| 411medias.com/theme/Master/FrontPage/img/assets/yep_icon_credit_cards.png |  188.114.97.1 | 200 OK | 4.4 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/assets/yep_icon_credit_cards.png IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typePNG image data, 110 x 30, 8-bit/color RGBA, non-interlaced Hash991902c9b78031514184e48d6ce11a52 9f20a749470771fd9ba0b8a61df8b0292310770a 5733030237ca17a2eaac7da7be547669d5d3c5b663016774f466e7d09990f9bc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/assets/yep_icon_credit_cards.png HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:18 GMT
content-type: image/png
content-length: 4417
last-modified: Wed, 17 Apr 2024 17:05:11 GMT
etag: "66200147-1141"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oG1FBCoSsJ2HuWI%2BJOroCsNEILGCLLp%2BHoJmyuAcye4CYyH4t2PyPkvMviksSYGYVApVWYFaQtY31vfoDK15YHsWsirgOf3JTrvc0o%2FkaQMaG0qRPAa1tK8JIWNtdSm1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 876259147e9f56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/img/logos/entertainment/min/411medias.png | 188.114.97.1 | 200 OK | 2.6 kB |
URL GET HTTP/3411medias.com/img/logos/entertainment/min/411medias.png IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typePNG image data, 250 x 60, 8-bit colormap, non-interlaced Hash6914664b461e03d1259b792fc3e2c0c4 c997161c8b315e408e9c419fe3b15709f96d0f12 ddf43c09f6901f7e4139e8735ef5e970ae71314b64934ecd206fe2178d1259f5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/logos/entertainment/min/411medias.png HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:18 GMT
content-type: image/png
content-length: 2553
last-modified: Wed, 17 Apr 2024 17:05:14 GMT
etag: "6620014a-9f9"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QSogxcjpKtHQMzNc4ppZTFIrsz9zqAfvQN0kY37KjKpHgrxDDECU8Unh%2BXqdQ66BFLYWFEvnNpueqUQLaZmEeA3Kxi10Lmwkou%2B2cdT1I3pIfBTlCglTbWkNFUkk2nJj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 876259147e9856ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 188.114.97.1 | 200 OK | 1.1 kB |
URL GET HTTP/3411medias.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typegzip compressed data, from Unix Hash9fc4f9f1c7331ac978e9488fb88f7e37 c627fbcf425619d5d3f8fd3f2a134c11a476f5bf 12803a1d94dfb456f0fa4094e57f5f7d635c9014d162bd1609fcde97fb017c76
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:18 GMT
content-type: application/javascript
last-modified: Mon, 15 Apr 2024 08:31:34 GMT
etag: W/"661ce5e6-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kVP0Uh2NZmvyojeZWZq7a%2BiTtBW885UARwdb6Ew%2BDntA274b1sTF8liw2OGDkGKiLoUc3r5HJPbTQaqiTKnP0R6lPNx26mErcQH0R9t%2FcN2qqsxYlcnQaTQSnsDcgINp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 876259148eaf56ba-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 20 Apr 2024 05:45:18 GMT
cache-control: max-age=172800, public
content-encoding: gzip
|
|
| 411medias.com/img/logos/entertainment/min/411medias_dark.png | 188.114.97.1 | 200 OK | 2.6 kB |
URL GET HTTP/3411medias.com/img/logos/entertainment/min/411medias_dark.png IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typePNG image data, 250 x 60, 8-bit colormap, non-interlaced Hash6914664b461e03d1259b792fc3e2c0c4 c997161c8b315e408e9c419fe3b15709f96d0f12 ddf43c09f6901f7e4139e8735ef5e970ae71314b64934ecd206fe2178d1259f5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/logos/entertainment/min/411medias_dark.png HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:18 GMT
content-type: image/png
content-length: 2553
last-modified: Wed, 17 Apr 2024 17:05:14 GMT
etag: "6620014a-9f9"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZnsZbgxx9oEyWFLdt1ouxHqo4%2FgrqFGSUti7iJqw%2F%2BwI2jLbeIiV%2FEVQlmVYzA1%2F0TT8JEejwCR%2FPv8gMtUrfGgrqf8U9dHWC40ZNZPtMFRNbXgRr%2BUzvL4b39nesPru"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 876259147e9d56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/assets/left_arrow.png | 188.114.97.1 | 200 OK | 1.1 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/assets/left_arrow.png IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typePNG image data, 15 x 30, 8-bit/color RGBA, non-interlaced Hashb5464151f9ab113bedf401710db5eb1b cd704f942193efd5a54ccc47fd5dad5ad615e480 36c44aaa024fc0b096aa1462a44d549c259efd3b81422a9481266ff034959e61
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/assets/left_arrow.png HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/png
content-length: 1082
last-modified: Wed, 17 Apr 2024 17:05:11 GMT
etag: "66200147-43a"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p8acmbsDqqcV4p5RvZLh75tX9soBxMTo9K4sMlpbD%2Fzwth%2B19rcVh6ofUuFfdxHJYdrNx4Uj4C%2FuxspCIeG2e0%2BhTR8polO35BsuJ4wuVrmP%2F%2B9uBFPrrNkjIBY3stmd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917baff56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/movie-fists-of-fury-02.jpg | 188.114.97.1 | 200 OK | 24 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/movie-fists-of-fury-02.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "nn: http://pro.imdb.com/name/nm0000045/", baseline, precision 8, 485x392, components 3 Hash4095c5e39210d772ddda10550889b6da 45b62e6404542dad3eb01f38b8fea9bd16747ca5 029e6672edcaf6e69cc2417977b4974fe550c18711d5426082e2fc851aca6896
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/movie-fists-of-fury-02.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 23635
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-5c53"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GlYOCdyhA6ST8mNr9LmnO5MG5xdO8yCes8kypgdBX1VxxGUFGFfcd0Pj8SShnVV3hY0GgNglSdmkCaR3mFy5p%2BRdCDk%2BL9XziWFZcsJtm7h63Umm8rSJjHhkEaJjSZ6%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917cb0956ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/movie-call-of-the-wild-01.jpg | 188.114.97.1 | 200 OK | 187 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/movie-call-of-the-wild-01.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=819, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1024], baseline, precision 8, 1024x623, components 3 Size187 kB (186786 bytes) Hashd4da482b6350d373c4f988b6906ad03c f83fde2cc6863d39959f3cf5eaea662e19412bd6 4874f394556242be69b6b303ae9c66e7fdc00926d65666fe3442efa310fbbb71
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/movie-call-of-the-wild-01.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 186786
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-2d9a2"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C1Fakf%2FvS8yUD3lz8pvmWJ37KOpNgaAWbxs9tOlYBfcJMAeT8sSjXruAzl2elG5gslJeQV%2FJrmp13KzpRmmOPJAkNAPZer1Aor6XHMdND8pqQFrqLBFWgk235E9K6XhK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917cb1056ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/movie-jack-frost-02.jpg | 188.114.97.1 | 200 OK | 61 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/movie-jack-frost-02.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 640x467, components 3 Hash97a90c1ea799303d63a07d88276a669e c55b2c89cb09e69b9b7d5ced2db692bdd82c7300 4de2977173d9a177dfa0263b60a3a03d571dd0c963154e99d3ee765b74b8ba61
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/movie-jack-frost-02.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 61081
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-ee99"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ksDybQ10meQKFgqCHy8QV6nLOiqrlIcvrRU8pr%2FyqBM2OHUrB9fzjsiYnjv9JMb598DGDyPPVGmdxXRPpwcoQ5fhAZe2san75XKOiF6KGHueR4QPXCV6yYybMN6%2BYLdS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917db1656ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/movie-little-spirit-02.jpg | 188.114.97.1 | 200 OK | 104 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/movie-little-spirit-02.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Macintosh, datetime=2008:11:21 12:17:48], baseline, precision 8, 359x202, components 3 Size104 kB (103460 bytes) Hash62ec209d3a6df2c54934b05f4c7b95d4 79416fa1a557355488a1ef308af77d87ac490398 b7f29482bb441d98c406b4943ddd0922ada16f6b8087549881695e1bc6f1ffed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/movie-little-spirit-02.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 103460
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-19424"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=07cmBoeqbnjTML5PG%2Fm%2BALxP%2FT91iV7fs9gnuPmhnAebG2QdZhiMDXSldpQTp7kUcooc%2BmLS%2B2WMCTfres9mMWvVTKrB6TjD%2BP%2F%2BKWH9Fr%2BYKnxLbN2njBr6B7GxIl79"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917db1856ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/assets/right_arrow.png | 188.114.97.1 | 200 OK | 1.1 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/assets/right_arrow.png IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typePNG image data, 15 x 30, 8-bit/color RGBA, non-interlaced Hash9185b6694d91e3d725616d5d25a9b735 c149078ca4181031955ebc736f1c09e1c5791b6a 8123c603f83180f5c50065716e4f5191cf7cf82f4bf467b7d577b4f2e7ac52bb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/assets/right_arrow.png HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/png
content-length: 1094
last-modified: Wed, 17 Apr 2024 17:05:11 GMT
etag: "66200147-446"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gYSGBCLr6SX%2F%2BVa7mKVIsqbebeFdjfXbxNTz3gNR1y5zd7ckQtQbOxbESAo8TijFU%2FIGwM2IpC3zeFHlu8kAJkgXwxsc7RIvA3%2FzNZBqCpoP5NTMqEYo8SSixtdPgW6j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917cb0856ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/game-bejeweled-2.jpg | 188.114.97.1 | 200 OK | 239 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/game-bejeweled-2.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1920x1080, components 3 Size239 kB (239060 bytes) Hash7d2ff1ca6c9e795a764ff98b0b215223 9c53d9827c89d90636b4bf3c7c5a89b8e61f8986 11e5bbf0c905ab31cb969d6833bef1a95ab11038cd492827acd09ea56e9f0813
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/game-bejeweled-2.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 239060
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-3a5d4"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nDrXIfPN8GDVTWixgVQSd9E4ZDhDWL7DYXpOIAMyVPEwQMA1xq%2Bc%2FHwbjPpy6mN%2Bw8XT8sTjTWbIbIVo65iYVuPlKsGNoU0GIdEn87Z8J95OgIykW6Pi4dsHAjrXYNZz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917db1a56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/css/frontend/theme/basic-header.d28b67a3.css | 188.114.97.1 | 200 OK | 336 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/css/frontend/theme/basic-header.d28b67a3.css IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeASCII text, with very long lines (5984), with no line terminators Size336 kB (336131 bytes) Hash45110bc5815b0355a312c30ddf09335b e9910b406584126505a8440d8a2de1e4703f1a8e 2e02f682c8bc7534c8d81a0edb21e4ff2af7281afa33f31938522c8b587a1c83
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/css/frontend/theme/basic-header.d28b67a3.css HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: text/css
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: W/"66200146-1760"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YrR%2BGxeZ4cVdiuUM7TjtEtwAkq9ClYZTKkLbAraz9fXNk%2BDw1ZZQQuKJ1ZnC44jkU9x6wVGZT1nkmJWxJhKkWwkL2z0YyDHpq8j%2F8GsvGnPFK6q0XNxTJ1pa1qGO9wCV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 876259145e5056ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/movie-evil-dead-2-03.jpg | 188.114.97.1 | 200 OK | 112 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/movie-evil-dead-2-03.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 1600x870, components 3 Size112 kB (112199 bytes) Hash691d3a5c5b9639e02356115f5d4e4db5 d8690f5a843e2bffc4ebaf149a688c64b29a0af9 1d298387f6c921832f1f04df6999eb85aff954c7df07b9e6a1c8b97d1ec9231c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/movie-evil-dead-2-03.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 112199
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-1b647"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aWkt11IEtqy3KozcV2YGhHDFA%2FZ6lLPCoVSO2NnUkGQZOQitxWd87VXRtCtsK8fUi7u2snKxcFGdCRAPg5EPjE6tLZsYn6VU0svnkqjHQdW5mGaF1r5iNjpc1ipQkB7S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917db3c56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css | 188.114.97.1 | 200 OK | 122 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size122 kB (122439 bytes) Hasha20a8867a7f0bbfe9dbacaee043c9a83 6d1a67c6b34daacdc2ed914b16c28a58d28547ec 2cd332eb8cc87af0cb5b4328bc3341ac01829b3a8b40539c6621be42602a1467
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:18 GMT
content-type: text/css
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
vary: Accept-Encoding
etag: W/"66200146-172ee"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qZrX7i8FUt5DtAIM66pzyB%2FndqCSoT65YWtf0c8ThubxfrSkobwa5ShBGwikyN7%2BCg0GN9A2O5P5wlCj%2Fu1vIRjdPMCOSYfzVKWKvNlChcZzanDlxi68UYJYxgL3hekR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 876259145e6956ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/css/frontend/theme/basic-footer.6585e4e8.css | 188.114.97.1 | 200 OK | 110 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/css/frontend/theme/basic-footer.6585e4e8.css IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeASCII text, with very long lines (937), with no line terminators Size110 kB (110434 bytes) Hash6c58adf82237d322d6480020b01813cd a5ce7202ddfd7679a954fc57c53351f7f3eb5b75 999e82512d66201c863f773e072b51ffa076eb56c2279923717aaa941c7e8dd8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/css/frontend/theme/basic-footer.6585e4e8.css HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:18 GMT
content-type: text/css
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: W/"66200146-3a9"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0qeMWou5CZAuolQHYpBtjnOYkWsDz58WOC1kr1JRlEAWDeIbIZNqIFGwCRBtZhb%2BDBN1Us8K%2B7NAJKbsq2tE8ApI64ZVZ4Fya8%2FOfXj9TMYLiHYHZ2YuKNNBcwPh5xvg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 876259145e5556ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Oswald:200,300,400 |  142.250.74.106 | 200 OK | 392 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Oswald:200,300,400 IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Size392 kB (392032 bytes) Hashe4fcd8f68ab33c21e6095d0a38fa7c31 1e10a477b6bdaba71f64f5eb6ccfeebcec5f31ee e319b8ea7daad071dbf081dfbb0a4bd0fb556004a5c7d77a74185e3d65b3b093
GET /css?family=Oswald:200,300,400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 05:45:18 GMT
date: Thu, 18 Apr 2024 05:45:18 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Noto+Sans | 142.250.74.106 | 200 OK | 138 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Noto+Sans IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Size138 kB (138180 bytes) Hash9cd6e5000552ac2e2c99df84197a6c5b b9519feb87e6422583fcb895f13d5f6fb136e2dd 2484b71a1aeced6a6cf31f5877c996583af57097387c25a98d8db65359c64de5
GET /css?family=Noto+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 05:45:19 GMT
date: Thu, 18 Apr 2024 05:45:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 411medias.com/theme/Master/FrontPage/css/frontend/theme/basic-main.8b18a82b.css | 188.114.97.1 | 200 OK | 37 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/css/frontend/theme/basic-main.8b18a82b.css IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeASCII text, with very long lines (8287), with no line terminators Hash272870ca6902e6af63be062cf476e065 7421e9ff50498a1ffca9ef749e0ec5e839ce5e69 751bb2527d425e418c08469fa31006a113f367678871a5551847775f2f7b2f40
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/css/frontend/theme/basic-main.8b18a82b.css HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:18 GMT
content-type: text/css
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: W/"66200146-205f"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AEFzmp3EziVSDrCdmW1Lp3wms0C4pxQTaIHLzDpkwhSGWjXxEzinvYS1MtNr89sfAk%2FIn1vo94V32R3UmIuvjDNhgkMQb031qmbxxOk%2BR4WbubtQLA3n0U0z%2BEVIvxeA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 876259145e5d56ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 188.114.97.1 | 200 OK | 129 kB |
URL User Request GET HTTP/2IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1042) Size129 kB (129044 bytes) Hashbf44267cd01903ec82eefcca6f7e0563 db18e917b124d263ab12e977b145feab853c8287 e50fb40da8815a7a3e7d447c68c069015f93a03c7629cea6eef5a8ae879dbe56
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:45:18 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; expires=Thu, 18-Apr-2024 09:45:18 GMT; Max-Age=14400; path=/; secure; HttpOnly
CakeCookie[lang]=eng; path=/; secure
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q%2Bc0T22pM7zF7FlHt4zP4uJqnCn88rLzxxRqtoJCboM%2Ftrxkfn89NJptdetGS%2Bp18m4J2LsE2sY4OIXTURNzNMTZHyUcC7BApVH%2BG9IlWMm8MDRmuTTG%2FjkuuENyzQ2d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 876259113ae2569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Days+One | 142.250.74.106 | 200 OK | 132 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Days+One IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Size132 kB (131980 bytes) Hash42a5296ed8f423ebec0f1fe7335a53de 502e798c47bfacd88b33724a37903517326b05fb 03f4d684d593d9f65e772512d69d7f365e4498b4fe7c7a03152399bce197417f
GET /css?family=Days+One HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 05:45:19 GMT
date: Thu, 18 Apr 2024 05:45:19 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans | 142.250.74.106 | 200 OK | 52 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Open+Sans IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Hash8ec3b82d1b3bddc1659dba683edeafac b317b3f9471203d3dcd0a6ab78f39ceb66807103 6b77c1ff45e737a6c3c40a90b6395dc9819df9a0a3d6c59ea12520146e31ee12
GET /css?family=Open+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 05:45:18 GMT
date: Thu, 18 Apr 2024 05:45:18 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/book-generic-image.jpg | 188.114.97.1 | 200 OK | 150 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/book-generic-image.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 2119x1415, components 3 Size150 kB (149886 bytes) Hashc202381863c49bfcb29894c2d4e49331 4b1348c3442a8a2eb4fcce4a5eb1f825daf89076 845e7be0b81d4f8a57318c21b3be7a47cca95133bb070703b73c8a70e50c0068
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/book-generic-image.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 149886
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-2497e"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bhcLo7XZ7iDxGM7JzCB9r63YrIJBIm8b7dAe2EWn%2FdzQMV1tyZTgdFwXmZcE2CvRBMCp4pOtxkgl0C2NkrqR59befvZTzkqJGVUBxPBp3k0qO2Rr2b4rWqP%2FsQHNq5ls"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917fb5d56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Questrial | 142.250.74.106 | 200 OK | 282 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Questrial IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Size282 kB (282365 bytes) Hashab21bd457ae6608c871783d679bfd6fe 0bf2288a5568f76e37c5ebc36f91192f591a0646 e7b8eda43a4e8f13325c44739eb58d662640e47f5e230f656fbe680fc0deb7a7
GET /css?family=Questrial HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 05:45:18 GMT
date: Thu, 18 Apr 2024 05:45:18 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Montserrat | 142.250.74.106 | 200 OK | 345 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Montserrat IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Size345 kB (345307 bytes) Hash8997d7943f111dd6b98c48fee0ccbd6e aeea499ddcee221b61ceccbd641c8f637292fa41 7edc36c572e689304312eaac948b32069dc1f6c40eea058a54e9ac8950da138b
GET /css?family=Montserrat HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 05:45:18 GMT
date: Thu, 18 Apr 2024 05:45:18 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css |  104.18.10.207 | 200 OK | 278 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css IP104.18.10.207:443
CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeASCII text, with very long lines (65325) Size278 kB (277624 bytes) Hash450fc463b8b1a349df717056fbb3e078 895125a4522a3b10ee7ada06ee6503587cbf95c5 2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d
GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://411medias.com
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:45:18 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"450fc463b8b1a349df717056fbb3e078"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/18/2024 12:51:41
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 1599f4aa3ba975882b840f43290391c5
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87625914bbc0b521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| use.fontawesome.com/releases/v5.9.0/css/all.css | 172.67.142.245 | 200 OK | 61 kB |
URL GET HTTP/2use.fontawesome.com/releases/v5.9.0/css/all.css IP172.67.142.245:443
CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeASCII text, with very long lines (55782) Hashdbf9d822cefe851ba6f66e1ad57e8987 2c43148f7df780e8b40a3ab09c770f03adbf11af 533143d96607d94d5d4292838e364aef656d3de58fe74368263776eab9c07542
GET /releases/v5.9.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://411medias.com
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=31556926
etag: W/"dbf9d822cefe851ba6f66e1ad57e8987"
last-modified: Fri, 22 Sep 2023 01:46:02 GMT
vary: Origin, Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mgvacBtzYx2WahxhIbaFBEU5dLD2%2BEQ1N%2B0UedC2OVmtWbZp0G5Vkj3TttcUopPgu4LuKLL73LwrhqfTW7ijHLBLrH1VImtLZkbJI4PkbNJtCBn8opIRIZiPzc9cUPfQ6dPsb%2Bil"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87625914bdc3712b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| app.five9.com/consoles/SocialWidget/five9-social-widget.css?_=1713419119300 | 198.105.200.32 | 302 | 0 B |
URL GET HTTP/1.1app.five9.com/consoles/SocialWidget/five9-social-widget.css?_=1713419119300 IP198.105.200.32:443
CertificateIssuerDigiCert Inc Subjectapp.five9.com Fingerprint37:50:D3:11:14:AD:95:64:0B:E7:BA:D9:EC:16:70:E5:E0:BF:C5:B5 ValidityWed, 26 Jul 2023 00:00:00 GMT - Wed, 14 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /consoles/SocialWidget/five9-social-widget.css?_=1713419119300 HTTP/1.1
Host: app.five9.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302
Location: /five9_clients/consoles_latest/SocialWidget/five9-social-widget.css?_=1713419119300
Content-Type: text/html
Content-Length: 0
Date: Thu, 18 Apr 2024 05:45:19 GMT
Set-Cookie: JSESSIONID=C4A0CD6EFBBB5E270933B98D7BF4C6D6; Path=/; HttpOnly
BIGipServer~VCC-WEB-INFRASTRUCTURE~defaultV10UIPool=!jPGNzdtbIL4xpo8a0E0MT7Dt8ou37eFuaVYO7xyhiMD0N1xeB+r0bsg/R+bxVbvXlo+fUy7iesgcjQ==; path=/; Httponly; Secure
TS01582219=018ee3e815b503b33d89bfac05c421f05ee57a7239ceefa3f611c3764996226751c3a76eeddf6aaea257381133f9af431e081a89082b3175c60d142c0ff32b021980269ff47455f7ec75858fb26df3ae91333dc8e3; Path=/; Secure; HttpOnly;
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
|
|
| app.five9.com/five9_clients/consoles_latest/SocialWidget/five9-social-widget.css?_=1713419119300 | 198.105.200.32 | 200 | 4.7 kB |
URL GET HTTP/1.1app.five9.com/five9_clients/consoles_latest/SocialWidget/five9-social-widget.css?_=1713419119300 IP198.105.200.32:443
CertificateIssuerDigiCert Inc Subjectapp.five9.com Fingerprint37:50:D3:11:14:AD:95:64:0B:E7:BA:D9:EC:16:70:E5:E0:BF:C5:B5 ValidityWed, 26 Jul 2023 00:00:00 GMT - Wed, 14 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (4699), with no line terminators Hash6c5391068240546bbedf8188cfb878a0 52e9861f788a24790a63a4a81e40495878e648aa 86815552a6ac093a94dde24b65658c956fd3d91415541dc467368fbc8ebd7e8a
GET /five9_clients/consoles_latest/SocialWidget/five9-social-widget.css?_=1713419119300 HTTP/1.1
Host: app.five9.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://411medias.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Accept-Ranges: bytes
ETag: W/"4699-1712059872000"
Last-Modified: Tue, 02 Apr 2024 12:11:12 GMT
Content-Type: text/css
Content-Length: 4699
Date: Thu, 18 Apr 2024 05:45:20 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
Set-Cookie: BIGipServer~VCC-WEB-INFRASTRUCTURE~defaultV10UIPool=!Cl4jV5ah2Fvtz38a0E0MT7Dt8ou37e7IzqlmiKTXt4l6K3roJjXLuzZ7iFU5xKhcFGK4px9oVvF0Mxw=; path=/; Httponly; Secure
TS01582219=018ee3e815116135121beb9c8cb56ac291e268df7089792cd009ab415dc8da79594649034a14b5f95412d9e54d01cdbc9b1561a27f82b12132d4c1dc87f4ea8c433e4dc953; Path=/; Secure; HttpOnly;
|
|
| app.five9.com/five9_clients/consoles_latest/SocialWidget/images/chat-small.png | 198.105.200.32 | 200 | 589 B |
URL GET HTTP/1.1app.five9.com/five9_clients/consoles_latest/SocialWidget/images/chat-small.png IP198.105.200.32:443
CertificateIssuerDigiCert Inc Subjectapp.five9.com Fingerprint37:50:D3:11:14:AD:95:64:0B:E7:BA:D9:EC:16:70:E5:E0:BF:C5:B5 ValidityWed, 26 Jul 2023 00:00:00 GMT - Wed, 14 Aug 2024 23:59:59 GMT
File typePNG image data, 76 x 76, 8-bit/color RGBA, non-interlaced Hash744afa0893ab886ca5faf1689d0938ef 255aaae6e2986e3b44b69297a61c14ab73b49ab9 2972dd804d7cf59ed7b67f73bec6d74b776774c8058d5f8e37a0e87e7ed07339
GET /five9_clients/consoles_latest/SocialWidget/images/chat-small.png HTTP/1.1
Host: app.five9.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.five9.com/five9_clients/consoles_latest/SocialWidget/five9-social-widget.css?_=1713419119300
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Accept-Ranges: bytes
ETag: W/"589-1712059872000"
Last-Modified: Tue, 02 Apr 2024 12:11:12 GMT
Content-Type: image/png
Content-Length: 589
Date: Thu, 18 Apr 2024 05:45:20 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
Set-Cookie: BIGipServer~VCC-WEB-INFRASTRUCTURE~defaultV10UIPool=!N1cTD/s5Ql7NNAka0E0MT7Dt8ou37VXHgvasXN5aPXM+Gc/HMgLI/8GJDtl1+GqqNR9M+q/zK69K9g==; path=/; Httponly; Secure
TS01582219=018ee3e8157302905e035083839e550d4f7856b956725e4d116f5764c161a2702299eed40f36689e0b93eae58a8b12a4fab0bbb19cb85d3dcacc9a7d091a65a7acf34da662; Path=/; Secure; HttpOnly;
|
|
| app.five9.com/five9_clients/consoles_latest/SocialWidget/images/external-link-32.png | 198.105.200.32 | 200 | 389 B |
URL GET HTTP/1.1app.five9.com/five9_clients/consoles_latest/SocialWidget/images/external-link-32.png IP198.105.200.32:443
CertificateIssuerDigiCert Inc Subjectapp.five9.com Fingerprint37:50:D3:11:14:AD:95:64:0B:E7:BA:D9:EC:16:70:E5:E0:BF:C5:B5 ValidityWed, 26 Jul 2023 00:00:00 GMT - Wed, 14 Aug 2024 23:59:59 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashdecc232eb8ff2ea293a8f4f47baef28c bec2c5b233c15a5d2a6075a80d059ee38f534034 a046fdd4444ac02d32b8c049847221419e8e5fb391d5a1b21b959d8d32caa82d
GET /five9_clients/consoles_latest/SocialWidget/images/external-link-32.png HTTP/1.1
Host: app.five9.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app.five9.com/five9_clients/consoles_latest/SocialWidget/five9-social-widget.css?_=1713419119300
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
Accept-Ranges: bytes
ETag: W/"389-1712059872000"
Last-Modified: Tue, 02 Apr 2024 12:11:12 GMT
Content-Type: image/png
Content-Length: 389
Date: Thu, 18 Apr 2024 05:45:20 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
Set-Cookie: BIGipServer~VCC-WEB-INFRASTRUCTURE~defaultV10UIPool=!yMu/meLQbx/XzxIa0E0MT7Dt8ou37dfhhTb/cD0NXzNiczkoouihrk8skiyW+SNGM3c+/1SrcFUAw6o=; path=/; Httponly; Secure
TS01582219=018ee3e815d3ddbfdb3530bc3ad6671c41b3e705403861348522abd894943ac49c1ea289076d6a2f03c8962eaea0a472a2e38c717ab0912614b9c081162e8968eda5ad64a9; Path=/; Secure; HttpOnly;
|
|
| fonts.googleapis.com/css?family=Arimo | 142.250.74.106 | 200 OK | 2.5 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Arimo IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (2603), with no line terminators Hashd14a80ae8195b41cc7c0d26c19d57868 94f75252c17745d16a35a634fbd44f8bfeb71670 fa793a4f75873c1fd3f538dee7e0eaa29eb1aa8695870656192c4fb574a4dc30
GET /css?family=Arimo HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 05:45:18 GMT
date: Thu, 18 Apr 2024 05:45:18 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/game-tomb-raider-anniversary-01.jpg | 188.114.97.1 | 200 OK | 50 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/game-tomb-raider-anniversary-01.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x360, components 3 Hash7de5d9feaea9e6e40572e47e9cbae47b 1d81eff277956c0bbd6410171ddce786a6f315f2 75b9487d0e6d4a9f6d116b94b6b94cc5f9d93b639e5e1b9067eff6300c296d22
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/game-tomb-raider-anniversary-01.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 50544
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-c570"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4fMmc%2B7l2Os0IGBnsCvsgkt%2BunVmPkeNhFP8QcAnOr%2B05RyTsPru98RfQhb6J74nc6QE2cBmAd%2FgLa%2FQGOBnIz3Pur9MWjgh9qXy8Vjn97Yo5otSU5QQGp9kajd%2Ba051"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917eb5a56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/game-governor-of-poker.jpg | 188.114.97.1 | 200 OK | 115 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/game-governor-of-poker.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 800x600, components 3 Size115 kB (114640 bytes) Hash35c96c9b9c3d12a344e180de50b47e29 a6d38fb3284ff8f05cadd2e66cbec2a22349a55a 2a702e22878f0f951e624ff96c7fc87be5611a8fd5f1a74d5ba50761f775bc56
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/game-governor-of-poker.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 114640
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-1bfd0"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WhQfoqpLnCaM2ujol3wnFEIgDIsdRpR%2BliTWpa1AsnStKRUEDTbZ5TVa2K2eDL3HdRjFV2qi7PFOGtdFbUKtAO7qFtCj1NuBOO6%2FiS2CHeut1DiPid%2F705uRUcpd63MT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917eb4456ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/movie-fetching-cody-02.jpg | 188.114.97.1 | 200 OK | 35 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/movie-fetching-cody-02.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 450x299, components 3 Hash5d7332fcb784dd10344139df5e9dfdfa 3b2260b5a090d3566cda74a8a526464b4d14e824 31e602343b30bf2d1122ea36c0e69a9a5c14cea7888b9649da15a02099e01760
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/movie-fetching-cody-02.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 35023
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-88cf"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=01kvBB90Y2c2ENBi2LjEEFmNMDc2bHA2KRQi5k3vyhMJMTMR0uRvLPL0TK2vNVlRiYBMeFQa2LcRPuV7ueZKDGzLK4NK%2FpXS04ofF7igosmayZOxdWv4zeuCGgFLNwip"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917eb5356ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/movie-the-evil-dead-02.jpg | 188.114.97.1 | 200 OK | 391 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/movie-the-evil-dead-02.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1000, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=791], baseline, precision 8, 774x592, components 3 Size391 kB (391425 bytes) Hashefae849c074debda2064731f212d0c66 34210c6490d5f7e963507e9311c7b2c8669f0eb5 9008ce49a6b2256dcdfb83653d1d0104156aaa1145de11e75ffafd96b45a4c27
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/movie-the-evil-dead-02.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 391425
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-5f901"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YXSPkpH4QIZqcACy88J3d4glOM5qdx9d27IFZyP4Gm1%2FXZlakPr5PMQjkh4cJR%2BGvJ16VwUY6isvBm7oMRb1f4Syjh8Mxf%2FDmIpWH30leuzxce3QrEJa0bCBChBb88ag"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917eb4f56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/bg/min/mc-pricetable.jpg | 188.114.97.1 | 200 OK | 49 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/bg/min/mc-pricetable.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x636, components 3 Hash40da5a281711a0c8cb2720c2c27ed6ec 36a8e71e84f67b59d5e0663d4756fd1a3d466375 62a6e4f72f7d43d1e31416bf85343964ac2e1cebf7eae0a6e47fc93daeee82ec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/bg/min/mc-pricetable.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 48640
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-be00"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kz4B2KtOkuNuT2NQgFAFx%2FRzOZtQQAfZn0edkmUmCmon64VcHiFa0HkI30kjO15KUDXFOHUsEOLxHC0V7p5Uy3uILLT9RGlw2qF4RQOdHmQXJhF38c975FHoXMSIrnbE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917fb7056ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/game-commandos-3-01.jpg | 188.114.97.1 | 200 OK | 335 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/game-commandos-3-01.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x800, components 3 Size335 kB (334641 bytes) Hash1c1c7eea1417d4456c1d153e3ed69e99 9c31097b0d8f30244f5bb56ca3e70b9d8c42fa3e 6f29629959e939bc6ebb86d480848a37552645d7b2d6f813ece393c1eddd2aef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/game-commandos-3-01.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 334641
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-51b31"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MRQxARJ1Gcxrq4%2FHidvpdmR%2FDatLNvcyzNUJj7oIditTb1lwdRzelwSye51Mld8T5nTlQeFWddtITw2cwyFe5IKhp8b3ns1uUUEVLpRjwuYdqIeG0hqQTMCw3hkD5y6o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917db3756ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/movie-a-star-is-born-01.jpg | 188.114.97.1 | 200 OK | 138 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/movie-a-star-is-born-01.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=800, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=599], baseline, precision 8, 599x612, components 3 Size138 kB (137495 bytes) Hash7ad404b68d282f26257dd269f7455e61 e6a784b0da98d756918e65db521f61b560c25b63 84b97e106838b3787a682f50c2b27a1ca77749143803d19c4f16e552f2a834c8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/movie-a-star-is-born-01.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 137495
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-21917"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ol4sENAJ8LvCfN5cBXgknvaoleNznGOaXjNkSg2cj0zGjGaSq%2BoVds0y8HmvOXdLaqMyRCXx07tXue%2BpkDAVJeY0axjLDRZ3JEH4hLziiRzAU3%2FxkS4%2BDKTTpIlI0XBe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917eb5256ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/js/chat/five9-social-widget.js | 188.114.97.1 | 200 OK | 76 kB |
URL GET HTTP/3411medias.com/js/chat/five9-social-widget.js IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJavaScript source, ASCII text Hashb9253f99843d9d9842bf80505cbed765 6dc87bd3ff73eb23e3ad6ae8b6cce1f8f802fbc7 97480138c4d63a547537f8bc3ae898de7a1db22887a7f134c6603e944a4531f6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/chat/five9-social-widget.js HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:18 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 17 Apr 2024 17:05:12 GMT
etag: W/"66200148-1294b"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hrQf7XSrOQDsfJgooxpWYj6LbDTEzV59hp%2F296ffEQFceed4tC9J2c2o2svr5717%2Ffaz60httQ5Keh%2FcTtsNRy9iEwo35UUvcm0Jx%2FaRUF1xM4%2Bw557%2FyJQcJA%2BCvy7y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 876259146e8856ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/game-syberia-2-01.jpg | 188.114.97.1 | 200 OK | 253 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/game-syberia-2-01.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1655x972, components 3 Size253 kB (252817 bytes) Hash03707872ef40988becb85cb1905980c9 0ec7450d5ba4095f4c1b88416e8f010592ec4adc 154622ce0c610891b15b20fbed72e3210157d1e238d8bbb6dfabae69d86dd7f7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/game-syberia-2-01.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 252817
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-3db91"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yi5O7kf1muwFgmQn5%2BPooUMzs61DmqoxBwLMbFrMNamDA89E078Pez9JT%2FZp56xVWzxwMZ4F%2B9P5kfSfJOjc1okZyB8qy4wT3P5WdGGCaZ%2FRvb0xzboZ87xrDFUz5j0L"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917fb6c56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/game-plants-vs-zombies.jpg | 188.114.97.1 | 200 OK | 282 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/game-plants-vs-zombies.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3 Size282 kB (281947 bytes) Hasha4970b7341a7e0088191c1bfc13507ea 147d363221c276780245c227dbbc681b2d881814 34a75c5dac8b48d0401a4c2b3a0f397edaa9bec6a6521fdc4e63876907236fd7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/game-plants-vs-zombies.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 281947
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-44d5b"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fCMsvqpZMLq2NRXfBbBdsVHaZN8bOR42FqOmMOnhcWiBaZ2rUKIkv2WUdHXTuwdlAATiS1ZPGsLKAeENWSXWsY66kRhTFS9e54Y%2BvCcS5Xmi%2FPlp8CEEqOFjU1QsuPxY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917fb6156ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/game-hitman-blood-money-01.jpg | 188.114.97.1 | 200 OK | 110 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/game-hitman-blood-money-01.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3 Size110 kB (110049 bytes) Hash771e273781a90e795e15b8f24811b92d 717075854ceaf2e51febac40559ae234e0930b48 a1f5251e2da89ab9f81e7fef0736e53fe850f74280bf6d2df49e4435322c1529
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/game-hitman-blood-money-01.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 110049
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-1ade1"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B%2FAZCMvo6y%2FWenO%2F8YoaV7DfLqJ74PD%2FyjGRPQh1x8W%2BxgbnNlnueLGei1Fo%2Bz59fjSLhF7jvgTSCfbgX74Le2nMc9KQJTDsFMZblbvEq5IpvLR0ppJBT0lIL4ATIutV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917eb4856ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/js/frontend/min/scripts.min.978e5ea3.js | 188.114.97.1 | 200 OK | 922 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/js/frontend/min/scripts.min.978e5ea3.js IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
Size922 kB (922419 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/js/frontend/min/scripts.min.978e5ea3.js HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:18 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: W/"66200146-e1333"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cKrDHs4XvXguz11XUnvcHz0e1QvQdUk0y3mOOSlsOVJ%2F%2F9D033kxQOf49M3JPoW3j%2B2SAAMGXIy12EsV005iq6zajXELTmocc43o9kn2HyMR25dx0GwHDkJJhLyVTeWu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 876259147e9556ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/game-neverwinter-nights01.jpg | 188.114.97.1 | 200 OK | 123 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/game-neverwinter-nights01.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 907x597, components 3 Size123 kB (122775 bytes) Hash0892b3fa290cbb0727e21f79c21bd83c 8c966d6bc761d2c7ae09fa28e944f7a1aafd0536 424dcaf89375a7613e10ee9bcf10a577fa59385edc57d9a2d5f5fea7c7c7fac4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/game-neverwinter-nights01.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 122775
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-1df97"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k7C50eQYL3EL9hF75d89Xos2EGgjELcnbcDqp8T2ABJef7YwGmDT04MklyYsjyMBEQZjNVNqFf3X%2B9uwKCWckhu6EKsHydxzhlBn0gGuie1tX9c2kXRif2EsaHO6dPlj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917eb5656ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/music-generic-image.jpg | 188.114.97.1 | 200 OK | 132 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/music-generic-image.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 2121x1414, components 3 Size132 kB (131700 bytes) Hash3cff4e891003b391aab63495ed851f47 d7702d5e868c5a5c19bc46e79f32d4ece20b323f 317a89997f0eed020f376bba83b2c93b62a80c1a34a214818f64f2702735d2f1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/music-generic-image.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 131700
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-20274"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vlT%2Bo9ujmpcQhKMAtkwRM1e%2FTst%2FwGnJtz12ug83WBQEuiTbLQ4SWEmj3GrKhRxaLd8eH5TIaeAAAY6wlj8SlH9iGkvUi%2FMl0b%2BR%2BCjoPwQctGi0KjdGcl0kF31UNvxm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917eb5856ba-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 411medias.com/theme/Master/FrontPage/img/contentimages/movie-at-war-with-the-army-02.jpg | 188.114.97.1 | 200 OK | 345 kB |
URL GET HTTP/3411medias.com/theme/Master/FrontPage/img/contentimages/movie-at-war-with-the-army-02.jpg IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subject411medias.com Fingerprint20:02:B7:A0:4E:47:E2:6D:A5:56:21:E2:D9:03:A4:FD:D5:0A:74:F4 ValiditySat, 09 Mar 2024 23:11:44 GMT - Fri, 07 Jun 2024 23:11:43 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3 Size345 kB (344776 bytes) Hashd4f2b23624177aadcfc290ef5eb58c36 0384b9cfca4524c8bcf27efa838d70a754a328b7 347040f15761909ddbd45796c1ab909b7e9ecf2298803959b7f91ef9017585da
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/Master/FrontPage/img/contentimages/movie-at-war-with-the-army-02.jpg HTTP/1.1
Host: 411medias.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://411medias.com/theme/Master/FrontPage/css/frontend/theme/mc-basic.c11d4b83.css
Cookie: CAKEPHP=9u5fhcvvh9p92s1u8o5r5h4s3d; CakeCookie[lang]=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:45:19 GMT
content-type: image/jpeg
content-length: 344776
last-modified: Wed, 17 Apr 2024 17:05:10 GMT
etag: "66200146-542c8"
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OVr80QELcsxZa%2B5ZBro0CMZ5%2BQdl1Uu3o7%2BzkvsoAN6mct2tr%2FQE6Fvyn6IAW7c2s1Bi552nlEGFKoWsr%2Bkrbe5k4BV7cfu1Xv8qofsQA2EyOZAxlcFErrI%2BYTd72%2Fga"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87625917fb6a56ba-OSL
alt-svc: h3=":443"; ma=86400
|
|