| tjgrunde.com/skin/css/owl.carousel.default.min.css |  154.93.139.2 | 200 OK | 747 B |
URL GET HTTP/2tjgrunde.com/skin/css/owl.carousel.default.min.css IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (744), with no line terminators Hashcafb47102f6ff689f1880479d966d266 b4e1020085b0646ab7146c305591d456cf856e9e 19e496276da2e31305f4ad126d1e30ca70b887f71fa1f5efb8470e7d091822ef
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/css/owl.carousel.default.min.css HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: text/css
content-length: 747
last-modified: Mon, 19 Oct 2020 08:10:42 GMT
etag: "5f8d4a02-2eb"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/sp.js | 154.93.139.2 | 200 OK | 0 B |
IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /sp.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: application/javascript
content-length: 0
last-modified: Wed, 12 Jul 2023 15:43:56 GMT
etag: "64aeca3c-0"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/redirect.js | 154.93.139.2 | 200 OK | 52 B |
IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeHTML document, ASCII text, with no line terminators Hashee3986f8204356a7a8f529e3769a9168 947f0c187a0eaf7ad23309a89cf6d69c7ec8f007 c3ed0875f9e07ba28d3d11bc4af6162da30f03d4f580e9c173f88d49c350c8e6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /redirect.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: application/javascript
content-length: 52
last-modified: Wed, 19 Jul 2023 14:31:36 GMT
etag: "64b7f3c8-34"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/tj.js | 154.93.139.2 | 200 OK | 102 B |
IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeHTML document, ASCII text, with no line terminators Hashd150a62e2a64255cdcce1fd62debe4db 090823bb8ada30cb18313872d94e2132a205d48b 937f7603aee47abf0b91bfc893591a3be8716ab39e6f8181f0c9901ea72bd53e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /tj.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: application/javascript
content-length: 102
last-modified: Fri, 14 Jul 2023 07:36:27 GMT
etag: "64b0fafb-66"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/images/imTokenLogo.png | 154.93.139.2 | 200 OK | 2.5 kB |
URL GET HTTP/2tjgrunde.com/images/imTokenLogo.png IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typePNG image data, 505 x 67, 8-bit colormap, non-interlaced Hashee8c2db7e96cddb4352a55a829d731ec e296f275b0867197b275914763f5895e43da0787 ef8a1ed89ef22d7c35e2535cd821489229255a794e2cd6d3ac4b00e59d591122
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /images/imTokenLogo.png HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: image/png
content-length: 2526
last-modified: Wed, 20 Jul 2022 05:46:22 GMT
etag: "62d796ae-9de"
expires: Fri, 24 May 2024 18:00:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/js/validate.min.js | 154.93.139.2 | 200 OK | 489 B |
URL GET HTTP/2tjgrunde.com/skin/js/validate.min.js IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeJavaScript source, ASCII text Hash580d1378840a40424ba2f9f32fad80df 00ee91ffc0bf551b0e97c954c2cfdd579ae382d1 0f0ab72759c993902789044faaf9c8f5945e0446d7987ee02ffce1e6adf22e71
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/js/validate.min.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: application/javascript
content-length: 489
last-modified: Mon, 19 Oct 2020 08:10:46 GMT
etag: "5f8d4a06-1e9"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| | 154.93.139.2 | 301 Moved Permanently | 46 kB |
URL User Request GET HTTP/2IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typePNG image data, 1000 x 1000, 8-bit colormap, non-interlaced Hashad9792ead2ce10cf4db72cb8a5ad7abb 1eafd79d8630feebc01d806a4bf525b0c6b1e0e8 e075e1cdad6e176e330ac0f927da14388ba5ad54cc0888b39dd54051b9987e61
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 24 Apr 2024 18:00:01 GMT
content-type: text/html; charset=UTF-8
location: index.html
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/picture/team-img-1.png | 154.93.139.2 | 200 OK | 5.9 kB |
URL GET HTTP/2tjgrunde.com/skin/picture/team-img-1.png IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced Hash6678cbea44cb028ae38e32fcb9923a58 22fc8bf8cc5401ede0b3462bb2ddade9e39055c5 59458ce3b7f1a7355098fce4523373e43cb01cd59c574492b15a6c938f8401bc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/picture/team-img-1.png HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: image/png
content-length: 5915
last-modified: Mon, 19 Oct 2020 08:10:46 GMT
etag: "5f8d4a06-171b"
expires: Fri, 24 May 2024 18:00:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/picture/team-img-2.png | 154.93.139.2 | 200 OK | 5.8 kB |
URL GET HTTP/2tjgrunde.com/skin/picture/team-img-2.png IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced Hash37bba70bef20da5fdfc42c32870dc6f5 03b16ab219e69580b29c6fadbedde31a2971fec0 5f30c54422377b58df135aa1bed7db8d846f32308db6411d26375acf0af48d5f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/picture/team-img-2.png HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: image/png
content-length: 5840
last-modified: Mon, 19 Oct 2020 08:10:44 GMT
etag: "5f8d4a04-16d0"
expires: Fri, 24 May 2024 18:00:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/picture/team-img-3.png | 154.93.139.2 | 200 OK | 7.0 kB |
URL GET HTTP/2tjgrunde.com/skin/picture/team-img-3.png IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced Hashb30b13525399596710ffad5a7587ddc1 2bb2971ade4896558a703eb4bf883abd66abfabd c4db5b793203c90cbe61f27b7c2d71ad27f8b3cff7a704c55ec6534ea83af9a9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/picture/team-img-3.png HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: image/png
content-length: 7042
last-modified: Mon, 19 Oct 2020 08:10:48 GMT
etag: "5f8d4a08-1b82"
expires: Fri, 24 May 2024 18:00:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/picture/team-img-4.png | 154.93.139.2 | 200 OK | 5.8 kB |
URL GET HTTP/2tjgrunde.com/skin/picture/team-img-4.png IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced Hashc74c15c3d69ea19583c645f2233cca14 5b918463e7cd9d128bf0e7783241555c5b270397 0d4deac1d7540653ccdc5420741f56d8ba055160d9b5e89d79c315b338f18f55
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/picture/team-img-4.png HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: image/png
content-length: 5762
last-modified: Mon, 19 Oct 2020 08:10:46 GMT
etag: "5f8d4a06-1682"
expires: Fri, 24 May 2024 18:00:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/images/defaultpic.gif | 154.93.139.2 | 200 OK | 1.6 kB |
URL GET HTTP/2tjgrunde.com/images/defaultpic.gif IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeGIF image data, version 89a, 125 x 114 Hasha967c4c33a946b8813b2ce5ec2bd59fa 85e19180c3cfe9e126f1c89b8b9d486c0ffe25d2 1aa8a246282639e96a2c4c7bf13fd8ce3ad13cf29fdd9ea8e95a0f1bfe60a472
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /images/defaultpic.gif HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: image/gif
content-length: 1644
last-modified: Wed, 15 Sep 2021 04:23:24 GMT
etag: "6141753c-66c"
expires: Fri, 24 May 2024 18:00:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/picture/map.jpg | 154.93.139.2 | 200 OK | 50 kB |
URL GET HTTP/2tjgrunde.com/skin/picture/map.jpg IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 621x588, components 3 Hash4cd35f7185af5cc8a187ea375ab4b8ee 1926d70d661b90f20f1c374abf42554949a7ffd5 a04335102e76b6bcdc163181088c701f480a697e8551b2f79055a59cf06890ce
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/picture/map.jpg HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: image/jpeg
content-length: 49675
last-modified: Sun, 15 May 2022 10:29:20 GMT
etag: "6280d600-c20b"
expires: Fri, 24 May 2024 18:00:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/ajax2.js | 154.93.139.2 | 200 OK | 71 B |
IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeHTML document, ASCII text, with no line terminators Hashcfc0c41d0f31f8ffe0b0254434f313f9 61fc0642e4289b8e699701ef23622f949f182f1f ee1c0bb3201d6bc297fcd2bcf049abe4a5c0bfc21ef097f27283c19f3010ebe6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /ajax2.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:03 GMT
content-type: application/javascript
content-length: 71
last-modified: Sat, 30 Sep 2023 06:38:25 GMT
etag: "6517c261-47"
expires: Thu, 25 Apr 2024 06:00:03 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| js.users.51.la/21215497.js |  47.246.44.202 | 200 OK | 4.9 kB |
URL GET HTTP/1.1js.users.51.la/21215497.js IP47.246.44.202:443 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttps://tjgrunde.com/index.html CertificateIssuerGlobalSign nv-sa Subject*.users.51.la Fingerprint8E:9F:59:98:28:F2:49:A9:E1:19:45:C2:49:ED:B2:F6:B8:E1:C6:39 ValidityFri, 14 Apr 2023 03:17:41 GMT - Wed, 15 May 2024 03:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (4898), with no line terminators Hash412d632a2f38f98c7823f8337529e6f4 4b60b124f8df2bcfa222dee8c9e5247488e5496c 77d78cb7a53a3443a1c071500b7cab399198e361c37eb471d552c77e86f26bfe
GET /21215497.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 24 Apr 2024 18:00:04 GMT
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: *
Cache-Control: no-store
Access-Control-Allow-Credentials: true
Ali-Swift-Global-Savetime: 1713981604
Via: cache23.l2de2[155,155,200-0,M], cache2.l2de2[156,0], ens-cache18.se2[178,178,200-0,M], ens-cache4.se2[178,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Wed, 24 Apr 2024 18:00:04 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9817139816042968533e
|
|
| tjgrunde.com/skin/fonts/pxieyp8kv8jhgfvrjjfecg.woff2 | 154.93.139.2 | 200 OK | 7.9 kB |
URL GET HTTP/2tjgrunde.com/skin/fonts/pxieyp8kv8jhgfvrjjfecg.woff2 IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7900, version 1.0 Hash9ed361bba8488aeb2797b82befda20f1 6f80d965a066aff81c0a344d4b7297bd009cc099 41e46faff74c6a77d581689ec35eb040f6c96d17f4d2c5b25dccd42ed498b01c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/fonts/pxieyp8kv8jhgfvrjjfecg.woff2 HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/skin/css/701db1f888c54cf6a6ecabb4b2be4582.css
Cookie: __tins__21215497=%7B%22sid%22%3A%201713981604562%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201713983404562%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:04 GMT
content-type: font/woff2
content-length: 7900
last-modified: Mon, 19 Oct 2020 08:10:44 GMT
etag: "5f8d4a04-1edc"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/fonts/mem5yags126mizpba-un7rgouuhp.woff2 | 154.93.139.2 | 200 OK | 15 kB |
URL GET HTTP/2tjgrunde.com/skin/fonts/mem5yags126mizpba-un7rgouuhp.woff2 IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15056, version 1.0 Hash0edb76284a7a0f8db4665b560ee2b48f 02496387a5f7bf7b79df52c7b76ece4ebc7a0710 74201a4b97ec1d5e86252dd0180eafd8c5378a9235864dbcd682f3575b41c85b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/fonts/mem5yags126mizpba-un7rgouuhp.woff2 HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/skin/css/2b71023a6188432cbc541805188caf58.css
Cookie: __tins__21215497=%7B%22sid%22%3A%201713981604562%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201713983404562%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:04 GMT
content-type: font/woff2
content-length: 15056
last-modified: Mon, 19 Oct 2020 08:10:48 GMT
etag: "5f8d4a08-3ad0"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/fonts/pxibyp8kv8jhgfvrlgt9z1xlfq.woff2 | 154.93.139.2 | 200 OK | 7.8 kB |
URL GET HTTP/2tjgrunde.com/skin/fonts/pxibyp8kv8jhgfvrlgt9z1xlfq.woff2 IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7776, version 1.0 Hash84780596e268aa0cb2be48af2ed5c375 d67ccd32f8c790a746d64d06145882a2f7b06560 d7ba57e3ccc2e3b2bdf8cc9e613194b802607682bf473293c2e3e29de82c9491
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/fonts/pxibyp8kv8jhgfvrlgt9z1xlfq.woff2 HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/skin/css/701db1f888c54cf6a6ecabb4b2be4582.css
Cookie: __tins__21215497=%7B%22sid%22%3A%201713981604562%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201713983404562%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:04 GMT
content-type: font/woff2
content-length: 7776
last-modified: Mon, 19 Oct 2020 08:10:46 GMT
etag: "5f8d4a06-1e60"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/fonts/pxibyp8kv8jhgfvrlcz7z1xlfq.woff2 | 154.93.139.2 | 200 OK | 7.8 kB |
URL GET HTTP/2tjgrunde.com/skin/fonts/pxibyp8kv8jhgfvrlcz7z1xlfq.woff2 IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7832, version 1.0 Hashf4f17fd53c7d040e56f91a3ecb692b22 1b51342175762634835645ba2f99cd3ab0ac615c b0b43e548e691662dac85b1dc159d148a273d5cb9139f3fcf457cdeebe7bdf3f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/fonts/pxibyp8kv8jhgfvrlcz7z1xlfq.woff2 HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/skin/css/701db1f888c54cf6a6ecabb4b2be4582.css
Cookie: __tins__21215497=%7B%22sid%22%3A%201713981604562%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201713983404562%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:04 GMT
content-type: font/woff2
content-length: 7832
last-modified: Mon, 19 Oct 2020 08:10:46 GMT
etag: "5f8d4a06-1e98"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/fonts/fa-solid-900.woff2 | 154.93.139.2 | 200 OK | 74 kB |
URL GET HTTP/2tjgrunde.com/skin/fonts/fa-solid-900.woff2 IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 74256, version 329.-17761 Hash418dad87601f9c8abd0e5798c0dc1feb a6b003ef506e92d05cde73adf67487d7fd7ec6df f18c486a80175cf02fee0e05c2b4acd86c04cdbaecec61c1ef91f920509b5efe
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/fonts/fa-solid-900.woff2 HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/skin/css/all.css
Cookie: __tins__21215497=%7B%22sid%22%3A%201713981604562%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201713983404562%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:04 GMT
content-type: font/woff2
content-length: 74256
last-modified: Mon, 19 Oct 2020 08:10:46 GMT
etag: "5f8d4a06-12210"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/fonts/fa-brands-400.woff2 | 154.93.139.2 | 200 OK | 75 kB |
URL GET HTTP/2tjgrunde.com/skin/fonts/fa-brands-400.woff2 IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 74768, version 329.-17761 Hash5e2f92123d241cabecf0b289b9b08d4a 7f6c682ade204e641aed8f471064c56b6eddc263 dc64d7192f84497cacad5c10aef682562c24aa6124270f85fe247e223607f3ed
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/fonts/fa-brands-400.woff2 HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/skin/css/all.css
Cookie: __tins__21215497=%7B%22sid%22%3A%201713981604562%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201713983404562%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:04 GMT
content-type: font/woff2
content-length: 74768
last-modified: Mon, 19 Oct 2020 08:10:46 GMT
etag: "5f8d4a06-12410"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/css/magnific.popup.min.css | 154.93.139.2 | 200 OK | 15 kB |
URL GET HTTP/2tjgrunde.com/skin/css/magnific.popup.min.css IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typegzip compressed data, from Unix Hash69cde42cbb4bb3e1fe7033d017b9499d 4e49065ec850d165b77571fbefbb32fd392feb12 37e714abaf71965f5ea0698165aa8d03116dce3507ce79a9b0d852cd2661ee95
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/css/magnific.popup.min.css HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: text/css
last-modified: Mon, 19 Oct 2020 08:10:42 GMT
vary: Accept-Encoding
etag: W/"5f8d4a02-15ef"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/fonts/mem5yags126mizpba-un8rsouuhp.woff2 | 154.93.139.2 | 200 OK | 15 kB |
URL GET HTTP/2tjgrunde.com/skin/fonts/mem5yags126mizpba-un8rsouuhp.woff2 IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15088, version 1.0 Hashab3e500e7375695d702cff19513e4470 c30f2b8fecb2c66f89e55ca4e8afe56b1f1d6c58 75db69592337280529fdc6448185b1cb88a50dbe9b498718f45ba52907e8aba3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/fonts/mem5yags126mizpba-un8rsouuhp.woff2 HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/skin/css/2b71023a6188432cbc541805188caf58.css
Cookie: __tins__21215497=%7B%22sid%22%3A%201713981604562%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201713983404562%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:05 GMT
content-type: font/woff2
content-length: 15088
last-modified: Mon, 19 Oct 2020 08:10:44 GMT
etag: "5f8d4a04-3af0"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/css/animate.min.css | 154.93.139.2 | 200 OK | 87 kB |
URL GET HTTP/2tjgrunde.com/skin/css/animate.min.css IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typegzip compressed data, from Unix Hash7514b93cfcbb5c1005450865dd342c21 391ff48575ce3a632292a686403c71d2403d7d1d 6ee6a0d35282951ca54c63535e3dfd56c2adf57f2ae4a79fff809129a0237230
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/css/animate.min.css HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: text/css
last-modified: Mon, 19 Oct 2020 08:10:42 GMT
vary: Accept-Encoding
etag: W/"5f8d4a02-d0d7"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/fonts/pxieyp8kv8jhgfvrjjfecg.woff2 | 154.93.139.2 | 200 OK | 7.9 kB |
URL GET HTTP/2tjgrunde.com/skin/fonts/pxieyp8kv8jhgfvrjjfecg.woff2 IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7900, version 1.0 Hash9ed361bba8488aeb2797b82befda20f1 6f80d965a066aff81c0a344d4b7297bd009cc099 41e46faff74c6a77d581689ec35eb040f6c96d17f4d2c5b25dccd42ed498b01c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/fonts/pxieyp8kv8jhgfvrjjfecg.woff2 HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/skin/css/701db1f888c54cf6a6ecabb4b2be4582.css
Cookie: __tins__21215497=%7B%22sid%22%3A%201713981604562%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201713983404562%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:05 GMT
content-type: font/woff2
content-length: 7900
last-modified: Mon, 19 Oct 2020 08:10:44 GMT
etag: "5f8d4a04-1edc"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/fonts/mem5yags126mizpba-un7rgouuhp.woff2 | 154.93.139.2 | 200 OK | 15 kB |
URL GET HTTP/2tjgrunde.com/skin/fonts/mem5yags126mizpba-un7rgouuhp.woff2 IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15056, version 1.0 Hash0edb76284a7a0f8db4665b560ee2b48f 02496387a5f7bf7b79df52c7b76ece4ebc7a0710 74201a4b97ec1d5e86252dd0180eafd8c5378a9235864dbcd682f3575b41c85b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/fonts/mem5yags126mizpba-un7rgouuhp.woff2 HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/skin/css/2b71023a6188432cbc541805188caf58.css
Cookie: __tins__21215497=%7B%22sid%22%3A%201713981604562%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201713983404562%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:05 GMT
content-type: font/woff2
content-length: 15056
last-modified: Mon, 19 Oct 2020 08:10:48 GMT
etag: "5f8d4a08-3ad0"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/fonts/pxibyp8kv8jhgfvrlgt9z1xlfq.woff2 | 154.93.139.2 | 200 OK | 7.8 kB |
URL GET HTTP/2tjgrunde.com/skin/fonts/pxibyp8kv8jhgfvrlgt9z1xlfq.woff2 IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7776, version 1.0 Hash84780596e268aa0cb2be48af2ed5c375 d67ccd32f8c790a746d64d06145882a2f7b06560 d7ba57e3ccc2e3b2bdf8cc9e613194b802607682bf473293c2e3e29de82c9491
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/fonts/pxibyp8kv8jhgfvrlgt9z1xlfq.woff2 HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/skin/css/701db1f888c54cf6a6ecabb4b2be4582.css
Cookie: __tins__21215497=%7B%22sid%22%3A%201713981604562%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201713983404562%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:05 GMT
content-type: font/woff2
content-length: 7776
last-modified: Mon, 19 Oct 2020 08:10:46 GMT
etag: "5f8d4a06-1e60"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/css/all.css | 154.93.139.2 | 200 OK | 22 kB |
URL GET HTTP/2tjgrunde.com/skin/css/all.css IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typegzip compressed data, from Unix Hashbdbebfb176512d426dff6c44ca8efebf 9b1819eb74621eea8c32121e65241be280c4c571 33d7ae8ab31caca06a7babdb5808e953197c6eff788212c049d00162548ca54f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/css/all.css HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: text/css
last-modified: Mon, 19 Oct 2020 08:10:42 GMT
vary: Accept-Encoding
etag: W/"5f8d4a02-10d4f"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ia.51.la/go1?id=21215497&rt=1713981604562&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=tp%25E9%2592%25B1%25E5%258C%2585%25E7%258E%25B0%25E5%25B7%25B2%25E6%259B%25B4%25E6%2596%25B0%25E8%2587%25B32.0%25E3%2580%25812.5%25E4%25BB%25A5%25E4%25B8%258A%25E7%2589%2588%25E6%259C%25AC%252CTokenPock&ing=1&ekc=&sid=1713981604562&tt=TokenPocket%2520-%2520%25E4%25BD%25A0%25E7%259A%2584%25E9%2580%259A%25E7%2594%25A8%25E6%2595%25B0%25E5%25AD%2597%25E9%2592%25B1%25E5%258C%2585%2520%257C%2520TP%25E9%2592%25B1%25E5%258C%2585-ETH%25E9%2592%25B1%25E5%258C%2585-BTC%25E9%2592%25B1%25E5%258C%2585-BSC%25E9%2592%25B1%25E5%258C%2585-HECO%25E9%2592%25B1%25E5%258C%2585-OKExChain%25E9%2592%25B1%25E5%258C%2585-Polkadot%25E9%2592%25B1%25E5%258C%2585-Kusama%2520%25E9%2592%25B1%25E5%258C%2585-DeFi%25E9%2592%25B1%25E5%258C%2585-Layer%25202%25E9%2592%25B1%25E5%258C%2585-EOS%25E9%2592%25B1%25E5%258C%2585-TRX%25E9%2592%25B1%25E5%258C%2585&kw=TP%25E9%2592%25B1%25E5%258C%2585%252CTokenPocket&cu=https%253A%252F%252Ftjgrunde.com%252Findex.html&pu= |  203.107.86.226 | 200 | 0 B |
URL GET HTTP/1.1ia.51.la/go1?id=21215497&rt=1713981604562&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=tp%25E9%2592%25B1%25E5%258C%2585%25E7%258E%25B0%25E5%25B7%25B2%25E6%259B%25B4%25E6%2596%25B0%25E8%2587%25B32.0%25E3%2580%25812.5%25E4%25BB%25A5%25E4%25B8%258A%25E7%2589%2588%25E6%259C%25AC%252CTokenPock&ing=1&ekc=&sid=1713981604562&tt=TokenPocket%2520-%2520%25E4%25BD%25A0%25E7%259A%2584%25E9%2580%259A%25E7%2594%25A8%25E6%2595%25B0%25E5%25AD%2597%25E9%2592%25B1%25E5%258C%2585%2520%257C%2520TP%25E9%2592%25B1%25E5%258C%2585-ETH%25E9%2592%25B1%25E5%258C%2585-BTC%25E9%2592%25B1%25E5%258C%2585-BSC%25E9%2592%25B1%25E5%258C%2585-HECO%25E9%2592%25B1%25E5%258C%2585-OKExChain%25E9%2592%25B1%25E5%258C%2585-Polkadot%25E9%2592%25B1%25E5%258C%2585-Kusama%2520%25E9%2592%25B1%25E5%258C%2585-DeFi%25E9%2592%25B1%25E5%258C%2585-Layer%25202%25E9%2592%25B1%25E5%258C%2585-EOS%25E9%2592%25B1%25E5%258C%2585-TRX%25E9%2592%25B1%25E5%258C%2585&kw=TP%25E9%2592%25B1%25E5%258C%2585%252CTokenPocket&cu=https%253A%252F%252Ftjgrunde.com%252Findex.html&pu= IP203.107.86.226:443 ASN#37963 Hangzhou Alibaba Advertising Co.,Ltd.
Requested byhttps://tjgrunde.com/index.html CertificateIssuerGlobalSign nv-sa Subject*.51.la Fingerprint9E:F3:EB:9A:59:E9:6D:6E:48:13:64:78:3C:33:1D:AA:79:52:5B:79 ValidityThu, 20 Apr 2023 01:12:57 GMT - Tue, 21 May 2024 01:12:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go1?id=21215497&rt=1713981604562&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=tp%25E9%2592%25B1%25E5%258C%2585%25E7%258E%25B0%25E5%25B7%25B2%25E6%259B%25B4%25E6%2596%25B0%25E8%2587%25B32.0%25E3%2580%25812.5%25E4%25BB%25A5%25E4%25B8%258A%25E7%2589%2588%25E6%259C%25AC%252CTokenPock&ing=1&ekc=&sid=1713981604562&tt=TokenPocket%2520-%2520%25E4%25BD%25A0%25E7%259A%2584%25E9%2580%259A%25E7%2594%25A8%25E6%2595%25B0%25E5%25AD%2597%25E9%2592%25B1%25E5%258C%2585%2520%257C%2520TP%25E9%2592%25B1%25E5%258C%2585-ETH%25E9%2592%25B1%25E5%258C%2585-BTC%25E9%2592%25B1%25E5%258C%2585-BSC%25E9%2592%25B1%25E5%258C%2585-HECO%25E9%2592%25B1%25E5%258C%2585-OKExChain%25E9%2592%25B1%25E5%258C%2585-Polkadot%25E9%2592%25B1%25E5%258C%2585-Kusama%2520%25E9%2592%25B1%25E5%258C%2585-DeFi%25E9%2592%25B1%25E5%258C%2585-Layer%25202%25E9%2592%25B1%25E5%258C%2585-EOS%25E9%2592%25B1%25E5%258C%2585-TRX%25E9%2592%25B1%25E5%258C%2585&kw=TP%25E9%2592%25B1%25E5%258C%2585%252CTokenPocket&cu=https%253A%252F%252Ftjgrunde.com%252Findex.html&pu= HTTP/1.1
Host: ia.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Date: Wed, 24 Apr 2024 18:00:05 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: aliyungf_tc=bdedc94d0dd2acbb3c494758de26b6fe3d61d65873641056b30605000fdf0b71; Path=/; HttpOnly
acw_tc=ac11000117139816055212250eb19f6f6f58d0ebf983f5cd6962a0347a3719;path=/;HttpOnly;Max-Age=1800
|
|
| tjgrunde.com/skin/css/style.css | 154.93.139.2 | 200 OK | 27 kB |
URL GET HTTP/2tjgrunde.com/skin/css/style.css IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typegzip compressed data, from Unix Hash5e7c2b3c9e08a3482e9605206e6f53ef 0af6e59f5411e2131e99e185e9e658ecee48e982 b29189e4ce53824009f36f292b3386484e59512510f9e68bd2eee8775da9a94d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/css/style.css HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: text/css
last-modified: Tue, 09 Aug 2022 06:41:32 GMT
vary: Accept-Encoding
etag: W/"62f2019c-11797"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/css/bootstrap.min.css | 154.93.139.2 | 200 OK | 493 kB |
URL GET HTTP/2tjgrunde.com/skin/css/bootstrap.min.css IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typegzip compressed data, from Unix Size493 kB (493445 bytes) Hash0836c0208b7719ea9634f99b5cdee0f6 d47322337d47cc1b83fa97f3ba18afa1a38cce7b d318f47647dce99dd8fea22617edf296c307cba23d30134b309f89dc0fee6845
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/css/bootstrap.min.css HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: text/css
last-modified: Mon, 19 Oct 2020 08:10:42 GMT
vary: Accept-Encoding
etag: W/"5f8d4a02-25f6d"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/favicon.ico | 154.93.139.2 | 200 OK | 17 kB |
IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeMS Windows icon resource - 1 icon, 64x64, 32 bits/pixel Hashf2f52b78ebdf3d87a6a7909046098e1a b76ae81839158b6a615835d280cf8971f5e6593f edffc3c7d25a6a2a0f129e9b1621ae1e21a4b8ea3b112675131a942ecbc39341
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Cookie: __tins__21215497=%7B%22sid%22%3A%201713981604562%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201713983404562%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:06 GMT
content-type: image/x-icon
content-length: 16958
last-modified: Wed, 20 Jul 2022 08:58:28 GMT
etag: "62d7c3b4-423e"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://tjgrunde.com/index.html | 103.235.46.40 | 200 OK | 0 B |
URL GET HTTP/1.1sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://tjgrunde.com/index.html IP103.235.46.40:443 ASN#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Requested byhttps://tjgrunde.com/index.html CertificateIssuerGlobalSign nv-sa Subjectbaidu.com Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://tjgrunde.com/index.html HTTP/1.1
Host: sp0.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Wed, 24 Apr 2024 18:00:07 GMT
|
|
| zz.bdstatic.com/linksubmit/push.js | 58.254.150.48 | 200 OK | 11 kB |
URL GET HTTP/2zz.bdstatic.com/linksubmit/push.js IP58.254.150.48:443 ASN#136958 China Unicom Guangdong IP network
Requested byhttps://tjgrunde.com/index.html CertificateIssuerGlobalSign nv-sa Subjectbaidu.com Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File typeASCII text, with very long lines (308), with no line terminators Hashf9fc52ab67f035b8baf5d558714cc94d 37062a6fb1ef410d496137d44275738ae743c747 c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212
GET /linksubmit/push.js HTTP/1.1
Host: zz.bdstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: JSP3/2.0.14
date: Wed, 24 Apr 2024 18:00:05 GMT
content-type: application/x-javascript
last-modified: Thu, 29 Feb 2024 04:05:18 GMT
etag: "65e0027e-134"
cache-control: max-age=86400
content-encoding: br
age: 29989
accept-ranges: bytes
tracecode: 20031289920198677002042317
ohc-global-saved-time: Wed, 24 Apr 2024 09:33:23 GMT
ohc-cache-hit: gz3un58 [2], zhuzuncache61 [2]
ohc-response-time: 1 0 0 0 0 0
X-Firefox-Spdy: h2
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml |  35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=xeJC6lFUBg9nXa7CE0_F_nnrgWNPfrGStvlDWAtOpMvIuOOCalQgCEeDf7bbu-OqQOiCev8BpI8Q1w7iBrbwT4cN3qit_Rql3uOL-ReVH74pEF3yDPVFqzUIhr8tL2Zf
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Wed, 24 Apr 2024 17:59:19 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 60
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/css/2b71023a6188432cbc541805188caf58.css | 154.93.139.2 | 200 OK | 24 kB |
URL GET HTTP/2tjgrunde.com/skin/css/2b71023a6188432cbc541805188caf58.css IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/css/2b71023a6188432cbc541805188caf58.css HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: text/css
last-modified: Mon, 19 Oct 2020 08:10:42 GMT
vary: Accept-Encoding
etag: W/"5f8d4a02-5eca"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/images/hero-phone-img.png | 154.93.139.2 | 200 OK | 46 kB |
URL GET HTTP/2tjgrunde.com/images/hero-phone-img.png IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typePNG image data, 1000 x 1000, 8-bit colormap, non-interlaced Hashad9792ead2ce10cf4db72cb8a5ad7abb 1eafd79d8630feebc01d806a4bf525b0c6b1e0e8 e075e1cdad6e176e330ac0f927da14388ba5ad54cc0888b39dd54051b9987e61
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /images/hero-phone-img.png HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: image/png
content-length: 46178
last-modified: Wed, 01 Jun 2022 10:47:31 GMT
etag: "629743c3-b462"
expires: Fri, 24 May 2024 18:00:02 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/css/701db1f888c54cf6a6ecabb4b2be4582.css | 154.93.139.2 | 200 OK | 14 kB |
URL GET HTTP/2tjgrunde.com/skin/css/701db1f888c54cf6a6ecabb4b2be4582.css IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/css/701db1f888c54cf6a6ecabb4b2be4582.css HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: text/css
last-modified: Mon, 19 Oct 2020 08:10:42 GMT
vary: Accept-Encoding
etag: W/"5f8d4a02-3654"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/js/popper.min.js | 154.93.139.2 | 200 OK | 21 kB |
URL GET HTTP/2tjgrunde.com/skin/js/popper.min.js IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeJavaScript source, ASCII text, with very long lines (20828), with no line terminators Hash626acba9f3df66b200b92988b359cbea c6f22bd7420a5eb731fb035a84b260aac4f5f2d8 f7beab13fb51c904f562e385b669c3a4085fc65aababb83378926de3e9e93860
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/js/popper.min.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: application/javascript
last-modified: Mon, 19 Oct 2020 08:10:46 GMT
vary: Accept-Encoding
etag: W/"5f8d4a06-515c"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.nbmceb.com/tz.js |  104.21.77.75 | 200 OK | 28 kB |
IP104.21.77.75:443
Requested byhttps://tjgrunde.com/index.html CertificateIssuerGoogle Trust Services LLC Subjectnbmceb.com Fingerprint47:B5:10:A5:F5:B4:2F:89:CA:8F:CA:6A:32:E9:28:FE:B6:0C:4A:42 ValidityMon, 25 Mar 2024 09:00:10 GMT - Sun, 23 Jun 2024 09:00:09 GMT
File typeJavaScript source, ASCII text, with very long lines (6732) Hash735e68c0e60a90824ff0c4e56a6e2611 17b6a84ceb8cc8203f519f5fc31ea8cdd3a8c4e8 c597e23ec4b50328174e6a6530de8a876e7132c47d1d19cb9010d87743c37b97
GET /tz.js HTTP/1.1
Host: www.nbmceb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 18:00:04 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 16:16:40 GMT
vary: Accept-Encoding
etag: W/"66293068-6ed7"
expires: Thu, 25 Apr 2024 06:00:04 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w5h4rMx1qXfiZbMlN%2FZ24HlML9qDTTWlVy4hWKfAl8yOOA%2FgWoG1IG1PHZug10j2pbWWKHQOU7Hra5b2XgjP2sjRdvrbwBbXJibnytrS1APwDqlEjCIXGFgwazIpGB65QA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797fd9e8fedb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/fonts/fa-regular-400.woff2 | 154.93.139.2 | 200 OK | 14 kB |
URL GET HTTP/2tjgrunde.com/skin/fonts/fa-regular-400.woff2 IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 13552, version 329.-17761 Hashe6257a726a0cf6ec8c6fec22821c055f 8583a4f0dd12e15a48b3395593307a84d971cc33 ccf4db1eeb68c96e05e74f8ebfa75cc60c3a0fed862dae6b0ad85d4e1b5b4e4f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/fonts/fa-regular-400.woff2 HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/skin/css/all.css
Cookie: __tins__21215497=%7B%22sid%22%3A%201713981604562%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201713983404562%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:05 GMT
content-type: font/woff2
content-length: 13552
last-modified: Mon, 19 Oct 2020 08:10:48 GMT
etag: "5f8d4a08-34f0"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/img/bg/watch-video-bg.png | 154.93.139.2 | 200 OK | 465 kB |
URL GET HTTP/2tjgrunde.com/img/bg/watch-video-bg.png IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typePNG image data, 1920 x 750, 8-bit colormap, non-interlaced Size465 kB (465284 bytes) Hash6a9f71eeb916811fa01c0804b7cd8c36 84b32225111dabbeb77faa9fe75c6e5fe516015f f81015d588d377f8cf3bd6674c3e4bd7bf5cdb8f89bc753e400b95de190a339a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /img/bg/watch-video-bg.png HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Cookie: __tins__21215497=%7B%22sid%22%3A%201713981604562%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201713983404562%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:05 GMT
content-type: image/png
content-length: 465284
last-modified: Mon, 19 Oct 2020 08:12:00 GMT
etag: "5f8d4a50-71984"
expires: Fri, 24 May 2024 18:00:05 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/js/counter.up.min.js | 154.93.139.2 | 200 OK | 3.0 kB |
URL GET HTTP/2tjgrunde.com/skin/js/counter.up.min.js IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeJavaScript source, ASCII text, with very long lines (3206), with no line terminators Hash6cd07160f6b34108f964b2569fd3dadd 2fb624082b5d0a8acfd06979ae38340184dbfe06 0856bc500f19c78acb6e7b0cbff60a7cce5e3630e8356d919a5d3288737d15de
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/js/counter.up.min.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: application/javascript
last-modified: Sat, 14 May 2022 05:07:38 GMT
vary: Accept-Encoding
etag: W/"627f391a-bd2"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/images/crcms_bg.jpg | 154.93.139.2 | 200 OK | 82 kB |
URL GET HTTP/2tjgrunde.com/images/crcms_bg.jpg IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 1920x1000, components 3 Hashfc26c294d8b5ed69ff0498cc44b32b99 a9e4f3c2b56414e8e4ebfcaa7fb5e55dc6c3a514 02fb4fbc9c7efc90d87e44e99b085e5e97c20a5211d94bf57ea1f51a51cd26e5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /images/crcms_bg.jpg HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Cookie: __tins__21215497=%7B%22sid%22%3A%201713981604562%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201713983404562%7D; __51cke__=; __51laig__=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:05 GMT
content-type: image/jpeg
content-length: 81623
last-modified: Wed, 01 Jun 2022 10:44:40 GMT
etag: "62974318-13ed7"
expires: Fri, 24 May 2024 18:00:05 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/js/bootstrap.min.js | 154.93.139.2 | 200 OK | 58 kB |
URL GET HTTP/2tjgrunde.com/skin/js/bootstrap.min.js IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeJavaScript source, ASCII text, with very long lines (57792), with no line terminators Hash13934d59046e0aa0220c91b67eff5770 3014c97caea2fe878c270b27dc56673b8882bd8d baea2ae7029313e968cc1c7c2d8ed6d29db062959732a66cf4d45af9a8530c4b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/js/bootstrap.min.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: application/javascript
last-modified: Mon, 19 Oct 2020 08:10:48 GMT
vary: Accept-Encoding
etag: W/"5f8d4a08-e1c0"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| | 154.93.139.2 | 200 OK | 28 kB |
URL User Request GET HTTP/2IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /index.html HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:01 GMT
content-type: text/html
last-modified: Sat, 15 Jul 2023 08:27:14 GMT
vary: Accept-Encoding
etag: W/"64b25862-6cbf"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/js/waypoint.min.js | 154.93.139.2 | 200 OK | 8.7 kB |
URL GET HTTP/2tjgrunde.com/skin/js/waypoint.min.js IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeJavaScript source, ASCII text, with very long lines (8774), with no line terminators Hasha7ffd1dcd785426443e5c6ac382d9bba 2915c74e8a0e125bef14b142ff91b5f8a2d190ad fa7c0f53698a54b18a4a1aed0eaee4cbec59b602f11289e38e4a377952d85315
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/js/waypoint.min.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: application/javascript
last-modified: Mon, 19 Oct 2020 08:10:48 GMT
vary: Accept-Encoding
etag: W/"5f8d4a08-21dc"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/js/magnific.popup.min.js | 154.93.139.2 | 200 OK | 20 kB |
URL GET HTTP/2tjgrunde.com/skin/js/magnific.popup.min.js IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeJavaScript source, ASCII text, with very long lines (20099), with no line terminators Hash9894513113bb5358e878fda971008d61 4caec2f8946597958e962df9ebdc0da70de12ff3 ccaf830b08d4a958fa04eaf7aa5f0971b13c76e43d9984a86f832d518f7c9947
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/js/magnific.popup.min.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: application/javascript
last-modified: Mon, 19 Oct 2020 08:10:46 GMT
vary: Accept-Encoding
etag: W/"5f8d4a06-4e83"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/js/jquery.easing.min.js | 154.93.139.2 | 200 OK | 3.3 kB |
URL GET HTTP/2tjgrunde.com/skin/js/jquery.easing.min.js IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeASCII text, with very long lines (3298), with no line terminators Hash42597283f679f18e39c12368a5f96e7b da208d8f15517d359867875769df7cdd3bbfe37c fbd94d87b327d01cf46cf1ef42072c5d8ba00dcd94c0da8b9fc7519e605eb470
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/js/jquery.easing.min.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: application/javascript
last-modified: Mon, 19 Oct 2020 08:10:46 GMT
vary: Accept-Encoding
etag: W/"5f8d4a06-ce0"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/css/owl.carousel.min.css | 154.93.139.2 | 200 OK | 3.2 kB |
URL GET HTTP/2tjgrunde.com/skin/css/owl.carousel.min.css IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeASCII text, with very long lines (3198), with no line terminators Hash1b67860e88317921c2ff6badcf5758fa f7cf972a948b42307ed3f081a91aecfb41af82b2 5e1742c8ef697cd0e08bc0a03ae6e29576243d15639084c69be84ffd1457fe87
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/css/owl.carousel.min.css HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: text/css
last-modified: Mon, 19 Oct 2020 08:10:42 GMT
vary: Accept-Encoding
etag: W/"5f8d4a02-c7d"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/js/images.loaded.min.js | 154.93.139.2 | 200 OK | 5.3 kB |
URL GET HTTP/2tjgrunde.com/skin/js/images.loaded.min.js IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeJavaScript source, ASCII text, with very long lines (5414), with no line terminators Hashba1daf09c5c3c28c894bd6c8aae69847 e2f2ad590626614be51f510b9a2b9e3c492e1bba 78ee80f428decec1aacbf7f580722ebb1575ec0d6cf7c0c69992116fc4757ade
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/js/images.loaded.min.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: application/javascript
last-modified: Mon, 19 Oct 2020 08:10:44 GMT
vary: Accept-Encoding
etag: W/"5f8d4a04-14cc"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/js/main.js | 154.93.139.2 | 200 OK | 15 kB |
URL GET HTTP/2tjgrunde.com/skin/js/main.js IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashe700c45e34fefa0916fdb62de2561370 a59c515a8dcc81274e46ade71497bef7eaa958b7 2214eedf5da5ea8883f36ea382542f6e3646826fc95c5c5d1e07ccb394921246
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/js/main.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: application/javascript
last-modified: Sun, 08 May 2022 04:04:28 GMT
vary: Accept-Encoding
etag: W/"6277414c-3b89"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/js/owl.carousel.min.js | 154.93.139.2 | 200 OK | 44 kB |
URL GET HTTP/2tjgrunde.com/skin/js/owl.carousel.min.js IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeJavaScript source, ASCII text, with very long lines (31997) Hash7b4d831221a14eaa81ec303f0c6bf7be 74ba283bb7f418ff407132bed30bf6268cdbb1a8 18c2a938a30bf80b65d47113db3f7b8a0dea2e94f04592b0ca3c2738e4c10fa2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/js/owl.carousel.min.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: application/javascript
last-modified: Mon, 19 Oct 2020 08:10:46 GMT
vary: Accept-Encoding
etag: W/"5f8d4a06-ac8f"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tjgrunde.com/skin/js/jquery.min.js | 154.93.139.2 | 200 OK | 88 kB |
URL GET HTTP/2tjgrunde.com/skin/js/jquery.min.js IP154.93.139.2:443 ASN#134548 DXTL Tseung Kwan O Service
Requested byhttps://tjgrunde.com/index.html CertificateIssuerLet's Encrypt Subjecttjgrunde.com Fingerprint73:C6:90:7C:2B:00:42:29:2D:B3:F4:2F:97:F3:D7:52:B5:AF:1A:34 ValidityFri, 12 Apr 2024 15:10:35 GMT - Thu, 11 Jul 2024 15:10:34 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashb4999cbb6a73a9b312f635cff75e5a53 c7b683fc72d06eac129185c3e60362f5c1adc2a8 736173659d4431b8a53a08aacc1bec3ad3a2f44df5209c09d76c265374698302
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Crypto/Wallet | | Quad9 DNS | malicious | Sinkholed |
GET /skin/js/jquery.min.js HTTP/1.1
Host: tjgrunde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tjgrunde.com/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 18:00:02 GMT
content-type: application/javascript
last-modified: Mon, 19 Oct 2020 08:10:46 GMT
vary: Accept-Encoding
etag: W/"5f8d4a06-157fb"
expires: Thu, 25 Apr 2024 06:00:02 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|