BwNkGcDcD0At7vI7C66agDrf4TbKuFEAJePSXBzFz1RopAEhSMoKEGhCIqcoOiVh0K7uivvC%2B08iy5y%2FSI3yqHJO%2Fv00OQdmRJQO4AV5X52Tp6fzCegd39CV55VW1w0adzgrXpdsqjdkCFbbkdxFDZ4M64323CqhHJz05Z31Jhc7t5Bpsbk5YUvwegxnD4GVwGoj0CLEnSrxE76kKtUJlT7vqzxWECYElleQb4d7Otz8tJ0R69UbkLyk2tP5q9mw9%2FmwW2JzJb4RD0m6Oi94S1TkINbpnDku80sV4naoZP93c5pLp%2F5%2Bl25XRgr1lfd4Ks3%2BYSYlA%2Fely7foKlQaceRb1aUENKuGcsl%2BWHdfSjZDe%2B2VrxNfbZx46219SSz0jll0hGoOt38C1yNSeXVF6cP87lf%2FoCyI1hfIvEn5CKgzDF4tguXzdw7Q2D1TMOyAIUvh7bOZodaEWg5w5SVcP%2FBbFYPLZ3cpqrcd3vo2DnQ%2FB7SpETPlujpElQP4Pz8MM%2FsybWfP5%2FEF2B6bsi0nTtg2urPpkOe%2FD6CU2fVRijaTMayzeRiczGWXLBmk4U85qwhlpY4cjeOr36%2F9zcAAAD%2F%2FwEAAP%2F%2FTVTDS3IEAAA%3D HTTP/1.1
Host: hangnailhasten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Cookie: u_pl=23167681; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec6cd5af3c622eb173e0b971f103c5f257=[2229329,2229337]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 06:07:05 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6a25f04a4c4c47ef1e5354291bfb2ea2
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| hangnailhasten.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuunt%2Bc8rv4sTc9DIKgIJPunkxPZpdlMcZIMG72Q3E9SXVV9aSc6q6mqnt6klPYBclx8KZeOs8kG9Rl0aMHF50sLBIUMhfJwfwLHoTFo%2FRscPSF4n3fep6C533e%2BnQ%2FPyc%2Bcnq2%2Bp7ekUrRxXbTbbx2x%2FOuNDZkkg8bw%2BXg42DpSsMMLneDpvt64x3B%2BnrRdz3X9VyvsSaNiPRwsQIh0wddr9l1m0t%2B02svYWj%2B29vcgaUO%2BOCcvADJp%2FXHziVINkESf7sqbD%2FT6Rtvx7mimTYY8KMPkn6iiwTxvIyMgyg5umBD29O1R9DJ4Uwu9OAfYiinxHnyCGFydCES4eBgpjNUEAlC%2Fn8UgwmEmkDSCZi%2BB8lPCcA4rm8iie9f16ag289QWqFTUn%2F6J2QxJfXfLyGJH64oOWzc1irPpE4shlEJOZxA9iZI82NkOzXI4hgsuwvJfyWLTzeQxAebVmlIXs5ml3ICGU2gxAjUOsirIx3kkYM8dRDzswbzPK%2Fjckbd5S5jLd4RYcBdj3Yij3pusIycVfJGyNIRmBqBmV2kZhd9OYLJf4TdKmG5A5tNiXNzFwNeohAEhSUoKEEhCYqMoBiUh1xZ35b3ubJ56F1k%2FyK3yrHOevv0UGc9kRBQM4Lh5X56Tp6v%2FHHo3Z%2FQF2eNgPE2jVos8H0Rep2WcMNux4s8t8Xakd%2FuwMoS0tZmI%2B%2FIKbncv4NUTsnLi18ipMew6hhMOqC5B1qUoFsldpKHTCYipiofiiaLOLgukWZ1ZNvOvjonL8129Er9Iwh2cu3JwtV0%2FNsCmCmRmhKfyMcEPbU3vqULcnBLF5Z8t5lmMpY7tNrf7Yxm4n9fvyu2C234%2BqodffUmq4CqfPC%2BsNkGTbhMepZ8syI5F2ZNGybID%2Bv2QxHeyO3WSm6SPN248dbaepwaYa3UyQRUnm7%2BBSanpP7qi7OP%2Bdwvf0CaCUxeIs5PyEVA6mOwdBc2nau3msCoOSdMayjycmz8cH6pJIES856GJey%2F%2BnBejw2tXlNZ7ts99EwNNLuHJC4xMCUGqgRVI9h8YZyl5uTaz59X8QVCVRuHytQOQmXUZ5XJN585beVZo9NquTTotr1Oh4pOuOQvR4HHKfWXAj8IaAuZnUZXv9%2F7GwAA%2F%2F8BAAD%2F%2F8d9NINyBAAA | 192.243.61.225 | 200 OK | 7 B |
URL GET HTTP/1.1hangnailhasten.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuunt%2Bc8rv4sTc9DIKgIJPunkxPZpdlMcZIMG72Q3E9SXVV9aSc6q6mqnt6klPYBclx8KZeOs8kG9Rl0aMHF50sLBIUMhfJwfwLHoTFo%2FRscPSF4n3fep6C533e%2BnQ%2FPyc%2Bcnq2%2Bp7ekUrRxXbTbbx2x%2FOuNDZkkg8bw%2BXg42DpSsMMLneDpvt64x3B%2BnrRdz3X9VyvsSaNiPRwsQIh0wddr9l1m0t%2B02svYWj%2B29vcgaUO%2BOCcvADJp%2FXHziVINkESf7sqbD%2FT6Rtvx7mimTYY8KMPkn6iiwTxvIyMgyg5umBD29O1R9DJ4Uwu9OAfYiinxHnyCGFydCES4eBgpjNUEAlC%2Fn8UgwmEmkDSCZi%2BB8lPCcA4rm8iie9f16ag289QWqFTUn%2F6J2QxJfXfLyGJH64oOWzc1irPpE4shlEJOZxA9iZI82NkOzXI4hgsuwvJfyWLTzeQxAebVmlIXs5ml3ICGU2gxAjUOsirIx3kkYM8dRDzswbzPK%2Fjckbd5S5jLd4RYcBdj3Yij3pusIycVfJGyNIRmBqBmV2kZhd9OYLJf4TdKmG5A5tNiXNzFwNeohAEhSUoKEEhCYqMoBiUh1xZ35b3ubJ56F1k%2FyK3yrHOevv0UGc9kRBQM4Lh5X56Tp6v%2FHHo3Z%2FQF2eNgPE2jVos8H0Rep2WcMNux4s8t8Xakd%2FuwMoS0tZmI%2B%2FIKbncv4NUTsnLi18ipMew6hhMOqC5B1qUoFsldpKHTCYipiofiiaLOLgukWZ1ZNvOvjonL8129Er9Iwh2cu3JwtV0%2FNsCmCmRmhKfyMcEPbU3vqULcnBLF5Z8t5lmMpY7tNrf7Yxm4n9fvyu2C234%2BqodffUmq4CqfPC%2BsNkGTbhMepZ8syI5F2ZNGybID%2Bv2QxHeyO3WSm6SPN248dbaepwaYa3UyQRUnm7%2BBSanpP7qi7OP%2Bdwvf0CaCUxeIs5PyEVA6mOwdBc2nau3msCoOSdMayjycmz8cH6pJIES856GJey%2F%2BnBejw2tXlNZ7ts99EwNNLuHJC4xMCUGqgRVI9h8YZyl5uTaz59X8QVCVRuHytQOQmXUZ5XJN585beVZo9NquTTotr1Oh4pOuOQvR4HHKfWXAj8IaAuZnUZXv9%2F7GwAA%2F%2F8BAAD%2F%2F8d9NINyBAAA IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjecthangnailhasten.com Fingerprint9B:47:58:C5:81:76:13:D4:45:29:13:37:43:29:F6:10:87:1D:2E:F6 ValidityMon, 06 May 2024 08:32:24 GMT - Sun, 04 Aug 2024 08:32:23 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuunt%2Bc8rv4sTc9DIKgIJPunkxPZpdlMcZIMG72Q3E9SXVV9aSc6q6mqnt6klPYBclx8KZeOs8kG9Rl0aMHF50sLBIUMhfJwfwLHoTFo%2FRscPSF4n3fep6C533e%2BnQ%2FPyc%2Bcnq2%2Bp7ekUrRxXbTbbx2x%2FOuNDZkkg8bw%2BXg42DpSsMMLneDpvt64x3B%2BnrRdz3X9VyvsSaNiPRwsQIh0wddr9l1m0t%2B02svYWj%2B29vcgaUO%2BOCcvADJp%2FXHziVINkESf7sqbD%2FT6Rtvx7mimTYY8KMPkn6iiwTxvIyMgyg5umBD29O1R9DJ4Uwu9OAfYiinxHnyCGFydCES4eBgpjNUEAlC%2Fn8UgwmEmkDSCZi%2BB8lPCcA4rm8iie9f16ag289QWqFTUn%2F6J2QxJfXfLyGJH64oOWzc1irPpE4shlEJOZxA9iZI82NkOzXI4hgsuwvJfyWLTzeQxAebVmlIXs5ml3ICGU2gxAjUOsirIx3kkYM8dRDzswbzPK%2Fjckbd5S5jLd4RYcBdj3Yij3pusIycVfJGyNIRmBqBmV2kZhd9OYLJf4TdKmG5A5tNiXNzFwNeohAEhSUoKEEhCYqMoBiUh1xZ35b3ubJ56F1k%2FyK3yrHOevv0UGc9kRBQM4Lh5X56Tp6v%2FHHo3Z%2FQF2eNgPE2jVos8H0Rep2WcMNux4s8t8Xakd%2FuwMoS0tZmI%2B%2FIKbncv4NUTsnLi18ipMew6hhMOqC5B1qUoFsldpKHTCYipiofiiaLOLgukWZ1ZNvOvjonL8129Er9Iwh2cu3JwtV0%2FNsCmCmRmhKfyMcEPbU3vqULcnBLF5Z8t5lmMpY7tNrf7Yxm4n9fvyu2C234%2BqodffUmq4CqfPC%2BsNkGTbhMepZ8syI5F2ZNGybID%2Bv2QxHeyO3WSm6SPN248dbaepwaYa3UyQRUnm7%2BBSanpP7qi7OP%2Bdwvf0CaCUxeIs5PyEVA6mOwdBc2nau3msCoOSdMayjycmz8cH6pJIES856GJey%2F%2BnBejw2tXlNZ7ts99EwNNLuHJC4xMCUGqgRVI9h8YZyl5uTaz59X8QVCVRuHytQOQmXUZ5XJN585beVZo9NquTTotr1Oh4pOuOQvR4HHKfWXAj8IaAuZnUZXv9%2F7GwAA%2F%2F8BAAD%2F%2F8d9NINyBAAA HTTP/1.1
Host: hangnailhasten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Cookie: u_pl=23167681; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec6cd5af3c622eb173e0b971f103c5f257=[2229329,2229337]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 06:07:05 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4d3a3d42b2fde5b1390252261015d0b2
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| luxelinks.xyz/wp-content/plugins/elementor/assets/css/modules/lazyload/frontend.min.css?ver=3.20.3 | 172.67.174.209 | 200 OK | 8.4 kB |
URL GET HTTP/3luxelinks.xyz/wp-content/plugins/elementor/assets/css/modules/lazyload/frontend.min.css?ver=3.20.3 IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
File typeASCII text, with very long lines (413), with no line terminators Hashcb17d4e4c3fd00800b0f561b8a057149 638201b94e04bd2082788a774dde22696ad7402e 5ecb54f91384af7226cb4f18f87588edd49ceff5bdd4a3010336e1c22ccc390d
GET /wp-content/plugins/elementor/assets/css/modules/lazyload/frontend.min.css?ver=3.20.3 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/css
cache-control: public, max-age=31557600
expires: Wed, 07 May 2025 13:11:01 GMT
last-modified: Tue, 26 Mar 2024 21:18:23 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 255362
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e3odJcYbrI1z%2B64sJJOXmUWpdjczdx2qiwNgp%2FT%2FmUM9bZoA%2FMIUb%2FpdiGwxtMzeT%2F%2Fw%2FVf6qgRzkuxCcVvhRCGmHkXJMHNsHpcS%2FkaJua7BNl05ZZXRknPu7rwdQhpu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf2e8a475684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| luxelinks.xyz/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 172.67.174.209 | 200 OK | 88 kB |
URL GET HTTP/3luxelinks.xyz/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/javascript
cache-control: public, max-age=31557600
expires: Fri, 09 May 2025 00:22:42 GMT
last-modified: Mon, 28 Aug 2023 17:14:24 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 128661
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tt2mwnRPE5ug3dYjvPLTgcqV8LyWjSZm8NwlCgYGXcg6%2BHOTpVj2wY5uVjks2ypVuPQisWk53%2F37%2F7VmEdodPBO5Zr9ayNj%2BHOm24N%2B24Cbt90RR1eh11oRAfxmhFd8z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf2e8a4a5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| luxelinks.xyz/wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 | 172.67.174.209 | 200 OK | 113 kB |
URL GET HTTP/3luxelinks.xyz/wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
Size113 kB (113381 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/css
cache-control: public, max-age=31557600
expires: Fri, 09 May 2025 00:34:20 GMT
last-modified: Tue, 27 Feb 2024 14:48:24 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 127963
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vyLYauJLYli1O6nN7R1rRr6NeGvCNqhb8D84cLWYRgY9n%2F8MEuA8dorZjcU15NNQeSvW84t1yRjh95FyO6NqX%2F%2Fko2Qt%2BFl%2FFKJK5amDzqMj8atVBLuavIdg8CvTbzKK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf2e8a305684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| luxelinks.xyz/wp-content/themes/allium/style.css?ver=6.5.3 | 172.67.174.209 | 200 OK | 66 kB |
URL GET HTTP/3luxelinks.xyz/wp-content/themes/allium/style.css?ver=6.5.3 IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
File typeASCII text, with very long lines (797) Hash49d5ecd8cfdf7918ff6e8612eecfccb7 2faf7c8b7e1d576e8322ec49c5f50dae4f67d061 343efe64e5fd66227ba9d6848ecac11a83f31600e45b8c0cfc021d2e8abcbc99
GET /wp-content/themes/allium/style.css?ver=6.5.3 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/css
cache-control: public, max-age=31557600
expires: Fri, 09 May 2025 00:22:42 GMT
last-modified: Mon, 25 Mar 2024 03:17:48 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 128661
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UETLhmrkWr3O%2BnqtCQ6RB1yyI91zTCU7JyuahMYYF0eWdnNlP3QPwUGJ2AOulCS1zXJX%2Bpxnvv5SfZZhNZUFm2yvNYtvVCNyCp9tR1PZI1lfCeM7mRSHxQJxpRy%2BYgkV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf2e8a425684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| luxelinks.xyz/wp-content/themes/allium/js/custom.js?ver=1.0 | 172.67.174.209 | 200 OK | 4.9 kB |
URL GET HTTP/3luxelinks.xyz/wp-content/themes/allium/js/custom.js?ver=1.0 IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
File typeJavaScript source, ASCII text, with very long lines (5094), with no line terminators Hashc11689e949d356d4ae6c939f36a2a021 97d86621f232367d0e590f39ca2110a21c9e9425 5b190a07a0e5d314b6a7483f45935f21f37e236fd60d044706613d940947a7d4
GET /wp-content/themes/allium/js/custom.js?ver=1.0 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/javascript
last-modified: Sat, 23 Mar 2024 09:12:20 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: HIT
age: 754190
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3g4Gjp369xcwFjUU7Ly3zXaaP5gmy0AP0aTHoDkv%2FqR7jrrj4HJ0OKDuhbg5IGHb%2F%2Ff0KCimJzo1GUQj4NUYkUa7dnJduOJ0Kwb5bymUjwAdjnByW4uri6deMRmjCDiZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf2e9a635684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| s.w.org/images/core/emoji/15.0.3/svg/26a1.svg | 192.0.77.48 | 200 OK | 451 B |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/26a1.svg IP192.0.77.48:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash1c5191556adb5f9bb3d08429af07a5de 2c8df10e93996cb69ad6cb7f8ab18aa663342520 1fcda03bfc72718435c7f954d2928ea6f42c6fcdf0cb1cbebf175d20730cc109
GET /images/core/emoji/15.0.3/svg/26a1.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 06:07:03 GMT
content-type: image/svg+xml
content-length: 451
last-modified: Tue, 30 Jan 2024 01:18:35 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 2
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/15.0.3/svg/1f4cc.svg | 192.0.77.48 | 200 OK | 640 B |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/1f4cc.svg IP192.0.77.48:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashc61613ceaee101e48637a0a19d4e2d8b b10e52fb4ab5635f122dc7ac257cb2392e880b74 8ce7a8c7d494cf49a4fca79db30a205bfbe7c469e958a65bf7ee5ece7605e53f
GET /images/core/emoji/15.0.3/svg/1f4cc.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 06:07:03 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:18:13 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 2
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| luxelinks.xyz/wp-content/themes/allium/css/bootstrap-custom.css?ver=6.5.3 | 172.67.174.209 | 200 OK | 32 kB |
URL GET HTTP/3luxelinks.xyz/wp-content/themes/allium/css/bootstrap-custom.css?ver=6.5.3 IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
Hash8f0d61e20223ac7faa3eb6ec44dc4155 77fa9ee679abc4c40f075d4b0a1b063c68fb5afc 3b8e92f7fca6451069a3ffd853597ad9c7ccc075bcf1bb326ec866579cf5e0cb
GET /wp-content/themes/allium/css/bootstrap-custom.css?ver=6.5.3 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/css
cache-control: public, max-age=31557600
expires: Fri, 09 May 2025 00:22:42 GMT
last-modified: Sat, 23 Mar 2024 09:12:20 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 128661
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6GgAlwT%2FRnJzjpISMCvKzXdPRpDK2rlDYyhQNylPeNlE6M2R7hK2BBoaYIkjcz0sr39dpCo9JCk3C3mcch29uGNc643nuZxnTUhOi0gk7njYy2i4nvLImrE%2FkzGDJP1k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf2e8a335684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| luxelinks.xyz/wp-content/themes/allium/js/hover-intent.js?ver=r7 | 172.67.174.209 | 200 OK | 4.9 kB |
URL GET HTTP/3luxelinks.xyz/wp-content/themes/allium/js/hover-intent.js?ver=r7 IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
File typeJavaScript source, ASCII text, with very long lines (5073), with no line terminators Hash497cc95030fec31bb7b76d1aa5648bc4 79aa68ebb9b27737ee92c88787ad6fae367866a6 50fd3724456e9c44716daf73d5d4d05ccb7a78136a042f98435442c721baf920
GET /wp-content/themes/allium/js/hover-intent.js?ver=r7 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/javascript
last-modified: Sat, 23 Mar 2024 09:12:20 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: HIT
age: 754190
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=67mrptGSl8Zmp2hcaMEa6T%2Fn414yRrhhDEqv12NFKqV6ft1FrjNc8z53dCHtSu52WviqMQopYqL%2FT%2FXZEVcGOP4GIBbYerz52gpOtP4MeenEAQoI7hDepeaoSyWITyhE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf2e9a5e5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hangnailhasten.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWtkxRet179ezW%2Fjx%2Bx00QiCgnTe6053JzMMg2OMBONkPhTHldTX65Rd79Wj6lW%2FTlZhBiTLxp26eTmdTFCHQZcuHLQzMEhQSG8kC%2FMvuBAGl9I9wdYLxb23zik499z6dM%2BfkQY8PV15z2wrrelCqx7WXrsTRZdr6yr1g9pgqf1xe%2FFyzfYvLbfr4eu1dyTvmYVGGIVhFEa1VWVlbAYLUxAqe7Ac1ZfD%2BmKjHrUWMbD%2F7Z0P4GgA0T8jL0CJSfVxcBGKj5Em365I18tN9sbbidc0NxZ9cfhB2ktNkSKZl7ENEKeH52wYd7L6CCY9mMmF6f9DZGpCgiePwNLDc5Fg%2Ff2ZTqYhUzDxfxT9MaQeQ9ExuLkHJU4IwAWubyBN7l83tqBbz1A6RSek%2BvRPqGJCqr9fRJo8vKbVoHbbaJ8rkzoM4hJqMIbqjpH5I%2BTbFajiCDy%2FCyV%2BJQtP15Em%2BxtOGyhRzmZXagwVj6HlENQF8NOjAvg4gM8CJOK0xqMo6oSC03BpmfOm6EjWFmFEO3FEo7C9BM%2Bn8obIsyG4HoLbHWR2Bz01hPU%2Fwm2WcCKAyyckuLmDvihRSILCERSUoFAERU5Q9MsDoV3DlfeFdp5F57lxnpvlyOTdPXpg8q5MCagdwopyLzsjz0%2F9Cejdn9CTp7U2Fy0aN3m70ZAs6jRlyJY7URyFTd6KG60OnCqhXGU28raakEu9O8jUhLy88CUYPYLTR%2BAqAPURaFGCbpbYTh9ylcqEaj%2BQdR4LCFMiy6vIt4I9fUZemu3olepHkPz46pMLV7LRbxfAbYnMlvhEPSbo6t3RLVOQ%2FVumcOS7jSxXidqm0%2F3dzmku%2F%2Ff1u3KrMFasrbjhV2%2FyKTAtH7wvXb5OU6HSriPfXFNCSLtqLJfkhzX3oWQ3vNu85m3qs%2FUbb62uJZmVzimTjkHVycZf4GpCqq%2B%2BOPuYz%2F3yB5Qdw%2FoSiT8m5wFljsCzHbhsrt4ZAqvnHJZVUPhyZBtsfqkVgZbznrIS7l89m9cjS6evqSr33C66tgKa30OalOjbEn1dguohnL8wyjN7fPXnz6fxBZiujJi2lX2mrf5savLNZ047dVprhqLDZCw7TC62FmPJBWu1WMhjzppiaYkjd5P4yve7fwMAAP%2F%2FAQAA%2F%2F9HqeFrcgQAAA%3D%3D | 172.240.253.132 | 200 OK | 0 B |
URL GET HTTP/1.1hangnailhasten.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWtkxRet179ezW%2Fjx%2Bx00QiCgnTe6053JzMMg2OMBONkPhTHldTX65Rd79Wj6lW%2FTlZhBiTLxp26eTmdTFCHQZcuHLQzMEhQSG8kC%2FMvuBAGl9I9wdYLxb23zik499z6dM%2BfkQY8PV15z2wrrelCqx7WXrsTRZdr6yr1g9pgqf1xe%2FFyzfYvLbfr4eu1dyTvmYVGGIVhFEa1VWVlbAYLUxAqe7Ac1ZfD%2BmKjHrUWMbD%2F7Z0P4GgA0T8jL0CJSfVxcBGKj5Em365I18tN9sbbidc0NxZ9cfhB2ktNkSKZl7ENEKeH52wYd7L6CCY9mMmF6f9DZGpCgiePwNLDc5Fg%2Ff2ZTqYhUzDxfxT9MaQeQ9ExuLkHJU4IwAWubyBN7l83tqBbz1A6RSek%2BvRPqGJCqr9fRJo8vKbVoHbbaJ8rkzoM4hJqMIbqjpH5I%2BTbFajiCDy%2FCyV%2BJQtP15Em%2BxtOGyhRzmZXagwVj6HlENQF8NOjAvg4gM8CJOK0xqMo6oSC03BpmfOm6EjWFmFEO3FEo7C9BM%2Bn8obIsyG4HoLbHWR2Bz01hPU%2Fwm2WcCKAyyckuLmDvihRSILCERSUoFAERU5Q9MsDoV3DlfeFdp5F57lxnpvlyOTdPXpg8q5MCagdwopyLzsjz0%2F9Cejdn9CTp7U2Fy0aN3m70ZAs6jRlyJY7URyFTd6KG60OnCqhXGU28raakEu9O8jUhLy88CUYPYLTR%2BAqAPURaFGCbpbYTh9ylcqEaj%2BQdR4LCFMiy6vIt4I9fUZemu3olepHkPz46pMLV7LRbxfAbYnMlvhEPSbo6t3RLVOQ%2FVumcOS7jSxXidqm0%2F3dzmku%2F%2Ff1u3KrMFasrbjhV2%2FyKTAtH7wvXb5OU6HSriPfXFNCSLtqLJfkhzX3oWQ3vNu85m3qs%2FUbb62uJZmVzimTjkHVycZf4GpCqq%2B%2BOPuYz%2F3yB5Qdw%2FoSiT8m5wFljsCzHbhsrt4ZAqvnHJZVUPhyZBtsfqkVgZbznrIS7l89m9cjS6evqSr33C66tgKa30OalOjbEn1dguohnL8wyjN7fPXnz6fxBZiujJi2lX2mrf5savLNZ047dVprhqLDZCw7TC62FmPJBWu1WMhjzppiaYkjd5P4yve7fwMAAP%2F%2FAQAA%2F%2F9HqeFrcgQAAA%3D%3D IP172.240.253.132:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjecthangnailhasten.com Fingerprint9B:47:58:C5:81:76:13:D4:45:29:13:37:43:29:F6:10:87:1D:2E:F6 ValidityMon, 06 May 2024 08:32:24 GMT - Sun, 04 Aug 2024 08:32:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzWtkxRet179ezW%2Fjx%2Bx00QiCgnTe6053JzMMg2OMBONkPhTHldTX65Rd79Wj6lW%2FTlZhBiTLxp26eTmdTFCHQZcuHLQzMEhQSG8kC%2FMvuBAGl9I9wdYLxb23zik499z6dM%2BfkQY8PV15z2wrrelCqx7WXrsTRZdr6yr1g9pgqf1xe%2FFyzfYvLbfr4eu1dyTvmYVGGIVhFEa1VWVlbAYLUxAqe7Ac1ZfD%2BmKjHrUWMbD%2F7Z0P4GgA0T8jL0CJSfVxcBGKj5Em365I18tN9sbbidc0NxZ9cfhB2ktNkSKZl7ENEKeH52wYd7L6CCY9mMmF6f9DZGpCgiePwNLDc5Fg%2Ff2ZTqYhUzDxfxT9MaQeQ9ExuLkHJU4IwAWubyBN7l83tqBbz1A6RSek%2BvRPqGJCqr9fRJo8vKbVoHbbaJ8rkzoM4hJqMIbqjpH5I%2BTbFajiCDy%2FCyV%2BJQtP15Em%2BxtOGyhRzmZXagwVj6HlENQF8NOjAvg4gM8CJOK0xqMo6oSC03BpmfOm6EjWFmFEO3FEo7C9BM%2Bn8obIsyG4HoLbHWR2Bz01hPU%2Fwm2WcCKAyyckuLmDvihRSILCERSUoFAERU5Q9MsDoV3DlfeFdp5F57lxnpvlyOTdPXpg8q5MCagdwopyLzsjz0%2F9Cejdn9CTp7U2Fy0aN3m70ZAs6jRlyJY7URyFTd6KG60OnCqhXGU28raakEu9O8jUhLy88CUYPYLTR%2BAqAPURaFGCbpbYTh9ylcqEaj%2BQdR4LCFMiy6vIt4I9fUZemu3olepHkPz46pMLV7LRbxfAbYnMlvhEPSbo6t3RLVOQ%2FVumcOS7jSxXidqm0%2F3dzmku%2F%2Ff1u3KrMFasrbjhV2%2FyKTAtH7wvXb5OU6HSriPfXFNCSLtqLJfkhzX3oWQ3vNu85m3qs%2FUbb62uJZmVzimTjkHVycZf4GpCqq%2B%2BOPuYz%2F3yB5Qdw%2FoSiT8m5wFljsCzHbhsrt4ZAqvnHJZVUPhyZBtsfqkVgZbznrIS7l89m9cjS6evqSr33C66tgKa30OalOjbEn1dguohnL8wyjN7fPXnz6fxBZiujJi2lX2mrf5savLNZ047dVprhqLDZCw7TC62FmPJBWu1WMhjzppiaYkjd5P4yve7fwMAAP%2F%2FAQAA%2F%2F9HqeFrcgQAAA%3D%3D HTTP/1.1
Host: hangnailhasten.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Cookie: u_pl=23167681; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec6cd5af3c622eb173e0b971f103c5f257=[2229329,2229337]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 10 May 2024 06:07:05 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cdba5e4a73710ddf8357939b241c9be7
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| fonts.googleapis.com/css?family=Nunito+Sans%3A400%2C400i%2C700%2C700i%7CRoboto%3A400%2C400i%2C700%2C700i&subset=latin%2Clatin-ext | 142.250.74.106 | 200 OK | 17 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Nunito+Sans%3A400%2C400i%2C700%2C700i%7CRoboto%3A400%2C400i%2C700%2C700i&subset=latin%2Clatin-ext IP142.250.74.106:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash118f7f378ba46e4294d9695f3b8142e4 ceb54acd677c27bbcf66fae1b369a437ab18491c f332b7f479f87446d3d616d7adf8eddd7db728b9af79169b5ebc07412d4e45aa
GET /css?family=Nunito+Sans%3A400%2C400i%2C700%2C700i%7CRoboto%3A400%2C400i%2C700%2C700i&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 06:07:03 GMT
date: Fri, 10 May 2024 06:07:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/15.0.3/svg/2705.svg | 192.0.77.48 | 200 OK | 482 B |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/2705.svg IP192.0.77.48:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash0cbd3fbf01d56c89f2f43c9a52c0ffee 4a25ff28a37118f76b3c5e799bfb59583bced5b7 a70198c389cfebac0afceb2a0cc9dc7a01e2e659a676de5113f86e5946065ce3
GET /images/core/emoji/15.0.3/svg/2705.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 06:07:03 GMT
content-type: image/svg+xml
content-length: 482
last-modified: Tue, 30 Jan 2024 01:21:10 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 2
x-content-type-options: nosniff
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| s.w.org/images/core/emoji/15.0.3/svg/26a0.svg | 192.0.77.48 | 200 OK | 548 B |
URL GET HTTP/2s.w.org/images/core/emoji/15.0.3/svg/26a0.svg IP192.0.77.48:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerSectigo Limited Subject*.w.org Fingerprint99:54:77:36:9F:B5:98:C4:69:0F:EA:ED:FC:98:46:12:1D:E7:89:B3 ValidityMon, 18 Dec 2023 00:00:00 GMT - Fri, 17 Jan 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashef12d7f2fef82863c0f4ba86a6dfa518 0934b2584ed01e9104cee6c7f81534e225902d1b 6071e0504108949fdfe9123694f340202cc64be602f29fb8bca58949c5898292
GET /images/core/emoji/15.0.3/svg/26a0.svg HTTP/1.1
Host: s.w.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 06:07:03 GMT
content-type: image/svg+xml
last-modified: Tue, 30 Jan 2024 01:21:10 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
x-nc: HIT arn 2
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| paronymtethery.com/r5pfblv980O/81708 |  23.109.170.224 | 200 OK | 0 B |
URL GET HTTP/1.1paronymtethery.com/r5pfblv980O/81708 IP23.109.170.224:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectparonymtethery.com Fingerprint63:F2:88:89:1F:F8:81:BA:AE:2C:AE:99:FD:C3:5F:47:2F:0B:DE:F1 ValidityMon, 29 Apr 2024 18:59:43 GMT - Sun, 28 Jul 2024 18:59:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /r5pfblv980O/81708 HTTP/1.1
Host: paronymtethery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 May 2024 06:07:03 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://luxelinks.xyz
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Sat, 11-May-2024 06:07:03 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjIC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7R3S; expires=Sat, 11-May-2024 06:07:03 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| luxelinks.xyz/wp-content/themes/allium/js/fitvids.js?ver=1.1 | 172.67.174.209 | 200 OK | 3.4 kB |
URL GET HTTP/3luxelinks.xyz/wp-content/themes/allium/js/fitvids.js?ver=1.1 IP172.67.174.209:443
Requested byhttps://luxelinks.xyz/4781 CertificateIssuerLet's Encrypt Subjectluxelinks.xyz Fingerprint5E:3F:46:85:79:B5:57:18:7B:41:40:CA:24:4A:C8:84:D0:0A:03:A6 ValidityTue, 26 Mar 2024 03:53:51 GMT - Mon, 24 Jun 2024 03:53:50 GMT
File typeJavaScript source, ASCII text, with very long lines (3453), with no line terminators Hashef77b1c64d0a46f93cd7c472c1421bdf e6c3db00bb9e5d4d52d0264b8bc80bbaff744ca8 9ce428d3c1d3bce6f77fe513908c3f11f0084ee591a4d1ce69edc701c9798a1b
GET /wp-content/themes/allium/js/fitvids.js?ver=1.1 HTTP/1.1
Host: luxelinks.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxelinks.xyz/4781
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 06:07:03 GMT
content-type: text/javascript
cache-control: public, max-age=31557600
expires: Fri, 09 May 2025 00:22:42 GMT
last-modified: Sat, 23 Mar 2024 09:12:20 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 128661
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ss5osqblc8rJvKq0f7wVmYXdtg3possijQ6%2FbxXNkzWUq2GXqai3KXGRq7zJ%2FgiIXUFfEC5nOigDgYpSAWkZq10flLbf2GsJmQj0o1WoXjzqXwoLDHcXW3MuGPVH9cK6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8817bf2e9a5d5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
104.21.55.249