Report - thenakastore.com/zencortex

Report Overview

Submitted URL
thenakastore.com/zencortex
IP
162.215.221.200
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2024-04-26 23:40:03
Access
public
Website Title
Zencortex
Final URL
thenakastore.com/zencortex
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
50

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
thenakastore.com	unknown	unknown	No data	No data	480 B	25 kB	162.215.221.200
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-04-26	425 B	87 kB	142.250.74.168
zencortex24.com	unknown	2024-02-28	2024-03-08	2024-04-18	12 kB	710 kB	104.26.0.55
seal-boise.bbb.org	116015	1995-05-16	2015-07-24	2024-03-13	460 B	4.8 kB	68.70.204.1
prod.cbstatic.net	108120	2013-11-19	2018-07-06	2024-04-18	1.8 kB	68 kB	143.204.55.88
www.google.com	7	1997-09-15	2015-05-10	2024-03-23	1.9 kB	3.4 kB	142.250.74.164
www.google.no	25607	2001-02-26	2016-04-05	2024-04-25	1.0 kB	641 B	142.250.74.163
cbtb.clickbank.net	103233	1997-07-11	2015-11-12	2024-04-12	413 B	1.6 kB	52.36.23.7

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed
2024-04-26	medium	zencortex24.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	thenakastore.com/zencortex	15 B	2024-04-27	2024-04-27
Pretty URL thenakastore.com/zencortex IP 162.215.221.200 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-27 01:40:10 Last Seen2024-04-27 01:40:10 Times Seen1 Hash 7d8c285b359510def0f12e7ae6b7368a 3137931152eebc16c9b919b3534c0b1da5f49e31 f49722011c31745d1400281745bfed1c324a2087af769e3f5eae2214851364ae Loading...

	zencortex24.com/assets/js/script.min.js	22 kB	2024-04-27	2024-05-07
Pretty URL zencortex24.com/assets/js/script.min.js IP 104.26.0.55 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-27 01:40:10 Last Seen2024-05-07 01:52:31 Times Seen12 Hash 3a0dc250df1903da5562118612fcb29b 4aaa7c3d65595afe0260f8812a19654aab98a62f 3ce47503624237ea46c37e75c90a65e3dc0395a2491b0a7b3c7651a599055dc7 Loading...

	thenakastore.com/zencortex	146 B	2024-04-27	2024-04-27
Pretty URL thenakastore.com/zencortex IP 162.215.221.200 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-27 01:40:10 Last Seen2024-04-27 01:40:10 Times Seen1 Hash cdeff1501a889b056c48d48f63a7ba7f 90928eaee45e800d3ca7e170f536c51a2dce87a1 07d51265c6df9625107c0fc6550c7113c1c7238cb12ae535f00763db1cdc6b93 Loading...

	thenakastore.com/zencortex	82 B	2024-04-27	2024-04-27
Pretty URL thenakastore.com/zencortex IP 162.215.221.200 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-27 01:40:10 Last Seen2024-04-27 01:40:10 Times Seen1 Hash 255272c1a71972343d797f9895adcf47 696b7d1fa5ab96ecddff1fe44ab6974478a67312 6b47d399e2a03c69253bcbdd9ec82c9f46e32369355ba91e610c34df11dca14d Loading...

	cbtb.clickbank.net/?vendor=zencortex	934 B	2023-03-07	2024-05-04
Pretty URL cbtb.clickbank.net/?vendor=zencortex IP 52.36.23.7 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:05:35 Last Seen2024-05-04 16:30:25 Times Seen616 Hash 749c0fb0f006f7d4ddcd76fba550e264 940476750ad5d0f7858cce3470a3534be850f98a bc4f846a058e02aa5fd315d0c535a227636ca4a74ed38a5a84d4d5e675ffec72 Loading...

	www.googletagmanager.com/gtag/js?id=AW-16472154831	249 kB	2024-04-27	2024-04-27
Pretty URL www.googletagmanager.com/gtag/js?id=AW-16472154831 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-27 01:40:10 Last Seen2024-04-27 01:40:11 Times Seen2 Hash ff6ca3463d387239dc57db93cdc38aca 7afc4b2720eb62e3592bf812afc0307268283d86 8af5c6c63bce68ca5d8fe335dfcd3ecdf8de1fb9ff2a3a7ff1c64001dda44e08 Loading...

	prod.cbstatic.net/dist/injectable.js	191 kB	2023-03-07	2024-05-04
Pretty URL prod.cbstatic.net/dist/injectable.js IP 143.204.55.88 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:17:28 Last Seen2024-05-04 16:30:22 Times Seen906 Hash af651c30e1a69f6f2124e9c1d094a300 4328efe60a0ca51ab455d67ef6b257998cb1cdee f752e24e380963973c86376422b0618658de851a8b2011c69e394b787a1c593f Loading...

	www.google.com/pagead/1p-conversion/16472154831/?random=1714174779644&cv=11&fst=1714174779644&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fthenakastore.com%2Fzencortex&label=ky5XCMG1oqoZEM_FxK49&hn=www.google.com&frm=0&tiba=Zencortex&gtm_ee=1&npa=1&pscdl=noapi&auid=632923545.1714174780&ec_mode=a&fdr=SA&data=event%3Dconversion&em=tv.1&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4	2.6 kB	2024-04-27	2024-04-27
Pretty URL www.google.com/pagead/1p-conversion/16472154831/?random=1714174779644&cv=11&fst=1714174779644&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fthenakastore.com%2Fzencortex&label=ky5XCMG1oqoZEM_FxK49&hn=www.google.com&frm=0&tiba=Zencortex&gtm_ee=1&npa=1&pscdl=noapi&auid=632923545.1714174780&ec_mode=a&fdr=SA&data=event%3Dconversion&em=tv.1&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 IP 142.250.74.164 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-27 01:40:11 Last Seen2024-04-27 01:40:11 Times Seen2 Hash d96903c1f2ace97b85bcc9032207d4d5 bf27d9d90ce9a602ce3ca388b15eca87d633d7cf dd11b792bf330307a9fa21a087d3feb9d4dbef18d6c12e77c19caba39866b0c6 Loading...

	thenakastore.com/zencortex	3.7 kB	2023-03-07	2024-04-27
Pretty URL thenakastore.com/zencortex IP 162.215.221.200 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 18:22:13 Last Seen2024-04-27 01:40:11 Times Seen2 Hash fa7eb8483f5381ff95846560401d33b3 94b9b24589c1245f5261fce45f1ed03301af772e 27f57a6c59bb797969ffc63c7d4580f9e645cb285885faf542a101dd9d436226 Loading...

	zencortex24.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	1.2 kB	2023-03-07	2024-05-07
Pretty URL zencortex24.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 104.26.0.55 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-07 18:43:02 Times Seen56175 Hash 9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8 Loading...

HTTP Transactions (36)

URL IP Response Size

thenakastore.com/zencortex

162.215.221.200

200 OK

24 kB

URL User Request GET HTTP/1.1
thenakastore.com/zencortex
IP
162.215.221.200:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuercPanel, Inc.
Subjectthenakastore.com
FingerprintC8:AA:BF:58:07:47:95:0F:F1:FF:A2:0D:1C:24:A6:F4:B4:26:A3:61
ValidityTue, 23 Apr 2024 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1036), with CRLF, LF line terminators
Size
24 kB (24332 bytes)
Hash
947f2fde7b4d9180145fef688e59823f
c3a8cfebaa5ad2aca283d5fec05012f26db55058
731482386704257a0f52ca40749aab2e12a7f3a2a2a24e28211b2925e3531f7c

HTTP Headers

GET /zencortex HTTP/1.1
Host: thenakastore.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 26 Apr 2024 23:39:37 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=26d2eed75bfa11be0d7078f6a2ba13bc; path=/
afz-id-us=OTEuOTAuNDIuMTU0TW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo5Ni4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94Lzk2LjBuS3BFWVVzOHJSVzk%3D; expires=Tue, 25-Jun-2024 23:39:37 GMT; Max-Age=5184000; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

www.googletagmanager.com/gtag/js?id=AW-16472154831

142.250.74.168

200 OK

86 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=AW-16472154831
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52
ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT

File type
JavaScript source, ASCII text, with very long lines (4179)
Size
86 kB (86471 bytes)
Hash
ff6ca3463d387239dc57db93cdc38aca
7afc4b2720eb62e3592bf812afc0307268283d86
8af5c6c63bce68ca5d8fe335dfcd3ecdf8de1fb9ff2a3a7ff1c64001dda44e08

HTTP Headers

GET /gtag/js?id=AW-16472154831 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 23:39:38 GMT
expires: Fri, 26 Apr 2024 23:39:38 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 22:19:40 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86471
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

zencortex24.com/assets/img/label-mobile.webp

104.26.0.55

200 OK

47 kB

URL GET HTTP/2
zencortex24.com/assets/img/label-mobile.webp
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
RIFF (little-endian) data, Web/P image
Size
47 kB (46614 bytes)
Hash
b51e2b9bcdd81f3df802a7c1971f743b
1990f3ed8d2b0f447ad0f5c599ecdbfb7cae2ddd
881ffd63cbe52fb1eca0937bf3297bddf41834b4bd1014aaee290da689e05bb5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/label-mobile.webp HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:38 GMT
content-type: image/webp
content-length: 46614
last-modified: Fri, 22 Mar 2024 18:59:42 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6863
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mtF6XW%2F2bg7hfBGSDjSj1puX2CYfBDP9EpNk%2Bi9%2FCeXexD5U0SyMxM%2BeFdnAtXuC9cxs0rDArQBHFxDG35nH1nm5i55cNl5yKmdAMY90OL2N2yTLHRwOSXICNaD3z5n6mQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69cffa705694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/css/style.css

104.26.0.55

200 OK

103 kB

URL GET HTTP/2
zencortex24.com/assets/css/style.css
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
Unicode text, UTF-8 text, with very long lines (45152)
Size
103 kB (102570 bytes)
Hash
07d0f9244a2fcb3d6139882e54a1ff8b
82c012c1c8c4f1e839b320be0e0efdbb90d44742
06377c8811d728743b9aac75a6eb545a509796b3d4a4cd4d0ef3f3d5bce6f04b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/style.css HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:38 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=45312
last-modified: Wed, 27 Mar 2024 19:55:35 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6864
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kdhL9WFIeXaAgjfjg8wbm6SYw1%2FGNtWP%2BFIz7rULWKhoCV%2F65Vs89wezwbyYAyQC4I%2BXhYDblZzXppOMutBRDYc1iM%2F2gqyXQA0wC8Vk7TBbBzOugVm8udBlPrSoUF87rQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69cef9f05694-OSL
content-encoding: br
X-Firefox-Spdy: h2

zencortex24.com/assets/img/guarantee_badge.webp

104.26.0.55

200 OK

24 kB

URL GET HTTP/2
zencortex24.com/assets/img/guarantee_badge.webp
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
RIFF (little-endian) data, Web/P image
Size
24 kB (23618 bytes)
Hash
bdb237640eee1b53b5df3b5f2325eb56
fc508e8f85d9be5c78675e4e54f6604f6d419bd6
d523cae146ffc49707c56ddb3be9915905b8e0d67ef3d8358f448e74fb002311

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/guarantee_badge.webp HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:38 GMT
content-type: image/webp
content-length: 23618
last-modified: Fri, 15 Mar 2024 16:56:39 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6863
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tWXHw6uyFWcFaxh1zN%2FK4EdDthE6Wvnbkm1Kob7fmOFXKmGqPdsI%2FTt%2BvMQeygCrU0ApjeiCuMyollG6nzbO5Ok0dHnAbfrJnz9CDyXCXHSleVRTUtorwzTBFUag2W7o6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69cffa725694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/img/book1.jpg

104.26.0.55

200 OK

26 kB

URL GET HTTP/2
zencortex24.com/assets/img/book1.jpg
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3
Size
26 kB (25536 bytes)
Hash
9a8e094299c3813b2e68d06599cf71fb
b50acaa514d7e4573bbc6a0b85dd65535fe15937
08ba49367d27536033f2ece0416e39d73305f0540f934812e7dbb0b4912fd006

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/book1.jpg HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: image/jpeg
content-length: 25536
cf-bgj: imgq:100,h2pri
cf-polished: origSize=25544
last-modified: Fri, 15 Mar 2024 16:56:39 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5958
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9HVVgYIRj1%2BUzlRVbsri60u%2BtbqN1sfC2Lra1Ilss73EUjz%2BCmMFNaj8DHFsa07k1DnWwKQH4a9sWZw5rYzzGfvZAOVrYU4QYUTCm%2BtG0MKkNA2uMsfSu8sxlrwin0eT6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d42cc35694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/img/book2.jpg

104.26.0.55

200 OK

31 kB

URL GET HTTP/2
zencortex24.com/assets/img/book2.jpg
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3
Size
31 kB (30556 bytes)
Hash
b8e0cefb1f23a418cda25808d238fa8f
292dbe8b60fe612dbd3a5271ed53a480c41321f8
3b9aca18e62497fdb75de5d9e34cc0c076c0fca72b86b8d117b624623d1c8b7f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/book2.jpg HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: image/jpeg
content-length: 30556
cf-bgj: imgq:100,h2pri
cf-polished: origSize=30564
last-modified: Fri, 15 Mar 2024 16:56:39 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5952
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R%2BNjMt%2B2ZzegcgxMmvsq9bpgE3VUZi8GXXUQTuZD73r06gTN67%2BWtN3v5RrAsk6xpYQNRQ0P9pWTtRBQJ0%2B5g0v3IcfmxSKxRymoYssa78OBpE15q0Tna0SPWx4d45nLJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d43cc55694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/fonts/montserrat-regular.woff2

104.26.0.55

200 OK

26 kB

URL GET HTTP/2
zencortex24.com/assets/fonts/montserrat-regular.woff2
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
Web Open Font Format (Version 2), TrueType, length 26328, version 1.0
Size
26 kB (26328 bytes)
Hash
72058bfb72eaf7504b398e4ca2b05895
71821c6f249ee922f4514ab36dac58983a002d7c
6f3576aa68b5d0445e9b850602bad8dea8062b1b85a198fddddcfe89061712a3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/fonts/montserrat-regular.woff2 HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://thenakastore.com
DNT: 1
Connection: keep-alive
Referer: https://zencortex24.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: font/woff2
content-length: 26328
last-modified: Wed, 13 Mar 2024 14:09:19 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XFJ0eEiefzkhWQngaM77yVuf9WRZodBErLnzmNyZHDkP%2FoGjW4DX8CvNnve9L6i9E%2BwG635iR08WVCULxO9wLvc9wYI0noE2BRHk5WrXiWaPnvRuLuWQtgysHq69Q3a6EQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d3cc7b5694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/fonts/Lato-Bold.woff2

104.26.0.55

200 OK

28 kB

URL GET HTTP/2
zencortex24.com/assets/fonts/Lato-Bold.woff2
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
Web Open Font Format (Version 2), TrueType, length 27804, version 1.0
Size
28 kB (27804 bytes)
Hash
25583230b7fa52a5aa215dedae394a2c
21d9ddc37e617c89939c7a2ccb96fc70912d4865
cf18327c8145000edb04816441d02b3833f3c020de202316abea17185dd2c85b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/fonts/Lato-Bold.woff2 HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://thenakastore.com
DNT: 1
Connection: keep-alive
Referer: https://zencortex24.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: font/woff2
content-length: 27804
last-modified: Wed, 13 Mar 2024 14:09:19 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lNCOc0d4kv1puNllFvIOdrHSw6SygPsVo95cydA6p0%2BKQDXyHLQokC5I2oWC18LDGLYMdjJSYhOGiUHPdcekWtgEAXKu58wmkMIFI4MGqvo63W7OexQBCJNU0vZZxf3SWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d3dc7f5694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/fonts/montserrat-bold.woff2

104.26.0.55

200 OK

18 kB

URL GET HTTP/2
zencortex24.com/assets/fonts/montserrat-bold.woff2
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18504, version 1.0
Size
18 kB (18504 bytes)
Hash
43f103f40ed98287dbe7a0e877755a5f
844081e8a59425e997c25c44f9d332827a89a65d
354b60e2a83b68504df40fba597647ab0f36a6c1a980460cfeccc65165ad3ba2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/fonts/montserrat-bold.woff2 HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://thenakastore.com
DNT: 1
Connection: keep-alive
Referer: https://zencortex24.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: font/woff2
content-length: 18504
last-modified: Wed, 13 Mar 2024 14:09:19 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uWgzuSaPYme9WjhFrCB6GxoXtQ%2BG0L9EkxDb%2FGyD7ZDOHVz0pEsjFD5K1PSnOLGR%2FpvThE9Fy7UheAEaSqleWfGkJA%2B%2F6Dx2RzGizPywsMKL4wwQVGuYDCews82noKAZuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d3dc825694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/img/i-greenTea.jpg

104.26.0.55

200 OK

15 kB

URL GET HTTP/2
zencortex24.com/assets/img/i-greenTea.jpg
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Size
15 kB (14555 bytes)
Hash
bebee3de5786f8795f1e59c6c25950b0
81e2b5f827bbbbaf70d82e28592ace548e567866
1b92fcaae7671e9f9f3df8741db6e5f897c889bffaf8e69e314b2bf66a919914

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/i-greenTea.jpg HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: image/jpeg
content-length: 14555
cf-bgj: imgq:100,h2pri
cf-polished: origSize=14563
last-modified: Fri, 15 Mar 2024 16:56:39 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fH%2Br0%2BINgaVrte5J%2FMNuT%2F9CIJWXL3%2BZrFYu0%2BTGqd%2FAqr9ebgPiOBC%2B%2F%2FjtBLBSkRZy3crjoZ0MuadHM0VW42tyKLoJNSk5o0Il17WsyCVrxgzYyGi1QQ7L8RpPXumGYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d41cb65694-OSL
X-Firefox-Spdy: h2

zencortex24.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js

104.26.0.55

200 OK

8.7 kB

URL GET HTTP/2
zencortex24.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
gzip compressed data, from Unix
Size
8.7 kB (8701 bytes)
Hash
61c138a1e0635e0084fa9940b42e8c37
85500f801c242cf97442a660fe5a0213fe3d5d9a
6e810e918c9c2c620120017e347c2ac09af90858812d43a70cbd1cf8e3c3c90f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:38 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 20:54:07 GMT
etag: W/"6622d9ef-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SjQHP4%2BpPS9oudst5%2FRA%2FfYcIYLZvweFxMCo0w56%2FyI8kkcGcdET0rL9rHjWC8ubugifG5zyZiZShdPvYaNLbL%2Fu%2BR%2B6BzWVqB8p4pvZ4ON72i3UEVzVGUy48QSdwouPfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69cffa745694-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sun, 28 Apr 2024 23:39:38 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2

zencortex24.com/assets/img/i-astagalus.jpg

104.26.0.55

200 OK

8.5 kB

URL GET HTTP/2
zencortex24.com/assets/img/i-astagalus.jpg
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
JPEG image data, progressive, precision 8, 200x200, components 3
Size
8.5 kB (8526 bytes)
Hash
aee7be40fd92d20849e54307e13c25a2
cc4ff5b66faf3e427987745463566a6f3d6ce318
69b47f402ee5dda95762855a8b7f42adc1e7f4f8aa9bdfa8357e4a70eb46ce88

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/i-astagalus.jpg HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: image/jpeg
content-length: 8526
cf-bgj: imgq:100,h2pri
cf-polished: origSize=9663
last-modified: Wed, 13 Mar 2024 14:09:19 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NSz55FbBRHXFjMfIHQK%2BdjmcC6Qaoz8oENyYFMpi%2B4H0zuj2Mv8Y1JxWv6xEpk3j1TepKbo6b3C6yEqsARWVJO88MP347UG4BJApscUp3UM6SAFQcSBK0GMh8JiyLTDPEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d42cbd5694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/img/i-ginseng-root.jpg

104.26.0.55

200 OK

6.5 kB

URL GET HTTP/2
zencortex24.com/assets/img/i-ginseng-root.jpg
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
JPEG image data, progressive, precision 8, 200x200, components 3
Size
6.5 kB (6527 bytes)
Hash
ace4ad25cd5f40c1f9e293383faf016e
fe791ebacebc5e14db1a1d5eb811370099e56e58
127ad1515cbccd13ca517860b15909da0649251ea088611f4fc690b15e154d6c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/i-ginseng-root.jpg HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: image/jpeg
content-length: 6527
cf-bgj: imgq:100,h2pri
cf-polished: origSize=7482
last-modified: Wed, 13 Mar 2024 14:09:19 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7A5Jy0sIkDUEI1wi5doW%2FNuhbnIoErhc2k4tZxoit0L%2Bh6C5e21vHwCBqLVuRXxRWry92CE4gTzCrWGuJ88dQKOlz7v0ScRXS3hVdO8jh0lJk1l2sNOX%2Bt7W2ue0R%2B%2BINQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d42cba5694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/img/i-gymnema.jpg

104.26.0.55

200 OK

6.7 kB

URL GET HTTP/2
zencortex24.com/assets/img/i-gymnema.jpg
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
JPEG image data, progressive, precision 8, 200x200, components 3
Size
6.7 kB (6729 bytes)
Hash
b87a9e304ee0e057f13f0c420d16c64b
de46aa7c1308b9eab69bf122f1856369e9b4b57e
1c01086e390f8debb8910a27288c3646b9fce3529018fb771c6ef3af238ab52b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/i-gymnema.jpg HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: image/jpeg
content-length: 6729
cf-bgj: imgq:100,h2pri
cf-polished: status=not_needed
last-modified: Wed, 13 Mar 2024 14:09:19 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K9qq%2FSPnsS53IM7oKfzEC1PhzW0MmuAnLd1HFmC81%2BJu5%2BsYNXvlOQ7doG4tlu%2FQWPLnnV6Ayf7zYs%2FyAEknC8Fmq6k2mYz3kqYCZZft2AzrIJp55ePK%2Brmz%2BqZhKsu8Lw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d41cb85694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/img/bottle-label.webp

104.26.0.55

200 OK

17 kB

URL GET HTTP/2
zencortex24.com/assets/img/bottle-label.webp
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 550x550, Scaling: [none]x[none], YUV color, decoders should clamp
Size
17 kB (17144 bytes)
Hash
0343060bbc2c23ed2397e11cf42b6364
841d2e9ece1ff6fc2b0ff50fa0bdde09028d8e5c
91dd29073d716138be61c80c4b8d6b629d241ed6ed78825a1d220697946c46ac

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/bottle-label.webp HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: image/webp
content-length: 17144
last-modified: Fri, 22 Mar 2024 18:59:42 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7am%2BGWtw9pHaVnXVwztkHd5nrWL%2BFTkN%2Fpt5%2B6KmCisGzU8yrGoNiduh8eVh1G000qNM%2BKIAJA0uDxMBTl61Xu6YnCuu5%2BFWRz2boCoJaFGWN52zEBrv%2FOjgWK1wQbkYog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d43cc65694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/img/product-image.webp

104.26.0.55

200 OK

81 kB

URL GET HTTP/2
zencortex24.com/assets/img/product-image.webp
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
RIFF (little-endian) data, Web/P image
Size
81 kB (80968 bytes)
Hash
cc0ac0807ce6cca620266181f612e2fa
01520e70e1c2da1f1790e93f6d5a419941c1dc3b
bce1d03c8215fb66cec7cc7f8ffe2209beceeb1181652346339d1d2983121e42

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/product-image.webp HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: image/webp
content-length: 80968
last-modified: Fri, 22 Mar 2024 18:59:42 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BbbxWY%2BVZHHY8Ys3XAMpHsumc5tViwg3k8Gqru2Ke0SUYjwpI5F4Yg9tVx%2BtW22nsJ0G1G09bjiDxJkEzb3%2FBy3wX7XvoQEaNncCZ33mrZ7TqoSXG1LI6sLzui1FEW1tgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d42cc25694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/fonts/montserrat-regular.woff

104.26.0.55

200 OK

34 kB

URL GET HTTP/2
zencortex24.com/assets/fonts/montserrat-regular.woff
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
Web Open Font Format, TrueType, length 34156, version 1.0
Size
34 kB (34156 bytes)
Hash
8a5e70ea7eda4b213fc182db090b6568
eaae1792f888e2e5c4d32abb7c3e1ac1fa17236c
d65ce20fda875436d674bc561ccaa022c9bf151d2ff31204f03c4665cf552f1a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/fonts/montserrat-regular.woff HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://thenakastore.com
DNT: 1
Connection: keep-alive
Referer: https://zencortex24.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: font/woff
content-length: 34156
last-modified: Wed, 13 Mar 2024 14:09:19 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TNpvNErsVbK9HHLk5sMmVR%2BRtjFT0DgU%2F8153UGk3sMej92n0tI2M0MKqqHPWFEZhbUqJWTaHNzJYFo7DBCFVn1prbqbm6NjJ71nEL6VR8y0xv%2FvqnfIYevvj7OSXY2z4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d52d475694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/fonts/Lato-Bold.woff

104.26.0.55

200 OK

36 kB

URL GET HTTP/2
zencortex24.com/assets/fonts/Lato-Bold.woff
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
Web Open Font Format, TrueType, length 35572, version 1.1
Size
36 kB (35572 bytes)
Hash
e458e72141ff6903dc6997cb91303f56
5499858726354aca68f5fddd565b452e2d132e84
b546c90805dbd9925cc8a57de99c86a4f4ff3a2fb72f11fb30fa8152ee0297a4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/fonts/Lato-Bold.woff HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://thenakastore.com
DNT: 1
Connection: keep-alive
Referer: https://zencortex24.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: font/woff
content-length: 35572
last-modified: Wed, 13 Mar 2024 14:09:19 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MuE91fg%2BSLCnAkB3l8y6mMqKo96dh9%2FxdyzuVweIx8SyEAl%2FkZR%2F8GpCxEBYFnBT3OGxt%2BKX1qI5MQeU2PllF8tUkxBmWUj3tgbbDq430Lp3rbqaLsHIeVwsZyBTVCo5Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d53d4c5694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/fonts/montserrat-bold.woff

104.26.0.55

200 OK

35 kB

URL GET HTTP/2
zencortex24.com/assets/fonts/montserrat-bold.woff
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
Web Open Font Format, TrueType, length 34800, version 1.0
Size
35 kB (34800 bytes)
Hash
37d31e173d101e201f9ee0c483867945
b4758572423f727ea6d95ee66cba2e8a2c35e761
44b354b3fdca3cc84a69f12a0cffb652fb0f9612bae4359eff70de38093558b6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/fonts/montserrat-bold.woff HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://thenakastore.com
DNT: 1
Connection: keep-alive
Referer: https://zencortex24.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: font/woff
content-length: 34800
last-modified: Wed, 13 Mar 2024 14:09:19 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J3lG3s%2FEjYS01N7Y2uFx6qe%2BidtWxgOFQeUN6bmGdhsZZBoWd7yYvnJ0SqsBXVskoU%2Brg6%2BT3kaFAFvEGxdcAksEYhIV%2BM1X8XWwaI1%2BdmpgALwYvAm%2FmF4Zai0VBeeN0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d53d5d5694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/img/search-icon.svg

104.26.0.55

200 OK

9.9 kB

URL GET HTTP/2
zencortex24.com/assets/img/search-icon.svg
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
SVG Scalable Vector Graphics image
Size
9.9 kB (9882 bytes)
Hash
c20a7a6afb0e1ff538dec7f63676e188
c394157771497e18a8a1ffc2f8c5afb1da7671c0
12c9148dcda790ad88cb8405e36e178017a1ffdb081c15738a757076b5b0e77c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/search-icon.svg HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:38 GMT
content-type: image/svg+xml
last-modified: Wed, 13 Mar 2024 14:09:19 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6863
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LxT8%2FVE20zt7Wet3i8y11sKZhC7fvznc%2FXjqEqAhDrqlOHRbYd8ArXAZzmgE2vHlFm%2FcUAHe7WgrEwkSzzZUAFsZBE5JBN%2Fj5zMSb8UAvgohmzXV2byx%2BibTl65nKMyelQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69cfea6a5694-OSL
content-encoding: br
X-Firefox-Spdy: h2

seal-boise.bbb.org/seals/blue-seal-153-100-clickbank-5004291.png

68.70.204.1

200 OK

4.4 kB

URL GET HTTP/2
seal-boise.bbb.org/seals/blue-seal-153-100-clickbank-5004291.png
IP
68.70.204.1:443
ASN
#44239 proinity GmbH

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerDigiCert Inc
Subject*.bbb.org
Fingerprint53:C9:A6:EB:96:50:F7:DF:29:44:1C:9A:A1:DC:AB:75:F4:B9:7D:AB
ValidityThu, 04 Apr 2024 00:00:00 GMT - Fri, 25 Apr 2025 23:59:59 GMT

File type
PNG image data, 153 x 100, 8-bit/color RGBA, non-interlaced
Size
4.4 kB (4366 bytes)
Hash
e1dce99329ed94682412e0940529a283
f61584c7c5df0bd97dc5a8241e9d4290898d088b
1b3fc3c1f0ffb3edd8338c9005907ae74ab92f9e96ce69cea317418dc66feaa4

HTTP Headers

GET /seals/blue-seal-153-100-clickbank-5004291.png HTTP/1.1
Host: seal-boise.bbb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: keycdn
date: Fri, 26 Apr 2024 23:39:40 GMT
content-type: image/png
content-length: 4366
cache-control: max-age=14400
expires: Sat, 27 Apr 2024 03:39:40 GMT
last-modified: Tue, 09 Apr 2024 05:14:34 GMT
x-aspnet-version: 4.0.30319
x-robots-tag: noindex
x-powered-by: ASP.NET
x-cache: HIT
x-shield: active
x-edge-location: defr
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

prod.cbstatic.net/dist/assets/logo-header-two-tone-en.png

143.204.55.88

200 OK

3.5 kB

URL GET HTTP/2
prod.cbstatic.net/dist/assets/logo-header-two-tone-en.png
IP
143.204.55.88:443
ASN
#16509 AMAZON-02

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerAmazon
Subject*.cbstatic.net
FingerprintF8:81:4B:D2:24:61:E4:3E:E9:83:B4:81:64:D4:F0:F7:E4:96:CA:B2
ValidityWed, 19 Jul 2023 00:00:00 GMT - Fri, 16 Aug 2024 23:59:59 GMT

File type
PNG image data, 472 x 30, 8-bit/color RGBA, non-interlaced
Size
3.5 kB (3472 bytes)
Hash
47cdefc96f75be3d978d4b444737b00e
c9d8540c17ed48b72be610bb5795120e4d560d6f
84986c117f6f9418eff2f7ce5e55940671f178542c58092c05ef539ebd4da308

HTTP Headers

GET /dist/assets/logo-header-two-tone-en.png HTTP/1.1
Host: prod.cbstatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 3472
date: Fri, 26 Apr 2024 23:39:41 GMT
last-modified: Mon, 21 Dec 2020 21:57:35 GMT
x-amz-version-id: rgVoO.sKTwEpJN65bYI.UT4E8UVMZSpC
etag: "47cdefc96f75be3d978d4b444737b00e"
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: M7KYs8-2onI3P15hN6WGnqbO7RnEh0ZfWh9g9lf8eTrLUL9QhHPlbA==
X-Firefox-Spdy: h2

prod.cbstatic.net/dist/assets/logo-tab-two-tone-en.png

143.204.55.88

200 OK

4.3 kB

URL GET HTTP/2
prod.cbstatic.net/dist/assets/logo-tab-two-tone-en.png
IP
143.204.55.88:443
ASN
#16509 AMAZON-02

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerAmazon
Subject*.cbstatic.net
FingerprintF8:81:4B:D2:24:61:E4:3E:E9:83:B4:81:64:D4:F0:F7:E4:96:CA:B2
ValidityWed, 19 Jul 2023 00:00:00 GMT - Fri, 16 Aug 2024 23:59:59 GMT

File type
PNG image data, 321 x 63, 8-bit/color RGBA, non-interlaced
Size
4.3 kB (4341 bytes)
Hash
c06ae1ecaaf7e0610c68af117658a7e0
337cc86d38734fd76333c063366ec36e7a7d343a
2f4d0823359307bdc2fbcc62d1004b361b02cc8ae5d6cb75f314658827ee1eeb

HTTP Headers

GET /dist/assets/logo-tab-two-tone-en.png HTTP/1.1
Host: prod.cbstatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 4341
date: Fri, 26 Apr 2024 23:39:41 GMT
last-modified: Mon, 21 Dec 2020 21:57:36 GMT
x-amz-version-id: 65GBUS1AcRJNN3GRB3Nf3yY51OsdERt0
etag: "c06ae1ecaaf7e0610c68af117658a7e0"
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: D8qyJgiFPwstB7hQT4mcaStdRJPNeRci0tP4AqbjIgzxcc4a7MEe5A==
X-Firefox-Spdy: h2

prod.cbstatic.net/dist/i18n/app-strings-en.json

143.204.55.88

200 OK

9 B

URL GET HTTP/2
prod.cbstatic.net/dist/i18n/app-strings-en.json
IP
143.204.55.88:443
ASN
#16509 AMAZON-02

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerAmazon
Subject*.cbstatic.net
FingerprintF8:81:4B:D2:24:61:E4:3E:E9:83:B4:81:64:D4:F0:F7:E4:96:CA:B2
ValidityWed, 19 Jul 2023 00:00:00 GMT - Fri, 16 Aug 2024 23:59:59 GMT

File type
JSON text data
Size
9 B (9 bytes)
Hash
cdfca8b09e61ae7324e48f01984c9b34
874b413675711909229ca228efea613383d6a9a4
00c89e0cd4c41144418e06885bb87e962fdb17567bf55adccb1678a1f6beca4c

HTTP Headers

GET /dist/i18n/app-strings-en.json HTTP/1.1
Host: prod.cbstatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://thenakastore.com
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/json
content-length: 9
date: Fri, 26 Apr 2024 23:39:41 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 21 Dec 2020 21:57:36 GMT
x-amz-version-id: ZlnvsWVay.azLO76UGrGFfzKmZRJT9PH
etag: "cdfca8b09e61ae7324e48f01984c9b34"
server: AmazonS3
vary: Origin
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hpsANa1IJ89yLr2-XCS1iKtJmks8ZZi8pD1wTy_DhZ9yZYwupSjygw==
X-Firefox-Spdy: h2

zencortex24.com/apple-touch-icon-180x180.png

104.26.0.55

200 OK

1.2 kB

URL GET HTTP/2
zencortex24.com/apple-touch-icon-180x180.png
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
RIFF (little-endian) data, Web/P image
Size
1.2 kB (1168 bytes)
Hash
ef1d08cb47f3076b43b0e03f25db44e8
c19919f3716f0f7514d8e8cbd8212dfed56341cf
be2a1e7b00d53090946990cb2a7d9c13f32fad8a18b407accce3cc1313db0d38

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /apple-touch-icon-180x180.png HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:40 GMT
content-type: image/webp
content-length: 1168
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3251
content-disposition: inline; filename="apple-touch-icon-180x180.webp"
last-modified: Thu, 04 Apr 2024 19:29:00 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
age: 4205
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4oPcEE%2B1%2Bs31tPAWYAbn04LvN6dFg8ApPvxzJe9Ofe6vBQxFn8TvYQOFeuULpUDvE%2BcaAtqZLEXAfaElLJluYw%2BDvX%2FR2QcvCMDYy4OgV5po4P4MKjAaQgudd0flAWLuYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87aa69d88f4b5694-OSL
X-Firefox-Spdy: h2

www.google.com/pagead/1p-conversion/16472154831/?random=1714174779644&cv=11&fst=1714174779644&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fthenakastore.com%2Fzencortex&label=ky5XCMG1oqoZEM_FxK49&hn=www.google.com&frm=0&tiba=Zencortex&gtm_ee=1&npa=1&pscdl=noapi&auid=632923545.1714174780&ec_mode=a&fdr=SA&data=event%3Dconversion&em=tv.1&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4

142.250.74.164

200 OK

1.5 kB

URL GET HTTP/2
www.google.com/pagead/1p-conversion/16472154831/?random=1714174779644&cv=11&fst=1714174779644&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fthenakastore.com%2Fzencortex&label=ky5XCMG1oqoZEM_FxK49&hn=www.google.com&frm=0&tiba=Zencortex&gtm_ee=1&npa=1&pscdl=noapi&auid=632923545.1714174780&ec_mode=a&fdr=SA&data=event%3Dconversion&em=tv.1&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
142.250.74.164:443
ASN
#15169 GOOGLE

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintF3:75:C9:48:E6:A5:11:C7:87:C8:8D:9A:C4:16:F8:09:4E:88:7C:5A
ValidityMon, 08 Apr 2024 07:33:48 GMT - Mon, 01 Jul 2024 07:33:47 GMT

File type
JavaScript source, ASCII text, with very long lines (2574), with no line terminators
Size
1.5 kB (1527 bytes)
Hash
d96903c1f2ace97b85bcc9032207d4d5
bf27d9d90ce9a602ce3ca388b15eca87d633d7cf
dd11b792bf330307a9fa21a087d3feb9d4dbef18d6c12e77c19caba39866b0c6

HTTP Headers

GET /pagead/1p-conversion/16472154831/?random=1714174779644&cv=11&fst=1714174779644&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fthenakastore.com%2Fzencortex&label=ky5XCMG1oqoZEM_FxK49&hn=www.google.com&frm=0&tiba=Zencortex&gtm_ee=1&npa=1&pscdl=noapi&auid=632923545.1714174780&ec_mode=a&fdr=SA&data=event%3Dconversion&em=tv.1&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 26 Apr 2024 23:39:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1527
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

prod.cbstatic.net/dist/injectable.js

143.204.55.88

200 OK

58 kB

URL GET HTTP/2
prod.cbstatic.net/dist/injectable.js
IP
143.204.55.88:443
ASN
#16509 AMAZON-02

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerAmazon
Subject*.cbstatic.net
FingerprintF8:81:4B:D2:24:61:E4:3E:E9:83:B4:81:64:D4:F0:F7:E4:96:CA:B2
ValidityWed, 19 Jul 2023 00:00:00 GMT - Fri, 16 Aug 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
58 kB (57639 bytes)
Hash
034339c92c137c2e45e7dccb320f939b
9e09877dadbd8a4d849d8379bda23a4a754d75ab
e358efe7c270e52d297b772dad22bdb9d5ce7d92c9f3132ada1d19be4e27ca66

HTTP Headers

GET /dist/injectable.js HTTP/1.1
Host: prod.cbstatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
date: Fri, 26 Apr 2024 23:39:40 GMT
last-modified: Mon, 21 Dec 2020 21:57:37 GMT
x-amz-version-id: RdcimFzJWwtinCAQ.f3F8OeQrj2.m2uJ
etag: W/"af651c30e1a69f6f2124e9c1d094a300"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Q5fAr30ZI9N2Wug47ORG03p9gsrjg3xRdWiznrUL3co5GN9GKE5P5A==
X-Firefox-Spdy: h2

zencortex24.com/favicon-16x16.png

104.26.0.55

200 OK

276 B

URL GET HTTP/2
zencortex24.com/favicon-16x16.png
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
RIFF (little-endian) data, Web/P image
Size
276 B (276 bytes)
Hash
02a0b0dec47ff8e77c2016eff932ef05
d55efcc00a90b436db52431c69ab8860c920caec
f3d092f94f60cddd85c779984587c45b49626f1beee188500216ac9b1af338e4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon-16x16.png HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:40 GMT
content-type: image/webp
content-length: 276
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=703
content-disposition: inline; filename="favicon-16x16.webp"
last-modified: Wed, 13 Mar 2024 14:09:19 GMT
vary: Accept
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Oy9iYjeFmc%2F0D1oZOxFNZ0rn2Ksw5v3wobbZt%2BbOXRcE3mkCqPLjWaFIG8vtzYei1g3va4paEVT8AkOtBcnqdr%2FT1cegAqklari%2B3em%2BXlL1XbA859dVLuutOzgesWe%2FaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87aa69d88f4c5694-OSL
X-Firefox-Spdy: h2

www.google.no/pagead/1p-conversion/16472154831/?random=121232066&cv=11&fst=1714174779644&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fthenakastore.com%2Fzencortex&label=ky5XCMG1oqoZEM_FxK49&hn=www.google.com&frm=0&tiba=Zencortex&gtm_ee=1&npa=1&pscdl=noapi&auid=632923545.1714174780&ec_mode=a&fdr=SA&data=event%3Dconversion&em=tv.1&gcp=2&sscte=1&ct_cookie_present=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIImMGxAg&pscrd=IhMIzOn01obhhQMVTkYeAh3MHwQDMgIIAzICCAQyAggHMgIICDICCAkyAggKMgIIAjICCAs6GWh0dHBzOi8vdGhlbmFrYXN0b3JlLmNvbS8&ipr=y

142.250.74.163

200 OK

42 B

URL GET HTTP/2
www.google.no/pagead/1p-conversion/16472154831/?random=121232066&cv=11&fst=1714174779644&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fthenakastore.com%2Fzencortex&label=ky5XCMG1oqoZEM_FxK49&hn=www.google.com&frm=0&tiba=Zencortex&gtm_ee=1&npa=1&pscdl=noapi&auid=632923545.1714174780&ec_mode=a&fdr=SA&data=event%3Dconversion&em=tv.1&gcp=2&sscte=1&ct_cookie_present=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIImMGxAg&pscrd=IhMIzOn01obhhQMVTkYeAh3MHwQDMgIIAzICCAQyAggHMgIICDICCAkyAggKMgIIAjICCAs6GWh0dHBzOi8vdGhlbmFrYXN0b3JlLmNvbS8&ipr=y
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.no
FingerprintDE:35:DD:F6:8A:FF:6F:9D:0E:3D:27:DD:E2:B8:DE:CE:A4:6A:C8:C9
ValidityMon, 08 Apr 2024 07:44:18 GMT - Mon, 01 Jul 2024 07:44:17 GMT

File type
GIF image data, version 89a, 1 x 1
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /pagead/1p-conversion/16472154831/?random=121232066&cv=11&fst=1714174779644&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fthenakastore.com%2Fzencortex&label=ky5XCMG1oqoZEM_FxK49&hn=www.google.com&frm=0&tiba=Zencortex&gtm_ee=1&npa=1&pscdl=noapi&auid=632923545.1714174780&ec_mode=a&fdr=SA&data=event%3Dconversion&em=tv.1&gcp=2&sscte=1&ct_cookie_present=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIImMGxAg&pscrd=IhMIzOn01obhhQMVTkYeAh3MHwQDMgIIAzICCAQyAggHMgIICDICCAkyAggKMgIIAjICCAs6GWh0dHBzOi8vdGhlbmFrYXN0b3JlLmNvbS8&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://thenakastore.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 26 Apr 2024 23:39:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

zencortex24.com/assets/js/script.min.js

104.26.0.55

200 OK

22 kB

URL GET HTTP/2
zencortex24.com/assets/js/script.min.js
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
JavaScript source, ASCII text, with very long lines (13467)
Size
22 kB (22204 bytes)
Hash
3a0dc250df1903da5562118612fcb29b
4aaa7c3d65595afe0260f8812a19654aab98a62f
3ce47503624237ea46c37e75c90a65e3dc0395a2491b0a7b3c7651a599055dc7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/script.min.js HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:38 GMT
content-type: application/javascript
last-modified: Mon, 01 Apr 2024 19:22:49 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6864
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9NMvf6F3tdmJ5mscLD6z%2FX4zG39iIGv27tOIJTxF21MRW0VN9wuby84jNiyFUNFIqQ%2FujdDnw2rgAm8HVMAwsZNQt9v2X7Ywu%2Fc6KPob0e2UkO7v7%2FfdADlJ8gSVLwsZNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69cffa775694-OSL
content-encoding: br
X-Firefox-Spdy: h2

zencortex24.com/assets/img/i-capsicum.jpg

104.26.0.55

200 OK

8.0 kB

URL GET HTTP/2
zencortex24.com/assets/img/i-capsicum.jpg
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
JPEG image data, progressive, precision 8, 200x200, components 3
Size
8.0 kB (8046 bytes)
Hash
4298cf293255bf5515daf11d263e0d2e
788fa64d3ed9b7e6f534890ab1823b795d11b68a
f69aee08aca3765a04495afef430cb4fc463bdc3f5a5cf70f8dae04964612e55

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/i-capsicum.jpg HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: image/jpeg
content-length: 8046
cf-bgj: imgq:100,h2pri
cf-polished: origSize=8998
last-modified: Wed, 13 Mar 2024 14:09:19 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BxQqeu2YPYKl6wkYg8Dh%2F%2BOcDRdbH2dR0b54AThIYvcZjrPlnfINIyKFCU%2B8TOygfOlvTHUHCigGxfbhnq1Ze26Y5l07BZBfNfJ4%2FuLuQM6v6jI7NIPRffSenDtEjexSpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d41cb95694-OSL
X-Firefox-Spdy: h2

www.google.com/pagead/1p-conversion/16472154831/?random=121232066&cv=11&fst=1714174779644&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fthenakastore.com%2Fzencortex&label=ky5XCMG1oqoZEM_FxK49&hn=www.google.com&frm=0&tiba=Zencortex&gtm_ee=1&npa=1&pscdl=noapi&auid=632923545.1714174780&ec_mode=a&fdr=SA&data=event%3Dconversion&em=tv.1&gcp=2&sscte=1&ct_cookie_present=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIImMGxAg&pscrd=IhMIzOn01obhhQMVTkYeAh3MHwQDMgIIAzICCAQyAggHMgIICDICCAkyAggKMgIIAjICCAs6GWh0dHBzOi8vdGhlbmFrYXN0b3JlLmNvbS8

142.250.74.164

302 Found

42 B

URL GET HTTP/3
www.google.com/pagead/1p-conversion/16472154831/?random=121232066&cv=11&fst=1714174779644&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fthenakastore.com%2Fzencortex&label=ky5XCMG1oqoZEM_FxK49&hn=www.google.com&frm=0&tiba=Zencortex&gtm_ee=1&npa=1&pscdl=noapi&auid=632923545.1714174780&ec_mode=a&fdr=SA&data=event%3Dconversion&em=tv.1&gcp=2&sscte=1&ct_cookie_present=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIImMGxAg&pscrd=IhMIzOn01obhhQMVTkYeAh3MHwQDMgIIAzICCAQyAggHMgIICDICCAkyAggKMgIIAjICCAs6GWh0dHBzOi8vdGhlbmFrYXN0b3JlLmNvbS8
IP
142.250.74.164:443
ASN
#15169 GOOGLE

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1
ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT

File type

Size
42 B (42 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /pagead/1p-conversion/16472154831/?random=121232066&cv=11&fst=1714174779644&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fthenakastore.com%2Fzencortex&label=ky5XCMG1oqoZEM_FxK49&hn=www.google.com&frm=0&tiba=Zencortex&gtm_ee=1&npa=1&pscdl=noapi&auid=632923545.1714174780&ec_mode=a&fdr=SA&data=event%3Dconversion&em=tv.1&gcp=2&sscte=1&ct_cookie_present=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIImMGxAg&pscrd=IhMIzOn01obhhQMVTkYeAh3MHwQDMgIIAzICCAQyAggHMgIICDICCAkyAggKMgIIAjICCAs6GWh0dHBzOi8vdGhlbmFrYXN0b3JlLmNvbS8 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 26 Apr 2024 23:39:40 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/16472154831/?random=121232066&cv=11&fst=1714174779644&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l2l1&dma_cps=sypham&dma=1&u_w=1280&u_h=1024&url=https%3A%2F%2Fthenakastore.com%2Fzencortex&label=ky5XCMG1oqoZEM_FxK49&hn=www.google.com&frm=0&tiba=Zencortex&gtm_ee=1&npa=1&pscdl=noapi&auid=632923545.1714174780&ec_mode=a&fdr=SA&data=event%3Dconversion&em=tv.1&gcp=2&sscte=1&ct_cookie_present=1&fmt=3&ct_cookie_present=false&sscte=1&crd=CJW3sQIIscGxAgiwwbECCLnBsQIImMGxAg&pscrd=IhMIzOn01obhhQMVTkYeAh3MHwQDMgIIAzICCAQyAggHMgIICDICCAkyAggKMgIIAjICCAs6GWh0dHBzOi8vdGhlbmFrYXN0b3JlLmNvbS8&ipr=y
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

zencortex24.com/assets/img/i-grapes.jpg

104.26.0.55

200 OK

9.6 kB

URL GET HTTP/2
zencortex24.com/assets/img/i-grapes.jpg
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
JPEG image data, progressive, precision 8, 200x200, components 3
Size
9.6 kB (9608 bytes)
Hash
c91d6277008525d53ae8cb2b496aa706
0e7809371ce8706acf7639bfbdefdfcf8345f089
7fae51183b0124c36480242c8c99380855477b5fdefd787dede6559012e8daee

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/i-grapes.jpg HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:40 GMT
content-type: image/jpeg
content-length: 9608
cf-bgj: imgq:100,h2pri
cf-polished: origSize=10672
last-modified: Wed, 13 Mar 2024 14:09:19 GMT
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4bwH5zTvf6iDUFoFybkprt0EHj3exPI7o2AKNJgTnbjwdq465w%2F6gG%2Blzl0bIFMCGT94R4ubHApVydm7n73t%2BZo3XqxE4i%2B4npEnEXHjR4buYGrmG1guVScbHSeIv78R9w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69d41cb35694-OSL
X-Firefox-Spdy: h2

zencortex24.com/assets/img/label.webp

104.26.0.55

200 OK

92 kB

URL GET HTTP/2
zencortex24.com/assets/img/label.webp
IP
104.26.0.55:443
ASN
#13335 CLOUDFLARENET

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerGoogle Trust Services LLC
Subjectzencortex24.com
Fingerprint72:1F:FF:9B:C0:30:71:AE:8B:C4:5D:C1:BC:1A:FE:52:E9:20:51:31
ValidityFri, 08 Mar 2024 21:25:33 GMT - Thu, 06 Jun 2024 21:25:32 GMT

File type
RIFF (little-endian) data, Web/P image
Size
92 kB (92134 bytes)
Hash
d7b1e7375ffc902550e231d000601fcf
30ba7354e98b20916cd11245f2a5f5879112b6e7
b2a33003add174450a283afeb5a7cf080285dc3782b82b154be96202538792de

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/label.webp HTTP/1.1
Host: zencortex24.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:38 GMT
content-type: image/webp
content-length: 92134
last-modified: Fri, 22 Mar 2024 18:59:42 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6863
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r%2B%2FKOulUkJxteBLju5iLDDueqtEDTLgcb%2BIbnOASjUaoAHCnggX5Lsfq08DKjZtqA5kHeZvobOPPgxetZt13NjyCFVkMZcRbYjG6z%2BKBf%2BmFGcmBYNJxM%2B1dEz7pCzVHIw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa69cffa6d5694-OSL
X-Firefox-Spdy: h2

cbtb.clickbank.net/?vendor=zencortex

52.36.23.7

200 OK

934 B

URL GET HTTP/2
cbtb.clickbank.net/?vendor=zencortex
IP
52.36.23.7:443
ASN
#16509 AMAZON-02

Requested by
https://thenakastore.com/zencortex
Certificate
IssuerAmazon
Subject*.clickbank.net
Fingerprint62:92:AD:95:39:1D:07:51:74:D0:69:B2:4B:26:C9:54:DB:A1:EB:A1
ValidityTue, 09 Jan 2024 00:00:00 GMT - Fri, 07 Feb 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (934), with no line terminators
Size
934 B (934 bytes)
Hash
749c0fb0f006f7d4ddcd76fba550e264
940476750ad5d0f7858cce3470a3534be850f98a
bc4f846a058e02aa5fd315d0c535a227636ca4a74ed38a5a84d4d5e675ffec72

HTTP Headers

GET /?vendor=zencortex HTTP/1.1
Host: cbtb.clickbank.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thenakastore.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:39:39 GMT
content-type: text/javascript;charset=UTF-8
set-cookie: AWSALB=76tv7UU49TibPkUJD0I/iYkcwviB+WlUJQ0/XnlgfwN4luNpBf+7JmG8wDzJP+3PZv1w6wdRAMyEkKpQXMfbQ7ZaaE1JMO95XlxYcZVDxrCDhZw2aaLdT8W+vjUG; Expires=Fri, 03 May 2024 23:39:39 GMT; Path=/
AWSALBCORS=76tv7UU49TibPkUJD0I/iYkcwviB+WlUJQ0/XnlgfwN4luNpBf+7JmG8wDzJP+3PZv1w6wdRAMyEkKpQXMfbQ7ZaaE1JMO95XlxYcZVDxrCDhZw2aaLdT8W+vjUG; Expires=Fri, 03 May 2024 23:39:39 GMT; Path=/; SameSite=None; Secure
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=900
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML