| fonts.googleapis.com/icon?family=Material+Icons |  142.250.74.106 | 200 OK | 811 B |
URL GET HTTP/2fonts.googleapis.com/icon?family=Material+Icons IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hashfd12034a21b2fa7a5f13d137afcc8e71 bfa99b65fec97f05a018dee1903c622e33968b0a b5c19fdc0e68d9f9834a474fa86397c77a4156adecf5356a09b5450b0007965d
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.hurleymedellin.com/images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T453_accesorios_Hurley_hombres_gorra_ajustada_nascar.jpg |  104.21.53.81 | 200 OK | 36 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T453_accesorios_Hurley_hombres_gorra_ajustada_nascar.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash9b153a67f45d88f610c4a4cadd675927 3aedd7032a0f3398951afb75704ee06a5fcbbdb1 923ab0d4bc44b725ecd2ceb28045f286ae9b6ccb9b0491caefdd41eb3a35cbe8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T453_accesorios_Hurley_hombres_gorra_ajustada_nascar.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 35992
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QD8s1paCsnqjSVK%2FAUWzqjzMz7Hn36Ha9lC%2BmYN%2BHYDMc%2B0%2Bq77sA%2BfnI9QA%2B3a1gWTpydruJ%2BQcnoLrON%2FDIlgRaRYE8nHU0bwcAHifA5%2FoW%2BehkY4zJ%2ByUAcD8pW10Y5wNhBVIXrcx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b379a67127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/payment.png | 104.21.53.81 | 200 OK | 6.2 kB |
URL GET HTTP/3www.hurleymedellin.com/images/payment.png IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typePNG image data, 248 x 26, 8-bit/color RGBA, non-interlaced Hash1fb5f66cada185d72ccefaeb9e9a2963 584108601272e3ed07abe10b4c3ca2f6b200d552 ef645db0e0a9a267fda954e584782b888929b2827548ecaef07600656022535b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/payment.png HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/png
content-length: 6248
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OnaEvlI2UA5ivHVMZavglKqQ4VgqbIWjgxOlGaOKbBLTBcHDp9X1Vz2W%2F4CQ7IsBlFabvE7l47x2EvkuMUPEdDdN3SCBTD0UGWTQ%2FItARzIEZ%2Ffmt6F5ihzlEbOe9nLFIqa4JPsOZgVN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b3b9d97127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 | 162.159.138.60 | 200 OK | 6.1 kB |
URL GET HTTP/1.1player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 IP162.159.138.60:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerLet's Encrypt Subjectplayer.vimeo.com FingerprintE8:45:41:E9:31:D2:A5:77:D5:5E:75:89:F8:00:24:2E:C3:3F:C8:BE ValidityFri, 29 Mar 2024 06:04:47 GMT - Thu, 27 Jun 2024 06:04:46 GMT
File typeHTML document, ASCII text, with very long lines (13325) Hash3aa7e8bda638eae5539ebc39b76ec178 ae35a029574c5efdc33ed749cbe9a2aedb38e94c 4f4fa32791d4e7ef207f3e6cdf9fc7382d45e54e107896c793137da03fee552e
GET /video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 HTTP/1.1
Host: player.vimeo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 08 May 2024 22:42:34 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-player5.wirewax.com; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm-gke.vhx.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.hivestreaming.com https://mimir.cloud.vimeo.com https://vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; font-src data: https://edge-assets.wirewax.com https://branding.cdn.magisto.com https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com android-webview-video-poster:; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com; frame-src 'self' https://*; report-uri /_csp
expires: Fri, 15 Dec 1985 19:30:00 GMT
link: <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin, <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-host: player-backend-7db5b46c64-jw6bg
x-player-backend: g
x-xss-protection: 1; mode=block
x-backend-server: player-backend-edge-entry
x-bapp-server: player-backend-7db5b46c64-jw6bg
via: 1.1 varnish
x-served-by: cache-osl6531-OSL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715208154.306484,VS0,VE210
vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=QhDMZtZ7aX0IXCOCcB_U2DnRsNAbu40re.rYYqxFw5E-1715208154-1.0.1.1-l192l1RB.vEMzIGDfXxeewO4Cg3KXHZYL.LMEWG9x5eo.J67YeudUencCTN8WpxMuFcA_DiXtua1nAUDddR5jQ; path=/; expires=Wed, 08-May-24 23:12:34 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
_cfuvid=bpGv4wZWifIlqCn3m4qnN0E7HtoVN3W.knjmOugBY7U-1715208154518-0.0.1.1-604800000; path=/; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 880cf6b45e4bb4f3-OSL
Content-Encoding: gzip
|
|
| www.hurleymedellin.com/images/loader.gif | 104.21.53.81 | 200 OK | 35 kB |
URL GET HTTP/3www.hurleymedellin.com/images/loader.gif IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeGIF image data, version 89a, 128 x 38 Hash362e988184d842aea3a0b5d09a64d13e e4ab705fb063ffd2645ce8a25e59e889e98f211c 82656f23517068a7b3d92badc8c29716e53654cd2574d330b08823ca7f7b8fa4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/loader.gif HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/gif
content-length: 35011
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2US0BADlR5dKOZyZjVq3r4NzeQIwxQBpxqkhVYkbTUyvYGUFcbrkGlKSoWTvp1W0olv8ei2ltwVAcEgrdzhu1bzADWpFFmo%2F6s4ry63eDLlSfuHIicfBvzyN2mv%2FIGum05hVLaoBn9IZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b359907127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T449_accesorios_Hurley_hombres_boonie_de_regreso_al_pa_s.jpg | 104.21.53.81 | 200 OK | 22 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T449_accesorios_Hurley_hombres_boonie_de_regreso_al_pa_s.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash1027e6caccedb5ccc08dfa90f06e4e32 2ff8d9dae10119a213d74473970d5a019dabdcd0 bdbe45e2a5695abb2247e1f940d7485efff9343d34b6eb72bf87e544983b6b4e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T449_accesorios_Hurley_hombres_boonie_de_regreso_al_pa_s.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 21828
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3CxmxRHT8d%2F4WWr6V2iuFPSZkRtrXuW3fGgPvaDfcHWH5ndL9YjTE6HLC7OgHzPLZq%2Bg12MKhCeXziwySuhSdkg5Wb%2F3bQuF%2FGwUFlvDvl7em508yjeSrvsbzyK3RPZvHxU%2Fr0ye9zsg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b369a47127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T450_accesorios_Hurley_hombres_gorra_snapback_pro_sunset_beach.jpg | 104.21.53.81 | 200 OK | 31 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T450_accesorios_Hurley_hombres_gorra_snapback_pro_sunset_beach.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hashe57b9afba8719a0fa5cee3bf817e4f71 2d6024197ccf2931bc5d6da23f784d1ed3d86055 d81cfe5a356073c9c68d162c7a37f6b1f56b1515303ddc23d34fe347c42aec9b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T450_accesorios_Hurley_hombres_gorra_snapback_pro_sunset_beach.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 30652
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GvFBambRdHXaVVPEYpa8kvAGMkkoO7FIPfXeeAxu9T059Zv%2BbBNFjT7qfX8Zj45hXPmEPUQzet0QSoto0yZjBiKTTA%2Br%2BPrG%2F6OhzChwyvfRZglZygXQT%2Fnw1YDPEPDU2R107PEA6KOJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b379a97127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/accesorios/sombreros-y-gorros/camuflaje_TZT4T452_accesorios_Hurley_hombres_sombrero_tahoe.jpg | 104.21.53.81 | 200 OK | 36 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/accesorios/sombreros-y-gorros/camuflaje_TZT4T452_accesorios_Hurley_hombres_sombrero_tahoe.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash28d13e1970ad7bb9861417e142e386eb fac65b16c0aadae47af5739f2771b91856ddff33 a018e7a210e2025c48d5a64f58daee4793a7e246c15c5ffb0d453a53a5f72b06
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/accesorios/sombreros-y-gorros/camuflaje_TZT4T452_accesorios_Hurley_hombres_sombrero_tahoe.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 35987
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kYqbIweUHhXy15fzJnFOTdSadobGELAkDrGWzEGiZobNWr%2BPalEzYx4tmx%2BoGvLPPP4lXsPKuza8dIVEZUvpgasq%2F6wdGNY0uPHmGHDcSB9F6OlRq90lkzXc%2Fbi4pERtxE85LTUYe%2FtW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b369a27127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T459_accesorios_Hurley_hombres_sombrero_de_pescador_sion.jpg | 104.21.53.81 | 200 OK | 25 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T459_accesorios_Hurley_hombres_sombrero_de_pescador_sion.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash18f9318a6392ef1cef94797905607ddd cc20c9ad79a6fce7b17b4057cf2e6e9c17f0d79c c24b76cde83d78f319eef443d491e96fa702bfe2876a29c4a319aee528acb889
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T459_accesorios_Hurley_hombres_sombrero_de_pescador_sion.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 24614
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QBUCayTvwv1fy5jDAeuuz1Bx8c%2Bh06bamG9MEx6ajhGqUSy%2F1sg6K5ci6LOZTRfZeE8O9XjCAiFjYKvs3LMgf3Ch6J2v4VbcpbNT8aI0uTWKsWYPQJ81MgmVsUagTE2%2B%2F2qUip1J1rGd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b3699f7127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T451_accesorios_Hurley_hombres_cubo_peque_o_con_logo.jpg | 104.21.53.81 | 200 OK | 25 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T451_accesorios_Hurley_hombres_cubo_peque_o_con_logo.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash8a872d921740dfcca58ff8a66c4d396c 152687d904f37f208362fcb990832c66ccb7744d 42e6aadefdd1de5823d8ed32fba9f896cc9131ec0c8f68e4acaffd230953262e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/accesorios/sombreros-y-gorros/negro_TZT4T451_accesorios_Hurley_hombres_cubo_peque_o_con_logo.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 24883
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XtMi%2BuZrn7j6X7LgNeSOvAPFj7mfCgohlgEKVGp090qHMTR4HOQ3oZP9cHmK%2B4KtqRQ4j5X0Y93o%2BIk2gSoYyxpAQrt9Obipju3LyqTsBjDBRpAodtmkctJy%2F4ifB6ZXCaLjAfK7gkHs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b369a37127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/xido_de_sion_TZT4T188_ropa_Hurley_hombres_phantom_naturals_sesiones_16_ba_ador.jpg | 104.21.53.81 | 200 OK | 35 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/xido_de_sion_TZT4T188_ropa_Hurley_hombres_phantom_naturals_sesiones_16_ba_ador.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash66e25d979d720ec7e6543f290eb327a8 0128493d97ec8fdcc65cb2cd34b2ba47e2472fac 34d38a8cefb5171b3086e2b64d8a6a3de8bc1ae3c7662cab3e5bb23a651857c8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/ropa/pantalones-cortos/xido_de_sion_TZT4T188_ropa_Hurley_hombres_phantom_naturals_sesiones_16_ba_ador.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 35387
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wnx6hpd6qwLVIjU%2BABQpIZQFCxYDWJFtzGLoxI2QTNrY%2FICo9qHLLSoAkGs3bsakchLRUE1dCEknx4P7MGG0uQUYJ%2Ba2M2%2FbWhsWsBSgoDwGCaoVMgw1I1x34PE1B4R8wnM6d6vcs3J9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b379ae7127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/flamenco_TZT4T184_ropa_Hurley_hombres_phantom_naturals_sesiones_16_ba_ador.jpg | 104.21.53.81 | 200 OK | 27 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/flamenco_TZT4T184_ropa_Hurley_hombres_phantom_naturals_sesiones_16_ba_ador.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash7fcc729a3c7f673a8ade6d5a435e1524 d1582f0f15601329bf0c111f160df45973bb60c7 c91d6d30f9aa11303219653782920c49eb26342a89900b0d260ab3bac5d2f818
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/ropa/pantalones-cortos/flamenco_TZT4T184_ropa_Hurley_hombres_phantom_naturals_sesiones_16_ba_ador.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 26645
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wur0AeIAHkGkLfh6XZs1b%2B2lnEPd5S9hvDA2lF1npIrF%2FF%2BKU4Ocg%2BKD%2FeVL0xNWcU5nqD5%2FVZB74tRj7tQP9Q8%2BKy%2FdtHyIfphiTHSxn8BPNeSDxNR4BUlrlJT5aRNx8IZhPy672gZK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b389af7127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/accesorios/sombreros-y-gorros/Armada_TZT4T456_accesorios_Hurley_hombres_sombrero_de_hierro_corp.jpg | 104.21.53.81 | 200 OK | 27 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/accesorios/sombreros-y-gorros/Armada_TZT4T456_accesorios_Hurley_hombres_sombrero_de_hierro_corp.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash88cade4c32318f51e7c4937cb185a982 0258850d93049ff790e30524fe3da17b6c53377c 2d4804766736a55f0fd9233aa4235d74eb3df1f1b282311d397a00479a1abed1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/accesorios/sombreros-y-gorros/Armada_TZT4T456_accesorios_Hurley_hombres_sombrero_de_hierro_corp.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 27409
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bwuVlGkdj%2FARISWxB1R19UYDZ5esf04qell2LcmCgOfG5i3FQFi0Z1JMozPuL%2FihLBUF33cc4crO%2B4hXtea%2BMPooU0GC1k0sH7YScPAXfyF2WuxPmfK6X3KpWapt96k62DLPV3IJQYLE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b369a07127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/negro_TZT4T190_ropa_Hurley_hombres_phantom_uno_y_nico_ba_ador_s_lido_18.jpg | 104.21.53.81 | 200 OK | 23 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/negro_TZT4T190_ropa_Hurley_hombres_phantom_uno_y_nico_ba_ador_s_lido_18.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hashd20cdc612a23d769b2c847f6c731d732 c534e9aee74a9b8b9b83f7acb4ef2347015b9ac4 e4b3fd15996c6602401093324a4df00e1a9697f18f245aaba9b9d680ed4b2acd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/ropa/pantalones-cortos/negro_TZT4T190_ropa_Hurley_hombres_phantom_uno_y_nico_ba_ador_s_lido_18.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 22929
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cda7VjyFCUo98gODetIv7BnAGj%2Bwk4rX9a830je1Q8sbAusgRe8cUWePmmi3xTzTfnvUAsZIHGcAmOF1aYF18%2F74SN76cuumIKuLgSf0QkjsOLwQTeTOJ8gn4%2FTkXslNIC9RAYlzasJe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b399bc7127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/neblina_de_ciruela_TZT4T179_ropa_Hurley_hombres_ba_ador_cannonball_volley_17.jpg | 104.21.53.81 | 200 OK | 31 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/neblina_de_ciruela_TZT4T179_ropa_Hurley_hombres_ba_ador_cannonball_volley_17.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash4ff8be53e23b676dad72c6aae85a49b5 5197cd653ca32a7a77dd8b7d5723fb3dde149f8f e4ad8bd540199ef67192e5d47e87673c3f5cc9d1ae630af203ff623f73f076a1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/ropa/pantalones-cortos/neblina_de_ciruela_TZT4T179_ropa_Hurley_hombres_ba_ador_cannonball_volley_17.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 30800
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=An%2B1deNcxi2f6mTOXSQIdSIbDu1YHFFC8zpDDTC5940HJKo4W2WddidM3ViWexAhARtOTyNg3aicuxS3%2FrouMy6qjl9L2AqkmjRK6n9jJf12XgZXrxSASeXalkjUo2VBO4eij1F9gGxa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b379ad7127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/images/hurley/slide_banner_2d.jpg | 104.21.53.81 | 200 OK | 41 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/images/hurley/slide_banner_2d.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1900x496, components 3 Hash1d10487a3257ebc2358c3a70b5a85470 c181b1ed335bb19403c5d186949bcc968c13bb2b c29e29a5d78156e81741ae299da6b394a6dabf77a7c65e4045b4cc0bb8abeb82
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/images/hurley/slide_banner_2d.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 41432
cache-control: public, max-age=864000, must-revalidate
expires: Fri, 07 Jun 2024 22:42:34 GMT
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FW4X7paRPqdh3kFOVd8IOW2Ftp3mc%2F2DwmPxtBR3sLdHYwT4udf7gh9Kuvz1OJnG8fQkAldocm7umzsTVF4%2Fhen2v0lFzSQsdYWbEYDPR%2FhBchYt%2BEho9owVU04MkRAuz6wChHxXGDiu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b3699d7127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/mujer/ropa/nadar/ponche_rosa_TZT4T462_ropa_Hurley_mujer_Jungle_Walk_corbata_suave_anudada_tricolor.jpg | 104.21.53.81 | 200 OK | 43 kB |
URL GET HTTP/3www.hurleymedellin.com/images/mujer/ropa/nadar/ponche_rosa_TZT4T462_ropa_Hurley_mujer_Jungle_Walk_corbata_suave_anudada_tricolor.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hashc67e7e5b0313374bcb2819b5cdaee48e 886040e7fc6a3ee61999b3fc1c1d7a2d0f520d54 500faff650730db19df0b3b0d2cfb6f06967a963035bf9792f95419a05cdb842
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/mujer/ropa/nadar/ponche_rosa_TZT4T462_ropa_Hurley_mujer_Jungle_Walk_corbata_suave_anudada_tricolor.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 42755
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CWcvmgV42VTTaf20m1BnxXtXPAOcFjnyRWI56SE43bbeY8zBLvQiUDM2Rh5qxxXgI8kRz74Q1fCMgFzbKwXe5A5xc7R9wd3SwItOW7jQEsS9EsseIygf2s8DqdyL97N%2FSLmsWJmnyLOI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b3699e7127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/part_cula_TZT4T189_ropa_Hurley_hombres_Un_nico_ba_ador_de_voleibol_s_lido_17.jpg | 104.21.53.81 | 200 OK | 23 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/part_cula_TZT4T189_ropa_Hurley_hombres_Un_nico_ba_ador_de_voleibol_s_lido_17.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hashfa8aeef554bb6e48db80cf925bfb3282 365f5a0cd08610d7bf443caa19c47b36c8a6b04e ee961db1e81a8917d3d84bcc4a0d7f69af1a44615633b24a591fa014351aa1df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/ropa/pantalones-cortos/part_cula_TZT4T189_ropa_Hurley_hombres_Un_nico_ba_ador_de_voleibol_s_lido_17.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 22689
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=82DkIEuklbr5qMWJwFvXFSU1BzmlLiRLY2tnukdUrw4qQC9g5LdeQftPmIC32wb0eJ%2BxKSKNodsAKKmIinlRS7tgJ%2B9bnKEzYIrPhmMNCWK36%2BBUcYLmJO2SrNokvxTlK1NMOIsK2W%2Bz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b389b27127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/verde_azulado_el_ctrico_TZT4T183_ropa_Hurley_hombres_ba_ador_Weekender_20.jpg | 104.21.53.81 | 200 OK | 42 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/verde_azulado_el_ctrico_TZT4T183_ropa_Hurley_hombres_ba_ador_Weekender_20.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hashcddcbb471f8dc9c1c7b9face09c0bb16 679c9e989832433a7bc518455d4ddb5507307aa8 01a8c597c697c3de246371d28921b2d2482911c47c0edd6241204859ca7bfd58
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/ropa/pantalones-cortos/verde_azulado_el_ctrico_TZT4T183_ropa_Hurley_hombres_ba_ador_Weekender_20.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 42499
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HB4M1Kqc20%2F%2BHf57uF1%2BWTh80VOmFZwlpPL54ZbyfDRrLp2%2FE1GBEZyjbrDI1FYhG%2F5Q%2B6boTg3ap7AhRAOTf%2FvUITuKxAHxdXDVNL56lYe3KtYqbZ5qmoVkQv3LW3tfHTOEeepx3btk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b389b87127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/ne_n_rtico_TZT4T181_ropa_Hurley_hombres_ba_ador_phantom_eco_nascar_flames_18.jpg | 104.21.53.81 | 200 OK | 38 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/ne_n_rtico_TZT4T181_ropa_Hurley_hombres_ba_ador_phantom_eco_nascar_flames_18.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash402035575096fc97b642dcba6aea5047 775858daff05a074fc2b5db82543f95cc9f6c187 815c8a45dffef7eec47e5f41180b55722c93d72cc1a167f134c90d68297c54c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/ropa/pantalones-cortos/ne_n_rtico_TZT4T181_ropa_Hurley_hombres_ba_ador_phantom_eco_nascar_flames_18.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 38102
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FpXyiE740%2BQvs9nfS%2BO3wBIIfHtuXKdRctmqKLA9JZ9UNZT3okl8jufJo88eFsg2V5LdLThuAi1pbNZgiIY21jgAc%2BRGDckOVGPMVdBdPWRJU20%2BGymbQqErlJDk0OPqS%2BNrVudAEM4d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b399bf7127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| f.vimeocdn.com/p/4.32.4/css/player.css |  151.101.246.109 | 200 OK | 22 kB |
URL GET HTTP/2f.vimeocdn.com/p/4.32.4/css/player.css IP151.101.246.109:443
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerGlobalSign nv-sa Subject*.vimeocdn.com Fingerprint4F:12:C8:71:F2:3F:56:5B:F7:BB:3A:38:F1:B9:76:36:96:18:43:07 ValidityWed, 22 Nov 2023 22:50:09 GMT - Mon, 23 Dec 2024 22:50:08 GMT
File typeASCII text, with very long lines (65495) Hasha067fbf87f9fb1904b907fed1e7c3a9d 0b4abadb5d10951cf22953bea6aba3118a779914 a2c937da55e3bbdc0117596261c6925aa35c5e54db6c9f9494cfd9c46a204a59
GET /p/4.32.4/css/player.css HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 08 May 2024 22:42:34 GMT
age: 15803
x-served-by: cache-iad-kcgs7200098-IAD, cache-hel1410033-HEL
x-cache: HIT, HIT
x-cache-hits: 17, 8025
x-timer: S1715208155.878386,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 21995
X-Firefox-Spdy: h2
|
|
| www.hurleymedellin.com/images/mujer/ropa/nadar/negro_tiki_multicolor_TZT4T460_ropa_Hurley_mujer_bralette_reversible_hana.jpg | 104.21.53.81 | 200 OK | 54 kB |
URL GET HTTP/3www.hurleymedellin.com/images/mujer/ropa/nadar/negro_tiki_multicolor_TZT4T460_ropa_Hurley_mujer_bralette_reversible_hana.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash7dc45000cc19a25fd5e416507595c9eb 42025fc6b712afc1bcecdebd6255c416d37542a2 dd35d609d1096cadddf5f28dde108221d92321090752fea6e37ab939cbb852b9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/mujer/ropa/nadar/negro_tiki_multicolor_TZT4T460_ropa_Hurley_mujer_bralette_reversible_hana.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 53464
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gbSFnZL%2By8SDm%2FlJHRuiateCquzm9Q2A9R2opL0jh4Z3FREyHG8JALzu7NQZMDpub5lgqhxR30gpICYQkSHXtHyUcYCVcVp%2Bbc84%2FrbA1yCleTGPffzkD0euTYKoqskq2tjynf3rjDuU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b379a87127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/selva_TZT4T185_ropa_Hurley_hombres_ba_ador_phantom_tailgate_18.jpg | 104.21.53.81 | 200 OK | 54 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/selva_TZT4T185_ropa_Hurley_hombres_ba_ador_phantom_tailgate_18.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash37fd6fb7beac141eb702e8bbc20d901c b439fe0b27285c10abd6eaa85588f34d1c0baae9 9fec89c6c2c9346dd3e781d8d1a5e5ab703e7a0adb93bdc8b704b9e18c1fe6a2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/ropa/pantalones-cortos/selva_TZT4T185_ropa_Hurley_hombres_ba_ador_phantom_tailgate_18.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 54102
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wW5ys%2BlPYWPVwF16KVlsl1oZkml7QUj%2Bfa%2FTlYkAELxyZs0bKC7xjvBVaum2a5pg%2BVXyvax7b3cJZ4yiLMY0IDTdmMVuB23urovTKrfuYnrxWAtcSJqvCaPtMA4XXmMh0hkOjXL6xgK7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b389b07127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/marina_blindada_TZT4T180_ropa_Hurley_hombres_ba_ador_phantom_Weekender_20.jpg | 104.21.53.81 | 200 OK | 66 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/marina_blindada_TZT4T180_ropa_Hurley_hombres_ba_ador_phantom_Weekender_20.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash8acc33d581c54637484c8d8bde693667 1cedee96172923e55040e8539ae24a2453352314 118d6e553de4b1e16509f918832b1756ad49a5d890f947bdf4ffc312f256a2ff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/ropa/pantalones-cortos/marina_blindada_TZT4T180_ropa_Hurley_hombres_ba_ador_phantom_Weekender_20.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 65833
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ji6Y2nF30iwNRSck3rNMsmNts88b0%2F%2FzMQym23H8oeAFhY97LoIX8dgUtiavtQjpWJ%2FqJezbr8KrrYyl3FqUqF5Z1n9OEt9rHuK3UzVnj0HzimIminznI8Iomi%2FyHrA5l4gc53iXLqSA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b389b17127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/negro_m_ltiple_TZT4T186_ropa_Hurley_hombres_ba_ador_phantom_tailgate_18.jpg | 104.21.53.81 | 200 OK | 81 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/negro_m_ltiple_TZT4T186_ropa_Hurley_hombres_ba_ador_phantom_tailgate_18.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash496a8c87935da65401e5d4762dce41bf 7eaa79606c252a03b319b1be0c3e64ad71f60671 28178ad8bbd1c102c31427c0bf4dbb55a6ac7d1503cff485961c4d7f271e4cbc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/ropa/pantalones-cortos/negro_m_ltiple_TZT4T186_ropa_Hurley_hombres_ba_ador_phantom_tailgate_18.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 80994
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dv3Sx3ZD07sY%2FNg1UKrSQzfi2DjFbLidEy0yN6mW9gfav1YuM6CdlVyoThrGy%2F516RE4VkGz3YlEwAdcG2H1rRPaKxCpuFnZtqS0pgrx7zP4oWl9gMn%2FVmcvX9Agmx2NHyJUrul6To97"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b389b77127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/tono_negro_TZT4T187_ropa_Hurley_hombres_ba_ador_phantom_Weekender_20.jpg | 104.21.53.81 | 200 OK | 67 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/tono_negro_TZT4T187_ropa_Hurley_hombres_ba_ador_phantom_Weekender_20.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hashb04a05edb175cabc055c07f373b4b326 a11847fe2169ae518ca6df47e02a820e2d0cefbd 91a91d64afb86982fc913c38387dc47cea846887898cf9e99f8474217cf5ddcb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/ropa/pantalones-cortos/tono_negro_TZT4T187_ropa_Hurley_hombres_ba_ador_phantom_Weekender_20.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 66958
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zr%2BtS5NHUFum0CFXUZ3QloBi7jnxA2sd5PFUGyjNpngxysR6iCl2O1Gp5iy8l%2B0ZM1LHNvSz%2B5a%2Bn45on64L7oNIxo1aPZJp3aiWqaw8oKTyTxlyYIg3n9d7nXd8dgpRC66IIhJqkVTA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b3a9c67127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/chispa_rosa_TZT4T182_ropa_Hurley_hombres_ba_ador_phantom_block_party_18.jpg | 104.21.53.81 | 200 OK | 89 kB |
URL GET HTTP/3www.hurleymedellin.com/images/hombres/ropa/pantalones-cortos/chispa_rosa_TZT4T182_ropa_Hurley_hombres_ba_ador_phantom_block_party_18.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 648x810, components 3 Hash90f1247f328f0c2f35f0fd6f022d86c6 5b707eb6ea862975750a469c6b9c9ed444beb2b5 e706754c83761656afcf4e8a15bd7416cf912c7bc283104516277c34063e6889
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /images/hombres/ropa/pantalones-cortos/chispa_rosa_TZT4T182_ropa_Hurley_hombres_ba_ador_phantom_block_party_18.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 88959
cache-control: public, max-age=864000, must-revalidate
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SdPzP8OQbfgesh%2BOORc6Yetwbb66IaAOg6bgApYj6HfSANhYopw3aZ9p1%2Fy6UToJkSmAckMRmBT%2BhRpOAfusd4QxJQgKBWXYJG6POY2hor9prKbKT1RW2hZamV3GbF%2FCuYxQ6HK5c9cM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b3a9c77127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/images/hurley/subject2.jpg | 104.21.53.81 | 200 OK | 169 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/images/hurley/subject2.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 815x964, components 3 Size169 kB (168766 bytes) Hash3320b7da39dc4c653009b3f49f1af02f 109767a7603eac77fd1ec11b3ac733212023f316 dcc4cf23bbb18d3d3dd626b57c8fd24a293105421760f9d56cd5c2bf6eb7b9ad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/images/hurley/subject2.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 168766
cache-control: public, max-age=864000, must-revalidate
expires: Fri, 07 Jun 2024 22:42:34 GMT
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PQIHr0r0lHhGK3BGwCeJuDRu%2BezfVGQrZ9FTK%2FbxC8hajGkclvJQR%2FX1cZi4x2gRDgNsQpfCydpcBxwgxKzqi%2BVvjgcomyxHFidskdB6umyAN4uLBa%2FSv8orZNlulfM%2BZkRk1NiKW0ut"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b3a9ca7127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Jost:wght@300;400;500;600;700;800&display=swap | 142.250.74.106 | 200 OK | 142 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Jost:wght@300;400;500;600;700;800&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Size142 kB (142147 bytes) Hasha9b9f988d1e9bd5fc87ee739cc158471 541836367d6cc6c62411d2e10e20e8da619a6c12 33655c093926811fdf828c6b6946c73479d30607f81149b565cac2f7a009bb35
GET /css2?family=Jost:wght@300;400;500;600;700;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/jscript/jscript_zmain.js | 104.21.53.81 | 200 OK | 17 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/jscript/jscript_zmain.js IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJavaScript source, ASCII text, with very long lines (528) Hash09e9895cbd3164cf44f24dfe7b79b167 a2c0a500fd609657f64b62e6462192ef92da7315 ec06deb26b318c150ef563924691e1c426a67cc8c8b1b04ec6d6cab9f5b508ca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/jscript/jscript_zmain.js HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: application/javascript
last-modified: Tue, 21 Nov 2023 22:23:14 GMT
cache-control: max-age=14400
expires: Wed, 08 May 2024 22:47:34 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w3J%2BmE3qw9eEqTv3lJMM6wp1K%2B3d1dp8%2FkPZzr617MDxEchKYk%2BKYAdv2uAiJk03wY11nxaN9cMXQPyxvxR%2BAL%2FB0mqmmKOCcrC5Ttz%2Bpl4h3BUTFNI3z%2BehwQdfzXI19ozOv%2BiUmXK%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880cf6b3d9f57127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 | 216.58.207.227 | 200 OK | 7.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 IP216.58.207.227:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.hurleymedellin.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 19:57:12 GMT
expires: Fri, 02 May 2025 19:57:12 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
age: 528323
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/jscript/jscript_cookies.js | 104.21.53.81 | 200 OK | 8.7 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/jscript/jscript_cookies.js IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJavaScript source, ASCII text, with very long lines (745), with no line terminators Hash65807f4bee7bcb4f6af769919ee805d3 c75e394f474f9238cb539f8b7ef9708cc083eff2 6979054ef7300efc7abcaefb0168e095f82adc208a00837ae1a95e0f72e2b598
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/jscript/jscript_cookies.js HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: application/javascript
last-modified: Tue, 21 Nov 2023 22:23:08 GMT
cache-control: max-age=14400
expires: Wed, 08 May 2024 22:47:34 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8RNCUEA%2BtN6IJ7KbaQkoweon8L8n0na6gaOEf224AAGSsZmvWSi7jpwNLmrbh7q%2B%2BCf6eE7EuEvVqu8hdz1C1UKh3t1g59%2FVjVJuWm9BeYfPZVJUene%2BGN7OjwZKxQ26RMDngye7xLGF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880cf6b3c9e67127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 8.0 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8000, version 1.0 Hash72993dddf88a63e8f226656f7de88e57 179f97ec0275f09603a8db94d4380eb584d81cd5 f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.hurleymedellin.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 15:13:04 GMT
expires: Fri, 02 May 2025 15:13:04 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:59 GMT
content-type: font/woff2
age: 545371
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Glegoo:wght@400;700&display=swap | 142.250.74.106 | 200 OK | 8.3 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Glegoo:wght@400;700&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hash044ef6cf4113f03c6daafbf410eb2d07 2cff4982d544d043f4cbf08df9f186aa51ada4ed 92cab0842a324088cbd0e4c979fd4cd17a4c896dfc516f72fefd3f5bed5993b8
GET /css2?family=Glegoo:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/images/hurley/subject1.jpg | 104.21.53.81 | 200 OK | 284 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/images/hurley/subject1.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 815x964, components 3 Size284 kB (283801 bytes) Hashcebeca5b2815123a2509af0b1d11a5bd 5dc218cd3ff874167e93ffd9f6cd1ec9163e2811 7a00c6931e6f922a7090041a9e4fd6c068896c00ed7ce70bc3dfaf90cdb44c61
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/images/hurley/subject1.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 283801
cache-control: public, max-age=864000, must-revalidate
expires: Fri, 07 Jun 2024 22:42:34 GMT
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mJqAjQahlyJAe50YULq4L6X5HQIG3oL4qXxioFxHnfHMGxM7WOFUSeVFsSPYigYO7mP1GPddww7AsExKCMnhf6S7%2FOUSGl7Ht16VcFyX485ahrejwHDksbDGxwLUV1PcVH6joccWro2I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b3a9c87127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/images/hurley/subject4.jpg | 104.21.53.81 | 200 OK | 218 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/images/hurley/subject4.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 984x1030, components 3 Size218 kB (217731 bytes) Hashc063fa70fe98c74ecb786e6d6fed2706 3f0d122107d6e68fb63aca2147fe12b009e898b5 c6484a6dd5b0a49ceb03f1ac0ea05eec297361c45b32cc7700051d38ea121af6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/images/hurley/subject4.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 217731
cache-control: public, max-age=864000, must-revalidate
expires: Fri, 07 Jun 2024 22:42:34 GMT
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bkj0ZR97jhAfVKmY%2B8ve4RodzjWLv598gA8G8fit1Onky6Mmdd0X1FpVRnb0JVxIVplG11vT2EqcK67bQ%2BM1CLEaM7PdpbjYYKipZU68jzxZEuHAYWlwoN4MB4WKRipaX1C7mappSAJy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b3a9d07127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/images/hurley/subject3.jpg | 104.21.53.81 | 200 OK | 300 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/images/hurley/subject3.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 984x1030, components 3 Size300 kB (299699 bytes) Hash7808cff7b540b16bc132573e55e9e172 f24524a9fc11a4bb99ae2cf111815fd1c8ad42f5 636a650831bd9504070eb60f55e8efb5353d74ede226f684b0288436e6eb4cad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/images/hurley/subject3.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 299699
cache-control: public, max-age=864000, must-revalidate
expires: Fri, 07 Jun 2024 22:42:34 GMT
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MEhG7HV2QyNAlTRp9LoO9K5eYVnBcZj01nwM3%2FDSO%2BJVzeC%2FkWw6yjzf%2BXiLxgzz1guS5qBVHt%2B2A1b9lCl%2F4Sq8MayAYAqDNQkCtqDdA%2BMzF6eZ2m9qgLS6ZKgjb5WhucNyhrL24HIp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b3a9cc7127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| f.vimeocdn.com/p/4.32.4/js/vendor.module.js | 151.101.246.109 | 200 OK | 117 kB |
URL GET HTTP/2f.vimeocdn.com/p/4.32.4/js/vendor.module.js IP151.101.246.109:443
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerGlobalSign nv-sa Subject*.vimeocdn.com Fingerprint4F:12:C8:71:F2:3F:56:5B:F7:BB:3A:38:F1:B9:76:36:96:18:43:07 ValidityWed, 22 Nov 2023 22:50:09 GMT - Mon, 23 Dec 2024 22:50:08 GMT
File typeJavaScript source, ASCII text, with very long lines (65457) Size117 kB (117329 bytes) Hash99796ea2834ba867148814dd8ad6619b befc7fec807c24d34033ea268c12d17d2b863506 3fd509db5dad5db6dab5430674beba1cf7d28f01470612f5319e91508f4cc547
GET /p/4.32.4/js/vendor.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://f.vimeocdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 08 May 2024 22:42:35 GMT
age: 15803
x-served-by: cache-iad-kcgs7200179-IAD, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 17, 9560
x-timer: S1715208155.347372,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 117329
X-Firefox-Spdy: h2
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/images/hurley/slide_banner_1d.jpg | 104.21.53.81 | 200 OK | 557 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/images/hurley/slide_banner_1d.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1900x496, components 3 Size557 kB (556683 bytes) Hash916bac7a73eb15ec2b66db09b7ac42f6 91b5e3ec047f9aa7853d906bbad30b143457ae83 c99c8f9a6a7fa573964d3ecf172bc77109a1258e65349f3f1b6a9bde868de974
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/images/hurley/slide_banner_1d.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 556683
cache-control: public, max-age=864000, must-revalidate
expires: Fri, 07 Jun 2024 22:42:34 GMT
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K5XSXRyArXFBE1JqWnkD%2FAVeYylvY1nGthzO9vkR6wI0Auon8BcFqREJJ71vc6M9YJj97M1GTNMT88yx%2F8gkgVC%2F1%2BwhZMxhDXn6%2FrQbpqFUyM8m2tJbMoYlqbxUuTSpkU0Dv78HFqJU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b369967127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/images/hurley/banner_2d.jpg | 104.21.53.81 | 200 OK | 260 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/images/hurley/banner_2d.jpg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1920x503, components 3 Size260 kB (259576 bytes) Hashbd03a3699677b0b446ca1b88fd01c875 5e20b2d2bc0dff25b3841f9cae51437adae21609 144571b9f9f6ab55475e2e9ee07eb143f4437868908f9a17aa80e7617e61647a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/images/hurley/banner_2d.jpg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/jpeg
content-length: 259576
cache-control: public, max-age=864000, must-revalidate
expires: Fri, 07 Jun 2024 22:42:34 GMT
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W3rOcB9VPKziAb1lcoEPIKDZ%2FWZtjGhFkgp9raB4GAbjO6P8dp4ttPo1RAgtaTYoqX5EcDPNrOtKDAgXXLmAdwXOQ7YWG7FQuOSFeAoFrIWlP13NMWuvHegDyY8CwGVnFjbDnPxBSxhX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880cf6b3a9d37127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900&display=swap | 142.250.74.106 | 200 OK | 1.9 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (1839) Hash1a20dbf858ff09283d8db36d7707e2c9 24e863bb338640dedb6ef0ae895e318775dc3f39 cacd006cc8ba7caeeb8311f062836f60f2fccf6f95b0abf4b2079e759535779d
GET /css2?family=Roboto:wght@100;300;400;500;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| i.vimeocdn.com/video/1647674242-50af568dda0445b66109b181ebd00a419f9f07b5233279b936e6601945ad6acd-d?mw=80&q=85 | 151.101.192.217 | 200 OK | 1.5 kB |
URL GET HTTP/2i.vimeocdn.com/video/1647674242-50af568dda0445b66109b181ebd00a419f9f07b5233279b936e6601945ad6acd-d?mw=80&q=85 IP151.101.192.217:443
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerGlobalSign nv-sa Subject*.vimeo.com FingerprintB1:D1:17:3D:08:07:A6:93:99:18:AC:B6:E9:C5:BC:F9:01:9F:32:9F ValidityThu, 19 Oct 2023 18:39:17 GMT - Tue, 19 Nov 2024 18:39:16 GMT
Hashce2065e2341c61402d1fc338e2d28236 ed5ffe759fb55f2607de6cdcd7136e3c7bb1823d 0ee6e89585cc0d9a118848dd7c0bae078ca39308dbf29aee8b2d73ccdd724243
GET /video/1647674242-50af568dda0445b66109b181ebd00a419f9f07b5233279b936e6601945ad6acd-d?mw=80&q=85 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=2592000
content-type: image/avif
etag: "ce2065e2341c61402d1fc338e2d28236"
via: 1.1 google, 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
age: 16975
date: Wed, 08 May 2024 22:42:35 GMT
x-served-by: cache-dfw-kdal2120083-DFW, cache-hel1410022-HEL
x-cache: HIT, MISS
x-cache-hits: 4, 0
x-timer: S1715208156.736322,VS0,VE135
vary: Accept
content-length: 1478
X-Firefox-Spdy: h2
|
|
| 137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/sep/video/737c3290,7697562a,9196c942,95a0bde8,9e5a4649,a064f675,cc973b8a/audio/d834d32a,e04fa04c,f3689f16/master.json?base64_init=1&query_string_ranges=1 |  104.123.68.160 | 200 OK | 3.4 kB |
URL GET HTTP/2137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/sep/video/737c3290,7697562a,9196c942,95a0bde8,9e5a4649,a064f675,cc973b8a/audio/d834d32a,e04fa04c,f3689f16/master.json?base64_init=1&query_string_ranges=1 IP104.123.68.160:443 ASN#20940 Akamai International B.V.
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Hash95d324fa9bc580604c945dc526893b1b 5a285eebc245d2a7cfb1e51fb7e35bb0c786c5d8 7316c0603eb07e529ee97fef03e03aecf149637612b3c281cf9218b2930c363e
GET /exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/sep/video/737c3290,7697562a,9196c942,95a0bde8,9e5a4649,a064f675,cc973b8a/audio/d834d32a,e04fa04c,f3689f16/master.json?base64_init=1&query_string_ranges=1 HTTP/1.1
Host: 137vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-type: application/json
origin-retrieved-hour: 1697270400
access-control-max-age: 86400
timing-allow-origin: *
content-length: 3398
aka-c-hit: cache-hit
date: Wed, 08 May 2024 22:42:35 GMT
vary: Accept-Encoding
akamai-request-bc: [a=104.123.68.156,b=500135777,c=g,n=SE_AB_STOCKHOLM,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]
akamai-mon-iucid-del: 877678
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
akamai-grn: 0.9c447b68.1715208155.1dcf7761
x-vim-cachebc: EP:H11,E:m,TD0:h
access-control-expose-headers: X-VIM-CACHEBC, Akamai-GRN, Akamai-Request-BC
access-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| 137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/f3689f16.mp4?r=dXM%3D&range=794-52685 | 104.123.68.160 | 200 OK | 52 kB |
URL GET HTTP/2137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/f3689f16.mp4?r=dXM%3D&range=794-52685 IP104.123.68.160:443 ASN#20940 Akamai International B.V.
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Hashb216b5db8ae8a6dca3edcccad7dcb380 d0de9c1fd8f19aab1cf34fb87099e9b219c47059 d83fa24229cd33fce28cc576aa2897252e6feba5ebcae3c696521a058ba4e14c
GET /exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/f3689f16.mp4?r=dXM%3D&range=794-52685 HTTP/1.1
Host: 137vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 51892
last-modified: Mon, 03 Apr 2023 21:08:20 GMT
server: parcel
origin-retrieved-hour: 1698393600
access-control-max-age: 86400
timing-allow-origin: *
aka-c-hit: cache-hit
date: Wed, 08 May 2024 22:42:36 GMT
akamai-request-bc: [a=104.123.68.156,b=500135855,c=g,n=SE_AB_STOCKHOLM,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]
akamai-mon-iucid-del: 877678
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
content-type: video/mp4
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
akamai-grn: 0.9c447b68.1715208156.1dcf77af
x-vim-cachebc: EP:H11,E:m,TD0:h
access-control-expose-headers: X-VIM-CACHEBC, Akamai-GRN, Akamai-Request-BC
access-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
access-control-allow-origin: *
set-cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:104.123.68.160~requestid:1dcf77af~time:1715208156~ghostforwardip:184.51.88.49~edgecache:cache-miss~rtt:8~region:NO-; path=/; domain=.akamaized.net;
X-Firefox-Spdy: h2
|
|
| player-telemetry.vimeo.com/player-events/log/play | 34.120.202.204 | 200 OK | 0 B |
URL POST HTTP/2player-telemetry.vimeo.com/player-events/log/play IP34.120.202.204:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerGoogle Trust Services LLC Subjectfresnel.vimeocdn.com FingerprintE9:38:7F:F5:C8:BB:A0:0C:AA:E8:21:04:55:EA:EA:D1:AC:F8:47:24 ValidityMon, 22 Apr 2024 00:36:14 GMT - Sun, 21 Jul 2024 01:30:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /player-events/log/play HTTP/1.1
Host: player-telemetry.vimeo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 656
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
content-type: text/html; charset=UTF-8
date: Wed, 08 May 2024 22:42:36 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 | 34.120.202.204 | 200 OK | 0 B |
URL POST HTTP/2fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 IP34.120.202.204:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerGoogle Trust Services LLC Subjectfresnel.vimeocdn.com FingerprintE9:38:7F:F5:C8:BB:A0:0C:AA:E8:21:04:55:EA:EA:D1:AC:F8:47:24 ValidityMon, 22 Apr 2024 00:36:14 GMT - Sun, 21 Jul 2024 01:30:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 HTTP/1.1
Host: fresnel.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1419
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Wed, 08 May 2024 22:42:36 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 | 34.120.202.204 | 200 OK | 0 B |
URL POST HTTP/2fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 IP34.120.202.204:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerGoogle Trust Services LLC Subjectfresnel.vimeocdn.com FingerprintE9:38:7F:F5:C8:BB:A0:0C:AA:E8:21:04:55:EA:EA:D1:AC:F8:47:24 ValidityMon, 22 Apr 2024 00:36:14 GMT - Sun, 21 Jul 2024 01:30:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 HTTP/1.1
Host: fresnel.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1126
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Wed, 08 May 2024 22:42:36 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 | 34.120.202.204 | 200 OK | 0 B |
URL POST HTTP/2fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 IP34.120.202.204:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerGoogle Trust Services LLC Subjectfresnel.vimeocdn.com FingerprintE9:38:7F:F5:C8:BB:A0:0C:AA:E8:21:04:55:EA:EA:D1:AC:F8:47:24 ValidityMon, 22 Apr 2024 00:36:14 GMT - Sun, 21 Jul 2024 01:30:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 HTTP/1.1
Host: fresnel.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1421
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Wed, 08 May 2024 22:42:36 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/fonts/annimex-icons.ttf?teavmy | 104.21.53.81 | 200 OK | 401 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/fonts/annimex-icons.ttf?teavmy IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeTrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, adorn-icons Size401 kB (400886 bytes) Hashbf0ac66d25054ca5980a9d1e0f9e44bc c7fbfba3dbdb3305043b51a91321d5350da9f5b1 7958cc48ca431a8caeae79af96733f3f84ec0e5bcd10b5af23fecc87cce96e72
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/fonts/annimex-icons.ttf?teavmy HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/includes/templates/hurleymedellin/css/style_plugins.css
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:35 GMT
content-type: application/x-font-ttf
cache-control: public, max-age=864000, must-revalidate
expires: Wed, 08 May 2024 22:47:35 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:35 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jc2soeQ3qUzPm9IC0bdd8G53cFwJsdPTJko8agA6QNRvfPE7%2BmBg4vuf1dXyRhoQGF9RYmphF5OxRAWsYKzmZNBUe9Wbu2g1iIitQez7eo879YMPKqHKrc%2FHXYGaCSvoNAK9RD4uK%2F01"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880cf6b8ce537127-OSL
alt-svc: h3=":443"; ma=86400
|
|
| 137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/e04fa04c.mp4?r=dXM%3D&range=794-76605 | 104.123.68.160 | 200 OK | 76 kB |
URL GET HTTP/2137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/e04fa04c.mp4?r=dXM%3D&range=794-76605 IP104.123.68.160:443 ASN#20940 Akamai International B.V.
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Hashd230a44d5838bf4c8eec9f9cfed1996d 01cf66a7a1d1bab500be59833b3342d577155fcc c0afb9cbfbf91a377cef3c23874e4506cf54c23cac10438e7d9308eb9883f257
GET /exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/e04fa04c.mp4?r=dXM%3D&range=794-76605 HTTP/1.1
Host: 137vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 75812
last-modified: Mon, 03 Apr 2023 21:08:18 GMT
server: parcel
origin-retrieved-hour: 1698393600
access-control-max-age: 86400
timing-allow-origin: *
aka-c-hit: cache-hit
date: Wed, 08 May 2024 22:42:36 GMT
akamai-request-bc: [a=104.123.68.156,b=500136254,c=g,n=SE_AB_STOCKHOLM,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]
akamai-mon-iucid-del: 877678
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
content-type: video/mp4
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
akamai-grn: 0.9c447b68.1715208156.1dcf793e
x-vim-cachebc: EP:H11,E:m,TD0:h
access-control-expose-headers: X-VIM-CACHEBC, Akamai-GRN, Akamai-Request-BC
access-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
access-control-allow-origin: *
set-cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:104.123.68.160~requestid:1dcf793e~time:1715208156~ghostforwardip:2.17.251.38~edgecache:cache-miss~rtt:8~region:NO-; path=/; domain=.akamaized.net;
X-Firefox-Spdy: h2
|
|
| 137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/9e5a4649.mp4?r=dXMtZWFzdDE%3D&range=923-2369732 | 104.123.68.160 | 200 OK | 2.4 MB |
URL GET HTTP/2137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/9e5a4649.mp4?r=dXMtZWFzdDE%3D&range=923-2369732 IP104.123.68.160:443 ASN#20940 Akamai International B.V.
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Size2.4 MB (2368810 bytes) Hashd0caf16a51d7977a192b214196a45f31 73302e94721a4679a651d749481b2b7d55dabbe9 44694a9a350003ec62bd3c51e9f91ea29345e64912eacaa450616e4f7fc109c4
GET /exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/9e5a4649.mp4?r=dXMtZWFzdDE%3D&range=923-2369732 HTTP/1.1
Host: 137vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 2368810
last-modified: Mon, 03 Apr 2023 21:10:53 GMT
server: parcel
origin-retrieved-hour: 1698393600
access-control-max-age: 86400
timing-allow-origin: *
aka-c-hit: cache-hit
date: Wed, 08 May 2024 22:42:36 GMT
akamai-request-bc: [a=104.123.68.156,b=500136278,c=g,n=SE_AB_STOCKHOLM,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]
akamai-mon-iucid-del: 877678
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
content-type: video/mp4
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
akamai-grn: 0.9c447b68.1715208156.1dcf7956
x-vim-cachebc: EP:H11,E:m,TD0:h
access-control-expose-headers: X-VIM-CACHEBC, Akamai-GRN, Akamai-Request-BC
access-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
access-control-allow-origin: *
set-cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:104.123.68.160~requestid:1dcf7956~time:1715208156~ghostforwardip:184.51.88.13~edgecache:cache-miss~rtt:11~region:NO-; path=/; domain=.akamaized.net;
X-Firefox-Spdy: h2
|
|
| i.vimeocdn.com/video/1647674242-50af568dda0445b66109b181ebd00a419f9f07b5233279b936e6601945ad6acd-d?mw=1280&mh=720 | 151.101.192.217 | 200 OK | 137 kB |
URL GET HTTP/2i.vimeocdn.com/video/1647674242-50af568dda0445b66109b181ebd00a419f9f07b5233279b936e6601945ad6acd-d?mw=1280&mh=720 IP151.101.192.217:443
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerGlobalSign nv-sa Subject*.vimeo.com FingerprintB1:D1:17:3D:08:07:A6:93:99:18:AC:B6:E9:C5:BC:F9:01:9F:32:9F ValidityThu, 19 Oct 2023 18:39:17 GMT - Tue, 19 Nov 2024 18:39:16 GMT
Size137 kB (137367 bytes) Hash4a98502324c87350bea81c52686e91cf e9dcd65ced7f62d1948166feb5f1a8c46409a008 93768c5688e1fb0c29909508548d7367ab025d6130563c839444d1a242e3d484
GET /video/1647674242-50af568dda0445b66109b181ebd00a419f9f07b5233279b936e6601945ad6acd-d?mw=1280&mh=720 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=2592000
content-type: image/avif
etag: "4a98502324c87350bea81c52686e91cf"
via: 1.1 google, 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
age: 0
date: Wed, 08 May 2024 22:42:36 GMT
x-served-by: cache-dfw-kdfw8210129-DFW, cache-hel1410022-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1715208156.735510,VS0,VE1259
vary: Accept
content-length: 137367
X-Firefox-Spdy: h2
|
|
| 137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/cc973b8a.mp4?r=dXMtd2VzdDE%3D&range=925-4737902 | 104.123.68.160 | 200 OK | 4.7 MB |
URL GET HTTP/2137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/cc973b8a.mp4?r=dXMtd2VzdDE%3D&range=925-4737902 IP104.123.68.160:443 ASN#20940 Akamai International B.V.
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Size4.7 MB (4736978 bytes) Hash2882c80e0536a2733eb14e73694ac1dc d0609697289c51d07685ed1f0d823684a06ed1ac 06a9656d0f6be6dd995627d9729cc2dd595720d38553a2d202658d20598e42d8
GET /exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/cc973b8a.mp4?r=dXMtd2VzdDE%3D&range=925-4737902 HTTP/1.1
Host: 137vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 4736978
last-modified: Mon, 03 Apr 2023 21:11:09 GMT
server: parcel
origin-retrieved-hour: 1698541200
access-control-max-age: 86400
timing-allow-origin: *
aka-c-hit: cache-hit
date: Wed, 08 May 2024 22:42:37 GMT
akamai-request-bc: [a=104.123.68.156,b=500136323,c=g,n=SE_AB_STOCKHOLM,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]
akamai-mon-iucid-del: 877678
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
content-type: video/mp4
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
akamai-grn: 0.9c447b68.1715208157.1dcf7983
x-vim-cachebc: EP:H11,E:m,TD0:h
access-control-expose-headers: X-VIM-CACHEBC, Akamai-GRN, Akamai-Request-BC
access-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
access-control-allow-origin: *
set-cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:104.123.68.160~requestid:1dcf7983~time:1715208157~ghostforwardip:23.73.4.219~edgecache:cache-miss~rtt:9~region:NO-; path=/; domain=.akamaized.net;
X-Firefox-Spdy: h2
|
|
| 137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/e04fa04c.mp4?r=dXM%3D&range=76606-152718 | 104.123.68.160 | 200 OK | 76 kB |
URL GET HTTP/2137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/e04fa04c.mp4?r=dXM%3D&range=76606-152718 IP104.123.68.160:443 ASN#20940 Akamai International B.V.
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Hashb9272c405f598c37a5ce4a33402ec648 5b75b58fab0827a311c4b83b711b674af059ce50 9264ee98df99684c0df068eb9c020db7f2042e071bbadfe903c63861c86caaa8
GET /exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/e04fa04c.mp4?r=dXM%3D&range=76606-152718 HTTP/1.1
Host: 137vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 76113
last-modified: Mon, 03 Apr 2023 21:08:18 GMT
server: parcel
origin-retrieved-hour: 1698393600
access-control-max-age: 86400
timing-allow-origin: *
aka-c-hit: cache-hit
date: Wed, 08 May 2024 22:42:38 GMT
akamai-request-bc: [a=104.123.68.156,b=500136540,c=g,n=SE_AB_STOCKHOLM,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940],[c=w,n=US_GA_LITHIASPRINGS,o=20940]
akamai-mon-iucid-del: 877678
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
content-type: video/mp4
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
akamai-grn: 0.9c447b68.1715208157.1dcf7a5c
x-vim-cachebc: EP:H11,E:m,TD0:m,CW:h
access-control-expose-headers: X-VIM-CACHEBC, Akamai-GRN, Akamai-Request-BC
access-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
access-control-allow-origin: *
set-cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:104.123.68.160~requestid:1dcf7a5c~time:1715208158~ghostforwardip:184.51.252.209~edgecache:cache-miss~rtt:9~region:NO-; path=/; domain=.akamaized.net;
X-Firefox-Spdy: h2
|
|
| 137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/e04fa04c.mp4?r=dXM%3D&range=152719-228705 | 104.123.68.160 | 200 OK | 76 kB |
URL GET HTTP/2137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/e04fa04c.mp4?r=dXM%3D&range=152719-228705 IP104.123.68.160:443 ASN#20940 Akamai International B.V.
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Hashfed6d4a554cf00713c8baed5989108c0 290034cb0710a6c3a486d72bbc3d113274696b27 83fae301e4982f8fe91f2b0cb2c521e7b6530dd8af63f60ca05ab78618a3bee3
GET /exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/e04fa04c.mp4?r=dXM%3D&range=152719-228705 HTTP/1.1
Host: 137vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 75987
last-modified: Mon, 03 Apr 2023 21:08:18 GMT
server: parcel
origin-retrieved-hour: 1698393600
access-control-max-age: 86400
timing-allow-origin: *
aka-c-hit: cache-hit
date: Wed, 08 May 2024 22:42:39 GMT
akamai-request-bc: [a=104.123.68.156,b=500137214,c=g,n=SE_AB_STOCKHOLM,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]
akamai-mon-iucid-del: 877678
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
content-type: video/mp4
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
akamai-grn: 0.9c447b68.1715208159.1dcf7cfe
x-vim-cachebc: EP:H11,E:m,TD0:h
access-control-expose-headers: X-VIM-CACHEBC, Akamai-GRN, Akamai-Request-BC
access-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
access-control-allow-origin: *
set-cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:104.123.68.160~requestid:1dcf7cfe~time:1715208159~ghostforwardip:2.17.251.15~edgecache:cache-miss~rtt:8~region:NO-; path=/; domain=.akamaized.net;
X-Firefox-Spdy: h2
|
|
| 137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/cc973b8a.mp4?r=dXMtd2VzdDE%3D&range=4737903-8897415 | 104.123.68.160 | 200 OK | 4.2 MB |
URL GET HTTP/2137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/cc973b8a.mp4?r=dXMtd2VzdDE%3D&range=4737903-8897415 IP104.123.68.160:443 ASN#20940 Akamai International B.V.
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Size4.2 MB (4159513 bytes) Hashc9ece13fca3cd0820411d72cfd87260e e6aa6b2c7f42d17a7d47d92f2474e105631bdf89 526ee6d8fc9e8b456f56b82683c8f81f94f275e66d29acd74de905a13665ecb6
GET /exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/cc973b8a.mp4?r=dXMtd2VzdDE%3D&range=4737903-8897415 HTTP/1.1
Host: 137vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 4159513
last-modified: Mon, 03 Apr 2023 21:11:09 GMT
server: parcel
origin-retrieved-hour: 1711119600
access-control-max-age: 86400
timing-allow-origin: *
aka-c-hit: cache-hit
date: Wed, 08 May 2024 22:42:39 GMT
akamai-request-bc: [a=104.123.68.156,b=500137228,c=g,n=SE_AB_STOCKHOLM,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]
akamai-mon-iucid-del: 877678
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
content-type: video/mp4
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
akamai-grn: 0.9c447b68.1715208159.1dcf7d0c
x-vim-cachebc: EP:H11,E:m,TD0:h
access-control-expose-headers: X-VIM-CACHEBC, Akamai-GRN, Akamai-Request-BC
access-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
access-control-allow-origin: *
set-cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:104.123.68.160~requestid:1dcf7d0c~time:1715208159~ghostforwardip:23.197.207.41~edgecache:cache-miss~rtt:7~region:NO-; path=/; domain=.akamaized.net;
X-Firefox-Spdy: h2
|
|
| player-telemetry.vimeo.com/player-events/log/partial | 34.120.202.204 | 200 OK | 0 B |
URL POST HTTP/3player-telemetry.vimeo.com/player-events/log/partial IP34.120.202.204:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerGoogle Trust Services LLC Subjectfresnel.vimeocdn.com FingerprintE9:38:7F:F5:C8:BB:A0:0C:AA:E8:21:04:55:EA:EA:D1:AC:F8:47:24 ValidityMon, 22 Apr 2024 00:36:14 GMT - Sun, 21 Jul 2024 01:30:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /player-events/log/partial HTTP/1.1
Host: player-telemetry.vimeo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 697
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/3 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
content-type: text/html; charset=UTF-8
date: Wed, 08 May 2024 22:42:39 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 | 34.120.202.204 | 200 OK | 0 B |
URL POST HTTP/2fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 IP34.120.202.204:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerGoogle Trust Services LLC Subjectfresnel.vimeocdn.com FingerprintE9:38:7F:F5:C8:BB:A0:0C:AA:E8:21:04:55:EA:EA:D1:AC:F8:47:24 ValidityMon, 22 Apr 2024 00:36:14 GMT - Sun, 21 Jul 2024 01:30:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 HTTP/1.1
Host: fresnel.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1631
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Wed, 08 May 2024 22:42:39 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/images/favicon.ico | 104.21.53.81 | 200 OK | 999 B |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/images/favicon.ico IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeMS Windows icon resource - 1 icon, 48x48, 32 bits/pixel Hash5349ce0ce03b8044713f279d1ec69f4e 3e082983ddc423be6630912a810a24a755e5d0d1 b3d4efb24769b47d40d977f5dd9cdeddfa09ac5d74e98246fe0d64149edc431d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/images/favicon.ico HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:36 GMT
content-type: image/x-icon
cache-control: public, max-age=864000, must-revalidate
expires: Thu, 09 May 2024 22:42:36 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:36 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Osr09IPVNuVN9OEf5EJ4w1PNIJtfkV7ZpkgLybruJaoMxdSbluCoreToFMxMhmflJIEWKvagpAmuGoUtu9jE5EogX9ftHEi8e7HlxOlvGguJovzsb%2FbHLs%2FuRb4TLY%2Bxq29KgeAfUIHG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880cf6bd4af07127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/jscript/jquery.min.js | 104.21.53.81 | 200 OK | 32 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/jscript/jquery.min.js IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/jscript/jquery.min.js HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: application/javascript
last-modified: Tue, 21 Nov 2023 22:23:08 GMT
cache-control: max-age=14400
expires: Wed, 08 May 2024 22:47:34 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DRrdLHxpWS9NNCNrgRcCIXtGFmVToXZUrQflHyMtHB3kVUgfYevAOqydjR4I49qjzgOG9GqXwcBPF%2FbYBNrqI6BffbtajSkpQw%2BgZLMX2fNz3Cw2tl0VQ9ucjn4xyeQrfgMxFfFqifCr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880cf6b3b9dc7127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 | 34.120.202.204 | 200 OK | 0 B |
URL POST HTTP/2fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 IP34.120.202.204:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerGoogle Trust Services LLC Subjectfresnel.vimeocdn.com FingerprintE9:38:7F:F5:C8:BB:A0:0C:AA:E8:21:04:55:EA:EA:D1:AC:F8:47:24 ValidityMon, 22 Apr 2024 00:36:14 GMT - Sun, 21 Jul 2024 01:30:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 HTTP/1.1
Host: fresnel.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1683
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Wed, 08 May 2024 22:42:39 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 | 34.120.202.204 | 200 OK | 0 B |
URL POST HTTP/2fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 IP34.120.202.204:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerGoogle Trust Services LLC Subjectfresnel.vimeocdn.com FingerprintE9:38:7F:F5:C8:BB:A0:0C:AA:E8:21:04:55:EA:EA:D1:AC:F8:47:24 ValidityMon, 22 Apr 2024 00:36:14 GMT - Sun, 21 Jul 2024 01:30:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /add/player-stats?beacon=1&session-id=0b64e4fbe751e38fd6ffd8c5a0d1a6c2124c22301715208154 HTTP/1.1
Host: fresnel.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2117
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Wed, 08 May 2024 22:42:39 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/cc973b8a.mp4?r=dXMtd2VzdDE%3D&range=8897416-13183216 | 104.123.68.160 | 200 OK | 4.3 MB |
URL GET HTTP/2137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/cc973b8a.mp4?r=dXMtd2VzdDE%3D&range=8897416-13183216 IP104.123.68.160:443 ASN#20940 Akamai International B.V.
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Size4.3 MB (4285801 bytes) Hash3c699b0954c023090e835e2945f77357 d7145b8587fa717ee5656704d9c081caec3e9793 2815a449357e8174f5c2e622e98a6e0efa001c47fedcad5831282941f0abf572
GET /exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/cc973b8a.mp4?r=dXMtd2VzdDE%3D&range=8897416-13183216 HTTP/1.1
Host: 137vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 4285801
last-modified: Mon, 03 Apr 2023 21:11:09 GMT
server: parcel
origin-retrieved-hour: 1698393600
access-control-max-age: 86400
timing-allow-origin: *
aka-c-hit: cache-hit
date: Wed, 08 May 2024 22:42:39 GMT
akamai-request-bc: [a=104.123.68.156,b=500137300,c=g,n=SE_AB_STOCKHOLM,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940],[c=w,n=US_IL_CHICAGO,o=20940]
akamai-mon-iucid-del: 877678
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
content-type: video/mp4
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
akamai-grn: 0.9c447b68.1715208159.1dcf7d54
x-vim-cachebc: EP:H11,E:m,TD0:m,CW:h
access-control-expose-headers: X-VIM-CACHEBC, Akamai-GRN, Akamai-Request-BC
access-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
access-control-allow-origin: *
set-cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:104.123.68.160~requestid:1dcf7d54~time:1715208159~ghostforwardip:184.51.88.6~edgecache:cache-miss~rtt:19~region:NO-; path=/; domain=.akamaized.net;
X-Firefox-Spdy: h2
|
|
| 137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/e04fa04c.mp4?r=dXM%3D&range=228706-304940 | 104.123.68.160 | 200 OK | 76 kB |
URL GET HTTP/2137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/e04fa04c.mp4?r=dXM%3D&range=228706-304940 IP104.123.68.160:443 ASN#20940 Akamai International B.V.
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Hash1f60d5be0da31196767f6e97275b018d 00db65b484c1f7e8bf9efd629faa8f9e300eab7a 54597eda9b3985edbcdc8ccf6237f82082a09adea297114679beaa6b18d79606
GET /exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/audio/e04fa04c.mp4?r=dXM%3D&range=228706-304940 HTTP/1.1
Host: 137vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-length: 76235
last-modified: Mon, 03 Apr 2023 21:08:18 GMT
server: parcel
origin-retrieved-hour: 1698393600
access-control-max-age: 86400
timing-allow-origin: *
aka-c-hit: cache-hit
date: Wed, 08 May 2024 22:42:39 GMT
akamai-request-bc: [a=104.123.68.156,b=500137588,c=g,n=SE_AB_STOCKHOLM,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940]
akamai-mon-iucid-del: 877678
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
content-type: video/mp4
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
akamai-grn: 0.9c447b68.1715208159.1dcf7e74
x-vim-cachebc: EP:H11,E:m,TD0:h
access-control-expose-headers: X-VIM-CACHEBC, Akamai-GRN, Akamai-Request-BC
access-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
access-control-allow-origin: *
set-cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:104.123.68.160~requestid:1dcf7e74~time:1715208159~ghostforwardip:88.221.27.121~edgecache:cache-miss~rtt:7~region:NO-; path=/; domain=.akamaized.net;
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Arima+Madurai:wght@300;400;500;700;800;900&display=swap | 142.250.74.106 | 200 OK | 10 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Arima+Madurai:wght@300;400;500;700;800;900&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hash6a3b1e2d60b745028f56ba1f67ad3562 96bef851eac8bb148221543e61dc45f0791ec101 9e466763ead4c3462093cb5167f2b55019a42c3e0f8b6be57a5e63ddf19ff562
GET /css2?family=Arima+Madurai:wght@300;400;500;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| f.vimeocdn.com/p/4.32.4/js/player.module.js | 151.101.246.109 | 200 OK | 586 kB |
URL GET HTTP/2f.vimeocdn.com/p/4.32.4/js/player.module.js IP151.101.246.109:443
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerGlobalSign nv-sa Subject*.vimeocdn.com Fingerprint4F:12:C8:71:F2:3F:56:5B:F7:BB:3A:38:F1:B9:76:36:96:18:43:07 ValidityWed, 22 Nov 2023 22:50:09 GMT - Mon, 23 Dec 2024 22:50:08 GMT
Size586 kB (585485 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/4.32.4/js/player.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 08 May 2024 22:42:35 GMT
age: 15803
x-served-by: cache-iad-kjyo7100143-IAD, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 17, 9092
x-timer: S1715208155.035849,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 141670
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Libre+Franklin:wght@100;200;300;400;500;600;700;800;900&display=swap | 142.250.74.106 | 200 OK | 11 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Libre+Franklin:wght@100;200;300;400;500;600;700;800;900&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hasheb9023562ab1966f30dc99199c862e99 c61e56985a7df5262657c080393142f4f3e674b0 23daa07b4cbfa8e9a4a4aa17f77ebab31297e8dcd5f1c082dc21f284ab5dd03a
GET /css2?family=Libre+Franklin:wght@100;200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css2?family=Poppins:wght@200;300;400;500;600;700;800;900&display=swap | 142.250.74.106 | 200 OK | 6.3 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Poppins:wght@200;300;400;500;600;700;800;900&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (6448), with no line terminators Hash5597ed8188a3994391b999f6caf0d0ec a647507c2dfaa80293672a339035e11335a7509b 40f0d46e2291b1365735633e70f2aac322fb4741fa001a7e8485692d660bb740
GET /css2?family=Poppins:wght@200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/css/style_zp.css | 104.21.53.81 | 200 OK | 17 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/css/style_zp.css IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeASCII text, with CRLF line terminators Hash26365791a0f99dccd4a33cc369db03c9 bc2d96bedda761ef3babe64956cac2a189af0501 2557d99794aa973b051b0bede5e8117531a70342853365ad2a908d10ecae554e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/css/style_zp.css HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: text/css
last-modified: Tue, 21 Nov 2023 22:21:12 GMT
cache-control: max-age=14400
expires: Wed, 08 May 2024 23:42:34 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kE%2FwU5ZcxBBdNN4jO6fEOi0D7oT9wXxbWkuCcUyS7z7ibQXQVTk9JEk5bX2qpQqWjGjIYga%2B0c2Tj6Hpwi0r3%2FCxb9BHpPZLdk%2FhqgkJ2BykA6KurMusLW379bgmX2bw6t5CKeoeOZYd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880cf6b359857127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/jscript/jscript_plugins.js | 104.21.53.81 | 200 OK | 273 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/jscript/jscript_plugins.js IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
Size273 kB (273266 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/jscript/jscript_plugins.js HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: application/javascript
last-modified: Tue, 21 Nov 2023 22:23:12 GMT
cache-control: max-age=14400
expires: Wed, 08 May 2024 22:47:34 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vrmLQF5lb7BJtf7TEgrLMJZCO2Cwy%2FZhBWHABI8DLeyUyQJPTrXg4aHIDHcUdr9rW82rQdDIOm9zHEtJcjvvRtKH3HPz61JRxM8iGmdmqGkScD%2BwF0B9T9bwz4pbwQVULHQeI%2BxEW3Sc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880cf6b3d9f37127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Libre+Baskerville:ital,wght@0,400;0,700;1,400&display=swap | 142.250.74.106 | 200 OK | 2.6 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Libre+Baskerville:ital,wght@0,400;0,700;1,400&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (2605), with no line terminators Hashd7e91faccd8b5b75c6794babc60413e9 490a3fe1bc93ea7dd9cff81c80eca5ea6cad68b3 8d4ecadfe561b26cf0addd9f7e39055b19844488449e0091a936a77fdff727d9
GET /css2?family=Libre+Baskerville:ital,wght@0,400;0,700;1,400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css2?family=Nunito+Sans:ital,wght@0,200;0,300;0,400;0,600;0,800;0,900;1,700&display=swap | 142.250.74.106 | 200 OK | 16 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Nunito+Sans:ital,wght@0,200;0,300;0,400;0,600;0,800;0,900;1,700&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash56e4df90a29f863f6faa6ccb7567e401 9f3f0306cb0054763e377c6f456890e33f546cd9 165c919c26eb19e053a7cf522566f7cfa686a2782e252b7cd39e15e5d8b4bf15
GET /css2?family=Nunito+Sans:ital,wght@0,200;0,300;0,400;0,600;0,800;0,900;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css2?family=Alata&display=swap | 142.250.74.106 | 200 OK | 1.2 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Alata&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (1179), with no line terminators Hash1f9ff1758f44a8354f9be6ccf531cb8a 7fd5c0f675262d59736c063d0569dd7fab71256f 37dfb66736045e51980abc5c9c002b3a658a8fadc626f4a0aacf957fe90b6809
GET /css2?family=Alata&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| f.vimeocdn.com/js_opt/modules/utils/vuid.min.js | 151.101.246.109 | 200 OK | 1.9 kB |
URL GET HTTP/2f.vimeocdn.com/js_opt/modules/utils/vuid.min.js IP151.101.246.109:443
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerGlobalSign nv-sa Subject*.vimeocdn.com Fingerprint4F:12:C8:71:F2:3F:56:5B:F7:BB:3A:38:F1:B9:76:36:96:18:43:07 ValidityWed, 22 Nov 2023 22:50:09 GMT - Mon, 23 Dec 2024 22:50:08 GMT
File typeJavaScript source, ASCII text, with very long lines (1939), with no line terminators Hash63c64437ca9e98c32ec330a0f28a019c dad235511e9c5bb0f91422c76251be3512bad313 56157e777dc242bd29b4d31fe77e468fad933c0b68364df52ce56a4737754c64
GET /js_opt/modules/utils/vuid.min.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript
cache-control: public, max-age=2592000
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 08 May 2024 22:42:35 GMT
age: 1254846
x-served-by: cache-iad-kiad7000106-IAD, cache-hel1410033-HEL
x-cache: HIT, HIT
x-cache-hits: 38, 75345
x-timer: S1715208156.644532,VS0,VE0
vary: Accept-Encoding,x-http-method-override
content-length: 985
X-Firefox-Spdy: h2
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/css/style_zo.css | 104.21.53.81 | 200 OK | 154 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/css/style_zo.css IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeassembler source, ASCII text, with very long lines (538) Size154 kB (153835 bytes) Hash1bde24e3368af561ac961c17977fbe2a 7079d16d51e7d951d3828761577338610369d9a2 43bc6a4ca860919666bd2879c0881950a0adeabb98a97c5ee3cbd24e2b48bb30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/css/style_zo.css HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: text/css
last-modified: Tue, 21 Nov 2023 22:21:12 GMT
cache-control: max-age=14400
expires: Wed, 08 May 2024 23:42:34 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VnkQm3exQmi5oCeiYpNl7JZ%2FlXlSDugfdAP94iF1vlqPG9aVomtOSQ%2B6I0BqjWBEi%2FlpzUghNPVl%2F%2FbpUe84tLm6PsdZfWVoygt1RbfaCN2K890e0vNYyf0LJwAU%2BKcBfhpwN01%2FLc%2BJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880cf6b349837127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/images/logo.svg | 104.21.53.81 | 200 OK | 2.8 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/images/logo.svg IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeSVG Scalable Vector Graphics image Hash6559f365fa414d7cceb5a61890f10ba3 c5405535f545d20e4e37bc9de816d528d4d361f0 6bd6655fa66fa3b14a21eaf3911a69aed333c5bce3205cfbc8d8453a6970850b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/images/logo.svg HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: image/svg+xml
cache-control: public, max-age=864000, must-revalidate
expires: Wed, 08 May 2024 22:47:34 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: MISS
last-modified: Wed, 08 May 2024 22:42:34 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N3%2B55L2W9PSvO8eNANK1VQKqN6%2B0%2BhRmMIlzYCZ0iqYkEPOj6U1YqkGeqq%2BQ2P77PiVM6sZ2RaauvITvK5hqEwrxZo3U5QNb%2FSMBsX37xz7z8KYDc%2F%2BEp%2BZ1gQRTPn7qadyEbDz2VVN8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880cf6b369947127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/jscript/jscript_extend.js | 104.21.53.81 | 200 OK | 641 B |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/jscript/jscript_extend.js IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeJavaScript source, ASCII text, with very long lines (745), with no line terminators Hashf33b469a1e91b4922b46d499074f7bf3 709404c7cd099623c9bcc65c8816a9bbff9197eb 0a8db8a38fdf93561cdf2b7077f681e124139084fb9dcc7d204d20266c433b47
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/jscript/jscript_extend.js HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: application/javascript
last-modified: Tue, 21 Nov 2023 22:23:08 GMT
cache-control: max-age=14400
expires: Wed, 08 May 2024 22:47:34 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qEtnYMIbx6UV1IJcnyyfUuJ0P8vHW9fJmFd03NrGv%2BWyNo1KJ39TOJAB4RTr3DFB%2BI%2FANWeXiMPObn%2B7ZvhqdzXJN2jJsmmTYUF5vkk9yPnde%2FAJLojWHknfSUKTrm5FRuMm7YeRRDuE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880cf6b3c9e87127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Playfair+Display:wght@400;500;600;700;800;900&display=swap | 142.250.74.106 | 200 OK | 9.5 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Playfair+Display:wght@400;500;600;700;800;900&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (9708), with no line terminators Hashcbb724e5f0c70cc680b0a3cf208a602e 7bb23f4e0d2a2306ce2a8c44b5c29778235d4580 533e25ed8b776dfe43e6cfb857fa5feee61b4e554dead3ec80cbaf2afa928d21
GET /css2?family=Playfair+Display:wght@400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css2?family=Staatliches&display=swap | 142.250.74.106 | 200 OK | 808 B |
URL GET HTTP/3fonts.googleapis.com/css2?family=Staatliches&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (826), with no line terminators Hashda420df8479f8779cde5fc034d4cc67b 40e95fcf89bfd02023345af67b83dd45543c29d9 21c8c585a8724114950fa78cb426dd7ff797cab8c34cb44231ea087c6c515d61
GET /css2?family=Staatliches&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.8 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7816, version 1.0 Hash25b0e113ca7cce3770d542736db26368 cb726212d5d525021752a1d8470a0fb593e0c49e 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.hurleymedellin.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:53:08 GMT
expires: Fri, 02 May 2025 01:53:08 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:00:32 GMT
content-type: font/woff2
age: 593367
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| | 104.21.53.81 | 200 OK | 78 kB |
URL User Request GET HTTP/3IP104.21.53.81:443
CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:33 GMT
content-type: text/html; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-frame-options: SAMEORIGIN
set-cookie: zenid=epfj079bpnu38bj42sj943ktp8; path=/; domain=.www.hurleymedellin.com; secure; HttpOnly; SameSite=lax
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lwLV%2FTZ1AlgtQvMlNtPL1yDGK6NCrXrv%2FaQsPIkR9ikDp%2Bvz16XCeoGqCHImLA7StF12WhN4YB5kmvmcCxCXlXaGIqVx4YPUnlvPVv%2FK4IO69pAlpkY6a2i9zrt8v%2Fjuy3c4vulwrTew"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880cf6ac3bc07127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Merienda:wght@400;700&display=swap | 142.250.74.106 | 200 OK | 2.4 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Merienda:wght@400;700&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (2424), with no line terminators Hash4c11106146294a0f2e0f9a7cd792e1d2 53f4815a87a769d098f64ad9dfafc157f7d572d1 66f67ff9a9b48f878ba4db2df85dcb68e5640e189ecc19cb7a4a8604b7412e94
GET /css2?family=Merienda:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/737c3290.mp4?r=dXMtZWFzdDE%3D&range=925-261202 | 104.123.68.160 | 200 OK | 260 kB |
URL GET HTTP/2137vod-adaptive.akamaized.net/exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/737c3290.mp4?r=dXMtZWFzdDE%3D&range=925-261202 IP104.123.68.160:443 ASN#20940 Akamai International B.V.
Requested byhttps://player.vimeo.com/video/814398520?h=c890abd2f7&muted=1&autoplay=1&loop=1&background=1&app_id=122963 CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net Fingerprint28:39:AF:63:7D:02:E8:F7:17:23:A0:EE:E0:C9:2F:9C:64:17:68:0A ValidityThu, 18 Apr 2024 00:00:00 GMT - Sat, 19 Apr 2025 23:59:59 GMT
Size260 kB (260278 bytes) Hash2b2bb21d83c4098613aef1bc1ee10608 7287c6e078197c9c7024953f1ffbcd4e0f0a8c46 695dbb881d45efce4ab7225265b908487a648d4e618fd5366ab9c8032c202cb4
GET /exp=1715211754~acl=%2F0357fd20-b9da-4385-b608-8d4a8ef6b1d0%2F%2A~hmac=df0633b8a2344ce2dbf568b9bccfb7921011d630f2b25149920d98d5c643b3d9/0357fd20-b9da-4385-b608-8d4a8ef6b1d0/parcel/video/737c3290.mp4?r=dXMtZWFzdDE%3D&range=925-261202 HTTP/1.1
Host: 137vod-adaptive.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-length: 260278
last-modified: Mon, 03 Apr 2023 21:09:06 GMT
server: parcel
origin-retrieved-hour: 1698393600
access-control-max-age: 86400
timing-allow-origin: *
aka-c-hit: cache-hit
date: Wed, 08 May 2024 22:42:36 GMT
akamai-request-bc: [a=104.123.68.156,b=500135872,c=g,n=SE_AB_STOCKHOLM,o=20940],[c=c,n=SE_AB_STOCKHOLM,o=20940],[c=w,n=US_NJ_PISCATAWAY,o=20940]
akamai-mon-iucid-del: 877678
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
content-type: video/mp4
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
akamai-grn: 0.9c447b68.1715208156.1dcf77c0
x-vim-cachebc: EP:H11,E:m,TD0:m,CW:h
access-control-expose-headers: X-VIM-CACHEBC, Akamai-GRN, Akamai-Request-BC
access-control-allow-headers: Content-Type, Accept-Encoding, Range, X-OTT-Agent,CMCD-Request,CMCD-Object,CMCD-Status,CMCD-Session
access-control-allow-origin: *
set-cookie: aka_debug=cpcode:877678~clientip:91.90.42.154~ghostip:104.123.68.160~requestid:1dcf77c0~time:1715208156~ghostforwardip:23.3.90.73~edgecache:cache-miss~rtt:8~region:NO-; path=/; domain=.akamaized.net;
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700;800&display=swap | 142.250.74.106 | 200 OK | 11 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700;800&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash0f3106ce705bbf98161187fc94d15542 99688690db95c115bbc142ac516d7aa8d8bfade8 376aa716f5acbcefc1b0a7684a56f4d642f23bf6534917d787d163c2ad81ebb4
GET /css2?family=Montserrat:wght@300;400;500;600;700;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/css/style_plugins.css | 104.21.53.81 | 200 OK | 221 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/css/style_plugins.css IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
Size221 kB (220846 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/css/style_plugins.css HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: text/css
last-modified: Tue, 21 Nov 2023 22:21:10 GMT
cache-control: max-age=14400
expires: Wed, 08 May 2024 23:42:34 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hconIBruErAufYmCfjQdycUkaqv8n1jAaHSPM1Nk6qSl3O6VJxK4LRr5KyKpGwBXLGQllyWKgiaRnTuPdu%2F8Q11NlhdKyB%2B3ewvNeNEb9KbJkIQGMQmABG6QaBaWs%2FGnSQca1UJsZdFq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880cf6b349827127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Crimson+Pro:wght@200;300;400;500;600;700;800;900&display=swap | 142.250.74.106 | 200 OK | 9.7 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Crimson+Pro:wght@200;300;400;500;600;700;800;900&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (9912), with no line terminators Hash40698f9f19b1a609d2636f5eef9a3e30 46ff448bbf2fb3b30ecc73402877f8845445f8ba f3f7baade7af0f0b4587523c53317642d7c18c2501e70aaae37b93e7ee9a6545
GET /css2?family=Crimson+Pro:wght@200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.8 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7840, version 1.0 Hash8d91ec1ca2d8b56640a47117e313a3e9 a9e9bafe64666f4595051a0e895b47a5fa39e67e 78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb
GET /s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.hurleymedellin.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 05:07:49 GMT
expires: Sat, 03 May 2025 05:07:49 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 22 Mar 2024 00:02:55 GMT
content-type: font/woff2
age: 495286
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| | 104.21.53.81 | 301 Moved Permanently | 78 kB |
URL User Request GET HTTP/2IP104.21.53.81:443
CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 08 May 2024 22:42:32 GMT
content-type: text/html; charset=iso-8859-1
location: https://www.hurleymedellin.com/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9R6nIvUa%2FSKiBdrRT2dl92foq5P8O6U3BkJYCFNgUzZay7HAf%2FJYGVDjG10fyJqvEDkslOPfTsLdxu1jIlBNMqf9i%2FZtN4CJzc930xFqUXDp4Q1AOfOelTvMF5Clt86RlTFovCQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880cf6a999f156bb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.7 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0 Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.hurleymedellin.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 03:25:26 GMT
expires: Wed, 07 May 2025 03:25:26 GMT
cache-control: public, max-age=31536000
age: 155829
last-modified: Fri, 22 Mar 2024 00:01:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.hurleymedellin.com/includes/templates/hurleymedellin/css/stylesheet.css | 104.21.53.81 | 200 OK | 61 kB |
URL GET HTTP/3www.hurleymedellin.com/includes/templates/hurleymedellin/css/stylesheet.css IP104.21.53.81:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjecthurleymedellin.com Fingerprint02:2B:9D:D5:C3:B8:07:D7:B9:16:68:A2:D9:C5:31:82:F5:93:48:45 ValiditySun, 05 May 2024 05:42:48 GMT - Sat, 03 Aug 2024 05:42:47 GMT
File typeASCII text, with very long lines (349) Hash17ceb80963ec675887dbe7f153db625b c63f9ae00d977c88737eadd1502d18a4c1c82cee 8be1114218154fa0638aaa1e7e817e0a29f232a0e7e0a417c59a0868e419bc81
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /includes/templates/hurleymedellin/css/stylesheet.css HTTP/1.1
Host: www.hurleymedellin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Cookie: zenid=epfj079bpnu38bj42sj943ktp8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 22:42:34 GMT
content-type: text/css
last-modified: Tue, 21 Nov 2023 22:21:10 GMT
cache-control: max-age=14400
expires: Wed, 08 May 2024 23:42:34 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gdc1mKqyLFmUsU26T3YTKYeQHLraGIx9MEOe7ljEMBykUlra1b2DvTcp4UIS9KUDHzWWJMvNYDDuwINr05VQcI2HEB9fE5Qyt0w3w3sV%2Bhtyyo2xQRTqSC7i97381uGIvAWlsSSbrLf3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880cf6b3598b7127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Archivo+Narrow:wght@400;500;600;700&display=swap | 142.250.74.106 | 200 OK | 5.0 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Archivo+Narrow:wght@400;500;600;700&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (5076), with no line terminators Hash48d4822accd8873d2852967645115cef 1b20048c205fa24b4fff0afa458ee1fa2c45612f 27b1f874ce4c14645ec6df13bdf94d9a3381db78c5e4720903dd20d0e4bbc0b7
GET /css2?family=Archivo+Narrow:wght@400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css2?family=Quicksand:wght@400;500;600;700&display=swap | 142.250.74.106 | 200 OK | 4.8 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Quicksand:wght@400;500;600;700&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (4884), with no line terminators Hashb600e1e7a6306ebd12e31c84c6e1f1e1 f60eb78fc60e2436151e80ef892f5058a4fdf874 bf93d7866220f1f029dbd4d40e9c34c92f92b6ccc5cdd2fe091e2518941cb663
GET /css2?family=Quicksand:wght@400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css2?family=Roboto+Condensed:wght@300;400;700&display=swap | 142.250.74.106 | 200 OK | 7.6 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Roboto+Condensed:wght@300;400;700&display=swap IP142.250.74.106:443
Requested byhttps://www.hurleymedellin.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (7812), with no line terminators Hashea047ba198aaa7637f27cf64c74fa8be 52329f1f70a60957c92db2a590bb97b25796dc19 11a942088d049579ba79db59d72e631d2e26f1fc2b12ee0dba2e2e3ff65d2477
GET /css2?family=Roboto+Condensed:wght@300;400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.hurleymedellin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 22:42:34 GMT
date: Wed, 08 May 2024 22:42:34 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|