| s.l-k.io/lum/api/shortener/KMJ7GR |  51.254.94.37 | 302 Found | 144 B |
URL User Request GET HTTP/2s.l-k.io/lum/api/shortener/KMJ7GR IP51.254.94.37:443
CertificateIssuerLet's Encrypt Subjects.l-k.io FingerprintDA:57:69:52:FD:7A:2A:AC:FE:A3:B1:51:8D:F7:16:BE:1B:10:6A:3B ValiditySun, 31 Mar 2024 08:39:07 GMT - Sat, 29 Jun 2024 08:39:06 GMT
File typeHTML document, ASCII text, with no line terminators Hash87eab8a53de0310695e684604c12db6e eae1f78c1ce4453b6c31b623fda4f600d41fdf28 3294813f5c45720383c4b5cd3c583c35f94b003d413ab9a3e8ddc8487b188f94
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /lum/api/shortener/KMJ7GR HTTP/1.1
Host: s.l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
access-control-allow-origin: https://l-k.io
content-type: text/html; charset=utf-8
date: Wed, 17 Apr 2024 17:07:44 GMT
location: https://l-k.io/home/en/not-found?short_link=KMJ7GR
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept
x-content-type-options: nosniff
x-frame-options: DENY
x-powered-by: Express
x-xss-protection: 1; mode=block
content-length: 144
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/main-app-d8016de112b13a31.js | 51.254.94.37 | 200 OK | 517 B |
URL GET HTTP/2l-k.io/_next/static/chunks/main-app-d8016de112b13a31.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeASCII text, with very long lines (463) Hasha8f915d3323a1d692c5111ed6d9d7e75 fcf378dfc0bbc9b0021c37a33062edcf74c5777a 46a9c2c4a84255aef1ca48f07f0b12b5f0c0a73400adcf7cdf0eb73e05c5c6fc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/main-app-d8016de112b13a31.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"205-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
content-length: 517
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/890-78f89f5d4d3007a0.js | 51.254.94.37 | 200 OK | 7.4 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/890-78f89f5d4d3007a0.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typegzip compressed data, from Unix Hashf7640dcf72545bc1ade9f9e7fa5b768a 42fc911053c5e7dbdf0375d08eaee08b5ef36b9a 7b63455da6155be607b168f8df5b0d58f9bfaa8486ed30f4be1fb3cbdea193f9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/890-78f89f5d4d3007a0.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"7486-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-4YN00PJKS5 |  142.250.74.168 | 200 OK | 105 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-4YN00PJKS5 IP142.250.74.168:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (9826) Size105 kB (104963 bytes) Hash187cdb34f49507040ed9bb46fae563b0 4bbd8e7cf5f66772aa621d05219313c76103d6dd cc225f8b97f1a33172540960f7d5ffb4f21df21c8049185d836140875fdac09c
GET /gtag/js?id=G-4YN00PJKS5 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 17:07:45 GMT
expires: Wed, 17 Apr 2024 17:07:45 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 104963
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/81-f1c91c8ce2d990d3.js | 51.254.94.37 | 200 OK | 4.3 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/81-f1c91c8ce2d990d3.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typegzip compressed data, from Unix Hash997c1cbc8380fb8338c92825214ac0fb a25c5de1d7888ea59f371d68045591bae8ec9b48 d93905d9b37d5bd2b2caf92e5edcf1d8bd32c1c2b6dc81b0c0d2c2d4cbf32f77
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/81-f1c91c8ce2d990d3.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"2631-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/app/home/%5Blang%5D/%5B...not_found%5D/page-42db27adf97c9581.js | 51.254.94.37 | 200 OK | 2.3 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/app/home/%5Blang%5D/%5B...not_found%5D/page-42db27adf97c9581.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typegzip compressed data, from Unix Hashdc34240b54fd5d993ea17f9f1b4cdfe1 65a8d4bc76c193f838f054923dd0eef0b38a3ded 8f10b72cb1c7dd50833bd1a5a2033b8276b66959d5f3911167fb681002136c50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/app/home/%5Blang%5D/%5B...not_found%5D/page-42db27adf97c9581.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"e3c-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/css/48fbafc4e54cdb67.css | 51.254.94.37 | 200 OK | 6.5 kB |
URL GET HTTP/2l-k.io/_next/static/css/48fbafc4e54cdb67.css IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typegzip compressed data, from Unix Hash2d2679d07658e7aa24178b91b908b985 926aa90d24f79b2016b4b56e3edcbdae8b605942 8d22e39c5e278452e919e9fb3d9d45140d17a65acbb910fdf8629a6f4663ac92
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/48fbafc4e54cdb67.css HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: text/css; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"936b-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/00cbbcb7-9f75520ccfd6cf77.js | 51.254.94.37 | 200 OK | 8.7 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/00cbbcb7-9f75520ccfd6cf77.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typegzip compressed data, from Unix Hash44a436e8e23da84774e6637a5f5009f2 1b683edd0bc54f8fde6c9fb13bba16879c89b50b badc10c5fc8adabdd6634fa5d541f889b9da2dd96506434871334e13bb8996b9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/00cbbcb7-9f75520ccfd6cf77.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"f83-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/app/home/%5Blang%5D/layout-f3705fa947ecd721.js | 51.254.94.37 | 200 OK | 12 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/app/home/%5Blang%5D/layout-f3705fa947ecd721.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typegzip compressed data, from Unix Hash1da1557f8ccbb113bcea8c346d4d5807 441c2c649e159de41fccd96cc13074d0a182008d 43e0f6f23202fe3660c2aec3ac684df7fe973fda7d5e002492180a3abf681619
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/app/home/%5Blang%5D/layout-f3705fa947ecd721.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"2fcd-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/457-8f87e6bdb22c132b.js | 51.254.94.37 | 200 OK | 14 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/457-8f87e6bdb22c132b.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typegzip compressed data, from Unix Hash9012c2f608e2d867463afbf128d3fe41 5072ed9e5c0cb8b93b86ec3af77e5f47d8bb1bee 58d319f65ccef0e12029342c4bd2df7072b7ae681cd7573f02f8b2d2feb262d7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/457-8f87e6bdb22c132b.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"3d16-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-K5T84BF | 142.250.74.168 | 200 OK | 87 kB |
URL GET HTTP/3www.googletagmanager.com/gtm.js?id=GTM-K5T84BF IP142.250.74.168:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (7561) Hash4a41061be99d959be3051f51e8cd9d13 7b5f9e2c5dccefc79945a06ce69673bd5632c9cc bf3901f2bfd85e2f49b00e9af6a16e174eeb396518556b1ece64fbd8bb106dba
GET /gtm.js?id=GTM-K5T84BF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 17:07:45 GMT
expires: Wed, 17 Apr 2024 17:07:45 GMT
cache-control: private, max-age=900
last-modified: Wed, 17 Apr 2024 16:09:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 87061
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| l-k.io/home/en | 51.254.94.37 | 200 OK | 5.4 kB |
IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typegzip compressed data, from Unix Hashd2a090889f2f9412bf534cc66233c856 5327c8cdc80fd66a7f8be549350f54b451a6bbf8 a04184de7ac858167ea30521fd65fe6c1119992eb956bff1dfbf2e2c0f00db31
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/en HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
RSC: 1
Next-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22home%22%2C%7B%22children%22%3A%5B%5B%22lang%22%2C%22en%22%2C%22d%22%5D%2C%7B%22children%22%3A%5B%5B%22not_found%22%2C%22not-found%22%2C%22c%22%5D%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22short_link%5C%22%3A%5C%22KMJ7GR%5C%22%7D%22%2C%7B%7D%5D%7D%5D%7D%2Cnull%2Cnull%2Ctrue%5D%7D%5D%7D%5D
Next-Router-Prefetch: 1
Next-Url: /home/en/not-found
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
DNT: 1
Connection: keep-alive
Cookie: NEXT_LOCALE=en; _ga_4YN00PJKS5=GS1.1.1713373665.1.0.1713373665.0.0.0; _ga=GA1.1.1651352741.1713373666
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: s-maxage=31536000, stale-while-revalidate
content-encoding: gzip
content-type: text/x-component
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: "hzfjdj89jujhe"
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-nextjs-cache: HIT
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/app/home/%5Blang%5D/page-48a5a52db55e182d.js | 51.254.94.37 | 200 OK | 6.5 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/app/home/%5Blang%5D/page-48a5a52db55e182d.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typegzip compressed data, from Unix Hash2586729c6e0f28067130db15f383f88f a770fb5bbe487599e0e8450277c7b39ffbb40b56 7cac53dc7398682f8c6b0d2d7c577dc9c9a049f3f92c84c359fa86bd80614f47
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/app/home/%5Blang%5D/page-48a5a52db55e182d.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Cookie: NEXT_LOCALE=en; _ga_4YN00PJKS5=GS1.1.1713373665.1.0.1713373665.0.0.0; _ga=GA1.1.1651352741.1713373666
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"7308-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/app/home/%5Blang%5D/demo/page-30d542ba56967809.js | 51.254.94.37 | 200 OK | 2.6 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/app/home/%5Blang%5D/demo/page-30d542ba56967809.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typegzip compressed data, from Unix Hashb263d7a967c5352b053d478989e7da12 1bc2ef309d2533f7f7cde9c5ca1c1e8a7fdf91b0 833b62de753b7cfe09f56d5576dc2efe933484639d88ac7c55488c96a707cf34
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/app/home/%5Blang%5D/demo/page-30d542ba56967809.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Cookie: NEXT_LOCALE=en; _ga_4YN00PJKS5=GS1.1.1713373665.1.0.1713373665.0.0.0; _ga=GA1.1.1651352741.1713373666
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"10b0-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/app/home/%5Blang%5D/error-b7cf51023f6b73ee.js | 51.254.94.37 | 200 OK | 10 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/app/home/%5Blang%5D/error-b7cf51023f6b73ee.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typegzip compressed data, from Unix Hash631e687500fa3a26eae8b7aa2af53078 4f695ccac447c36e6b8794750b7773676ef6ac46 41c46babfaa67324d12eaad0b06980769c51ea9829f3874dd4481b7797533b8e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/app/home/%5Blang%5D/error-b7cf51023f6b73ee.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"f92-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/408-60bb413ad1d8d192.js | 51.254.94.37 | 200 OK | 19 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/408-60bb413ad1d8d192.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typegzip compressed data, from Unix Hash06feec20d00928117661b3006440c013 ce6fbb3ec113f078d1ee722cf67f4d446dfab3e0 3a193bd3b8fbe51b4e0cf9d3dc6096baf8a752a829b965e3725437a5834c7487
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/408-60bb413ad1d8d192.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"18cf-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/destination?id=AW-11065246121&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 79 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-11065246121&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hash8cff12bc8adde079193a65a9b4f48aee e86ec6b9126460a3c06d36a5b34ded41b6bab81f 666b09812d4f28a56a20e281bb19cf733b9b5eff9a718f3f6bc3fd31effc97f4
GET /gtag/destination?id=AW-11065246121&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 17:07:45 GMT
expires: Wed, 17 Apr 2024 17:07:45 GMT
cache-control: private, max-age=900
last-modified: Wed, 17 Apr 2024 16:09:04 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79148
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| l-k.io/_next/static/chunks/app/home/%5Blang%5D/plans/page-c35916aeb7fa72ed.js | 51.254.94.37 | 200 OK | 28 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/app/home/%5Blang%5D/plans/page-c35916aeb7fa72ed.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typegzip compressed data, from Unix Hashfd037a3602dbe7f4026b156643d3af9c 92ceea88b080ae0aab37696c23eee3ed2690d4cf 3c9cdca0e1426a62707662c3351b3a386431da98c049a70f813375501763baad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/app/home/%5Blang%5D/plans/page-c35916aeb7fa72ed.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Cookie: NEXT_LOCALE=en; _ga_4YN00PJKS5=GS1.1.1713373665.1.0.1713373665.0.0.0; _ga=GA1.1.1651352741.1713373666
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"9fe0-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/css/854b0a7d8882d66e.css | 51.254.94.37 | 200 OK | 228 kB |
URL GET HTTP/2l-k.io/_next/static/css/854b0a7d8882d66e.css IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
Size228 kB (228369 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/854b0a7d8882d66e.css HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: text/css; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"37c11-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/458.6e6f5b585505ed61.js | 51.254.94.37 | 200 OK | 23 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/458.6e6f5b585505ed61.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/458.6e6f5b585505ed61.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"585a-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/674-f442312460a5b21e.js | 51.254.94.37 | 200 OK | 88 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/674-f442312460a5b21e.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash14b5fb609d17811b71cce34e1a608a66 6747c284af671580a33e8dbf897c303b033fb16c 856144c1dc8a43ae0af1ce84a7a71ebe04250fb76844b0158d6c89ec9fb05aed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/674-f442312460a5b21e.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Cookie: NEXT_LOCALE=en; _ga_4YN00PJKS5=GS1.1.1713373665.1.0.1713373665.0.0.0; _ga=GA1.1.1651352741.1713373666
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"157b0-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/370-8279688795d06742.js | 51.254.94.37 | 200 OK | 9.1 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/370-8279688795d06742.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeJavaScript source, ASCII text, with very long lines (9255), with no line terminators Hash067535c3cb8ad90a65244288e51513b7 16cb7a5d29f5d90255e1c96814c3f55dd1d3f29a 8627357803b73e8a8458e1f806fa9658c162532b133118c57fe4f22f8bf04ff8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/370-8279688795d06742.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"238c-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| cdn.pinkswan.ch/application/LUMBERJACK/2208240651_404_1.svg | 54.38.241.69 | 200 OK | 61 kB |
URL GET HTTP/2cdn.pinkswan.ch/application/LUMBERJACK/2208240651_404_1.svg IP54.38.241.69:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectcdn.pinkswan.ch Fingerprint1C:02:03:1A:26:71:A3:A0:46:C9:D0:AE:30:39:AC:F5:82:40:03:D0 ValidityThu, 14 Mar 2024 12:32:44 GMT - Wed, 12 Jun 2024 12:32:43 GMT
File typeSVG Scalable Vector Graphics image Hash48917cc9d4a9bf6b45f48644c9fdb033 2a09674e173a4baac7962c4a539d21ef552d58a1 b4bf90aa3e44504e5f012679a6e7a391c60a0f378c4dc56f47f0ccf86a516cb0
GET /application/LUMBERJACK/2208240651_404_1.svg HTTP/1.1
Host: cdn.pinkswan.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=259200
content-encoding: gzip
content-type: image/svg+xml
date: Wed, 17 Apr 2024 17:07:46 GMT
etag: W/"64bfdea2-ed69"
expires: Sat, 20 Apr 2024 17:07:46 GMT
last-modified: Tue, 25 Jul 2023 14:39:30 GMT
server: nginx/1.25.1
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding,Origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/8dc5345f-7c1865ad18892953.js | 51.254.94.37 | 200 OK | 1.3 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/8dc5345f-7c1865ad18892953.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1319), with no line terminators Hashb682daef18690b41c7908cf895a3ea5b 636eec9a327667e720bd8d13c78b8aa034224397 33c48f9320124b91bb46fe465288c69fd51ca9855abe9692eadd1346ed1bca50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8dc5345f-7c1865ad18892953.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"514-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/css/e7587fd19b668e47.css | 51.254.94.37 | 200 OK | 35 kB |
URL GET HTTP/2l-k.io/_next/static/css/e7587fd19b668e47.css IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeASCII text, with very long lines (35206) Hash028196d151d675f9238baf830cae8372 dfeadffec6b76081c68ee5fb5ddd1be8d7d4e0ef 8ccd32af686f71549c847ada1b8dfee428f94178ec1d56e8378b818fd6fc0d9a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/e7587fd19b668e47.css HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: text/css; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"89b6-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/webpack-58c339dfa294a63d.js | 51.254.94.37 | 200 OK | 4.0 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/webpack-58c339dfa294a63d.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeJavaScript source, ASCII text, with very long lines (4131), with no line terminators Hashe5f05b56a80c086b900fc6a7d17c3f42 bde5a3503fb0ce0bb7e3c0ed07e02283abc3d072 54a7e6dbe91f423be5e943773c18e244f4a17aec9a0486471c7861a92a4e4d3b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/webpack-58c339dfa294a63d.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"fcb-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| cdn.pinkswan.ch/application/LUMBERJACK/2208240622_logo.svg | 54.38.241.69 | 200 OK | 17 kB |
URL GET HTTP/2cdn.pinkswan.ch/application/LUMBERJACK/2208240622_logo.svg IP54.38.241.69:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectcdn.pinkswan.ch Fingerprint1C:02:03:1A:26:71:A3:A0:46:C9:D0:AE:30:39:AC:F5:82:40:03:D0 ValidityThu, 14 Mar 2024 12:32:44 GMT - Wed, 12 Jun 2024 12:32:43 GMT
File typeSVG Scalable Vector Graphics image Hash3062963630b6a2a5a41af8ce234b9e47 288a9da16cbe3e1432431ce11d1b3470e1056348 ccee9c5cfe3864b124670535ea0352b4e9f9968c1febdc652e027180554b8361
GET /application/LUMBERJACK/2208240622_logo.svg HTTP/1.1
Host: cdn.pinkswan.ch
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=259200
content-encoding: gzip
content-type: image/svg+xml
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"64bfdea2-4170"
expires: Sat, 20 Apr 2024 17:07:45 GMT
last-modified: Tue, 25 Jul 2023 14:39:30 GMT
server: nginx/1.25.1
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding,Origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/938-7e298e0695cfb89c.js | 51.254.94.37 | 200 OK | 104 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/938-7e298e0695cfb89c.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size104 kB (104512 bytes) Hashb1e523f94d729665b8050859328b5314 b047e5ce6ab755f077c3294d9c3a47f62d167b0d 62d2c4b0d9280f208b7ea497473726ad5c687e9f1a4e043d8889ac12d66ac42d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/938-7e298e0695cfb89c.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"19840-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.7 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0 Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://l-k.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 03:25:26 GMT
expires: Wed, 16 Apr 2025 03:25:26 GMT
cache-control: public, max-age=31536000
age: 135739
last-modified: Fri, 22 Mar 2024 00:01:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/630-790f4d42f53e62ee.js | 51.254.94.37 | 200 OK | 45 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/630-790f4d42f53e62ee.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeJavaScript source, ASCII text, with very long lines (23122) Hash36705ee173f05a9bdc7c6787958f6883 2b96ec38a89c3d402b79aeba292378f287da5191 d177b42722fefb161e3eda4c7750ade0f699e70d713acecc42e780c4f152d975
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/630-790f4d42f53e62ee.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"aea8-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/fd9d1056-c60815ea6dabb2aa.js | 51.254.94.37 | 200 OK | 172 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/fd9d1056-c60815ea6dabb2aa.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size172 kB (171956 bytes) Hash00ba888e50de57db5677523a08989349 c49827def05f625332a3be27c7a03c20989b5a01 d77d2cc240d822c949d2f204ca4d510e4cb128876da83e750de4a5645cdfbca6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/fd9d1056-c60815ea6dabb2aa.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"29fb4-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap | 142.250.74.106 | 200 OK | 14 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap IP142.250.74.106:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hashdce36a48bcf330832152e582d29373b8 cd44276b28cf6be734f61e45644ed6ea0ad08e6e 3f6e8efb65dff0486271d787d60be7d84387c203bebd36159794e6e2c28c31f3
GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 17 Apr 2024 17:07:45 GMT
date: Wed, 17 Apr 2024 17:07:45 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| l-k.io/home/en/news?_rsc=hvo6a | 51.254.94.37 | 200 OK | 19 kB |
URL GET HTTP/2l-k.io/home/en/news?_rsc=hvo6a IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeASCII text, with very long lines (6857) Hashaacd6f4630c6679738ac9dbf1079ce5e 874589ccfa53638e7c3ae3010a46b7c24d1c84b1 39b0b415c606d60c0891d6525d48cec00356be1114711782d1097ad6e0c94c16
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/en/news?_rsc=hvo6a HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
RSC: 1
Next-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22home%22%2C%7B%22children%22%3A%5B%5B%22lang%22%2C%22en%22%2C%22d%22%5D%2C%7B%22children%22%3A%5B%5B%22not_found%22%2C%22not-found%22%2C%22c%22%5D%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22short_link%5C%22%3A%5C%22KMJ7GR%5C%22%7D%22%2C%7B%7D%5D%7D%5D%7D%2Cnull%2Cnull%2Ctrue%5D%7D%5D%7D%5D
Next-Router-Prefetch: 1
Next-Url: /home/en/not-found
DNT: 1
Connection: keep-alive
Cookie: NEXT_LOCALE=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: s-maxage=31536000, stale-while-revalidate
content-encoding: gzip
content-type: text/x-component
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: "l6i3j9ttviefb"
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-nextjs-cache: HIT
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| | 51.254.94.37 | 308 Permanent Redirect | 37 kB |
URL User Request GET HTTP/2IP51.254.94.37:443
CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /KMJ7GR/ HTTP/1.1
Host: www.l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 308 Permanent Redirect
date: Wed, 17 Apr 2024 17:07:44 GMT
location: /KMJ7GR
refresh: 0;url=/KMJ7GR
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| | 51.254.94.37 | 301 Moved Permanently | 37 kB |
URL User Request GET HTTP/2IP51.254.94.37:443
CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /KMJ7GR HTTP/1.1
Host: www.l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 17 Apr 2024 17:07:44 GMT
location: https://s.l-k.io/lum/api/shortener/KMJ7GR
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/406-36912f381b4947b0.js | 51.254.94.37 | 200 OK | 60 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/406-36912f381b4947b0.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/406-36912f381b4947b0.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"ea1e-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/250-90c3f301c267eb72.js | 51.254.94.37 | 200 OK | 20 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/250-90c3f301c267eb72.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeJavaScript source, ASCII text, with very long lines (20304) Hashf4104a5cb3539d6a0dd4dd129260bd78 888230ca925dcd98994c4de9190d007a750608d0 4c93028fb5637230763f6fee1f73d7f7dbdb2ae8b41aa4c943a8ad59440ce626
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/250-90c3f301c267eb72.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"4f81-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/app/home/%5Blang%5D/news/page-14b746c51a71836a.js | 51.254.94.37 | 200 OK | 9.9 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/app/home/%5Blang%5D/news/page-14b746c51a71836a.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeJavaScript source, ASCII text, with very long lines (10219), with no line terminators Hash4aea42d380bcb53583a10622b5ca16a5 4a5840ccfa38e78f69577faa03250349416b8761 4fd1a64bed4a89b118fd185f64cc83ffe311efd3745cd035d44f3ba37fe8ab20
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/app/home/%5Blang%5D/news/page-14b746c51a71836a.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Cookie: NEXT_LOCALE=en; _ga_4YN00PJKS5=GS1.1.1713373665.1.0.1713373665.0.0.0; _ga=GA1.1.1651352741.1713373666
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"2684-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/538-856ca5e592d51309.js | 51.254.94.37 | 200 OK | 46 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/538-856ca5e592d51309.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeJavaScript source, ASCII text, with very long lines (42933) Hashb01504dc9ddd88204fa84ebc650719c1 50c2f58d2afb71d7f7b580e27b4ed957f0f94792 1c5d5fb9cbaccac686078a79e5bafdade0264ed60845f01c748c61491384b1c7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/538-856ca5e592d51309.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"b366-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/home/en/demo?_rsc=hvo6a | 51.254.94.37 | 200 OK | 19 kB |
URL GET HTTP/2l-k.io/home/en/demo?_rsc=hvo6a IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeASCII text, with very long lines (6857) Hashaad2e52ad62e5d84ca2d5ff5cefb2ef1 6e396c99bb274c881973626317462abdefc5e873 743510a17be4c36bb87f78ff19071e254970666311b249c92bcad4ec93011852
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/en/demo?_rsc=hvo6a HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
RSC: 1
Next-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22home%22%2C%7B%22children%22%3A%5B%5B%22lang%22%2C%22en%22%2C%22d%22%5D%2C%7B%22children%22%3A%5B%5B%22not_found%22%2C%22not-found%22%2C%22c%22%5D%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22short_link%5C%22%3A%5C%22KMJ7GR%5C%22%7D%22%2C%7B%7D%5D%7D%5D%7D%2Cnull%2Cnull%2Ctrue%5D%7D%5D%7D%5D
Next-Router-Prefetch: 1
Next-Url: /home/en/not-found
DNT: 1
Connection: keep-alive
Cookie: NEXT_LOCALE=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: s-maxage=31536000, stale-while-revalidate
content-encoding: gzip
content-type: text/x-component
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: "dnvna5tqywebn"
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-nextjs-cache: HIT
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/assets/apple-touch-icon.png | 51.254.94.37 | 200 OK | 20 kB |
URL GET HTTP/2l-k.io/assets/apple-touch-icon.png IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typePNG image data, 180 x 180, 8-bit/color RGB, non-interlaced Hash2bfb53f26d0d1e20e96d8f92d3ce0397 0a03bee628612de90804aedd3889198aaf4166fe dc8b214c679bc007a48a3b6115421982ea448dc0982ec814144ec4e58ac36102
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/apple-touch-icon.png HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Cookie: NEXT_LOCALE=en; _ga_4YN00PJKS5=GS1.1.1713373665.1.0.1713373665.0.0.0; _ga=GA1.1.1651352741.1713373666; _gcl_au=1.1.638568679.1713373666
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=0
content-type: image/png
date: Wed, 17 Apr 2024 17:07:46 GMT
etag: W/"4fc9-18c886a7f50"
last-modified: Wed, 20 Dec 2023 18:08:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
content-length: 20425
X-Firefox-Spdy: h2
|
|
| l-k.io/home/en/plans?_rsc=hvo6a | 51.254.94.37 | 200 OK | 19 kB |
URL GET HTTP/2l-k.io/home/en/plans?_rsc=hvo6a IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeASCII text, with very long lines (6860) Hashc2d7e69f5f0561490024119e45a28a8a 5561aed95cfdaf17bac30753618cf105a6335b26 270b2d05c05c15a1ca68f746cc666cf259ad2c53b020e398cb4ba7f57444dcf3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/en/plans?_rsc=hvo6a HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
RSC: 1
Next-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22home%22%2C%7B%22children%22%3A%5B%5B%22lang%22%2C%22en%22%2C%22d%22%5D%2C%7B%22children%22%3A%5B%5B%22not_found%22%2C%22not-found%22%2C%22c%22%5D%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22short_link%5C%22%3A%5C%22KMJ7GR%5C%22%7D%22%2C%7B%7D%5D%7D%5D%7D%2Cnull%2Cnull%2Ctrue%5D%7D%5D%7D%5D
Next-Router-Prefetch: 1
Next-Url: /home/en/not-found
DNT: 1
Connection: keep-alive
Cookie: NEXT_LOCALE=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: s-maxage=31536000, stale-while-revalidate
content-encoding: gzip
content-type: text/x-component
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: "12wplp008pcegj"
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-nextjs-cache: HIT
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/454-3e0e425b65ab4cdb.js | 51.254.94.37 | 200 OK | 28 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/454-3e0e425b65ab4cdb.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeJavaScript source, ASCII text, with very long lines (27752) Hash0b7afc82f746bef980b0c276ec8a5e80 87cb8a363cd08b1d99ba4a233d6d465e5fea0b60 2a83495e42811467edf36751a632b8b2d56a100974c1743b63edecc79b9e56b0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/454-3e0e425b65ab4cdb.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Cookie: NEXT_LOCALE=en; _ga_4YN00PJKS5=GS1.1.1713373665.1.0.1713373665.0.0.0; _ga=GA1.1.1651352741.1713373666
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"6c99-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/754-daaf47feae1ac9b9.js | 51.254.94.37 | 200 OK | 9.1 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/754-daaf47feae1ac9b9.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeJavaScript source, ASCII text, with very long lines (9238), with no line terminators Hash6ebfcbd22bfa8edf75c43c85cae99344 0e14fbd515a0d15cbfe3eafe0e482b9bc81fc535 b2d5897fd675d8b9cc7d117fd08cf8cf3aff3204ec68a5cac2d86008b49c596b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/754-daaf47feae1ac9b9.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"2393-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/547-84ed52802148738c.js | 51.254.94.37 | 200 OK | 6.6 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/547-84ed52802148738c.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeJavaScript source, ASCII text, with very long lines (6739), with no line terminators Hash301fcce31c13e96d5eb2f48729f42d5e a0020f3e04602ebfbe9d337f127a4105d166b15e 0118106f08ffb903b2d23b8e5096299776e4acaf2bf959694383f00c0e2a344e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/547-84ed52802148738c.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"19ea-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.8 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7816, version 1.0 Hash25b0e113ca7cce3770d542736db26368 cb726212d5d525021752a1d8470a0fb593e0c49e 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://l-k.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 20:25:17 GMT
expires: Tue, 15 Apr 2025 20:25:17 GMT
cache-control: public, max-age=31536000
age: 160948
last-modified: Fri, 22 Mar 2024 00:00:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| l-k.io/assets/favicon.ico | 51.254.94.37 | 200 OK | 15 kB |
URL GET HTTP/2l-k.io/assets/favicon.ico IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeMS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hashb0a9d5549c6deb0799d8073d5fe36ba4 db1a8e7e893a0e77edba08bbb8e57767886c3ff7 7d3860b794998ce006d11caff1d090b80fade6fcb02fe25c1c7129140da16592
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/favicon.ico HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Cookie: NEXT_LOCALE=en; _ga_4YN00PJKS5=GS1.1.1713373665.1.0.1713373665.0.0.0; _ga=GA1.1.1651352741.1713373666; _gcl_au=1.1.638568679.1713373666
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=0
content-encoding: gzip
content-type: image/x-icon
date: Wed, 17 Apr 2024 17:07:46 GMT
etag: W/"3aee-18c886a7f50"
last-modified: Wed, 20 Dec 2023 18:08:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/home/en/not-found?short_link=KMJ7GR | 51.254.94.37 | 200 OK | 37 kB |
URL User Request GET HTTP/2l-k.io/home/en/not-found?short_link=KMJ7GR IP51.254.94.37:443
CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/en/not-found?short_link=KMJ7GR HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
content-encoding: gzip
content-type: text/html; charset=utf-8
date: Wed, 17 Apr 2024 17:07:44 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-powered-by: Next.js
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/home/en?_rsc=hvo6a | 51.254.94.37 | 200 OK | 25 kB |
URL GET HTTP/2l-k.io/home/en?_rsc=hvo6a IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeJavaScript source, ASCII text, with very long lines (6193) Hash98fdf605b304503729d215073febbcbb 033f82018b1f83ef7804b7193e8414f42f692a36 8a9c426059801d8ea973133c37865a3fad6a82aa2aa2845e7f40872ea3bd9adf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /home/en?_rsc=hvo6a HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
RSC: 1
Next-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22home%22%2C%7B%22children%22%3A%5B%5B%22lang%22%2C%22en%22%2C%22d%22%5D%2C%7B%22children%22%3A%5B%5B%22not_found%22%2C%22not-found%22%2C%22c%22%5D%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22short_link%5C%22%3A%5C%22KMJ7GR%5C%22%7D%22%2C%7B%7D%5D%7D%5D%7D%2Cnull%2Cnull%2Ctrue%5D%7D%5D%7D%5D
Next-Router-Prefetch: 1
Next-Url: /home/en/not-found
DNT: 1
Connection: keep-alive
Cookie: NEXT_LOCALE=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: s-maxage=31536000, stale-while-revalidate
content-encoding: gzip
content-type: text/x-component
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: "hzfjdj89jujhe"
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-nextjs-cache: HIT
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 | 216.58.207.227 | 200 OK | 7.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 IP216.58.207.227:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://l-k.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 03:21:03 GMT
expires: Wed, 16 Apr 2025 03:21:03 GMT
cache-control: public, max-age=31536000
age: 136002
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| l-k.io/_next/static/chunks/346-630ad6c60b4d4cc8.js | 51.254.94.37 | 200 OK | 31 kB |
URL GET HTTP/2l-k.io/_next/static/chunks/346-630ad6c60b4d4cc8.js IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
File typeJavaScript source, ASCII text, with very long lines (30831) Hashd5682338f0ff9301b31720cc6e50c3bb a32de336e8c19407815f9815f0135193a58d8722 a42e32e9a5d5fbe1f450ead64de41d02809c1711cecfc12f21c1e1db3bf2b390
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/346-630ad6c60b4d4cc8.js HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
Cookie: NEXT_LOCALE=en; _ga_4YN00PJKS5=GS1.1.1713373665.1.0.1713373665.0.0.0; _ga=GA1.1.1651352741.1713373666
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 17 Apr 2024 17:07:45 GMT
etag: W/"78a0-18ed1805b90"
last-modified: Fri, 12 Apr 2024 08:50:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|
| l-k.io/?_rsc=hvo6a | 51.254.94.37 | 307 Temporary Redirect | 25 kB |
IP51.254.94.37:443
Requested byhttps://l-k.io/home/en/not-found?short_link=KMJ7GR CertificateIssuerLet's Encrypt Subjectl-k.io FingerprintBF:E0:DC:12:3D:44:18:7C:F4:4F:AB:FC:8F:33:A3:C7:0F:9D:E6:10 ValiditySun, 10 Mar 2024 08:39:06 GMT - Sat, 08 Jun 2024 08:39:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?_rsc=hvo6a HTTP/1.1
Host: l-k.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l-k.io/home/en/not-found?short_link=KMJ7GR
RSC: 1
Next-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22home%22%2C%7B%22children%22%3A%5B%5B%22lang%22%2C%22en%22%2C%22d%22%5D%2C%7B%22children%22%3A%5B%5B%22not_found%22%2C%22not-found%22%2C%22c%22%5D%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22short_link%5C%22%3A%5C%22KMJ7GR%5C%22%7D%22%2C%7B%7D%5D%7D%5D%7D%2Cnull%2Cnull%2Ctrue%5D%7D%5D%7D%5D
Next-Router-Prefetch: 1
Next-Url: /home/en/not-found
DNT: 1
Connection: keep-alive
Cookie: NEXT_LOCALE=en
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Wed, 17 Apr 2024 17:07:45 GMT
location: /home/en
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
|
|