| jemi.so/fonts/PlusJakartaSans-Bold.woff2 |  76.76.21.9 | 200 OK | 41 kB |
URL GET HTTP/2jemi.so/fonts/PlusJakartaSans-Bold.woff2 IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 40912, version 1.0 Hash965660d6c68800490955ed23e9a2659f 9b44e0bdd3e8b284d1d70fc8bb5400b67316fa2d 353802d2688c33b465048f6c0d479690165a25685343e3b329b7f1a91170af82
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fonts/PlusJakartaSans-Bold.woff2 HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jemi.so/bsuirnfjwebsite
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 8676941
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="PlusJakartaSans-Bold.woff2"
content-type: font/woff2
date: Sat, 04 May 2024 06:43:05 GMT
etag: "965660d6c68800490955ed23e9a2659f"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /fonts/PlusJakartaSans-Bold.woff2
x-vercel-cache: HIT
x-vercel-id: arn1::qrnfx-1714804985618-0364b0781922
content-length: 40912
X-Firefox-Spdy: h2
|
|
| jemi.so/fonts/fonts.css | 76.76.21.9 | 200 OK | 657 B |
IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
Hash9653db0c2b8165ebc5c248be54cdb725 c2c4f22232db6b443f0dbecf97d96d329faffaaa b9c73534d9400704b1eca01362b51bb772003fe5971a1fa6cd37bcb48ea22a8d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fonts/fonts.css HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 8682533
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="fonts.css"
content-type: text/css; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: "9653db0c2b8165ebc5c248be54cdb725"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /fonts/fonts.css
x-vercel-cache: HIT
x-vercel-id: arn1::q5l78-1714804985619-2cab959d03bf
content-length: 657
X-Firefox-Spdy: h2
|
|
| jemi.so/fonts/PlusJakartaSans-Medium.woff2 | 76.76.21.9 | 200 OK | 41 kB |
URL GET HTTP/2jemi.so/fonts/PlusJakartaSans-Medium.woff2 IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 40748, version 1.0 Hash3647c642c9e9bcdf4940ab895cb7af79 3984f763d821e16ab390d2f49acc6110a9eae165 ea2f1b941e29e9e53ddd227eebc459284c9cad128a3d22be20c1f25b6732d350
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /fonts/PlusJakartaSans-Medium.woff2 HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jemi.so/bsuirnfjwebsite
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 8684600
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="PlusJakartaSans-Medium.woff2"
content-type: font/woff2
date: Sat, 04 May 2024 06:43:05 GMT
etag: "3647c642c9e9bcdf4940ab895cb7af79"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /fonts/PlusJakartaSans-Medium.woff2
x-vercel-cache: HIT
x-vercel-id: arn1::46k9d-1714804985623-098032ec57a5
content-length: 40748
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css | 151.101.65.229 | 200 OK | 26 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css IP151.101.65.229:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeUnicode text, UTF-8 text, with very long lines (65306) Hash94994c66fec8c3468b269dc0cc242151 ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad 62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab
GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://jemi.so
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0"
content-encoding: br
accept-ranges: bytes
date: Sat, 04 May 2024 06:43:05 GMT
age: 1564727
x-served-by: cache-fra-etou8220101-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26333
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/5675-59dde0e98cb22e67.js | 76.76.21.9 | 200 OK | 4.5 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/5675-59dde0e98cb22e67.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (9182) Hash727d8262ed75fcb242947dd3ed550811 d046de66aa15fec46e97bd45192ee7c81e30fe22 51a2097eb5e56f0688a7d38abc109842a275f60df3390e55e27256fdbdb37e50
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5675-59dde0e98cb22e67.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 8679039
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5675-59dde0e98cb22e67.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"727d8262ed75fcb242947dd3ed550811"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/5675-59dde0e98cb22e67.js
x-vercel-cache: HIT
x-vercel-id: arn1::wfp8d-1714804985630-5f22cb7ab490
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/8929-fdb4f64c0b4ec8f8.js | 76.76.21.9 | 200 OK | 40 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/8929-fdb4f64c0b4ec8f8.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashde4f124b6403094122c4bbcefdf6de99 c8cc96eae2117a521a43fc7219d288ea46fa82e4 b3572b1c39f779358b508ddd2344d4f55dfd9d9a380d8ce6db0e62d453721527
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8929-fdb4f64c0b4ec8f8.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 8686496
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8929-fdb4f64c0b4ec8f8.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"de4f124b6403094122c4bbcefdf6de99"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/8929-fdb4f64c0b4ec8f8.js
x-vercel-cache: HIT
x-vercel-id: arn1::27fwc-1714804985633-8f04fa7fa391
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-158661454-5 | 142.250.74.72 | 200 OK | 72 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-158661454-5 IP142.250.74.72:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (1822) Hash30414fcff9b478a10cb806b0bbae86cc 903996c0503247491e73ac0dbf9c47beb297f10c cd6128aee083879499c38879062003bba93d634494d4f428cb7ab9b3c0375085
GET /gtag/js?id=UA-158661454-5 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 06:43:05 GMT
expires: Sat, 04 May 2024 06:43:05 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 71517
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/framework-640bc13ca36d2ce7.js | 76.76.21.9 | 200 OK | 137 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/framework-640bc13ca36d2ce7.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size137 kB (136631 bytes) Hash5ec99efd5510c813f24b1cf8de3ddf40 9cfbf855b70f0ef895758bbda8c79167bdd533e6 9024be09193ab8db0f24c7ca86b741e580ada67521260f849e0d4b19e295af9a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/framework-640bc13ca36d2ce7.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 8678125
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="framework-640bc13ca36d2ce7.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"5ec99efd5510c813f24b1cf8de3ddf40"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/framework-640bc13ca36d2ce7.js
x-vercel-cache: HIT
x-vercel-id: arn1::qrnfx-1714804985629-c702c07c380d
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/8764-86ee4dec8701906d.js | 76.76.21.9 | 200 OK | 7.9 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/8764-86ee4dec8701906d.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (23287) Hash1cec0f38062092613180b66e35d8a69d 744059a8c3c9f7b784993b371f8112399b4cf78f ad7f763190ef655e723439414f558f3bbca219ebb87aeb76cd24ad7de8d9e098
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8764-86ee4dec8701906d.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 8687316
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8764-86ee4dec8701906d.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"1cec0f38062092613180b66e35d8a69d"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/8764-86ee4dec8701906d.js
x-vercel-cache: HIT
x-vercel-id: arn1::zkz2n-1714804985633-6600e2afe36a
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/5558-155e0b3da56e3635.js | 76.76.21.9 | 200 OK | 7.3 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/5558-155e0b3da56e3635.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (25007) Hasha8480b11ceed756a979e774fc5dff51a bec72565a93fe00f2d9a40f59761890cf65980a0 bf20c6871d7521045b4c23aa3f0c860db877c2f3211ef4f747b8bc6f40f3ab5b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5558-155e0b3da56e3635.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 8678829
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5558-155e0b3da56e3635.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"a8480b11ceed756a979e774fc5dff51a"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/5558-155e0b3da56e3635.js
x-vercel-cache: HIT
x-vercel-id: arn1::wfp8d-1714804985639-5532334976c8
X-Firefox-Spdy: h2
|
|
| o467631.ingest.sentry.io/api/5494296/envelope/?sentry_key=7a464dcf9e1a4530b4950fc23c9aa337&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.13.0 | 34.120.195.249 | 200 OK | 2 B |
URL POST HTTP/2o467631.ingest.sentry.io/api/5494296/envelope/?sentry_key=7a464dcf9e1a4530b4950fc23c9aa337&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.13.0 IP34.120.195.249:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerDigiCert Inc Subjectingest.sentry.io Fingerprint60:82:0B:58:64:CD:37:FD:3F:C0:84:4F:0B:69:CF:58:05:15:97:9A ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/5494296/envelope/?sentry_key=7a464dcf9e1a4530b4950fc23c9aa337&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.13.0 HTTP/1.1
Host: o467631.ingest.sentry.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jemi.so/
Content-Type: text/plain;charset=UTF-8
Content-Length: 448
Origin: https://jemi.so
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 04 May 2024 06:43:06 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: *
vary: origin,access-control-request-method,access-control-request-headers
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-D4VQTX6J04&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 103 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-D4VQTX6J04&l=dataLayer&cx=c IP142.250.74.72:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (7711) Size103 kB (102583 bytes) Hash7792fb2a9671fd7f2d79ec7364cabeef b7bb3ba2f823557fe2dcbb583f52e333c5b301c0 0e45d86253a06fcb6530ba76b8100c2d4c2de92466b5721d5d1649c727916b09
GET /gtag/js?id=G-D4VQTX6J04&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 06:43:06 GMT
expires: Sat, 04 May 2024 06:43:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 102583
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| jemi.so/_next/static/chunks/170-1cbcffea1cd951ad.js | 76.76.21.9 | 200 OK | 40 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/170-1cbcffea1cd951ad.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashfe1661142130a54547b4d91e324bbab5 47d976f2827f03f5ad46b29b67490d9f40ffd564 69ad9784d14138cb9585c6d82eca124ca5cd5bfe424833b427ef849e66384108
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/170-1cbcffea1cd951ad.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 8685835
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="170-1cbcffea1cd951ad.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"fe1661142130a54547b4d91e324bbab5"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/170-1cbcffea1cd951ad.js
x-vercel-cache: HIT
x-vercel-id: arn1::6znh7-1714804985630-759cacad2f1b
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/css/ec35c2edb97e1c77.css | 76.76.21.9 | 200 OK | 3.4 kB |
URL GET HTTP/2jemi.so/_next/static/css/ec35c2edb97e1c77.css IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeASCII text, with very long lines (12049) Hashb0a5d31fc6cea6c5e5345ec405e6f8e9 f3812c5aef0819e33826c900137a31e42fb3ba9a e58e6404584bdb2578340bd4e83019d23cca86a203213ffba603dfab96044e05
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/ec35c2edb97e1c77.css HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jemi.so/bsuirnfjwebsite
sentry-trace: b558f1ebd5a246f499d63dfd7b344ed4-87b549677fbda11f-0
baggage: sentry-environment=production,sentry-release=e2828dfd94a097cb1cdb718bea402340ef2e2932,sentry-transaction=%2F_site%2F%5Busername%5D,sentry-public_key=7a464dcf9e1a4530b4950fc23c9aa337,sentry-trace_id=b558f1ebd5a246f499d63dfd7b344ed4,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 8680875
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="ec35c2edb97e1c77.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Sat, 04 May 2024 06:43:06 GMT
etag: W/"b0a5d31fc6cea6c5e5345ec405e6f8e9"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/css/ec35c2edb97e1c77.css
x-vercel-cache: HIT
x-vercel-id: arn1::q5l78-1714804986197-0e8da877e183
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/3197-844c8163e526cc23.js | 76.76.21.9 | 200 OK | 20 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/3197-844c8163e526cc23.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash46146652269df07359a4cbc7ce130fe9 941d4df5f4ad7611349578a18ed51609f186ab0c 3bbc1a1b709b6c24ef3b9a03f4078547f418a594016a28b8c4220bff7cadbd68
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/3197-844c8163e526cc23.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 8687186
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="3197-844c8163e526cc23.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"46146652269df07359a4cbc7ce130fe9"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/3197-844c8163e526cc23.js
x-vercel-cache: HIT
x-vercel-id: arn1::ftfq4-1714804985637-310cad7c8114
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/g0PE8f_wbZr8vYEYSmJ1N/_ssgManifest.js | 76.76.21.9 | 200 OK | 9.3 kB |
URL GET HTTP/2jemi.so/_next/static/g0PE8f_wbZr8vYEYSmJ1N/_ssgManifest.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeASCII text, with very long lines (2953), with no line terminators Hash884efd5e05ade7f54ced398c67dfd2e0 d151a073558b30d435b1e781d8eb970bebed745f 4105dff718bc27b60ff041eb7ea748a4c70e8f6a1ec8cc8358b73fd5905cf42b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/g0PE8f_wbZr8vYEYSmJ1N/_ssgManifest.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 8677601
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_ssgManifest.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"884efd5e05ade7f54ced398c67dfd2e0"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/g0PE8f_wbZr8vYEYSmJ1N/_ssgManifest.js
x-vercel-cache: HIT
x-vercel-id: arn1::qrnfx-1714804985643-1fb0902ac608
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/1370-85102a4a15630c01.js | 76.76.21.9 | 200 OK | 21 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/1370-85102a4a15630c01.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (22507) Hash7a27e091b8521cca65e9f29f5eef247d 54eb410d4a21cc0f391a370898ad584e91f9c6ac f36ad425fd0ce4a6b8cbb752ae079e6a3cc5cd5a6c667043d775787f3babbfe1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1370-85102a4a15630c01.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 8680237
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1370-85102a4a15630c01.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"7a27e091b8521cca65e9f29f5eef247d"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/1370-85102a4a15630c01.js
x-vercel-cache: HIT
x-vercel-id: arn1::qrnfx-1714804985632-bf49cb0b5776
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/pages/_app-64661cb84870842a.js | 76.76.21.9 | 200 OK | 57 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/pages/_app-64661cb84870842a.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash7d69492ba37f9714603d5f5c52bb34d0 113394d9defd2338d752b94f486cb93bbaff94c8 53df59ed432f1f23748f2540f1b3548edefea67d79b9ae27d8b142386c64fe92
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/_app-64661cb84870842a.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 8685558
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_app-64661cb84870842a.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"7d69492ba37f9714603d5f5c52bb34d0"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/pages/_app-64661cb84870842a.js
x-vercel-cache: HIT
x-vercel-id: arn1::wps7t-1714804985629-b06800f9ba65
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/9119-1773690144b435e3.js | 76.76.21.9 | 200 OK | 17 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/9119-1773690144b435e3.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (33161) Hashb9fe30532ee4d7bd3a23bfccd4c03f0f b92866da92fad30c4d7acf10ff96a41d7bb41ec0 c73e6783e6ffd2b939d47deda09de89c73b1eedacf9f826955b08ae1da90dbc1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/9119-1773690144b435e3.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 8676657
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="9119-1773690144b435e3.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"b9fe30532ee4d7bd3a23bfccd4c03f0f"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/9119-1773690144b435e3.js
x-vercel-cache: HIT
x-vercel-id: arn1::qrnfx-1714804985639-4c0abe6df9b3
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/g0PE8f_wbZr8vYEYSmJ1N/_buildManifest.js | 76.76.21.9 | 200 OK | 20 kB |
URL GET HTTP/2jemi.so/_next/static/g0PE8f_wbZr8vYEYSmJ1N/_buildManifest.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeASCII text, with very long lines (19506), with no line terminators Hash23adad29e913e6880e853dea5b3cbe43 ad66253d007afc74d7cf7896425b0c22da813d19 6675baeb8b28aa57c4066850ee53296a67ecda4841d9461eaa3048852287292b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/g0PE8f_wbZr8vYEYSmJ1N/_buildManifest.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 8684600
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_buildManifest.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"23adad29e913e6880e853dea5b3cbe43"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/g0PE8f_wbZr8vYEYSmJ1N/_buildManifest.js
x-vercel-cache: HIT
x-vercel-id: arn1::46k9d-1714804985639-da5353c56350
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/7758-4197ef430fa4064e.js | 76.76.21.9 | 200 OK | 28 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/7758-4197ef430fa4064e.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (28201) Hash3727112dc6220d94b69ad4c020c24109 0f0d96ec2d3b7c58f013239e86d3df7eef655bdc 1939dcdb0572cee2da6a2496335d8bd37d886332f36eaad59a28db18d95d440b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/7758-4197ef430fa4064e.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 8687344
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="7758-4197ef430fa4064e.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"3727112dc6220d94b69ad4c020c24109"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/7758-4197ef430fa4064e.js
x-vercel-cache: HIT
x-vercel-id: arn1::zkz2n-1714804985630-84bc065061bd
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/webpack-5ee85024fb4420f2.js | 76.76.21.9 | 200 OK | 11 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/webpack-5ee85024fb4420f2.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (10902) Hashbf38d0f1fd73845181ebbd4b36bad6a4 5ebb43b86687bd10fcc8e83ae6be5f356f0ac477 8543ce9fb26afd234d2ae4350ca0682177f23ef5b7baa3df0bcab6321eb9e875
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/webpack-5ee85024fb4420f2.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 8674830
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="webpack-5ee85024fb4420f2.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"bf38d0f1fd73845181ebbd4b36bad6a4"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/webpack-5ee85024fb4420f2.js
x-vercel-cache: HIT
x-vercel-id: arn1::qrnfx-1714804985622-26c05e9e03f1
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/main-4421775ead306739.js | 76.76.21.9 | 200 OK | 146 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/main-4421775ead306739.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size146 kB (146124 bytes) Hash6d56b08483126eb83fc9f71e5e96e696 33c2e34c948b285aa60b42e15660917c6cdbb4bc 40b6b7841889cfb67b658f01a3ccde617de8a99d5696d864d4cdb2c3bb256a27
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/main-4421775ead306739.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 8610186
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="main-4421775ead306739.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"6d56b08483126eb83fc9f71e5e96e696"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/main-4421775ead306739.js
x-vercel-cache: HIT
x-vercel-id: arn1::9pxbc-1714804985630-5edeea5445e5
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/500f6f06-04aadfe60e3aace1.js | 76.76.21.9 | 200 OK | 81 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/500f6f06-04aadfe60e3aace1.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash41dad15dc9131298a2a0b6a18c2eb4a7 cdf81f5bb5baf831bd590650aa087c4a59c234c2 745e8b7b4090c7f6c50eb1167c9867bd2ad46ff8a7e1f080784098b15955d3a6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/500f6f06-04aadfe60e3aace1.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 8684582
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="500f6f06-04aadfe60e3aace1.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"41dad15dc9131298a2a0b6a18c2eb4a7"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/500f6f06-04aadfe60e3aace1.js
x-vercel-cache: HIT
x-vercel-id: arn1::27fwc-1714804985629-e1a42df73910
X-Firefox-Spdy: h2
|
|
| jemi.so/favicon.ico | 76.76.21.9 | 200 OK | 15 kB |
IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash9c6dc05a50a822e07cbe8c8b5ce51b7f 6fbe37b19bfc1ef4e53432e679dedb1ca14fa681 1be2573b6deff5ca378d3a1e8132277def32d6a933be33c9541064484bcf1a75
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 8687167
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="favicon.ico"
content-encoding: br
content-type: image/vnd.microsoft.icon
date: Sat, 04 May 2024 06:43:06 GMT
etag: W/"9c6dc05a50a822e07cbe8c8b5ce51b7f"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /favicon.ico
x-vercel-cache: HIT
x-vercel-id: arn1::q5l78-1714804986189-dfad34eec192
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/5720-b4ce86a272a7def2.js | 76.76.21.9 | 200 OK | 28 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/5720-b4ce86a272a7def2.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (28227) Hashaf5ab26f4e306d7b0738a9961c9fa7e3 a03709a0e77c38cdc87d760e980090dcc8eae057 1053dc448be5a1cf2d684d58f63d301a898de35e11f7207d0b8a8a6ec6967910
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5720-b4ce86a272a7def2.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 8687356
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5720-b4ce86a272a7def2.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"af5ab26f4e306d7b0738a9961c9fa7e3"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/5720-b4ce86a272a7def2.js
x-vercel-cache: HIT
x-vercel-id: arn1::ftfq4-1714804985633-0a60924adc9f
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/4474-5e5b3c270d0d0f4e.js | 76.76.21.9 | 200 OK | 109 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/4474-5e5b3c270d0d0f4e.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size109 kB (109294 bytes) Hash32ea1cf7a00b94b9061739deffbd9c17 54b5b650a94d177c38ab357885c4e47d0f4d6474 2f8a95a0887534e500ba6903322feccb3cc0578686539638bec3f2ae7c6103ed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4474-5e5b3c270d0d0f4e.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 8683779
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4474-5e5b3c270d0d0f4e.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"32ea1cf7a00b94b9061739deffbd9c17"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/4474-5e5b3c270d0d0f4e.js
x-vercel-cache: HIT
x-vercel-id: arn1::27fwc-1714804985637-dd1558c74291
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/chunks/pages/_site/%5Busername%5D-5b20a92d610723ad.js | 76.76.21.9 | 200 OK | 4.7 kB |
URL GET HTTP/2jemi.so/_next/static/chunks/pages/_site/%5Busername%5D-5b20a92d610723ad.js IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeJavaScript source, ASCII text, with very long lines (4791), with no line terminators Hashd210a04d86334d4a41abac3be88e0a13 9f86a17076f9d6ae9a461cafe3cee9566ac2a3e5 6f30e0ae2b98a9e9a272e29739954ca084a2e2586b94fc55a76622049da0fc8e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/_site/%5Busername%5D-5b20a92d610723ad.js HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 8642850
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="[username]-5b20a92d610723ad.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"97aee99306b4d26b650b3238e8955e28"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/chunks/pages/_site/%5Busername%5D-5b20a92d610723ad.js
x-vercel-cache: HIT
x-vercel-id: arn1::2v58p-1714804985639-af9ae08b44f4
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-5XNKWSK | 142.250.74.72 | 200 OK | 252 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-5XNKWSK IP142.250.74.72:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (3204) Size252 kB (251854 bytes) Hash33d29a9583cac03169b64e830f413310 cc9f7162e5ba87cff9e8751153d34ae5b20b0fee 6ec76662ca8a0060d3dffb353d2117abc0ea4e9eb2a38d850ae338e3550dce6e
GET /gtm.js?id=GTM-5XNKWSK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 06:43:05 GMT
expires: Sat, 04 May 2024 06:43:05 GMT
cache-control: private, max-age=900
last-modified: Sat, 04 May 2024 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89509
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/data/g0PE8f_wbZr8vYEYSmJ1N/bsuirnfjwebsite.json?username=bsuirnfjwebsite | 76.76.21.9 | 200 OK | 78 B |
URL GET HTTP/2jemi.so/_next/data/g0PE8f_wbZr8vYEYSmJ1N/bsuirnfjwebsite.json?username=bsuirnfjwebsite IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hasha9d6dd97b7b43e75d3681fbc89f80ffe 632a6be99d1f5b8783d0e96f330c9af78ef114d9 5936b22fe615110ad2a7c12c27e2aca80b1dda129fb512e5d5f5f724cb635547
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/data/g0PE8f_wbZr8vYEYSmJ1N/bsuirnfjwebsite.json?username=bsuirnfjwebsite HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jemi.so/bsuirnfjwebsite
x-nextjs-data: 1
sentry-trace: b558f1ebd5a246f499d63dfd7b344ed4-b9ab54afca529ef0-0
baggage: sentry-environment=production,sentry-release=e2828dfd94a097cb1cdb718bea402340ef2e2932,sentry-transaction=%2F_site%2F%5Busername%5D,sentry-public_key=7a464dcf9e1a4530b4950fc23c9aa337,sentry-trace_id=b558f1ebd5a246f499d63dfd7b344ed4,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 26
cache-control: public, max-age=0, must-revalidate
content-type: application/json
date: Sat, 04 May 2024 06:42:39 GMT
etag: "o5qng2a5m26"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/data/g0PE8f_wbZr8vYEYSmJ1N/_site/[username].json
x-nextjs-rewrite: /_site/bsuirnfjwebsite?username=bsuirnfjwebsite
x-vercel-cache: HIT
x-vercel-id: arn1::cle1::q5l78-1714804985979-75f0025b332f
content-length: 78
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/static/css/51e946ef9a7721c1.css | 76.76.21.9 | 200 OK | 58 kB |
URL GET HTTP/2jemi.so/_next/static/css/51e946ef9a7721c1.css IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeASCII text, with very long lines (58403) Hash68e674c6be4f92c7b258176ac467a9ad 7a39b7136753e0372796b9cae02b44e8d51094d7 f017e4fbaea9e0bd0d96ce3f629c6231b9850ac7e1df4ff25016c4ee5f45de46
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/51e946ef9a7721c1.css HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jemi.so/bsuirnfjwebsite
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 8684579
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="51e946ef9a7721c1.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Sat, 04 May 2024 06:43:05 GMT
etag: W/"68e674c6be4f92c7b258176ac467a9ad"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_next/static/css/51e946ef9a7721c1.css
x-vercel-cache: HIT
x-vercel-id: arn1::89xpk-1714804985620-74b19890aaa8
X-Firefox-Spdy: h2
|
|
| jemi.so/_next/data/g0PE8f_wbZr8vYEYSmJ1N/bsuirnfjwebsite.json?username=bsuirnfjwebsite | 76.76.21.9 | 304 Not Modified | 0 B |
URL HEAD HTTP/2jemi.so/_next/data/g0PE8f_wbZr8vYEYSmJ1N/bsuirnfjwebsite.json?username=bsuirnfjwebsite IP76.76.21.9:443
Requested byhttps://jemi.so/bsuirnfjwebsite CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
HEAD /_next/data/g0PE8f_wbZr8vYEYSmJ1N/bsuirnfjwebsite.json?username=bsuirnfjwebsite HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jemi.so/bsuirnfjwebsite
x-nextjs-data: 1
sentry-trace: b558f1ebd5a246f499d63dfd7b344ed4-8352623d87ef79ae-0
baggage: sentry-environment=production,sentry-release=e2828dfd94a097cb1cdb718bea402340ef2e2932,sentry-transaction=%2F_site%2F%5Busername%5D,sentry-public_key=7a464dcf9e1a4530b4950fc23c9aa337,sentry-trace_id=b558f1ebd5a246f499d63dfd7b344ed4,sentry-sample_rate=0.1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 304 Not Modified
cache-control: public, max-age=0, must-revalidate
date: Sat, 04 May 2024 06:43:03 GMT
etag: "o5qng2a5m26"
server: Vercel
x-vercel-cache: HIT
x-vercel-id: arn1::cle1::q5l78-1714804986241-5c1ddd21544f
X-Firefox-Spdy: h2
|
|
| | 76.76.21.9 | 200 OK | 5.4 kB |
URL User Request GET HTTP/2IP76.76.21.9:443
CertificateIssuerLet's Encrypt Subject*.jemi.so Fingerprint3C:49:48:28:34:50:FB:F3:DB:DD:9A:2C:BA:7F:51:F3:43:E9:AB:E6 ValiditySat, 20 Apr 2024 08:59:33 GMT - Fri, 19 Jul 2024 08:59:32 GMT
File typeHTML document, ASCII text, with very long lines (5643), with no line terminators Hash139ee16966cefdeab8bcea6bb28f9f4d 28cb8bbc089bfbb66cfa957ababbe13c40999add eda06e1e8abbb8e288f1c380c592d7c95aaeae22523f41bfbbc9d6819d9fbee8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bsuirnfjwebsite HTTP/1.1
Host: jemi.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 26
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: text/html; charset=utf-8
date: Sat, 04 May 2024 06:42:39 GMT
etag: W/"11elpwbpi21450"
server: Vercel
strict-transport-security: max-age=63072000
x-frame-options: SAMEORIGIN
x-matched-path: /_site/[username]
x-powered-by: Next.js
x-vercel-cache: HIT
x-vercel-id: arn1::cle1::qrnfx-1714804985212-41dba4d722fd
X-Firefox-Spdy: h2
|
|
0.0.0.0