| ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js |  142.250.74.138 | 200 OK | 5.4 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js IP142.250.74.138:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typeJavaScript source, ASCII text, with very long lines (2134) Hash7c96a5f11d9741541d5e3c42ff6380d7 d3fa2564c021cf730e58ffddb138cf6b57ed126e 81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee
GET /ajax/libs/webfont/1.6.26/webfont.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 5437
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 22 Apr 2024 22:37:07 GMT
expires: Tue, 22 Apr 2025 22:37:07 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 202678
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/logo.png | 172.67.69.46 | 200 OK | 848 B |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/logo.png IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeRIFF (little-endian) data, Web/P image Hashd6391898bab24d3ab2a3be62c7d38b92 6f60b333fc9ec814093daccc905b84056ae98d84 0cea3640c17dc44286a1133021f3376ba39b1646e46c8b3553c1922f7fe5d08d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/logo.png HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: image/webp
content-length: 848
last-modified: Tue, 13 Feb 2024 08:23:16 GMT
etag: "350-6113f1b20a500"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ieam2rZinqpapHY0MkpSBCsCFMvVzAHV02oinc4anSWGRG%2F%2FRb45XPgJjV87CphU9r7bKYKAQj23qxLe9gHVWVhpRUr0pgfYkPMunIpluTzugnEoPtLGzZUdtaF0%2BykNgrOUr5bQQOaeLUS8e611LIJ%2FzirO9pKGpY8FIvfb2IhR8UGzon8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6ce7e87d569f-OSL
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/sp-main-1.webp | 172.67.69.46 | 200 OK | 34 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/sp-main-1.webp IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash0f7989a5f6ba568d83568ec389b250e2 ac924e32dc4769142228fcc51263982182756b7f 34c5ac440812aceb189bff6d6abb4edf1e6845fa678697abf534f191bf8362b1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/sp-main-1.webp HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: image/webp
content-length: 33570
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: "8322-6113f1b022080"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BEfnh9DMVBSXNiSpRTex2fla3%2BRyvCiZMygvXmufmBltY%2B%2Bq7KQxuX4xU1k9VKNfW%2FhU1GqecsL%2FVUUFgpL%2FjbYlwAtEOtJeI4FVDdTM99OAOthJmlgMio6Qxax%2BYLqbQwbusf6hHi8M3V3zeLhlGkSgadXGhaYPAl4Jagy%2BpoSyiN9Jmfw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6ce7e880569f-OSL
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/poster_index.jpg | 172.67.69.46 | 200 OK | 42 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/poster_index.jpg IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 710x400, Scaling: [none]x[none], YUV color, decoders should clamp Hash3702c9d82e3c69dac989d2735b54c352 29b21cc814a65aa465e8e038541b4a705f55166f 2f7a68d4f3419ed0fc754b5cd59a072528e521303b63ef5ed4cc027091021dc0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/poster_index.jpg HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: image/webp
content-length: 41790
last-modified: Tue, 13 Feb 2024 08:23:16 GMT
etag: "a33e-6113f1b20a500"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3PNEQJtclKx70BZ4LT2JOW5bcD53VBmlJoLjc9Zo%2FVLEYdOtu2G6UA4EaQHt7OEsujUgIvh%2F6IKSkO9jkdVSXgVNDS31U6%2FpkvSr7NqEhgKpVr7mA61hgI7rPb8HFkxl%2Fazuqh8Y7aVDLbFvZnSOyVQ%2FPEVg3zvESqTTQjT4%2BTo3G2%2FZ6Cs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6ce7e87b569f-OSL
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/ | 172.67.69.46 | 200 OK | 73 kB |
URL User Request GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/ IP172.67.69.46:443
CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (524) Hashb596260fbb047c89aa3f7da1b44dc8cc b0f12b6555a6ab5abc0c6dfcbe72260ec0679c9a 6024b33faf8e2bd405c72bdc5d9c0e7e70d8db282f15b76165372555dc62035f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:04 GMT
content-type: text/html; charset=UTF-8
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
vary: Accept-Encoding
set-cookie: SERVERID=3; path=/
cache-control: private
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Km51WnpYb1ucSHcD2Wx7oJ8wwfrWNHuXQyNV2jC7M6%2BRY%2F1D8hfafs4f5yU%2BMjQ70FNfdwtyctF4ls05PoOtfGumPhqVkjvOeGTBDZZBI%2BH8exVm86kp2DPuurytblktMmn6Ry0ze%2B%2FsFKAt33eVDN9KyAoWcaKm1QFHAWa5sPRQOsR3Q4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879c6ce4cd45569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/sp-under.webp | 172.67.69.46 | 200 OK | 66 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/sp-under.webp IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash6622be14e906ecd49255d6f9cfe6cee7 2f6b62317932770362fd0ad622285fcf38a16a3c 3975546c8319447b18f4da30a9ecbf4542fc6d27fbcf979fdc80a9c8f2c083e1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/sp-under.webp HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/css/crypto-genisus-new.css
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: image/webp
content-length: 66144
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: "10260-6113f1b022080"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dcB0TPMhhR0n1lpvsdLhgcAHbsj71UNI7vRHPqnPGs%2BsHuGtYR3viGHXjoKaTEX1crR3HTCwwD8gOGwGHROXMnxSLG%2FlRI8sJ%2FAmEyKWVBcKrALpkZN4ECuLbhsMDziYz7ezXRqg5W0hLLgskAH31eOHqeU2moPA9APNy%2BVS2CMssacJ354%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6ce979f5569f-OSL
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/sp-faq-1.webp | 172.67.69.46 | 200 OK | 30 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/sp-faq-1.webp IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash51fbfb63e4302ba32b96a90a41d0310a a1c98e8121927d45b09ba852aac3923c54db20e5 b34d25394d4fd65cbe51fa0ea82aa66b8670bf4c7a8f86346e8e28eccfeb49e1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/sp-faq-1.webp HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/css/crypto-genisus-new.css
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: image/webp
content-length: 30422
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: "76d6-6113f1b022080"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N0JzhxvVJrRa%2BYPp0uzR1sPj6AWMCTezTEi8JdpbvSj26QQY%2BTWR1lDJEWXedTROCXm3u0Rf6Ixi3AqhCcqtlE%2FeZaUMDB3twkqOY83kRKsP6Eh6rTnkdKj2UY1kAbPMd35gn110KnV8akDxYeUuXmrkoAp9XBazM2afaOoonqOj%2FONYWqU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6ce979f3569f-OSL
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/free-ico-2.webp | 172.67.69.46 | 200 OK | 360 B |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/free-ico-2.webp IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash9b590e604833fe5e38cced2fcbf07b21 3a4b5436f86b522b93c713831339d530f72e9907 fe0b66c802b83727068fca2dac6db567913a72557d9a31a87d1b1b455552545c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/free-ico-2.webp HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: image/webp
content-length: 360
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: "168-6113f1b022080"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F62jLanD2AXuMMZs3RUFYNBV6sp7fYXeKxvLU%2FBGfurcAGd3kUfehMV4RU3200HdB6n5M28JWeOBjsdXMs1jow232WRkznnA%2BQVQhWdXLuxS%2FnmxVjyaNVJicFI4Hjymj4%2BkVQlCWA%2FeOr3lAc1Vvaoc6lzbqeBhN8mQuQjXNjFSqy%2FyBOI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6ce9ea4e569f-OSL
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/software-bg-2.webp | 172.67.69.46 | 200 OK | 17 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/software-bg-2.webp IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash47141a1ed5f95ff4375b621193feb19b 64e2c8975df1edfc3f775c9edb26a48e5b0b86d0 9bf606d12663caef8f45181d80654214204a05b3c575a0f51606debe3415bebc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/software-bg-2.webp HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/css/crypto-genisus-new.css
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: image/webp
content-length: 17268
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: "4374-6113f1b022080"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R7VMmaFuF9cj2Qj9rJ0FNE5v9ihwwb38Tk8MGkiLLUBQ4q1jD8%2FQSN5bW3n3Wf8%2BUiRKRVz7iDKDFdy55xBa1lFhDSFhf0iVYFRve0SgMriUr4dc1e%2FoVbHbJgkAhSEnQViE2cU%2FQ9rqQXXiQVZt2ixgLqbbwAkdx7rvWL3XEXrmTFDezcM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6ce98a01569f-OSL
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/login-ico_1login-ico.png | 172.67.69.46 | 200 OK | 160 B |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/login-ico_1login-ico.png IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeRIFF (little-endian) data, Web/P image Hasha75b8d44f1d64b55f09bb0d27230de5d a49a5d0a8cd0f7e100e71baa83da6eb230c47fc8 bc273fb4ca58d238d33fb2850f6b4f85dfff7915a61b99c7f522137fb953eed4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/login-ico_1login-ico.png HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: image/webp
content-length: 160
last-modified: Tue, 13 Feb 2024 08:23:16 GMT
etag: "a0-6113f1b20a500"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r7X%2BomXbuJja1CSI6z3Mq5yUjVkcL3yOxD3FaxDHT5Uwe07FeGFtTFl5q9mL%2BiumbOd1bO9imwVsvESB%2BEnCPlwtsSLGuZwnzXa2KvV4obIaKkntkmeNIM08fRE2suiXJ4yGaiQpZmu8eD3dBELpKRlIP01H9ZptGyuuPG77JFOq4xlVEYo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6ce9ea4a569f-OSL
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/sp-software-2.webp | 172.67.69.46 | 200 OK | 27 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/sp-software-2.webp IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash144d0442423a6324cc009da9085120fd 6407192185772b139571d3eeade65fda60e230c6 d32819cbc2d8e82c29dca86512ecb25aca96b2fc821de424bd7f2afa7e7a4ed2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/sp-software-2.webp HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/css/crypto-genisus-new.css
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: image/webp
content-length: 27090
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: "69d2-6113f1b022080"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mDr8BNkaTr6pMWy6o56hSJygC4pgWoVm1SIkf%2FLWTA5USfckESQjCS%2BrWFn5Ej2u%2FS7RvQ8GzAu0C5EXB7qZupk6xaAyppo1Wd369B%2FDB3syYiMIoOlx%2FV%2F%2FGbx8OuU%2Foqkm2jSHU2tVtDRt%2FVS1j8pomb%2B1RXEdZOrxmgjO4frUShZZ4Y4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6ce98a00569f-OSL
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/free-ico-1.webp | 172.67.69.46 | 200 OK | 332 B |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/free-ico-1.webp IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash3edb15dc8c1e9a16d48b4bb9958e1c62 0a9cd33735737cae23eee8acdba7ae3ddb6522f2 8645e60524d99e52202a24ea3edcf85e4abd5294853e16d04e83b26de87a818e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/free-ico-1.webp HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: image/webp
content-length: 332
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: "14c-6113f1b022080"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C4KD8%2F75hYjWI4qvzkN1KdIDUcGbjX7%2FUnaQVWYsisZMdl%2BMWn3X8v7uDODBqNZv%2BMCyYmpVudLLaDn0ihiKv9RwHKxgu5g5WQxZnIIqDXtBb4LaX6gjZxNynVM%2F%2FsE5gP39CkufTxzp63v5TihKbmOKILAoxyg7qnUB%2BLbRCv3QSTn%2FDJk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6ce9ea4d569f-OSL
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/free-ico-3.webp | 172.67.69.46 | 200 OK | 300 B |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/free-ico-3.webp IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeRIFF (little-endian) data, Web/P image Hashfcf0a81e2a4d1a606330bb29d8c8f440 d3d02825214fc986f61d9fc9c61a2add9629b84c e4e1da9b123dabff9edeee8c89d9c43354631fd3f263c5dfb767ede2a56fa590
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/free-ico-3.webp HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: image/webp
content-length: 300
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: "12c-6113f1b022080"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SlWm5SfpBIHOKrSUV2I27HsDD0VrV3e64X%2BE9OTCOvuz8d4qi6Fz%2Btr%2FPJHwS8613nfTMGiyDamk1FueH0KkI7NijtnTJe6BtXwfKAxCsFj081tBzSCOBmo8I2D55elsI0xWXb1i2igpE08Hi0kwzcptLZm8yWFSlkUPotOXA8qGkMD%2F7yo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6ce9ea51569f-OSL
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/sp-faq-2.webp | 172.67.69.46 | 200 OK | 44 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/sp-faq-2.webp IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeRIFF (little-endian) data, Web/P image Hashfbbc428fefdd0ca6d1d114b0374c5461 e3f89e67a34eb97cd9436fad09899875b90bf853 d06e64348a5f65a92db432017f93c08ff08278fc987ba740320689611e1c7ff3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/sp-faq-2.webp HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/css/crypto-genisus-new.css
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: image/webp
content-length: 43906
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: "ab82-6113f1b022080"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YNjnWF6%2FFnVin9bpbYF4zsQ7DNd%2BI7XGHL%2FDtIAUE%2Fy48BGAWImpoaYHH3Vbd%2FzvwOLzTkPrO%2FaRBXR4HCL54ttrNZLoFGX3ltaDLGuJke%2FASuqD9u9MDyz%2B%2B7RzZ7yHr42ERljheFGFtCcYPP9hKd0nMpTr%2B9J2BTM8DwM0mImoppy%2B04c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6ce99a08569f-OSL
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/sp-why.webp | 172.67.69.46 | 200 OK | 51 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/sp-why.webp IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash39f7f7db48076162b76f61a50e1a8043 c48f00df4e5cf2fbb2d9d28d50f51787106080b5 fd1ea9329dbcd4c9e31ea36df4e19918af8b290448cb82bbdfe9ee6c9d6bfaa6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/sp-why.webp HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/css/crypto-genisus-new.css
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: image/webp
content-length: 50784
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: "c660-6113f1b022080"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y3fUzEZZ3Q8yAIAJslEebt9Y6aY%2Bvujff3oZx4zW5a0uDFM4%2BskRTqPc7dDzgYQTDVpbhV22wJeEVCLNHqYxOmdVwXXJ%2BBFeZsPyKsICQRMJ3jmwgc5xp0Wrdf4f3RPsSpud5lMCSZ5OxCjKQh8JKQrHZbIPBbRHiiJYrZFb1o2Goi339Ns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6ce98a05569f-OSL
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2 | 216.58.207.227 | 200 OK | 23 kB |
URL GET HTTP/2fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23040, version 1.0 Hashde69cf9e514df447d1b0bb16f49d2457 2ac78601179c3a63ba3f3f3081556b12ddcaf655 c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 02:02:48 GMT
expires: Wed, 23 Apr 2025 02:02:48 GMT
cache-control: public, max-age=31536000
age: 190337
last-modified: Tue, 02 May 2023 15:07:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Lato:100,100italic,300,300italic,400,400italic,700,700italic,900,900italic%7CUbuntu:300,300italic,400,400italic,500,500italic,700,700italic&display=swap | 142.250.74.106 | 200 OK | 25 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Lato:100,100italic,300,300italic,400,400italic,700,700italic,900,900italic%7CUbuntu:300,300italic,400,400italic,500,500italic,700,700italic&display=swap IP142.250.74.106:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
File typegzip compressed data, max compression Hasheb3a92e74c551e3f3378bbbb621752a5 13c4c26375a76752586bb027f28bba84cd93244d b99f9899e0291932df625a3cfb50e3754cb5e220efccb49b01d81a095fce4882
GET /css?family=Lato:100,100italic,300,300italic,400,400italic,700,700italic,900,900italic%7CUbuntu:300,300italic,400,400italic,500,500italic,700,700italic&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 25 Apr 2024 06:55:05 GMT
date: Thu, 25 Apr 2024 06:55:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2 | 216.58.207.227 | 200 OK | 22 kB |
URL GET HTTP/2fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22504, version 1.0 Hash1c6c65523675abc6fcd78e804325bd77 898d9808304dc157f5dcb18ca169ec6e2b96b3d7 08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92
GET /s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22504
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:32:58 GMT
expires: Fri, 25 Apr 2025 02:32:58 GMT
cache-control: public, max-age=31536000
age: 15727
last-modified: Tue, 02 May 2023 15:12:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2 | 216.58.207.227 | 200 OK | 24 kB |
URL GET HTTP/2fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 24408, version 1.0 Hashefee2d080d7bebdd2e0aeb2e030813a0 f8d38f9f9584e48c2e469877ebd94232265585f1 bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0
GET /s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 00:00:27 GMT
expires: Wed, 23 Apr 2025 00:00:27 GMT
cache-control: public, max-age=31536000
age: 197678
last-modified: Tue, 02 May 2023 15:14:26 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/css/crypto-genisus-new.css | 172.67.69.46 | 200 OK | 31 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/css/crypto-genisus-new.css IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeASCII text, with very long lines (39971), with no line terminators Hashc6887a2fb742773665ea2e4225ba8ca8 3f64b778e450f4bb52a95373710f131a3a683eff 296b4a72ca8332461aee9ab959b5807e0cb0c2bfb306bed3d141b3df5a00bc26
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/crypto-genisus-new.css HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: text/css
last-modified: Tue, 13 Feb 2024 08:23:16 GMT
etag: W/"9c23-6113f1b20a500-gzip"
vary: Accept-Encoding
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X1AWVAQELKJRRHGLWbmwwzi0UJ101xsMf9xyOIuFJ6dsnSD5J9A73Lybfp%2FyiXn7SKYLB4L%2FjRqFl4%2FTfcP%2BSqDtrPs7OvgYIDl%2F7yiGYXCjDwir4rjD8EyEIlVK8r9pwA7pdy5RlhOOknS58soDoUvb95PXmI7EuvcGuel3XiOpExfEC1A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879c6ce7f88f569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/css/components.css | 172.67.69.46 | 200 OK | 25 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/css/components.css IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeASCII text, with very long lines (29985), with no line terminators Hashcd7bf3efdb1f7b0f5e4f7a8b4cc24a0c f796be80615d73f1def6c155fb90f7a547169dba 25244b309cff70775c338fb3373a2a94273872101e1f2c90db75892777b7def6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/components.css HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: text/css
last-modified: Tue, 13 Feb 2024 08:23:16 GMT
etag: W/"7521-6113f1b20a500-gzip"
vary: Accept-Encoding
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EZOcxJaqjFxBYiLO9TSvqeJJsMx171YgNHeIVt5WNXATypDLXXMs3msplq7Vk12ZUqCKtvUWceuERexNawZBzDjevaoZWwovNG5RIYLV%2Be6zoFiC1DBCJpCxCLhmskgzzzDCQc959Wii68ku9%2FIWZ%2FfT0n5qtkwgVhmrlZgiXuY%2Fsdrf2Zo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879c6ce7f88b569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AXC-q.woff2 | 216.58.207.227 | 200 OK | 22 kB |
URL GET HTTP/2fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AXC-q.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 21508, version 1.0 Hash24b8a8abbec56ab127adc36e35f49bb3 0906975d70856ef3df1ae3d91db5d29687981c3f a79b4c65b454a795ff3868156f54be09ac8360b9fd3ba21431b5c48fd9b66afa
GET /s/lato/v24/S6u8w4BMUTPHh30AXC-q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21508
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 01:56:11 GMT
expires: Wed, 23 Apr 2025 01:56:11 GMT
cache-control: public, max-age=31536000
age: 190734
last-modified: Tue, 02 May 2023 15:29:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/assets/languageSwitcher.css | 172.67.69.46 | 200 OK | 18 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/assets/languageSwitcher.css IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
Hash34f9a98a85713580849f35db50174b74 f7d7c21843e2df3ec700d6564d092aaa9c9ec298 8ea67b667dec3a3e1f29bed71a5f30c4338465e05f880586f2cb970159996e39
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/languageSwitcher.css HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: text/css
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: W/"a46-6113f1b022080-gzip"
vary: Accept-Encoding
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XYma%2BQru%2BxbDwuDg%2BZCDLzWz%2FsqGttLluEiR0oRqh%2Bt3dEoY9gHU95DRLCCnd0jA7%2FAY2y%2BFc5OO6%2BJL6KgpKUW7dp56cbubXqxuSvfN38r%2BnmKGoUFZb4Pxo6aqeqPov2rvV5OSNadPJZ7boxjdFtlVxGH587RjmUb8iB%2BGoDRaex3BBzE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879c6ce7f895569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=63aca4eb3c9dc87f90ff72f8 | 143.204.42.215 | 200 OK | 54 kB |
URL GET HTTP/2d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=63aca4eb3c9dc87f90ff72f8 IP143.204.42.215:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=63aca4eb3c9dc87f90ff72f8 HTTP/1.1
Host: d3e54v103j8qbb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 20 Jul 2020 17:53:02 GMT
server: AmazonS3
content-encoding: br
date: Wed, 24 Apr 2024 08:19:33 GMT
cache-control: max-age=84600, must-revalidate
etag: W/"dc5e7f18c8d36ac1d3d4753a87c98d0a"
vary: Accept-Encoding
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
age: 81333
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: I-4aX78z2h313d47vso9x0kJwqNVSRPBNG-dllbftIfK5GErb4-PKQ==
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2 | 216.58.207.227 | 200 OK | 24 kB |
URL GET HTTP/2fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 24448, version 1.0 Hash865e46af816320c9f32234e8968558d0 6791e9f732fcbde0f375f84ccbc14c4ac72795a3 6c84348296ebe2e2a0830c3962eb02156419d9bc76371c2eadaf7329d827d550
GET /s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24448
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 00:37:39 GMT
expires: Wed, 23 Apr 2025 00:37:39 GMT
cache-control: public, max-age=31536000
age: 195446
last-modified: Tue, 02 May 2023 15:30:00 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/ubuntu/v20/4iCu6KVjbNBYlgoKej70l0k.woff2 | 216.58.207.227 | 200 OK | 37 kB |
URL GET HTTP/2fonts.gstatic.com/s/ubuntu/v20/4iCu6KVjbNBYlgoKej70l0k.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 36564, version 1.0 Hash3dc4c11f72b9457d49b56d162fb71a19 284248aec91153ee4e89fa3fc51e62f782c4260b af186659e415490e7eee1bd3c8d511771dbd3e03ddbebf6b6a5096ac8ba29449
GET /s/ubuntu/v20/4iCu6KVjbNBYlgoKej70l0k.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 36564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 09:46:35 GMT
expires: Wed, 23 Apr 2025 09:46:35 GMT
cache-control: public, max-age=31536000
age: 162510
last-modified: Wed, 27 Apr 2022 16:13:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 | 216.58.207.227 | 200 OK | 35 kB |
URL GET HTTP/2fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 34852, version 1.0 Hash0e8eefb4549a2edf26c560cb9845952e 8d0b1718aacad934fd0043c87cbc54aa091396bf 7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:38:14 GMT
expires: Fri, 25 Apr 2025 02:38:14 GMT
cache-control: public, max-age=31536000
age: 15411
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/ubuntu/v20/4iCp6KVjbNBYlgoKejZftVyPN4E.woff2 | 216.58.207.227 | 200 OK | 38 kB |
URL GET HTTP/2fonts.gstatic.com/s/ubuntu/v20/4iCp6KVjbNBYlgoKejZftVyPN4E.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 38304, version 1.0 Hash278f01d7a0e9982504211634ac9fe9d3 464a475a7f167ffca4c2343020cfb9ff30594aa1 e71a3c4673efe1ecf818a578e99aa5469b34309cd5d46eeffbdf01644f273b51
GET /s/ubuntu/v20/4iCp6KVjbNBYlgoKejZftVyPN4E.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 38304
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 19 Apr 2024 17:04:44 GMT
expires: Sat, 19 Apr 2025 17:04:44 GMT
cache-control: public, max-age=31536000
age: 481821
last-modified: Wed, 27 Apr 2022 16:10:54 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoC1CzjsGyN.woff2 | 216.58.207.227 | 200 OK | 39 kB |
URL GET HTTP/2fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoC1CzjsGyN.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 38752, version 1.0 Hashd451decbad0d0d2feba27610481a34d8 1479b2ad870d5e2bb04d206f33460089394f6eb5 a5515c53111bb4a4f45aff63d06df893ae9033dc85e82cc2ef27fc099a4d7609
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoC1CzjsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 38752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 13:21:00 GMT
expires: Fri, 18 Apr 2025 13:21:00 GMT
cache-control: public, max-age=31536000
age: 581645
last-modified: Wed, 27 Apr 2022 17:04:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 | 216.58.207.227 | 200 OK | 30 kB |
URL GET HTTP/2fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 29752, version 1.0 Hashab1fc8621287e4ea9319a3136812cf80 fb4ed2e52e2a8d7ac50a7618a0c2ea5507a24ef3 7c00752ce82d6abaed0b9766d35b906b16675facdbe24115b410d1fab975effa
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 03:15:27 GMT
expires: Wed, 23 Apr 2025 03:15:27 GMT
cache-control: public, max-age=31536000
age: 185978
last-modified: Wed, 27 Apr 2022 17:05:11 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/ubuntu/v20/4iCp6KVjbNBYlgoKejYHtFyPN4E.woff2 | 216.58.207.227 | 200 OK | 32 kB |
URL GET HTTP/2fonts.gstatic.com/s/ubuntu/v20/4iCp6KVjbNBYlgoKejYHtFyPN4E.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 32500, version 1.0 Hashc738454e1f694a14c7ecd2be1c4eac2f 4651d3b0f82ac1a3ee987f725de0c5bd1532b435 c270e660d71d18901a57e6ba5fc84517e3fb8fd54f774b885d0295166443d3bf
GET /s/ubuntu/v20/4iCp6KVjbNBYlgoKejYHtFyPN4E.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 32500
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 Apr 2024 10:51:05 GMT
expires: Thu, 24 Apr 2025 10:51:05 GMT
cache-control: public, max-age=31536000
age: 72240
last-modified: Wed, 27 Apr 2022 16:16:27 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 | 216.58.207.227 | 200 OK | 30 kB |
URL GET HTTP/2fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 30480, version 1.0 Hash0e7e5f9d3a8ef121149827180b790b5c 0e9f9333078e5df9245630ff6f68ba1d9da3c403 e8e147e15907f25cad69b2bcf060213efad4ed04e0d36374715cbca17b2afc1c
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30480
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 06:01:41 GMT
expires: Wed, 23 Apr 2025 06:01:41 GMT
cache-control: public, max-age=31536000
age: 176004
last-modified: Wed, 27 Apr 2022 16:04:03 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| api.theimmediateavage360-com.newfinancialmarketworld.com/dist/js/loader.js |  104.26.8.242 | 200 OK | 4.0 kB |
URL GET HTTP/2api.theimmediateavage360-com.newfinancialmarketworld.com/dist/js/loader.js IP104.26.8.242:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjectapi.theimmediateavage360-com.newfinancialmarketworld.com Fingerprint7D:BB:24:1E:95:F2:42:A1:C3:F2:F6:45:E6:0B:57:F2:30:19:F5:F2 ValidityFri, 12 Apr 2024 07:40:51 GMT - Thu, 11 Jul 2024 08:38:44 GMT
File typeJavaScript source, ASCII text, with very long lines (9842) Hash3f5788ea717d208e560af75b2bd90f4f a765d34ce028a753e5f9420797cd5bc3d69b0e01 080173141d4ba42bfe3a55b972586b014797305f510934f1d3cf8cdff0e4720b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /dist/js/loader.js HTTP/1.1
Host: api.theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: application/javascript
last-modified: Thu, 19 Oct 2023 12:40:10 GMT
etag: W/"26b2-608110e70be80;608110e8f4300-gzip"
vary: Accept-Encoding
cache-control: max-age=432000, public, must-revalidate, private
cf-cache-status: BYPASS
set-cookie: SERVERID=3; path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O6SR7LZTki8ZXybZbfIYswSa2%2Bo4zkHG6qNlSnGZZDi0%2BagB%2BRxYcdk29q%2FsKbjbMW7gRCEIV85%2B%2B9HZBO1Y2c%2FytqmvLVa1zRy%2Fd50%2Boyi2%2B5ONZUnwAEa27N9O8%2F9HxEnb4Klj0gU%2BRXQvCnh3Ka%2FELx5F8BOnyoQzxrHO%2BDSyqce2o%2Fz6K1nU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879c6cea8b625689-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.4.6/css/flag-icon.min.css | 104.17.24.14 | 200 OK | 1.5 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.4.6/css/flag-icon.min.css IP104.17.24.14:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (33818), with no line terminators Hash79fb36dda0a235254c3e31bf00b57065 89eb6d6adc16de57dda315fb2b5602bfe5728ccf 623702bd791d4553ae7226c2f48e26052e359573eb59fa98d819e9b248593e7c
GET /ajax/libs/flag-icon-css/3.4.6/css/flag-icon.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:06 GMT
content-type: text/css; charset=utf-8
content-length: 1466
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5d-841a"
last-modified: Mon, 04 May 2020 16:10:05 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 36883
expires: Tue, 15 Apr 2025 06:55:06 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fiZTaeqiBkAloLhnWcGDq4V4%2FCTv9gHkWxH7FQXQCjD9mWLTA0oSZ7hbGri2usOyESg7SI3gFareMHq11GPotUGPqoxE%2FO1EO%2B4L3b8TSmWDRwTKelqTaxUGnwF%2Fl6IZKEPtFJAg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879c6ceebdbd56c6-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.4.6/flags/4x3/gb.svg | 104.17.24.14 | 200 OK | 307 B |
URL GET HTTP/3cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.4.6/flags/4x3/gb.svg IP104.17.24.14:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashd3ddd6025a06a78535b0d432d14905bf 2b5148a18b90f933e47bf895c26d61a52d21d9d8 825310f9bcc8892559317bfc87fc28d5d7bad06c02d562b5740aafcf4b040803
GET /ajax/libs/flag-icon-css/3.4.6/flags/4x3/gb.svg HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.4.6/css/flag-icon.min.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 06:55:06 GMT
content-type: image/svg+xml; charset=utf-8
content-length: 307
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5d-21a"
last-modified: Mon, 04 May 2020 16:10:05 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3674417
expires: Tue, 15 Apr 2025 06:55:06 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fczbp5w5BH6vTW3JeX%2FEQlGphMxijXmH6obA8mj9efslOeF2Eg%2FwIPm4zADi%2BbMtHts1ouJWFT1oSxK7mj%2BkIGLhGwzJXWZwm4SBcaGNCWt0zUcU%2Fc4so%2Fw%2B0WJuAqpXiqVdhD0O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879c6cef089956ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| api.theimmediateavage360-com.newfinancialmarketworld.com/images/loader.svg?74ab3a4b65d04814e59a43543c8379f0 | 104.26.8.242 | 200 OK | 11 kB |
URL GET HTTP/2api.theimmediateavage360-com.newfinancialmarketworld.com/images/loader.svg?74ab3a4b65d04814e59a43543c8379f0 IP104.26.8.242:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjectapi.theimmediateavage360-com.newfinancialmarketworld.com Fingerprint7D:BB:24:1E:95:F2:42:A1:C3:F2:F6:45:E6:0B:57:F2:30:19:F5:F2 ValidityFri, 12 Apr 2024 07:40:51 GMT - Thu, 11 Jul 2024 08:38:44 GMT
File typeSVG Scalable Vector Graphics image Hash74ab3a4b65d04814e59a43543c8379f0 8e5a0a73079044e6dca128329d6c95d39bd70266 f319d450c3745ce3b0767b2402f9a26b57ffc4a49753d6726a208b70e6858fa5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/loader.svg?74ab3a4b65d04814e59a43543c8379f0 HTTP/1.1
Host: api.theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://api.theimmediateavage360-com.newfinancialmarketworld.com/dist/css/integration.css
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:06 GMT
content-type: image/svg+xml
last-modified: Thu, 19 Oct 2023 12:40:10 GMT
etag: W/"4d4-608110e70be80;608110e8f4300"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QZ87f9ccuvxzbEXnMbmVGbR6F9jsmiUCQCB3bkexum8q7YnJK8PU8C3Emr2kIKwQJ3kIxvpq26hd%2FJneahDJLUGy8b2uZ6LOs%2FKVj9mUWVc15AsSflm600haLjGooAAvG87nrmstT9BSdPqiy9A0%2F8LpK%2BOeimdenI%2BL60%2FSFIHOfHJyrR6EpNgq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6cee7ede5689-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-oPCI.woff2 | 216.58.207.227 | 200 OK | 17 kB |
URL GET HTTP/2fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-oPCI.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 17072, version 1.0 Hasha049f4c6bcb907e3d451bdb388c8e86f f6261c1401a8a0f31ae74fb9ef7ab6dfec3ef1b6 b19efe906c9b0345db45525ed83c76031644e39329a36d39badf5275bce363c2
GET /s/lato/v24/S6u-w4BMUTPHjxsIPx-oPCI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17072
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 Apr 2024 06:01:43 GMT
expires: Wed, 23 Apr 2025 06:01:43 GMT
cache-control: public, max-age=31536000
age: 176002
last-modified: Tue, 02 May 2023 15:10:00 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/css/normalize.css | 172.67.69.46 | 200 OK | 1.9 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/css/normalize.css IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeASCII text, with very long lines (1863), with no line terminators Hash335a5b1351b11607e99d488a4fb435ec 676a51c37049628da4ec2431f80472f2ccc02b70 d95ef29b3a8ea5e57fc7385f0b2f798c2843268c45b727d3a87eb5ef85504a4c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /css/normalize.css HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: text/css
last-modified: Tue, 13 Feb 2024 08:23:16 GMT
etag: W/"747-6113f1b20a500-gzip"
vary: Accept-Encoding
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=isBqyG8jm6RtmPscJfysxn6IOritlLH6W5uodSWq8uje12oCBpzJPXN3Vz10NMcR074SlNg26Vh6FA%2FBQuFGKrI73AxWROzuspxWGEJVUYDMLTBADuIkevkWb8zHy6wqnR%2BR4plKde%2BZc6wg%2F%2FfQIRRIkG4DdayDch9bmUXE3oKxrGtfybU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879c6ce7f887569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| api.theimmediateavage360-com.newfinancialmarketworld.com/dist/css/integration.css | 104.26.8.242 | 200 OK | 52 kB |
URL GET HTTP/2api.theimmediateavage360-com.newfinancialmarketworld.com/dist/css/integration.css IP104.26.8.242:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjectapi.theimmediateavage360-com.newfinancialmarketworld.com Fingerprint7D:BB:24:1E:95:F2:42:A1:C3:F2:F6:45:E6:0B:57:F2:30:19:F5:F2 ValidityFri, 12 Apr 2024 07:40:51 GMT - Thu, 11 Jul 2024 08:38:44 GMT
File typeASCII text, with very long lines (52228), with no line terminators Hashc9c37389782735caf43fb930393f05cd 967116b1b44d6b29bf5fe492f63068c28a7c641d 029562b1a3178f34720b7ef0a798d61a171db1d3939c3292af7ef6486770b55c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /dist/css/integration.css HTTP/1.1
Host: api.theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: text/css
last-modified: Mon, 12 Feb 2024 23:02:21 GMT
etag: W/"cc04-6113745221940;608110e8f4300-gzip"
vary: Accept-Encoding
cache-control: max-age=432000, public, must-revalidate, private
cf-cache-status: BYPASS
set-cookie: SERVERID=3; path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Zv2mQqAeTNyx%2FLJT85LJHhxwQf0FXEkKSkZZfqz3y2iSN5AN%2FGptLilx%2FMWhnresQPN1DtMTz360Zs1RDrHc3S6hvTVn7UlhskNruPtzv3rMBNQXcs587xKtkId8ZqyQqr2Fszb%2B4Z9RFLN%2FZTK2R4IPOkUnlpWVJGvRqmPJ7QEh%2BgUQBhIKxIe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879c6cea7b5f5689-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 | 216.58.207.227 | 200 OK | 24 kB |
URL GET HTTP/2fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23580, version 1.0 Hashe1b3b5908c9cf23dfb2b9c52b9a023ab fcd4136085f2a03481d9958cc6793a5ed98e714c 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:21:46 GMT
expires: Fri, 18 Apr 2025 17:21:46 GMT
cache-control: public, max-age=31536000
age: 567199
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2 | 216.58.207.227 | 200 OK | 23 kB |
URL GET HTTP/2fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23236, version 1.0 Hash716309aab2bca045f9627f63ad79d0bf 38804233a29aaf975d557fe14e762c627bef76e0 115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429
GET /s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:24:19 GMT
expires: Fri, 18 Apr 2025 17:24:19 GMT
cache-control: public, max-age=31536000
age: 567046
last-modified: Tue, 02 May 2023 15:08:26 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2 | 216.58.207.227 | 200 OK | 18 kB |
URL GET HTTP/2fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 17728, version 1.0 Hash9d09d1df90538b11770ec5f593b6d792 6e117eeeda54f443063becf094332b362e19abb8 a961366b4346f6078cc2f164d2c019f63b37e2693f6fc93a995048a98b25c083
GET /s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17728
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:37:26 GMT
expires: Fri, 18 Apr 2025 17:37:26 GMT
cache-control: public, max-age=31536000
age: 566259
last-modified: Tue, 02 May 2023 15:08:28 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/webclip.ico | 172.67.69.46 | 200 OK | 7.9 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/webclip.ico IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hashcd75c334141ffb739381accda6305d9f 1dd3d25a4afcf4d89b9d1f5c5c619120411628d7 239a0b9f65a0f67aa385ab2e0463b714106d565d19bc944f328a1c2ef1c767ed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/webclip.ico HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:06 GMT
content-type: image/vnd.microsoft.icon
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: W/"1eea-6113f1b022080"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Shx1UxkZNIImUumzlFbRxTR6uTWThhIGaJ2wCx4jZGxSfMKF%2FxII%2Fz6ki6nj9xMCL2OqCFO99BhjWxyqrELV%2Fz1XY5yU2vdIy7cHIUH%2FDpObie08LFQ%2B6bnmRsQ9DKFn69x8Ih%2BUT2tF6akok16vzex0dzsX8RKrKYniy%2BBmSIIqrA8MBKY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6cef7ede569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/js/crypto-genisus-new.js | 172.67.69.46 | 200 OK | 56 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/js/crypto-genisus-new.js IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeJavaScript source, ASCII text, with very long lines (32976) Hash63e0f5c61ee608c0a9b666b5e8e9b140 43b7533eead5339371d4a83281fe545db1c5d25f 9f44478d431ec32eeaa7597852203fa8a036e9e25875e31bb8179f78ee910dba
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/crypto-genisus-new.js HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: application/javascript
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: W/"da46-6113f1b022080-gzip"
vary: Accept-Encoding
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AH5wod%2BDGaUmU7xwhiP8ax5T6J%2FoeCcHC1MfPiOSfOvrwuKxEp%2BvyPS7uIIBjkKD0J4MynD8cwfB2LYxKnhMcUbaLYSx%2BUI1oriTEXF1BnBQ9x4BRWHuikQhTlxmUOu2mrcVplxY08uzTquhWQ0t5G7wzMNXaKx3UXNc0Mr%2BPBN94QRLEuE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879c6ce80897569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/favicon.ico | 172.67.69.46 | 200 OK | 7.9 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/favicon.ico IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hashcd75c334141ffb739381accda6305d9f 1dd3d25a4afcf4d89b9d1f5c5c619120411628d7 239a0b9f65a0f67aa385ab2e0463b714106d565d19bc944f328a1c2ef1c767ed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/favicon.ico HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:06 GMT
content-type: image/vnd.microsoft.icon
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: W/"1eea-6113f1b022080"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YblvGfhclml2RubL%2BCxf4Ym18rdUoJOGZrfYnUsKuHytaDUIyDcpizCazpjCf1a8IvFgwMYj7pGNecWYCHEoE4ge2e8u0JWruXkAdxaME7RW%2BUH7I3vQpF%2FGYtengCtH3%2BXvPbOIe328wJJORUvx0V2iMxN2o9Tmq98EVQ8f7r%2B2kRwv5n8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6cef7ee0569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/assets/languageSwitcher.js | 172.67.69.46 | 200 OK | 1.1 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/assets/languageSwitcher.js IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeJavaScript source, ASCII text, with very long lines (1153), with no line terminators Hash61dd9b4e02d91a5a8102b34504ab02da f3a16e215590fbf823163c43471ff6e8035a461f 22b7c6f3161caa02d826a6a5fd42a96bf0d5c6dfe024142e79a4125c3100d816
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/languageSwitcher.js HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: application/javascript
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: W/"455-6113f1b022080-gzip"
vary: Accept-Encoding
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pPXNxgl%2F8EDFGbnnKwPJXH9L8kKSzmWEIn6WQ9B05Lpk2tzl6tVurMlUD%2FFk8v8xRCIQLjaqrYFWrvEabCmydYDb0sImqeoebKJ0Yh59tbfkNBLHXpuZN4lSjBJ6hUlH4jVtfD4%2FS56CcgARYTIibZ%2BPQxtxim9WOacrVKTdC4q%2FvE7ZccI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879c6ce808a2569f-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| theimmediateavage360-com.newfinancialmarketworld.com/images/sp-main-2.webp | 172.67.69.46 | 200 OK | 61 kB |
URL GET HTTP/2theimmediateavage360-com.newfinancialmarketworld.com/images/sp-main-2.webp IP172.67.69.46:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subjecttheimmediateavage360-com.newfinancialmarketworld.com Fingerprint76:D4:A8:2C:B6:04:69:60:38:59:61:1A:F9:E9:EB:62:BA:89:9C:94 ValidityFri, 12 Apr 2024 07:58:26 GMT - Thu, 11 Jul 2024 08:56:25 GMT
File typeRIFF (little-endian) data, Web/P image Hashaa6d92750640d6cade1fac24c63da663 9d6e64e1bff131a6174aaebb26dd9a10b8750e81 79d73a883611a66e953680c89356c4dfb7c59d42b27bc785b6d70dddbd7ad6bb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/sp-main-2.webp HTTP/1.1
Host: theimmediateavage360-com.newfinancialmarketworld.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theimmediateavage360-com.newfinancialmarketworld.com/
Cookie: SERVERID=3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 06:55:05 GMT
content-type: image/webp
content-length: 61006
last-modified: Tue, 13 Feb 2024 08:23:14 GMT
etag: "ee4e-6113f1b022080"
cache-control: public, max-age=432000, must-revalidate
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=prqjtm7YFkOpTuVu0kqIcnY9%2FKlfL8BoAft5rUxEXVCNL8A%2B4SBGxbtMCOOMRm3JFai5li3NnU8NFXIo0vlQ1KrENC7UPUy2Tr5A0WJDQj7FXesN7phREPOTO6Fl%2BSCqZX7TpOOKrzIT%2BzsvPs6MWpRFodsggPghvHPrE1Ico0D7IgF5OGo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879c6ce7f882569f-OSL
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI3wi_Gwft.woff2 | 216.58.207.227 | 200 OK | 24 kB |
URL GET HTTP/2fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI3wi_Gwft.woff2 IP216.58.207.227:443
Requested byhttps://theimmediateavage360-com.newfinancialmarketworld.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 23736, version 1.0 Hashe2cad968cb158b719d38375c5b4c2855 f70e8c03147accc3b9006a285998cb6c04cc19d9 d32335c2c5fd5de9ee5f3d3b1fe4d9dde14aad16eda570a35018b0ff1dc093d2
GET /s/lato/v24/S6u_w4BMUTPHjxsI3wi_Gwft.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://theimmediateavage360-com.newfinancialmarketworld.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23736
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:36:31 GMT
expires: Fri, 25 Apr 2025 02:36:31 GMT
cache-control: public, max-age=31536000
age: 15514
last-modified: Tue, 02 May 2023 15:11:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|