Report - kellyshow-nature.com/

Report Overview

Submitted URL
kellyshow-nature.com/
IP
172.67.213.247
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 17:43:41
Access
public
Website Title
Facebook
Final URL
kellyshow-nature.com/
Tags
meta facebook phishing social
urlquery detections
Phishing - Facebook

Detections

urlquery
42
Network Intrusion Detection
0
Threat Detection Systems
164

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
kellyshow-nature.com	unknown	unknown	No data	No data	19 kB	3.0 MB	104.21.23.222
e-commercereport.com	unknown	2023-09-16	2021-02-03	2024-03-28	448 B	5.6 kB	104.21.56.146

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.
2024-04-19	medium	kellyshow-nature.com/	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed
2024-04-19	medium	kellyshow-nature.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	kellyshow-nature.com/	1.1 kB	2024-04-19	2024-04-19
Pretty URL kellyshow-nature.com/ IP 104.21.23.222 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-19 19:43:48 Last Seen2024-04-19 19:43:48 Times Seen1 Hash cf7c966faba73e37c17ab143f8e6f80a 1eb2a739eecf008aa4df281c8c1a66fbbd275ff1 3849950fb3c512a954a85a66e4e3d9c511214fe6804b0d56127da998abe16891 Loading...

	kellyshow-nature.com/	444 B	2024-03-18	2024-04-21
Pretty URL kellyshow-nature.com/ IP 104.21.23.222 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-18 05:47:12 Last Seen2024-04-21 18:49:26 Times Seen5 Hash db938410d7a07500f348a08e2276d938 2f0400ffbe436405254b774f7679c080fc166498 951c6511187dad92f6649ca23063c344af7c7b0c4e41012f8df009f45000162c Loading...

	kellyshow-nature.com/index_files/663785292295776	64 kB	2024-03-18	2024-04-19
Pretty URL kellyshow-nature.com/index_files/663785292295776 IP 104.21.23.222 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-18 05:47:12 Last Seen2024-04-19 19:43:48 Times Seen6 Hash 5328f5941f4ba112268c2a1252df9d73 e50dda1ef88f740748464082a45b1cd5d1542999 99c024c241031f932245f361cd19239b72d52e560965dc62ba875258c8607be3 Loading...

	e-commercereport.com/click.php?key=7fsu6e7gjgiz22526f2w&lp_type=pixel	240 B	2024-04-19	2024-04-19
Pretty URL e-commercereport.com/click.php?key=7fsu6e7gjgiz22526f2w&lp_type=pixel IP 104.21.56.146 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 19:43:48 Last Seen2024-04-19 19:43:48 Times Seen2 Hash 5bcc4592a3b6bad728ffee8d0665e25b 444b7cecd48e18f984945a368f061e0dbaba0730 7e0053cb56b5399e1a1550c461e352c904312435cb3b1290512d055e5387460a Loading...

	kellyshow-nature.com/index_files/fbevents.js.download	221 kB	2024-03-18	2024-04-19
Pretty URL kellyshow-nature.com/index_files/fbevents.js.download IP 104.21.23.222 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-18 05:47:12 Last Seen2024-04-19 19:43:48 Times Seen6 Hash 0904aef4333e8e2baf3af10b0b7b35e0 ac177423b5edd565ba99a8a0abaf75133d463bfc 85267fa4a3e908d0c2778fc27bf13b384d2353c2d12e8d4c78982a3cfaa9636e Loading...

	kellyshow-nature.com/	1.0 kB	2023-11-13	2024-05-02
Pretty URL kellyshow-nature.com/ IP 104.21.23.222 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-13 00:46:18 Last Seen2024-05-02 07:51:47 Times Seen10 Hash 6b4436f8bc4023c2954fceae0b4c57cf 9274c46aa827643b871d9e0a9719b040bcc6b810 9ac890b4da967bb0e3bfedf42134362bd4049a36f386427a99ee167cb34f743b Loading...

	kellyshow-nature.com/index_files/click.php	240 B	2024-03-18	2024-04-19
Pretty URL kellyshow-nature.com/index_files/click.php IP 104.21.23.222 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-18 05:47:12 Last Seen2024-04-19 19:43:48 Times Seen4 Hash e33b5a1b306cc89a80aa827aa495ff47 c271a7e014e47e157177d64a2281ed8e235df454 71f2d068fe506a89fe3c0fec2184cd330533515a54a8fc7749d119ea4b4124fe Loading...

HTTP Transactions (42)

URL IP Response Size

kellyshow-nature.com/index_files/ava.jpg

104.21.23.222

200 OK

6.0 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/ava.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 200x200, components 3
Size
6.0 kB (6019 bytes)
Hash
dee5e648611a17223fbd9610927b22da
451cbc9b9e7be986c0b69d8b57eeeb9588f06738
dfd2cd3d31c4ac93d68264a9b96f3fd631a0d1123a055ae2500edd8c4d9e8378

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/ava.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 6019
last-modified: Thu, 14 Mar 2024 19:22:24 GMT
etag: "65f34e70-1783"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZUSFtM4N1xrK7pTd5bOdTsJ6gU9yQ9qSsI4L%2BfoCfkjFN3y65BIhtSrQclAkZA0bf%2FMk8IW3aambgT%2BrS%2FV%2FDE8%2FA%2Bu2BtjfIBO5xENF08Ronf5YYJn8CsvOl0dWBiTcjxDmzPWkzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb21efe905699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/check.png

104.21.23.222

200 OK

1.2 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/check.png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
PNG image data, 35 x 27, 8-bit colormap, non-interlaced
Size
1.2 kB (1192 bytes)
Hash
caaf5dfaea74c2c2119a3be64a7f5a19
7454e86a6488e2b63937517d98b27bef7dd04392
3bbb0b96b15f0a42ea2a0217a83aab280fa864e6b7dd04b591353b2d4b9909c9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/check.png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/png
content-length: 1192
last-modified: Thu, 14 Mar 2024 19:22:28 GMT
etag: "65f34e74-4a8"
expires: Sun, 19 May 2024 12:18:45 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19470
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hget9Y8JNIyov4h3qwq9Et1baMZbRW%2Bi11oj22nniuaRRFjxgp%2BN7WRsJYkHqlgQSqXvVS5iJxluML672Wx4yti2xTBhlnK%2B62WcrU59n58awP3%2FuFvYfp2V%2BxOVkqRiUXtfswy3Xg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb21efe8e5699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/277_10.png

104.21.23.222

200 OK

649 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/277_10.png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
PNG image data, 940 x 529, 8-bit/color RGBA, non-interlaced
Size
649 kB (648931 bytes)
Hash
c9a3b3a1c24c146b7064ba46c67fa53e
1764687510e797cf6f948843e3bed061b23ab40c
96a581793949ac1904830267ed2b1a816b46ea96e1a602b739547cf73a0baf88

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/277_10.png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/png
content-length: 648931
last-modified: Thu, 14 Mar 2024 19:22:15 GMT
etag: "65f34e67-9e6e3"
expires: Sun, 19 May 2024 12:18:45 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19470
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6zZ67ob4tJTA8VVsO4GSez3xgRhLsmtntsmLufc6OO99htlLZwUz1Kdy%2F4Ui4427qIBsJNOzlGSq0YzyoF7Mxd%2F44CB%2B%2FaDMCYFNzENFUJrQuBGRChl3UfeuV8aEGOvg5r5%2BfnUDxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb21f0e915699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/277_2.25-1.png

104.21.23.222

200 OK

339 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/277_2.25-1.png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced
Size
339 kB (338860 bytes)
Hash
10eafde9cbec147c6589c05700892155
9c2773fc967cf6074468d169c4fdfe3a42207dc7
85d8130d13b24b175adc9129a7ec950f87b763ef4bd324f7afca97fad60c2bf7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/277_2.25-1.png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/png
content-length: 338860
last-modified: Thu, 14 Mar 2024 19:22:16 GMT
etag: "65f34e68-52bac"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p4sGndUg8GZ3p%2BFd24HOhgZvhmMvsN%2Fsdms8JawU6qve5zu%2BEteEiAy%2BADyTQWo%2BL3tj5XyTB%2BWZj3MNZ%2Bay40YrKtGfw3XKOWS%2BzJNPsxtEkCCQqrz19PaFXnVIdLZMaUnf88ymOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb21f0e935699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/277_2.25.2.jpg

104.21.23.222

200 OK

372 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/277_2.25.2.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 1800x1801, components 3
Size
372 kB (371984 bytes)
Hash
d98abfe17f29b5e7a15437f86254a76b
9b7aa5c388ae25e08f1ac4aa241bc10474346e8b
d02ed20be6c8da3bcb9c77a0a022dbc776da113273be0528ba1c20a13982167d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/277_2.25.2.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 371984
last-modified: Thu, 14 Mar 2024 19:22:17 GMT
etag: "65f34e69-5ad10"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cN9PRLq36mgcec55GQEb3HSoFywQIpzPNtfmewcVGYEjn284RKjKL4fCFUTzhp8irURyNMh7XcOgo4dT%2B5f65e8EhlGhUWOvd9trH8kRRsDQ9ExkeRkmFSmAXiiRZhBfCM000lC1Ng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb21f0e955699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/codUilC7TCL3nDdNvONCKcLdmi8iRij3Hb7GjxH9%20(1).png

104.21.23.222

200 OK

354 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/codUilC7TCL3nDdNvONCKcLdmi8iRij3Hb7GjxH9%20(1).png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
PNG image data, 400 x 760, 8-bit/color RGBA, non-interlaced
Size
354 kB (354126 bytes)
Hash
0b4ece9529ba588f495a9197fdd147f0
c6c851415165ccbd92eaf5e3c9245332d46b75b6
616e87583f40299eb052a2cfb8496c222ee3e257c3c5ebc00a0dd2056ba4d1f9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/codUilC7TCL3nDdNvONCKcLdmi8iRij3Hb7GjxH9%20(1).png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/png
content-length: 354126
last-modified: Thu, 14 Mar 2024 19:22:29 GMT
etag: "65f34e75-5674e"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3E6C9jHcUILMPOqms8DsmduPMNkvSgUBxli305tbguLHM7FLaLbkfG2r%2Fr6vc%2F1qbR9jVIcUukj15ICGi1%2Ft996MHih7JoVxXuq2oZVeIlU5FySMtcmwv%2BsgIc8SDUhbOwN3viYTUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb21f0e985699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/garant.png

104.21.23.222

200 OK

8.9 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/garant.png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
PNG image data, 150 x 132, 8-bit colormap, non-interlaced
Size
8.9 kB (8890 bytes)
Hash
98a5bc4cb7a0492f4bd532da8b5b58e8
e08b93dd95ccaf1573e63415471af87abf0d88fc
e533129e1453e37228cd3e10052d285d7162bb882aa0418cd3b9b30a1eace718

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/garant.png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/png
content-length: 8890
last-modified: Thu, 14 Mar 2024 19:22:35 GMT
etag: "65f34e7b-22ba"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6WHBqBhzk1k7jzkGZXfmRkb0ufU35iYdORXku0wFc6zJXvYc%2FoUCM04F9cYC3eigPzp58p%2F8PaJSTjIFBfo3zO4uYkwnrPdGcV77fDvP%2BwZo2Opv%2FsL1%2BOMBk4GjZhBTwaIdFp9XTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb21f0ea25699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/1-1-1.jpg

104.21.23.222

200 OK

27 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/1-1-1.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 412x402, components 3
Size
27 kB (26870 bytes)
Hash
4f30d2d96686bfbdf489e3ad4c008548
e921f6eae5c1cf39fafb1660211448925bd0dc1c
54b4a3f2af47c9a2f8d417871f89b2f6de356109225a6f8db8f7bc2f79f2c514

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/1-1-1.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 26870
last-modified: Thu, 14 Mar 2024 19:22:08 GMT
etag: "65f34e60-68f6"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z7%2BOqdakH7vs2tzMU9YlZqcdDVO%2FN5ZEUfYsPFhwpKh01G5snxajxh1SiD9bhSTZ4HfYaeh1rINoUoHsc6Rl3oPDLZa4n2pnUAOZijl2loBmSJeazAgVcQt%2BYatOdiLnBD5L4Ya%2BZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb21f0ea45699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/aa.png

104.21.23.222

200 OK

6.8 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/aa.png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Size
6.8 kB (6847 bytes)
Hash
b81603381e84554e4b4c4278fe8f54f5
5da511f2440811252960e186873ca67690b32b61
0a39437a19fc7c979430e2565dbe5d5f66796abf2033743d0d8d07680e3a855b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/aa.png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/png
content-length: 6847
last-modified: Thu, 14 Mar 2024 19:22:23 GMT
etag: "65f34e6f-1abf"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OBvEnDyCMI3SJuVz%2F1D18JxkbRg2GeXKSb%2F%2Flw%2BPTB1PiftzM4A5UENZN2qlNZlUHrj54DVPcnk%2BKviKFIGr9gqNC2nY40l6ptNKx%2Br%2BmJJdGiXUhdzpG3OerLfPlShNd8tLdiiCHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb21f4eee5699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/dd.png

104.21.23.222

200 OK

6.4 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/dd.png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Size
6.4 kB (6422 bytes)
Hash
61d83e558c7ae4e566e1c965a9f7cc0c
4d503b0f5c44cb91a09a7d5a1599253f4e085f10
73d7b3f744e1ea0c55036d3e18743b98e6cfa46667ec9230dc037ee3c90237aa

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/dd.png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/png
content-length: 6422
last-modified: Thu, 14 Mar 2024 19:22:31 GMT
etag: "65f34e77-1916"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NU96TroGWNBaSg1RsBcT3hNRMqK1pnfKKwNRcyFEDbS7rG5QJt4RvZUK1xrtzkj0db1YjMiSYeBSaNNjLdQXU9qy22X1ep%2B6vGIyh%2ByvKE%2FXfp13GCBXY23zRfJRwIoYd4YMdTg2yQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb21f5ef95699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/37-1.jpg

104.21.23.222

200 OK

48 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/37-1.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 720x761, components 3
Size
48 kB (47987 bytes)
Hash
3cb8f1f8223364afdd269558e8538211
e6ab20ff08dbb347f526bb30a556df0539fba645
ef6ac8d25a75ac5d4a4cf7fed29c79867e52af17e939797c559944ca7e634392

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/37-1.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 47987
last-modified: Thu, 14 Mar 2024 19:22:19 GMT
etag: "65f34e6b-bb73"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ombFsNHRP8IdWCoD%2B02WMindeu8oyBYPYno8RmRshVkeRIvaOPcw0DhC6K8AdGrqzil0rTmY85RGGxAcueAkXhyUSWAY4v6gaJkfjbhORQcCZBbjz7cbkS8F56FLUW1SHPz3QaoCTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb21f5efa5699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/ee.png

104.21.23.222

200 OK

6.5 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/ee.png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Size
6.5 kB (6476 bytes)
Hash
9d62fa621e2ef1672b33085d9ff42e33
f82d558f34d3d894acbce45cdfead111c2181285
7acd3042d4ed2ec1db5be4b188c01e270ab327750f6bea091d69fe21b1117c7e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/ee.png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/png
content-length: 6476
last-modified: Thu, 14 Mar 2024 19:22:33 GMT
etag: "65f34e79-194c"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DStCScA9aWJJH2xS2VnF5cs%2FTTzPt5uoqiHUyNytpHjVInnRW4eu2dEbykIdKGH8eDvnuhhnmXhKluXHdFzDoTokkyWZ06KSZ%2B4ip%2FKNtJ5r2dBpl7w6WpphJMvlTk8wMHuAZFJ63Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb21f5efb5699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/9.jpg

104.21.23.222

200 OK

3.1 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/9.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 92x92, components 3
Size
3.1 kB (3086 bytes)
Hash
daf0aea0bc8acfd347d1d798343904aa
46d269909bf5fa88f2db5d8706e2956b4f4ef993
86666d22f129e851eebfc3366e3c24e95316c2b29ca95f74ae6095e4287f74b2

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/9.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 3086
last-modified: Thu, 14 Mar 2024 19:22:22 GMT
etag: "65f34e6e-c0e"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UFGpgC94bD2%2BizKuUeFjm1n2bRy%2BqicosrZwstSusByUpiv3vJ2v0C7mIjIFJSN%2BenGmate6X6s0NvpZir8tb7XS%2FdfD8gyJinV5bh6Tyk0YIwGY02S3rvni1sevZZa90n2amVKSyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb2202fd25699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/ff.png

104.21.23.222

200 OK

7.2 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/ff.png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Size
7.2 kB (7248 bytes)
Hash
90ee505b3dc377d0eeac48d40e05463a
fd1f00a4867742b5afaee6ab00446c98d6daaa1d
5a58be0fab8223de3c47ffa18037f322cc8dcaa0fcba52c7d76778df5dad5a33

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/ff.png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/png
content-length: 7248
last-modified: Thu, 14 Mar 2024 19:22:35 GMT
etag: "65f34e7b-1c50"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FqA8wwLbXtF1ANWJ1Zy4DsRz2JMfwtPloV78EbeBoNnYYLvyX%2B02uZPpdHud0vk9Vc5FmmKrtXTle5%2Fxc4IFDS8eB0y7QcV0fXU4%2FiZ7QuBbUCs%2BkKDYM%2BkUUsPb7s0dBGHotosa5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb2202fd55699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/c1.jpg

104.21.23.222

200 OK

35 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/c1.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 652x658, components 3
Size
35 kB (34951 bytes)
Hash
2ea68b82c9944a757bb7179700ba43bc
c11df86408afc50d8f98e8f8082d0064e45c2f6a
9ce84f66a6d1ca4a2d14c7bc2cf4b60d89dc12ac7b8df95edd8866210478b2a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/c1.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 34951
last-modified: Thu, 14 Mar 2024 19:22:26 GMT
etag: "65f34e72-8887"
expires: Sun, 28 Apr 2024 13:02:35 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1831240
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G1Em54CzDNqm4oVHy01KyiV9gP24h7Wx8K9UiejQ6Udvb0uFmEJKC0qdrBI%2BXSCn5vmQ0KgcYYBPtxVnOU0HO6ExVM6qE3FRjxnPBaluNw%2BWVhTmonT2Z68P6wAMTCFnbD%2FBSpOSuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb2202fd45699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/28-1.jpg

104.21.23.222

200 OK

122 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/28-1.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 1080x1080, components 3
Size
122 kB (122317 bytes)
Hash
69f0851fbf26cd13b971ae28bd8fcc08
8147b727c2e325cd48a0c032da54a913c90831ed
0ca96b900e1f392f74c92a65c430a117006c2a366a87fcc3dbdb94fc85251064

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/28-1.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 122317
last-modified: Thu, 14 Mar 2024 19:22:18 GMT
etag: "65f34e6a-1ddcd"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4BuD0iDCGAoQI4%2B%2FQOUcP7sv4s7zjfXBlOYxn1pe40f8b0IzyaQwmbcnYHGorT9qsxFaZkmdYVUgaGW8ynWv1cnSFplsEADttAafU9bHulpvlPSMfC8pd33fXVLm9ivZ4IgOqd2zhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb2202fd85699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/23.jpg

104.21.23.222

200 OK

15 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/23.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 292x343, components 3
Size
15 kB (14724 bytes)
Hash
9be031312d320943774bc59864b59757
a762ffcd203167b918ea0cecd0d551d281da88d8
48936e97750f4b21b8afb382b6f40d82f464e1a16a09a3ed8752a62b314810a1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/23.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 14724
last-modified: Thu, 14 Mar 2024 19:22:12 GMT
etag: "65f34e64-3984"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8BMB1G6jJp1akb7hAdWlII7z%2FTGsWdazVyb%2FGe7csjIVUatxxxj8JVUsBtWP4oXyGmQQEiU1TOO9KjcKAnxwwTSiViKlAykhLa%2BPy7pOAgG4Hcj8Zw2oJyPpq6IffxaBvBeDw7IqoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb2202fd75699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/commentss-2.jpg

104.21.23.222

200 OK

3.7 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/commentss-2.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 102x101, components 3
Size
3.7 kB (3730 bytes)
Hash
802cb92a417128a98adc83a6c6f5288c
ea9d3726a92603a51420aa351ca058ee106f3580
b19a0938364ded4b5066954aa3342cd2dc345c0bc08db9f1c1517d4be6845002

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/commentss-2.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 3730
last-modified: Thu, 14 Mar 2024 19:22:30 GMT
etag: "65f34e76-e92"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q4ljV7Xpeg6yFBkh6uzpW4xyhYC6PKOyGNBhcGo%2B%2F9QChK3lTizL4RgA8TD8PYw%2F%2F2EJ4%2BrcLkko6G52FTcKv4NngZAI%2FH43%2BZwPOrXOtcY7DznVUxPVYYLOSEJLqoFDFwZR1R7a8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb2202fd95699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/8v.jpg

104.21.23.222

200 OK

12 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/8v.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 347x379, components 3
Size
12 kB (11542 bytes)
Hash
8d5db6e11894ab2c0a2f6e4659b1031e
d0b41f3da4ea896634e5228cf0827dac2db52d8e
8bdb8edb67c11572124d4b731a679dc97267e3de137f57f996559be3c18b7d60

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/8v.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 11542
last-modified: Thu, 14 Mar 2024 19:22:21 GMT
etag: "65f34e6d-2d16"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ENWz5EXq7wbPQBnOrsQExgm2avwLT69PZ8Kj8oa4P43g9BxFcw5oOda2JAEuDcnp0dwLPdPqQn%2BWmL2sRtpCKMPrZtGGSADO3%2F6MISfjiDWftiL5qEA9W24QbTjG69TbdAVDuoHXqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb2202fdb5699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/

104.21.23.222

200 OK

37 kB

URL User Request GET HTTP/2
kellyshow-nature.com/
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1383)
Size
37 kB (36990 bytes)
Hash
3989455f579411db12a9f50a509d9594
d49af3ef1e272d350c64693e42f6f9be71c7a252
4083ddec0c2f6e293367c323cbc6020c2dd652abf632f013cfc2071e2cc41351

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:43:14 GMT
content-type: text/html
last-modified: Mon, 08 Apr 2024 23:20:10 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wxZT%2F1DCyhM2Vb1cmOGVhHy%2BCu7VQvF1I%2BLphA%2FYc6xcYgRDMNPETdLc47UEjd72QGluOzSIBAf2Nc1lkL4tQc3QTcD67Q2fUNCKhWX%2FWXYDAduV9g2wPP4S4Iw3X4qmN71ZBg7y0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb21bff0eb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kellyshow-nature.com/index_files/c32.jpg

104.21.23.222

200 OK

64 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/c32.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 736x720, components 3
Size
64 kB (64213 bytes)
Hash
00a909715813c9018b861b2a713af112
c1cddd906d60f70984551dbfb5e194691c930798
9ae3e0013c67278407d516873090dd287254183900f42f66a7df1e19b5e3b761

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/c32.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 64213
last-modified: Thu, 14 Mar 2024 19:22:27 GMT
etag: "65f34e73-fad5"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9zzWGDfp6dcyNWiAhGBnFrcITpJaUcPna9OMItJRXRXAJq%2F3VM0RgaqgYCk6LiF6MusTG9d0DWnb3TneZA94r1eKSh6QLcMDI27CuEbaeQZSuBRjjhCKHfo85z%2FxuVz1%2BXejloXrWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb2202fdc5699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/102.jpg

104.21.23.222

200 OK

19 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/102.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 342x417, components 3
Size
19 kB (19160 bytes)
Hash
61a6ab0500f5e740243a0e4295431d6a
3ce13ae6543c34b04204a23b72ce3ae5dec21c6c
2842edbc9b83ec5ef8d5d642044dca7c0fd9d21ee346fa80105e947a8edfc863

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/102.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 19160
last-modified: Thu, 14 Mar 2024 19:22:10 GMT
etag: "65f34e62-4ad8"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mFr93yXecwURW52%2B11tIjPpsQQSY4Q8fZu1ZSGUhIYVQeeI0uO2VZ60tMFq1dsS9M6ZOk0fOt%2FWwR0fhkGphZepX1378FIiewkVvwFVl3ShT7QwxiSEmL8pQamB2lVj9ie92VhXHhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb22118cd5699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/24-1.jpg

104.21.23.222

200 OK

73 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/24-1.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 800x800, components 3
Size
73 kB (73020 bytes)
Hash
c153aca43d687a8ade5105bd3d9e1e2f
29fb3b3993f89adf6ce5c62d2f6bb15b9c036755
7bd67a47e3b0cea5004762dee07a8a8712c16048f230e3eae1fe2391e4cbe7ed

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/24-1.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 73020
last-modified: Thu, 14 Mar 2024 19:22:13 GMT
etag: "65f34e65-11d3c"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jPTdkri1cj7weR82rJ2f%2B4eo4ejPFj8wpSxHZH97NT55sGUK6WO%2BWUZtHXPyFIEX9J9i4xht12vdZBEHy3sv18J%2BCLBFBInnqPGvDsBoqr%2BvJbk2C20%2BUTz%2BgRBdzhifrl3vv1ieFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb22118cb5699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/bb.png

104.21.23.222

200 OK

6.7 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/bb.png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Size
6.7 kB (6658 bytes)
Hash
bee42bace32f7137b219b6416fe383c1
a5a804a9eaa5baa3a76afe4970674a01a9b5492f
5c8f19d01316d791afdaa49417c7a472167a8599325945e1f7a90a4fdaa72dc1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/bb.png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/png
content-length: 6658
last-modified: Thu, 14 Mar 2024 19:22:25 GMT
etag: "65f34e71-1a02"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0AH6yugSXvE8%2FYrJ13nfhcuMf6pBhtUUkPn%2FJJFwkUrJMpb8FYXYmiBQxh0AMhNirlwp%2BpoM9wCw6B5BxCmTgH8zFR3Dg4CpjhI3sNhmCyFws6agPcKOEG%2Fafws0doXTZaedAwIRkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb22118cf5699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/ss.png

104.21.23.222

200 OK

5.4 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/ss.png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Size
5.4 kB (5393 bytes)
Hash
24060cefc8a45587be04800b73be9a37
65648ed89df6feb90b7a808a97e74cf4d01c3074
6cbd9712fc36bd32ad75bb85795b3f988d44a297f3854d305143753aa395a392

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/ss.png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/png
content-length: 5393
last-modified: Thu, 14 Mar 2024 19:22:36 GMT
etag: "65f34e7c-1511"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qaRzIcvjGCvQ1bkX4rBBjT0Q69x%2BxGc44vIBqKvfSsw91opDGR2ccBN76LVT1DSw9N7cQiZas%2B4Kl0zgYrM3KblJaQNZS8nHJhafTNIdmOjS26332UPNi4wsfDyowLOBudRN1M7A8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb22118cc5699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/8-1-1.jpg

104.21.23.222

200 OK

170 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/8-1-1.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 1280x1280, components 3
Size
170 kB (169714 bytes)
Hash
e176a7c3355b7d59d117e8d737c02862
7bfc4d2ce740616cfa5db523b7427297d3011368
1083a1d65849345bfd140eb3cf9bafa06ca460414b6867ebd9b2075e3c909283

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/8-1-1.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 169714
last-modified: Thu, 14 Mar 2024 19:22:20 GMT
etag: "65f34e6c-296f2"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kCQON2tvB8tO4FslOWVJF%2FrWRwB0dU6P0%2BDL7542zfHYLktGn%2BzrmNmX9VYvKfVTK6%2FnMDdC7cuUWUO14JUsvSBpaf6IGbL7%2BaFMZWHyAkvlgK4D62mgo1%2F0by5wMbB8dBK6J%2BhTSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb22118ce5699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/24.jpg

104.21.23.222

200 OK

1.5 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/24.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 48x48, components 3
Size
1.5 kB (1518 bytes)
Hash
38129ee8d5f3f77fb15325cd5873b370
b56e9d710a30444dc7e36faf4fb941e01cc0ea0c
ebac62ba643ae6236d3d96a5fd41fa0672cc0e3a1a3bca52d6443e9251fea9b1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/24.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 1518
last-modified: Thu, 14 Mar 2024 19:22:14 GMT
etag: "65f34e66-5ee"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t9ePt%2Fa5%2BU%2FB%2FRG4nqivJ%2FCIrZx0SXJqvEFmVNulIYLWe9%2BKpeICGDQWqoI%2FxMHEZTkdykt04jDQ9jX%2BVcBB%2FdTsTO383UVZoruGRtfagTitTpbosfwHKEijbjyWkUoos2CjjuHwWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb22118d05699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/e.jpg

104.21.23.222

200 OK

192 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/e.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 1077x1077, components 3
Size
192 kB (191854 bytes)
Hash
1545369692494d805f9bf5ba7f67d34f
0899ed02de2d4cabaa150141fe2f960cbdf9de64
179b11949502eca1d6af18d594da67c3e6c0edcc839a27eb9b8c0e458de54d38

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/e.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 191854
last-modified: Thu, 14 Mar 2024 19:22:32 GMT
etag: "65f34e78-2ed6e"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AwSPT%2BuhFZfN9tKQSZBOj2LHzs0CtbilFfIGFq3cnPpdFnGX4zW6bz7Zvz14FxQZDK1uwgxBkQslCWuieBvit%2FzDEqEJYaFa25iCTft894WMAyuP353N%2FCemw5crus3aquMeCeM4hA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb22118d15699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/14-122.jpg

104.21.23.222

200 OK

86 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/14-122.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 1049x1011, components 3
Size
86 kB (86377 bytes)
Hash
f2f34d736dc6290fcff842ebea68ec92
eeaeec86cf8f428da5317dca99eccf48336e028d
bd41148e75d1bd2a3a8a5cb64ee9fe96561dbe77ce4618aeb6feb3bd2ace6751

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/14-122.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 86377
last-modified: Thu, 14 Mar 2024 19:22:11 GMT
etag: "65f34e63-15169"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WemX6tmVN1KdNBjtWSJzzzHoe5g0DxP570JVFFn9woi6lHPwOka4wn2v6EpI8HOdIN4zhcRwIt0EzTcnDcfxkAE0QTWzFE5li%2F9aZD1fHXtL%2BZaYwdqH9VgSwLG%2FHATH5IkSon%2F2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb22118d35699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/663785292295776

104.21.23.222

200 OK

64 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/663785292295776
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JavaScript source, ASCII text, with very long lines (4197)
Size
64 kB (63959 bytes)
Hash
5328f5941f4ba112268c2a1252df9d73
e50dda1ef88f740748464082a45b1cd5d1542999
99c024c241031f932245f361cd19239b72d52e560965dc62ba875258c8607be3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/663785292295776 HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: application/octet-stream
content-length: 63959
last-modified: Thu, 14 Mar 2024 19:22:20 GMT
etag: "65f34e6c-f9d7"
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zpkq8rFi4cAwWKyHQhfbHbgIT8Yipi3%2Fyrios%2BLQGYPMSxTfDXilXiPkWKOhFQHZTtyWdPJPt%2FCIlmICKpfktfAicCj6Y9utIu1pVq5E4AWbSAm74ktE7pTRJFG6YtyIzV8DBigq3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb21efe885699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/fbevents.js.download

104.21.23.222

200 OK

221 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/fbevents.js.download
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JavaScript source, ASCII text, with very long lines (64347)
Size
221 kB (221085 bytes)
Hash
0904aef4333e8e2baf3af10b0b7b35e0
ac177423b5edd565ba99a8a0abaf75133d463bfc
85267fa4a3e908d0c2778fc27bf13b384d2353c2d12e8d4c78982a3cfaa9636e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/fbevents.js.download HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: application/octet-stream
content-length: 221085
last-modified: Thu, 14 Mar 2024 19:22:34 GMT
etag: "65f34e7a-35f9d"
accept-ranges: bytes
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mm%2Bk6Yd2bFRWA%2F8VIBEoY6k2DgeRgM1jCf243%2Bj7t4hwjJRdNjNx1PB7d0eU7zxJ0pz4AR0eWBBRyfs8vEWaYMSe8%2FWvUKSj0DsMyrx6FrmX9quQRfAwZa92hIcV%2FSTSZzkt0Eb%2BLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb21efe8a5699-OSL
alt-svc: h3=":443"; ma=86400

e-commercereport.com/click.php?key=7fsu6e7gjgiz22526f2w&lp_type=pixel

104.21.56.146

4.9 kB

URL GET
e-commercereport.com/click.php?key=7fsu6e7gjgiz22526f2w&lp_type=pixel
IP
104.21.56.146:0
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjecte-commercereport.com
Fingerprint70:9A:D9:7C:EF:33:6B:29:6F:ED:3A:F0:D8:3D:B2:63:83:E2:CF:77
ValidityMon, 11 Mar 2024 15:31:18 GMT - Sun, 09 Jun 2024 15:31:17 GMT

File type
ASCII text, with CRLF line terminators
Size
4.9 kB (4923 bytes)
Hash
5bcc4592a3b6bad728ffee8d0665e25b
444b7cecd48e18f984945a368f061e0dbaba0730
7e0053cb56b5399e1a1550c461e352c904312435cb3b1290512d055e5387460a

HTTP Headers

GET /click.php?key=7fsu6e7gjgiz22526f2w&lp_type=pixel HTTP/1.1
Host: e-commercereport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: text/html; charset=UTF-8
set-cookie: uclick=us4kvcoc; expires=Sat, 20-Apr-2024 17:43:15 GMT; Max-Age=86400; path=/
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kbw91mKM6%2B9oaPnvE2TMgOMh%2ByJfl0yh%2F3u778M3uts1hlu9bzIMtGQVmPDglU9dPQJvC47W9ATIP5fYsMZstYbO%2FJn24B55yzkk%2BE1E9YRD1A5kgUDv0lSgUM5ASBO%2FcXNuwyaW1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb221ed2fb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kellyshow-nature.com/index_files/untitled-1.jpg

104.21.23.222

200 OK

12 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/untitled-1.jpg
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 249x277, components 3
Size
12 kB (11558 bytes)
Hash
db310ebe1c16661af344946b3421de35
adf8902dd25c18e877a8c0943d23a27c5beeba79
2ed0db16678047e9084e3ce0294a218886824f9bdec0744be14dd6dff9094822

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/untitled-1.jpg HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: image/jpeg
content-length: 11558
last-modified: Thu, 14 Mar 2024 19:22:38 GMT
etag: "65f34e7e-2d26"
expires: Sun, 19 May 2024 12:18:46 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 19469
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zdy4ML6NB1ItznOIYuyIAduT0DaR8QRQPH2r6pJhLUycLxCB7xYiTOHrQlKHc3ZELVuPnAVoEFoFvJidrupkdzI%2FQ%2F3x7muR7Y8ZD5VMpTNjXlCC0ickaGhoNRK7J4j7Qepy1xD4Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb2202fdd5699-OSL
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/static/images/5zzge2flp50.png

104.21.23.222

404 Not Found

146 B

URL GET HTTP/3
kellyshow-nature.com/static/images/5zzge2flp50.png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/images/5zzge2flp50.png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Cookie: uclick=h9dugx15
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LnlbqRtj49riQYruy%2BLS%2Fu5T6hn1%2BkDweifgI7PBLv8LFt5UclR0%2BRzXNx88%2B3MT65iEUw9Uh1qaTVXE3UvHCSfqe8HTvzkDd0f3I6QvhYMsVsT00M97GHAa7X6C9W83QjALQJPMOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb221e9a35699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/click.php

104.21.23.222

200 OK

240 B

URL GET HTTP/3
kellyshow-nature.com/index_files/click.php
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
ASCII text, with no line terminators
Size
240 B (240 bytes)
Hash
0c0ebfbe6b7832eb5f15ef892eedda3d
c75a359b2add322ab5dca8bd676847df97b2bcfa
4eb0b7a10a897b6eb253ed09fee7427349180df2c565ddeb810c9ee1ecf8d1f8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/click.php HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KUSimcx3pZ6Zkhym5j%2FuEbkoePchMQYb0Gzs3qCzIZi%2BnP7jQw%2FVCZVCZixfX0H%2Fm7O0cIu4q7x2a5MkmPlf2YFBvy4QZrM%2FFvQlmhddE%2BDHhdb49asKTb6KHv%2FWNVc15QKo27uW1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb21efe8d5699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/static/images/icons.png

104.21.23.222

404 Not Found

146 B

URL GET HTTP/3
kellyshow-nature.com/static/images/icons.png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/images/icons.png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Cookie: uclick=h9dugx15
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F8uIlrU%2Bjb%2BF57XpSPuWn9fpdXI2HkjZz70CgvXW0F%2FPe4hZDujSRmaK7nDM%2Fz0mTO40KubzWDc1%2FhE8okPwqK%2BM3K9Hi5sQe5Xmt16GaahIYeVpn8ofWcEQ5aqa96WFS5yjrurRtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb221c9915699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/static/images/icons2.png

104.21.23.222

404 Not Found

146 B

URL GET HTTP/3
kellyshow-nature.com/static/images/icons2.png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /static/images/icons2.png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Cookie: uclick=h9dugx15
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=48BS%2Fw543iGP9h3qzpgtQ0S75Y4d3RNb1zaV4t2W0aylHdB5SFLa%2BfQY41EMrSdXbvzrnWvYZZVdP2qQyNfghOAOsrq49e10Hz9YoRV0CCDb7dUEHbniCK7V%2FeaIQUAinSTGXLhVCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb221d99e5699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/favicon.ico

104.21.23.222

404 Not Found

146 B

URL GET HTTP/3
kellyshow-nature.com/favicon.ico
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Cookie: uclick=us4kvcoc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 17:43:16 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VMlQ8Z5DuI6H5512Vi0gibB0nZjNU7Qoxf4fs0rll0tN5eoA%2BSqXmfr%2F%2BeF3PAUyTv1pOBqnIroV7JoVXSLKNM1UPdGR35sBQvbxNsq7Pv2abKo1sf8MGB2NlQRIHPQhsnlzINeHmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb2246bcd5699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/1.css

104.21.23.222

200 OK

171 B

URL GET HTTP/3
kellyshow-nature.com/index_files/1.css
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
171 B (171 bytes)
Hash
a9d40c9d7bb0a536055db2a821bd40d5
629122cda9967996140a35d4dd571b7403f496dc
d1131cf3e9927e4763beebeb9e4487775a3476ac0f57845769b9ed488ec5f562

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/1.css HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 19:22:09 GMT
etag: W/"65f34e61-ab"
expires: Sat, 20 Apr 2024 00:18:45 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 19470
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jf%2F0DaucMqLKWbI5hyTBZrOL6y9ubjfizQ1vzyF4oGrA52dMKuO%2FkQfIPQnPokI4W1lyrQOSq%2BNwiSKwAleLnbjbpy%2F0%2BUc7jFhAaODJo0sClbw2ZoCWe6ItwGUjjnJRvIP6gkVV7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb21efe875699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/images/5zzge2flp50.png

104.21.23.222

404 Not Found

146 B

URL GET HTTP/3
kellyshow-nature.com/images/5zzge2flp50.png
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/5zzge2flp50.png HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/index_files/1.css
Cookie: uclick=h9dugx15
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7ACxpT%2B96vVddRgEjcyt9iFjlmmuIWZRfNqFqLGP6MsVIeqjio0%2F4hT6UEZzC7rxXRedoyatWiiRfjspkWWL8KoCnIMSihD1epBgQLjbPTFnA24w0hKmUz04Q8UzwnbCXTqj10VWhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb221d99c5699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/style.css

104.21.23.222

200 OK

24 kB

URL GET HTTP/3
kellyshow-nature.com/index_files/style.css
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
ASCII text, with very long lines (23979), with no line terminators
Size
24 kB (23979 bytes)
Hash
671af2135a0470d7d227df7756b5efc3
4c1d7e9692e2db4108dd4ca4b5aef36a0f687afa
29ecfa44ebe88681fddeef1125be3d0745fca025bb380c5983a2c6c620e9848b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/style.css HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: text/css
last-modified: Thu, 14 Mar 2024 19:22:37 GMT
vary: Accept-Encoding
etag: W/"65f34e7d-5dab"
expires: Sat, 20 Apr 2024 00:18:45 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 19470
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tfpvv7%2Fljob2lrNC%2Fc%2FyAL8Icn3plfUJSi%2FmfNTWQAB6W64qZKThrZCz%2BoprSJmRUE3xa6B3rbJjNTIDKlewEPEMfmdDe4pWKNvtwk8rZY2sA1%2B9uY2mZ%2BRHEUA9XyiF2nCh157FIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb21efe855699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

kellyshow-nature.com/index_files/15.jpg.html

104.21.23.222

200 OK

149 B

URL GET HTTP/3
kellyshow-nature.com/index_files/15.jpg.html
IP
104.21.23.222:443
ASN
#13335 CLOUDFLARENET

Requested by
https://kellyshow-nature.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectkellyshow-nature.com
Fingerprint72:C0:69:A1:5A:33:E9:54:C0:60:BE:39:DB:FD:2E:A4:42:3C:95:D8
ValidityTue, 09 Apr 2024 05:43:20 GMT - Mon, 08 Jul 2024 05:43:19 GMT

File type
HTML document, ASCII text, with no line terminators
Size
149 B (149 bytes)
Hash
fb414be122309c0719179de4dc1047f8
9a6172309933dfafbce87ca8f1ef6a398efcbf04
bbb1e1f86ee39bc06aed5b3d4ae61b46b220635ca98b3f07021da24f68d0e53f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Facebook
OpenPhish	phishing	Facebook, Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /index_files/15.jpg.html HTTP/1.1
Host: kellyshow-nature.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kellyshow-nature.com/
Cookie: uclick=h9dugx15
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:43:15 GMT
content-type: text/html
last-modified: Thu, 14 Mar 2024 19:22:12 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1gEDmpUUHoBWzXlyw0NZL5VS6xNRj0Aiad%2FaVxXRKWXwNwx66Ftdxis%2F7FV5%2F4Ez9mTpldNKzZw%2FEMLJQPZSzeiQItUN90d%2Fr%2Bxckd%2B37GlvhjvUXCxUaqrJg9RpUGlnXdtuI0bZag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb22159285699-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (42)

URL GET HTTP/3

IP

ASN

Requested by