| anonzip.com/2C0j/Little_Life_E-made.zip |  135.181.248.190 | | 4.7 kB |
URL anonzip.com/2C0j/Little_Life_E-made.zip IP135.181.248.190:0 ASN#24940 Hetzner Online GmbH
File typeHTML document, ASCII text, with CRLF, LF line terminators Hashe810f4a5831a77f0660d245e591fda04 dbf372864ecc107bb35116fca45b9b4c6c5bc590 808d1ae643f02e2956e1ec256d8e917844be1d5fcc793ef0383fff34f6107beb
GET /2C0j/Little_Life_E-made.zip HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: filehosting=fpl9f1kt209nhloko176ceov2t; expires=Mon, 06-May-2024 10:14:05 GMT; Max-Age=86400; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, no-cache, private
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Encoding: gzip
|
|
| anonzip.com/themes/spirit/assets/frontend/css/bootstrap.min.css | 135.181.248.190 | 200 OK | 77 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/bootstrap.min.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeASCII text, with very long lines (65319), with CRLF line terminators Hash9b67b9ffbfcbe226a8c413fa740fd91c 7837bd0c312897e46311aaf472947f3e23d75df2 2642f94894419d1cebdc4a010b9380a7403063dd6d28ea8a80bd5ebd01186732
GET /themes/spirit/assets/frontend/css/bootstrap.min.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: text/css
Content-Length: 76922
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-12c7a"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/jquery.steps.css | 135.181.248.190 | 200 OK | 6.0 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/jquery.steps.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeASCII text, with CRLF line terminators Hash25cfe48e07622a00154b677afcbaeb47 23e3ae1bd04ad1d00d25d30e39815104ceeae52f 709debbdebf13d8d6c85571caee6e44629142518e9336ed1aa01d6e94ab4d056
GET /themes/spirit/assets/frontend/css/jquery.steps.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: text/css
Content-Length: 6019
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-1783"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/socicon.css | 135.181.248.190 | | 9.8 kB |
URL anonzip.com/themes/spirit/assets/frontend/css/socicon.css IP135.181.248.190:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with CRLF line terminators Hash910a42ce112991b31b30a735f1006a5f 6c8b4769270f1c86bb1c7a6b54325465395ba614 010e6ffb18715ededb10c4ae5a8518475c138fb63b83ec1c125d09b714ccdd8b
GET /themes/spirit/assets/frontend/css/socicon.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: text/css
Content-Length: 9838
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-266e"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/stack-interface.css | 135.181.248.190 | 200 OK | 3.2 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/stack-interface.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash4541b29b6040bc31b760f98e914fd1d7 0521a4f98cdf5e1fde3eeb9cae64fd39075cd9ba 6910b6609166588208a24355d3c3666140dd0d7fcb3884b31eedb72773e44794
GET /themes/spirit/assets/frontend/css/stack-interface.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: text/css
Content-Length: 3160
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-c58"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/lightbox.min.css | 135.181.248.190 | 200 OK | 3.9 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/lightbox.min.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeASCII text, with CRLF line terminators Hash30265c8089a8f3e871d0873ef6a5b944 2804a2fe5a6a956626ce6a46adf6b1a0676ee13d f9f33dca7f9a5a735a0a03502993e0a092df81d820beb1ed4071e4611a9630ed
GET /themes/spirit/assets/frontend/css/lightbox.min.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: text/css
Content-Length: 3889
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-f31"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/cookiealert.css | 135.181.248.190 | 200 OK | 12 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/cookiealert.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeASCII text, with very long lines (11486), with CRLF line terminators Hash3d2946aeae3cc8f43e2acf82ea029bd4 c25a0bd445ff9e6034d34e8f388f5565515a2783 705d9fc8952ac3bf3d9300e3d9ea6753284cdd920c34be0213ec8bc862df7a28
GET /themes/spirit/assets/frontend/css/cookiealert.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: text/css
Content-Length: 12369
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-3051"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/flickity.css | 135.181.248.190 | 200 OK | 2.5 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/flickity.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeASCII text, with CRLF line terminators Hash244d315064064270eabbbb7ac9f6c700 21ad53d3efbb40154293190173ee0c497ed7651c ff5fe542e37297733305fb7e68a41b3269a681d64145945f2131a646044c016a
GET /themes/spirit/assets/frontend/css/flickity.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: text/css
Content-Length: 2521
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-9d9"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/custom.css | 135.181.248.190 | | 8.9 kB |
URL anonzip.com/themes/spirit/assets/frontend/css/custom.css IP135.181.248.190:0 ASN#24940 Hetzner Online GmbH
File typeassembler source, ASCII text, with CRLF line terminators Hash65417cde74809cb9b9e66d0ab4adc448 9729ccac013729aed790fdc25d71d858f50a137b c8dee41785c1f45859a70f3bb9a65b3cba83d866dd46ca0096d07067fec9d280
GET /themes/spirit/assets/frontend/css/custom.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: text/css
Content-Length: 8936
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-22e8"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/font-awesome.min.css | 135.181.248.190 | | 59 kB |
URL anonzip.com/themes/spirit/assets/frontend/css/font-awesome.min.css IP135.181.248.190:0 ASN#24940 Hetzner Online GmbH
File typeASCII text, with very long lines (58929), with CRLF line terminators Hash879812fc22af75aa3ae7b5666ca4f4b8 df27469a952b7ee36cc03db471c6198f577186a8 c5d7f0d9e646698b20734ce6dcc2c0a8ecf6ebe27b4b7625bfcf42c4416fb7ed
GET /themes/spirit/assets/frontend/css/font-awesome.min.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: text/css
Content-Length: 59119
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-e6ef"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/jquery.dataTables.min.js | 135.181.248.190 | | 70 kB |
URL anonzip.com/themes/spirit/assets/frontend/js/jquery.dataTables.min.js IP135.181.248.190:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (768), with CRLF line terminators Hash6fda19caa29287e6f584f0557fdeb6d4 40f58160090cd1f022704ee1352b343adb9e73b9 8ef749c3869991924150dc932c48cd57bf69ac25a378bb2e14f8e1733c17406f
GET /themes/spirit/assets/frontend/js/jquery.dataTables.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: application/javascript
Content-Length: 69754
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-1107a"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/theme.css | 135.181.248.190 | 200 OK | 206 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/theme.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeassembler source, ASCII text, with CRLF line terminators Size206 kB (206456 bytes) Hashe13b70f9d6654b3656aec5b1bd5ae02a 903010ac4b9034f6839847a20ecd0f5a728b2b96 8a10549eed29cff62aa0098311b5c1c37601577a11de64f72095aacb90715c8a
GET /themes/spirit/assets/frontend/css/theme.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: text/css
Content-Length: 206456
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-32678"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/theme/charcoal.css | 135.181.248.190 | 200 OK | 206 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/theme/charcoal.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeassembler source, ASCII text, with CRLF line terminators Size206 kB (206493 bytes) Hash08f6281c909985fb24a5e3ad2be6753a 3a2f1161f8aea5fab0f54b64f43f293d9f1316c3 dbe98b73866341078c596a42b87af67c03a79cf591d02467842939ce0848a55d
GET /themes/spirit/assets/frontend/css/theme/charcoal.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: text/css
Content-Length: 206493
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-3269d"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js | 135.181.248.190 | 200 OK | 87 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (32030), with CRLF line terminators Hash5b5a269bd363e0886c17d855c2aab241 042dd055cd289215835a58507c9531f808e1648a 1cf30e59d21d4ae560af7143f5913efcc8222bcaa4fcc7508eb802b5faa9e94e
GET /themes/spirit/assets/frontend/js/jquery-3.1.1.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: application/javascript
Content-Length: 86713
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-152b9"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/css/iconsmind.css | 135.181.248.190 | 200 OK | 103 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/css/iconsmind.css IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeASCII text, with CRLF line terminators Size103 kB (102727 bytes) Hashc9b1c618a7b12bd7ecf6034164b29164 f7a4a8bbc3aab1d7bb44659c40a8702f3aa56c99 fc190f724340fc20fd1d175f49c70e70f4acfdd9303ae4f68d9765a2a5958d9b
GET /themes/spirit/assets/frontend/css/iconsmind.css HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: text/css
Content-Length: 102727
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-19147"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/flickity.min.js | 135.181.248.190 | 200 OK | 54 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/flickity.min.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators Hash8c1e666176ac7bdce67d58b45823ffac 75947e4316427ce0c5e33300aeb4dc4d7d54dd09 c0b706b9b1ca12b631496228a0eb0fe15ccb14f21ab554f6c4b4f20474e4d3a6
GET /themes/spirit/assets/frontend/js/flickity.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: application/javascript
Content-Length: 53873
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-d271"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/typed.min.js | 135.181.248.190 | 200 OK | 3.9 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/typed.min.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (3949), with no line terminators Hash2f6185a8a32a50b2b3e04849f44359d4 0e5501588c5c0d1c9462f34b0d56c21abff5bfef 914df93a9770d8a0e132b6ce3e8f1cfba0e0fae8f3b9002a3f0eb47c3d0cc97b
GET /themes/spirit/assets/frontend/js/typed.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: application/javascript
Content-Length: 3949
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-f6d"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/datepicker.js | 135.181.248.190 | 200 OK | 21 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/datepicker.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (12692), with CRLF line terminators Hash8cfe207a6a21c7495cfb751c761217a6 35d686a6c4ecc9946c35444ce93e110cb0e1611c 804e3c2608de23694fa71684178e2f9815115d56ee022ec770e1fcb208847acc
GET /themes/spirit/assets/frontend/js/datepicker.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: application/javascript
Content-Length: 20975
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-51ef"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/granim.min.js | 135.181.248.190 | 200 OK | 11 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/granim.min.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (10573), with CRLF line terminators Hash714368d20c70f8c91b0a596e128dac07 563954ec3a896fc129d014f01836245829f6d01d e70b27194b8793b68cccee28a6d8a1e39aae2ce5d28d5e71ac204d7a3ac164e3
GET /themes/spirit/assets/frontend/js/granim.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: application/javascript
Content-Length: 10635
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-298b"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/jquery.steps.min.js | 135.181.248.190 | | 14 kB |
URL anonzip.com/themes/spirit/assets/frontend/js/jquery.steps.min.js IP135.181.248.190:0 ASN#24940 Hetzner Online GmbH
File typeJavaScript source, ASCII text, with very long lines (13686), with CRLF line terminators Hash0eef6fe46d14f860d5666d2c7b13a564 7ab5f7deaca2f71efbc3bf9f5ba27b89d4697dbe 95a14a4473ff130eb29f3cc02e135978505655e3c931b6c3726dedd4f558f843
GET /themes/spirit/assets/frontend/js/jquery.steps.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: application/javascript
Content-Length: 13862
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-3626"
Accept-Ranges: bytes
|
|
| alwingulla.com/88/tag.min.js |  188.114.97.1 | 200 OK | 26 kB |
URL GET HTTP/2alwingulla.com/88/tag.min.js IP188.114.97.1:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subjectalwingulla.com FingerprintB6:A3:BD:4F:5E:0D:58:50:07:9D:17:E0:30:97:67:97:9E:23:1A:1C ValidityTue, 12 Mar 2024 16:48:22 GMT - Mon, 10 Jun 2024 16:48:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65494) Hashd8fe6d8977be78f78ee48c068b8c8686 e9c96bfc9bcd374f528f73c0441c2358d6d1d135 43423a879e310562ceed423aa563f4fac45713e6f59b0517d897e2c96a42993b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /88/tag.min.js HTTP/1.1
Host: alwingulla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 10:14:06 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 65b8c3cbc8623c596934e33f2d2c966e
cache-control: max-age=86400
last-modified: Fri, 03 May 2024 05:52:08 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Sun, 05 May 2024 16:52:23 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 62503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rsp1qUlUT1k4r7KjkOFmC2RENLxIQ5j976ettslxr9qIARamIHSSDjUmy%2FV1coztRaw5V8DSmmsLE%2BkDOJkIH6EwuwlxVOROIJyY4YP7m051T5VlwfE9yr7%2FaF4valPttQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eff632ae8256ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| anonzip.com/themes/spirit/assets/frontend/js/smooth-scroll.min.js | 135.181.248.190 | 200 OK | 6.0 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/smooth-scroll.min.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (4887), with CRLF line terminators Hashc9e3a210d83398f301b3a7049c259676 8e227bb40fe120841829a7fef0ffeb091d179a91 aeda362b1d693480453b895cbcf8b92629f58240c42ba8c643f0d5d338baf805
GET /themes/spirit/assets/frontend/js/smooth-scroll.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: application/javascript
Content-Length: 6028
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-178c"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/scripts.js | 135.181.248.190 | 200 OK | 115 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/scripts.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (914), with CRLF line terminators Size115 kB (114862 bytes) Hashce260d2170faf98639ab8e0e3758f1e2 32eeb82a44bf0bce2df78eafae9f2e9ff8d72e1f ac331833ebf1c06b0f8565caaeb4760c2184bd89d1cb5574c3947a8d0b6dca1c
GET /themes/spirit/assets/frontend/js/scripts.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: application/javascript
Content-Length: 114862
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-1c0ae"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/cookiealert.js | 135.181.248.190 | 200 OK | 1.8 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/cookiealert.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash81279e22c8ece9e1d0536a402484daa3 911797507fb12d4f451d5900e32db96ad697c401 5c6237178e88ab7f1c6e26c9e99547e58782450b8f2a182129448ff4d99e89ab
GET /themes/spirit/assets/frontend/js/cookiealert.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: application/javascript
Content-Length: 1836
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-72c"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/js/countdown.min.js | 135.181.248.190 | 200 OK | 5.4 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/js/countdown.min.js IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (4136), with CRLF line terminators Hash76a923d3d69255c45cd24bf9b100244f eb3c96f9901692f1a03500ea632963a16afdb985 8f195573d6fa06641814b476fea2b92579c983cac46d683f356238207692c9f5
GET /themes/spirit/assets/frontend/js/countdown.min.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: application/javascript
Content-Length: 5360
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-14f0"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/images/logo/logo.png | 135.181.248.190 | 200 OK | 6.2 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/images/logo/logo.png IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typePNG image data, 588 x 94, 8-bit colormap, non-interlaced Hashecb7f5dbe1eee9fcc3d5839f7d2bb2fb 59c65d814622d7ea901cd367b4114cea05fdf1b9 d53d70c5ee49ccc36c86eca632815e1eb254786c4041b228196bb8c0cb635b20
GET /themes/spirit/assets/images/logo/logo.png HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: image/png
Content-Length: 6204
Last-Modified: Sun, 04 Feb 2024 11:52:58 GMT
Connection: keep-alive
ETag: "65bf7a9a-183c"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/images/logo/logo-whitebg.png | 135.181.248.190 | 200 OK | 6.2 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/images/logo/logo-whitebg.png IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typePNG image data, 588 x 94, 8-bit colormap, non-interlaced Hash6c1e20bb65960360a6d1782e017c9314 d864c40dbd565e934fddeea36938456d6a26982c fafe927a322a36285028582aa429b7c47877cad76d2783d2b6ba3155e66bf9c6
GET /themes/spirit/assets/images/logo/logo-whitebg.png HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:06 GMT
Content-Type: image/png
Content-Length: 6221
Last-Modified: Sun, 04 Feb 2024 12:00:04 GMT
Connection: keep-alive
ETag: "65bf7c44-184d"
Accept-Ranges: bytes
|
|
| www.googletagmanager.com/gtag/js?id=G-GWR0PX9LQC |  142.250.74.168 | 200 OK | 102 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-GWR0PX9LQC IP142.250.74.168:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size102 kB (101601 bytes) Hash355b8a03be93a2c44746f1e79d06d87c 19bf93e5076c76cf1bbba34b681e29fb65a338a0 4354c0865afc75a4b3750223e6440d515d4d3e30c1690e6fec9e74a24a30c6a8
GET /gtag/js?id=G-GWR0PX9LQC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 10:14:06 GMT
expires: Sun, 05 May 2024 10:14:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101601
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| anonzip.com/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 | 135.181.248.190 | 200 OK | 4.3 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 4292, version 1.0 Hashae072782b361d2afdbf43db08d3cfb73 f3db2e65b53d97491672f8631e21d6d05905cc88 31205df908aed9881f6d2d3ae7d38975252bf99e38268978b4236dc3c314754b
GET /themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/themes/spirit/assets/frontend/css/stack-interface.css
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:07 GMT
Content-Type: application/octet-stream
Content-Length: 4292
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-10c4"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 | 135.181.248.190 | 200 OK | 80 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 80148, version 331.17301 Hashc500da19d776384ba69573ae6fe274e7 6290834672aba86d5b6c1c73b30b57c9c53996f7 cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
GET /themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/themes/spirit/assets/frontend/css/font-awesome.min.css
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:07 GMT
Content-Type: application/octet-stream
Content-Length: 80148
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-13914"
Accept-Ranges: bytes
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 286747
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 286747
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 286747
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/icon?family=Material+Icons | 142.250.74.106 | | 20 kB |
URL fonts.googleapis.com/icon?family=Material+Icons IP142.250.74.106:0
File typegzip compressed data, max compression Hash6a2c165181d681dccfa9a90950474429 9823369bdbdc920a89e7fd50d99d52f193ccbeca ad3127159167d9367b8c1c7b10de8f62aadf94077d336151da8ef9c219ae598a
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 May 2024 10:14:06 GMT
date: Sun, 05 May 2024 10:14:06 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 286747
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:35:00 GMT
expires: Fri, 02 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 286747
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2 IP216.58.207.227:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 16516, version 1.0 Hash02ea59496b25ec14db0cd442451bf9f7 4266d37e1db030954b04cd1cf3ec06591d75fcab dc0387c80ff53df47ca7ec19db75224fdb90a230f6cb06605563590b9791bf95
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16516
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 19:16:47 GMT
expires: Fri, 02 May 2025 19:16:47 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Dec 2023 02:02:21 GMT
content-type: font/woff2
age: 226640
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| anonzip.com/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png | 135.181.248.190 | 200 OK | 5.0 kB |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hasha9a8c24cea41bed7ef78ed1d12d48291 cd86d71e15b97ab602e0e39bb6e9bbaf6779f4d7 3b379c83d1c0b117cec88debed9390723daffc2fb99cf51cc2175c47169d190e
GET /themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t; _ga_GWR0PX9LQC=GS1.1.1714904047.1.0.1714904047.0.0.0; _ga=GA1.1.473912422.1714904047
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:07 GMT
Content-Type: image/png
Content-Length: 5016
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-1398"
Accept-Ranges: bytes
|
|
| anonzip.com/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png | 135.181.248.190 | 200 OK | 447 B |
URL GET HTTP/1.1anonzip.com/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hashf3d5da06fe8d5a2425d5d229285e5eea 01032b864f3c74bbf44771e2ba41eeb2251fad90 d11d596429d3543bfb07191a87a67a8c22e198113c6f3a109158a5a85bf82f26
GET /themes/spirit/assets/frontend/img/favicon/favicon-16x16.png HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t; _ga_GWR0PX9LQC=GS1.1.1714904047.1.0.1714904047.0.0.0; _ga=GA1.1.473912422.1714904047
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:07 GMT
Content-Type: image/png
Content-Length: 447
Last-Modified: Fri, 15 Apr 2022 11:04:01 GMT
Connection: keep-alive
ETag: "62595121-1bf"
Accept-Ranges: bytes
|
|
| my.rtmark.net/gid.js?userId=0080537b3c674ae5ffa697e92cc4227b |  139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=0080537b3c674ae5ffa697e92cc4227b IP139.45.195.8:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
Hashd2e01b32d5d018b458ecd239cb2820f8 b2de6ef4b0a5dc6bbb0162dccf01c911bdbd7892 6d9c9c1eb55d443240042d716d5d0e1f482d7ea44ee109b94561f35b40ee8688
GET /gid.js?userId=0080537b3c674ae5ffa697e92cc4227b HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:07 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0080537b3c674ae5ffa697e92cc4227b; expires=Mon, 05 May 2025 10:14:07 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| moonoafy.net/zone?pub=0&zone_id=7406592&is_mobile=false&domain=anonzip.com&var=&ymid=&var_3=&tg=0&sw=3.1.504 | 139.45.197.250 | 200 OK | 880 B |
URL GET HTTP/2moonoafy.net/zone?pub=0&zone_id=7406592&is_mobile=false&domain=anonzip.com&var=&ymid=&var_3=&tg=0&sw=3.1.504 IP139.45.197.250:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hash7f94d5d772ba5667113992fe1b4e6d39 b07687fc907e973bd066273d441ab0b29a7dd625 50cbbeab07af07d548a556c1e5217d1f03a97f8dba9c76b55461a0835e5bd2a7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /zone?pub=0&zone_id=7406592&is_mobile=false&domain=anonzip.com&var=&ymid=&var_3=&tg=0&sw=3.1.504 HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:07 GMT
content-type: application/json; charset=utf-8
content-length: 880
x-trace-id: f6cb98b6218be662f355ddecee6efd4f
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| anonzip.com/sw.js | 135.181.248.190 | 200 OK | 5.2 kB |
IP135.181.248.190:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectanonzip.com Fingerprint05:1A:C5:B8:46:2C:D7:57:A3:34:1F:79:EC:24:CC:61:ED:36:1E:7E ValiditySat, 30 Mar 2024 19:16:56 GMT - Fri, 28 Jun 2024 19:16:55 GMT
File typeJavaScript source, ASCII text, with very long lines (5235) Hashf3da3a180b9fcc93796c2e0064f80439 d3155e90b8bb0ccd2db019fa66beebf3f28d9116 2cfd12766505422ce33dad30985158e425f686a6a4e18d8a44e67b7c1af9451f
GET /sw.js HTTP/1.1
Host: anonzip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/2C0j/Little_Life_E-made.zip
DNT: 1
Connection: keep-alive
Cookie: filehosting=fpl9f1kt209nhloko176ceov2t; _ga_GWR0PX9LQC=GS1.1.1714904047.1.0.1714904047.0.0.0; _ga=GA1.1.473912422.1714904047; prefetchAd_7406588=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 05 May 2024 10:14:08 GMT
Content-Type: application/javascript
Content-Length: 5236
Last-Modified: Sun, 28 Apr 2024 12:25:27 GMT
Connection: keep-alive
ETag: "662e4037-1474"
Accept-Ranges: bytes
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:08 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| cameesse.net/27/7552beb94fc0bdff7bbb33cad3d1ab0a | 139.45.197.242 | 200 OK | 131 kB |
URL GET HTTP/2cameesse.net/27/7552beb94fc0bdff7bbb33cad3d1ab0a IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
File typeJavaScript source, ASCII text, with very long lines (65523) Size131 kB (130581 bytes) Hash297cc248309ba835cf13a1f82fd3f938 1e6f51ce257a0ee53e25280dd44092ed33339847 b2ba9d8b2216d22f8f31a594bc22ee21f60e2b539474a650be1e87dea87d5ed7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /27/7552beb94fc0bdff7bbb33cad3d1ab0a HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: scm=1; OAID=0400532239f445b1e7f1daa13661ba62; oaidts=1714904047
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:07 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 74af8aa7180d06313ff9aeeb0353b738
cache-control: max-age:290304000, public
last-modified: Tue, 09 Apr 2024 03:16:58 GMT
expires: Tue, 09 May 2084 03:16:58 GMT
access-control-expose-headers: X-Sc
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:08 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 39 B |
IP139.45.197.250:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/
Content-Type: application/json
Content-Length: 765
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:08 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: a5ceda1bb2a9a2597c0c81e1afe04a47
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| moonoafy.net/custom | 139.45.197.250 | 200 OK | 39 B |
IP139.45.197.250:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/
Content-Type: application/json
Content-Length: 386
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:08 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 4cbbfad9fab868b3fa2303bbdbb86d1e
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| aistekso.net/401/7406591 | 139.45.197.244 | | 35 kB |
IP139.45.197.244:0
File typegzip compressed data, max speed, from Unix Hashf5981b94a4de6922d1ee5683c0c84843 e2f4d94abbf43b7d0abbfa86fb82253fbf8481ef 015377d98360678b1e98d1dcd6da44c1229e6440075120d48ac213e696b63383
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /401/7406591 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:07 GMT
content-type: application/javascript
x-trace-id: d60259d71b07de5c3b2ce33072e450cb
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=030053ce07bb4c21f4bf356a46102e9d; expires=Mon, 05 May 2025 10:14:07 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:08 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashbf23599fefd00399a8406d6dc22fdd1e 0b66e4c2c04460721b720edde8771ea4efc17e51 c00d0be6c270b9eb5d7753a591b3ba4eb65a58b15da3c3b52f85d4d0373ed0b6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/
Content-Type: application/json
Content-Length: 523
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:08 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| gishejuy.com/500/7406589?excludes=&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 0 B |
URL OPTIONS HTTP/2gishejuy.com/500/7406589?excludes=&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /500/7406589?excludes=&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:08 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=d9a33203-8be3-48ac-b90e-2ec3950d047d | 139.45.195.254 | 200 OK | 12 B |
URL POST HTTP/1.1fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=d9a33203-8be3-48ac-b90e-2ec3950d047d IP139.45.195.254:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerSectigo Limited Subjectfleraprt.com Fingerprint32:DB:C5:24:21:ED:1D:C3:40:C3:46:9F:CF:EE:98:4D:72:29:4C:3C ValidityTue, 09 Jan 2024 00:00:00 GMT - Mon, 13 Jan 2025 23:59:59 GMT
Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=d9a33203-8be3-48ac-b90e-2ec3950d047d HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1759
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Sun, 05 May 2024 10:14:08 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://anonzip.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| cameesse.net/9?z=7406590&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=0080537b3c674ae5ffa697e92cc4227b | 139.45.197.242 | 200 OK | 0 B |
URL POST HTTP/2cameesse.net/9?z=7406590&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=0080537b3c674ae5ffa697e92cc4227b IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /9?z=7406590&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=0080537b3c674ae5ffa697e92cc4227b HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 05 May 2024 10:14:08 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| cameesse.net/9?z=7406590&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=0080537b3c674ae5ffa697e92cc4227b | 139.45.197.242 | 200 OK | 2.7 kB |
URL POST HTTP/2cameesse.net/9?z=7406590&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=0080537b3c674ae5ffa697e92cc4227b IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hash21ce917c253a878de8825fe24ee16519 9630152e6c2345360cc29305f34520c520fbeb8a ca9b9effca953c265e312b3fb60d3e60fca98a19a09f96df1a6ffd4c91363fb2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /9?z=7406590&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&oaid=0080537b3c674ae5ffa697e92cc4227b HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 139
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: scm=1; OAID=0400532239f445b1e7f1daa13661ba62; oaidts=1714904047
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:08 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 0615e6254db473f8abf6d369ade45519
access-control-expose-headers: X-Sc
set-cookie: OAID=0080537b3c674ae5ffa697e92cc4227b; expires=Mon, 05 May 2025 10:14:08 GMT; secure; SameSite=None
oaidts=1714904047; expires=Mon, 05 May 2025 10:14:08 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| moonoafy.net/pfe/current/tag.min.js?z=7406592 | 139.45.197.250 | 200 OK | 8.1 kB |
URL GET HTTP/2moonoafy.net/pfe/current/tag.min.js?z=7406592 IP139.45.197.250:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
File typeJavaScript source, ASCII text, with very long lines (16974), with no line terminators Hash02d722fd4f3f73a90f1bc1ba2784ead1 fb8e26d227ea6802ccabf3329b89a582c0c66fc9 77ef1a65052ce26c68229a53870014be7883d7c2d746a140744cfd217f42aab6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pfe/current/tag.min.js?z=7406592 HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:07 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:48:52 GMT
etag: W/"662a3514-3914"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cameesse.net/121?rnd=1711303349&z=7406590&b=20830638&c=8121703&var=&varid=0&d=https%3A%2F%2Fsecuredpeacomm.com%2Fin%2F%3Ftg%3Dhttps%3A%2F%2Ftrack.jefytrack.com%2F145f6684-c379-407a-a2eb-922622a713e1%26zoneid%3D7406590%26campaignid%3D8121703%26carrier%3D%7Bcarrier%7D%26connectiontype%3D%7Bconnection.type%7D%26isp%3D%7Bisp%7D%26cost%3D%7Bcost%7D%26visitor_id%3D810928959647657984&cln={CELL_NUMBER}&btp=7&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&bag=ydU9kaAfa6I=&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984 | 139.45.197.242 | 302 Found | 0 B |
URL GET HTTP/2cameesse.net/121?rnd=1711303349&z=7406590&b=20830638&c=8121703&var=&varid=0&d=https%3A%2F%2Fsecuredpeacomm.com%2Fin%2F%3Ftg%3Dhttps%3A%2F%2Ftrack.jefytrack.com%2F145f6684-c379-407a-a2eb-922622a713e1%26zoneid%3D7406590%26campaignid%3D8121703%26carrier%3D%7Bcarrier%7D%26connectiontype%3D%7Bconnection.type%7D%26isp%3D%7Bisp%7D%26cost%3D%7Bcost%7D%26visitor_id%3D810928959647657984&cln={CELL_NUMBER}&btp=7&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&bag=ydU9kaAfa6I=&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984 IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /121?rnd=1711303349&z=7406590&b=20830638&c=8121703&var=&varid=0&d=https%3A%2F%2Fsecuredpeacomm.com%2Fin%2F%3Ftg%3Dhttps%3A%2F%2Ftrack.jefytrack.com%2F145f6684-c379-407a-a2eb-922622a713e1%26zoneid%3D7406590%26campaignid%3D8121703%26carrier%3D%7Bcarrier%7D%26connectiontype%3D%7Bconnection.type%7D%26isp%3D%7Bisp%7D%26cost%3D%7Bcost%7D%26visitor_id%3D810928959647657984&cln={CELL_NUMBER}&btp=7&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&bag=ydU9kaAfa6I=&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: scm=1; OAID=0080537b3c674ae5ffa697e92cc4227b; oaidts=1714904047
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sun, 05 May 2024 10:14:08 GMT
content-length: 0
location: https://securedpeacomm.com/in/?tg=https://track.jefytrack.com/145f6684-c379-407a-a2eb-922622a713e1&zoneid=7406590&campaignid=8121703&carrier={carrier}&connectiontype={connection.type}&isp={isp}&cost=&visitor_id=810928959647657984
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 9fc4c5d6c1b6c596887a1360dc155353
access-control-expose-headers: X-Sc
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| gishejuy.com/500/7406589?excludes=&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 19 kB |
URL OPTIONS HTTP/2gishejuy.com/500/7406589?excludes=&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typegzip compressed data, max speed, from Unix Hash14cf513c2fc0dab35ef19cde40293cfe e17448b0398454e1d1a92c9d3d18a14b153c5a55 6c76ad1ee8acbe061db3608ad676e885db8547e4dc51cfeeb853ec7edf526f8c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /500/7406589?excludes=&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: OAID=030053c3eeeb46b0e55969fa4b78f301
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:08 GMT
content-type: application/javascript
x-trace-id: d7afdc5355456f655136f3cd71d70a95
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://anonzip.com
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=0080537b3c674ae5ffa697e92cc4227b; expires=Mon, 05 May 2025 10:14:08 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| track.jefytrack.com/145f6684-c379-407a-a2eb-922622a713e1?zoneid=7406590&campaignid=8121703&carrier=%7Bcarrier%7D&connectiontype=%7Bconnection.type%7D&isp=%7Bisp%7D&cost=&visitor_id=810928959647657984&ctrl_fetch_dest=iframe&ctrl_id=66375bf0a4f80933950195&ctrl_ts=1714904048.6757&ctrl_ab=burp | 143.204.55.73 | 302 Found | 0 B |
URL GET HTTP/2track.jefytrack.com/145f6684-c379-407a-a2eb-922622a713e1?zoneid=7406590&campaignid=8121703&carrier=%7Bcarrier%7D&connectiontype=%7Bconnection.type%7D&isp=%7Bisp%7D&cost=&visitor_id=810928959647657984&ctrl_fetch_dest=iframe&ctrl_id=66375bf0a4f80933950195&ctrl_ts=1714904048.6757&ctrl_ab=burp IP143.204.55.73:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerAmazon Subjecttrack.jefytrack.com FingerprintD9:FC:91:D1:FD:F0:F4:2D:48:E9:47:EE:31:A0:1C:23:D3:9A:29:D8 ValiditySun, 21 Apr 2024 00:00:00 GMT - Tue, 20 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /145f6684-c379-407a-a2eb-922622a713e1?zoneid=7406590&campaignid=8121703&carrier=%7Bcarrier%7D&connectiontype=%7Bconnection.type%7D&isp=%7Bisp%7D&cost=&visitor_id=810928959647657984&ctrl_fetch_dest=iframe&ctrl_id=66375bf0a4f80933950195&ctrl_ts=1714904048.6757&ctrl_ab=burp HTTP/1.1
Host: track.jefytrack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-length: 0
location: https://externalde.com/out/xyhkxckud/?ctrl_id=66375bf0a4f80933950195&ctrl_ab=burp&ctrl_ts=1714904048.6757&ctrl_vol_oid=0b046699-9de5-41eb-a62f-5035b56e631b&tg=https://lkbx.me/4KqY7&uid=ws4do4m5l309iq21jdufqhho
date: Sun, 05 May 2024 10:14:08 GMT
cache-control: no-store, no-cache, pre-check=0, post-check=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: 145f6684-c379-407a-a2eb-922622a713e1-v4=cVqZde50mzQ715Gr6DORANYRV7ngGdXMNyVRRCHm0Yg; Max-Age=86400; Expires=Mon, 06-May-2024 10:14:08 GMT; Domain=track.jefytrack.com; Path=/; Secure; HttpOnly;SameSite=None
voluum-cid-v4=%7B%22cid%22%3A%22ws4do4m5l309iq21jdufqhho%22%2C%22caid%22%3A%22145f6684-c379-407a-a2eb-922622a713e1%22%7D; Max-Age=31536000; Expires=Mon, 05-May-2025 10:14:08 GMT; Domain=track.jefytrack.com; Path=/; Secure; HttpOnly;SameSite=None
server: nginx
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jjrJO-BFo2E3KO6gjpn8Bx_PKflwwje_VXQ8h_cJSIAXdWakRPDRhQ==
X-Firefox-Spdy: h2
|
|
| securedpeacomm.com/in/?tg=https://track.jefytrack.com/145f6684-c379-407a-a2eb-922622a713e1&zoneid=7406590&campaignid=8121703&carrier={carrier}&connectiontype={connection.type}&isp={isp}&cost=&visitor_id=810928959647657984 |  104.21.64.36 | 302 Found | 10 kB |
URL GET HTTP/2securedpeacomm.com/in/?tg=https://track.jefytrack.com/145f6684-c379-407a-a2eb-922622a713e1&zoneid=7406590&campaignid=8121703&carrier={carrier}&connectiontype={connection.type}&isp={isp}&cost=&visitor_id=810928959647657984 IP104.21.64.36:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subjectsecuredpeacomm.com FingerprintE2:58:9B:FC:54:26:CA:CC:89:05:0D:28:D6:2E:28:9E:39:7E:5F:D6 ValidityMon, 15 Apr 2024 19:27:34 GMT - Sun, 14 Jul 2024 19:27:33 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 Hashc28b031f5f1f66e721ec940faa2ce2b8 950756cb3cf9e59512e21c9f531e9f81abe8e557 e6506a48ccee3028590435c7ae7e9f75a8c50d57a5e86d89cc92da4c0d5b1a61
GET /in/?tg=https://track.jefytrack.com/145f6684-c379-407a-a2eb-922622a713e1&zoneid=7406590&campaignid=8121703&carrier={carrier}&connectiontype={connection.type}&isp={isp}&cost=&visitor_id=810928959647657984 HTTP/1.1
Host: securedpeacomm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 05 May 2024 10:14:08 GMT
content-type: text/html; charset=UTF-8
location: https://track.jefytrack.com/145f6684-c379-407a-a2eb-922622a713e1?zoneid=7406590&campaignid=8121703&carrier=%7Bcarrier%7D&connectiontype=%7Bconnection.type%7D&isp=%7Bisp%7D&cost=&visitor_id=810928959647657984&ctrl_fetch_dest=iframe&ctrl_id=66375bf0a4f80933950195&ctrl_ts=1714904048.6757&ctrl_ab=burp
referrer-policy: no-referrer
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uvN%2B9%2BIQdmQ7jt57kUldJIZF%2BTponfUeVCuF5s8KU%2F%2BZGqlFCOOtwPJsNXw2f0QLL%2Bstg5%2FeQ3NONyZhi9OZ6na9dkpTHyMf4GsPGc7k00Q8A%2B91y9b%2FduhQYW76DcZe8Qq3AYo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eff63eb8660b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cameesse.net/15?rnd=713471987&z=7406590&var=&varid=0&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A1.101%2C%22location%22%3A%22https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D | 139.45.197.242 | 204 No Content | 0 B |
URL GET HTTP/2cameesse.net/15?rnd=713471987&z=7406590&var=&varid=0&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A1.101%2C%22location%22%3A%22https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /15?rnd=713471987&z=7406590&var=&varid=0&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A1.101%2C%22location%22%3A%22https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: scm=1; OAID=0080537b3c674ae5ffa697e92cc4227b; oaidts=1714904047
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 05 May 2024 10:14:09 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: bfd208862583b8f2100bc2b3ff934890
access-control-expose-headers: X-Sc
set-cookie: OAID=0080537b3c674ae5ffa697e92cc4227b; expires=Mon, 05 May 2025 10:14:09 GMT; secure; SameSite=None
oaidts=1714904047; expires=Mon, 05 May 2025 10:14:09 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| cameesse.net/15?rnd=713471987&z=7406590&var=&varid=0&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A3.103%2C%22location%22%3A%22https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D | 139.45.197.242 | 204 No Content | 0 B |
URL GET HTTP/2cameesse.net/15?rnd=713471987&z=7406590&var=&varid=0&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A3.103%2C%22location%22%3A%22https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /15?rnd=713471987&z=7406590&var=&varid=0&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A3.103%2C%22location%22%3A%22https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: scm=1; OAID=0080537b3c674ae5ffa697e92cc4227b; oaidts=1714904047
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 05 May 2024 10:14:11 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 65e851cee8455268f04843b55b2d4581
access-control-expose-headers: X-Sc
set-cookie: OAID=0080537b3c674ae5ffa697e92cc4227b; expires=Mon, 05 May 2025 10:14:11 GMT; secure; SameSite=None
oaidts=1714904047; expires=Mon, 05 May 2025 10:14:11 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| aistekso.net/500/7406591?excludes=&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.244 | 200 OK | 1.4 kB |
URL OPTIONS HTTP/2aistekso.net/500/7406591?excludes=&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.244:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectaistekso.net Fingerprint3E:A5:CE:35:F4:D9:45:6B:A1:3B:2E:9C:B3:9E:78:4D:8A:4B:51:BB ValiditySun, 24 Mar 2024 05:08:27 GMT - Sat, 22 Jun 2024 05:08:26 GMT
File typegzip compressed data, max speed, from Unix Hashc95fc3827b91409ec9b8ee646fd47629 7a9264b929d5fa1ec23d331d644779529b92b046 269dbf2115a5e05c38de06a07d93b25645ab14e89a0a1941fa9a2a7b5818bcd2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /500/7406591?excludes=&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: OAID=030053ce07bb4c21f4bf356a46102e9d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:08 GMT
content-type: application/javascript
x-trace-id: 043594e8d0934f056520d190c2038825
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://anonzip.com
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=0080537b3c674ae5ffa697e92cc4227b; expires=Mon, 05 May 2025 10:14:08 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gishejuy.com/impression/kBbooIdVqa8nNcnLi6lNNESDgaMktfhaNvrrDGqo3DBv7oPUmaa1IywudGOjo0qxFe-aUkDxVYH4D3GnRN1m1ncjLXiIkfB1lxwTL_kR-gGbNoI5AMGCyEg0BXmUrLUVjKPIzJo1GznSa9i3JLOPzrSuNX_SZ1X6smlak79JAHNy-b-lQ4fqFkULgqWeIiaYUQ8ObOdClT3L1TVWuWAvEu-k3VT1Pnx5uaOft3jPrz0a-asmJ9-x0zXynd9pAf8KnXYXGyeinBCNj59T3IrpqN-OegC5gg0HfMDLMNb413cBidhYhxNrTO54bNtpdXWAkwbeSJqJAqhlLoUgF2ySPVlEkUa93SzdB7qw-TpfSTZv6OauSCzhq97TM7rVvmBvALZCw95TBkkLRHVqketQCI7bCWc8o1ox24kKTLgQN0P7FMzjZSN7gcQ0AdLwW9s3f1BG6rSzG93p4AY5e2w8vlR0SDx80OOg0WG_qgfC1zxA4lphsTCwUUQ9Kb51tmSfBCV993pZO74p4Dbl6FHYwcRr9IqFBsPg9dMDk5mCz0UoM6mi-qVNqf5XUPu1NhQ9cXInKVMYYlF3Rw_0P0kZc0vZ9w_Fo2uZOZ6Xr5qlBlSn-olx9L4RAO4ZgT6PFzrN3SX6xuXjIkT-qVyNVd7JxBL8yyPvf329k4Dcbd7UeQkO4DA0i-FvgWfLW6WUaBW7TW1Q7-xtNU_E8xcoD79u2--Mya6v_18eJVWrSh5zxGQniTjj4ttPYlrWmUBl_IftHT2n6H7cwRHy5PrKuN0TueVk8KxrAfojhcz0PczpdL0bIZgAm31oIZzVR8g=?_z=7406589&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 43 B |
URL GET HTTP/2gishejuy.com/impression/kBbooIdVqa8nNcnLi6lNNESDgaMktfhaNvrrDGqo3DBv7oPUmaa1IywudGOjo0qxFe-aUkDxVYH4D3GnRN1m1ncjLXiIkfB1lxwTL_kR-gGbNoI5AMGCyEg0BXmUrLUVjKPIzJo1GznSa9i3JLOPzrSuNX_SZ1X6smlak79JAHNy-b-lQ4fqFkULgqWeIiaYUQ8ObOdClT3L1TVWuWAvEu-k3VT1Pnx5uaOft3jPrz0a-asmJ9-x0zXynd9pAf8KnXYXGyeinBCNj59T3IrpqN-OegC5gg0HfMDLMNb413cBidhYhxNrTO54bNtpdXWAkwbeSJqJAqhlLoUgF2ySPVlEkUa93SzdB7qw-TpfSTZv6OauSCzhq97TM7rVvmBvALZCw95TBkkLRHVqketQCI7bCWc8o1ox24kKTLgQN0P7FMzjZSN7gcQ0AdLwW9s3f1BG6rSzG93p4AY5e2w8vlR0SDx80OOg0WG_qgfC1zxA4lphsTCwUUQ9Kb51tmSfBCV993pZO74p4Dbl6FHYwcRr9IqFBsPg9dMDk5mCz0UoM6mi-qVNqf5XUPu1NhQ9cXInKVMYYlF3Rw_0P0kZc0vZ9w_Fo2uZOZ6Xr5qlBlSn-olx9L4RAO4ZgT6PFzrN3SX6xuXjIkT-qVyNVd7JxBL8yyPvf329k4Dcbd7UeQkO4DA0i-FvgWfLW6WUaBW7TW1Q7-xtNU_E8xcoD79u2--Mya6v_18eJVWrSh5zxGQniTjj4ttPYlrWmUBl_IftHT2n6H7cwRHy5PrKuN0TueVk8KxrAfojhcz0PczpdL0bIZgAm31oIZzVR8g=?_z=7406589&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impression/kBbooIdVqa8nNcnLi6lNNESDgaMktfhaNvrrDGqo3DBv7oPUmaa1IywudGOjo0qxFe-aUkDxVYH4D3GnRN1m1ncjLXiIkfB1lxwTL_kR-gGbNoI5AMGCyEg0BXmUrLUVjKPIzJo1GznSa9i3JLOPzrSuNX_SZ1X6smlak79JAHNy-b-lQ4fqFkULgqWeIiaYUQ8ObOdClT3L1TVWuWAvEu-k3VT1Pnx5uaOft3jPrz0a-asmJ9-x0zXynd9pAf8KnXYXGyeinBCNj59T3IrpqN-OegC5gg0HfMDLMNb413cBidhYhxNrTO54bNtpdXWAkwbeSJqJAqhlLoUgF2ySPVlEkUa93SzdB7qw-TpfSTZv6OauSCzhq97TM7rVvmBvALZCw95TBkkLRHVqketQCI7bCWc8o1ox24kKTLgQN0P7FMzjZSN7gcQ0AdLwW9s3f1BG6rSzG93p4AY5e2w8vlR0SDx80OOg0WG_qgfC1zxA4lphsTCwUUQ9Kb51tmSfBCV993pZO74p4Dbl6FHYwcRr9IqFBsPg9dMDk5mCz0UoM6mi-qVNqf5XUPu1NhQ9cXInKVMYYlF3Rw_0P0kZc0vZ9w_Fo2uZOZ6Xr5qlBlSn-olx9L4RAO4ZgT6PFzrN3SX6xuXjIkT-qVyNVd7JxBL8yyPvf329k4Dcbd7UeQkO4DA0i-FvgWfLW6WUaBW7TW1Q7-xtNU_E8xcoD79u2--Mya6v_18eJVWrSh5zxGQniTjj4ttPYlrWmUBl_IftHT2n6H7cwRHy5PrKuN0TueVk8KxrAfojhcz0PczpdL0bIZgAm31oIZzVR8g=?_z=7406589&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: OAID=0080537b3c674ae5ffa697e92cc4227b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:12 GMT
content-type: image/gif
content-length: 43
x-trace-id: 435913c37741ee58a46b0e2694c3ae3a
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg | 104.22.32.172 | 200 OK | 17 kB |
URL GET HTTP/2offerimage.com/www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg IP104.22.32.172:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subjectofferimage.com Fingerprint5C:87:DE:3A:1B:66:15:11:B1:75:B6:AC:AF:F9:A6:EF:5E:7F:80:72 ValidityFri, 05 Apr 2024 23:50:04 GMT - Thu, 04 Jul 2024 23:50:03 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3 Hash9c6355bcf96815c755fbba83f9fd8f64 ce698b45fb51ef1494f80f432b7aff0985247724 2cd74e866757767cd5c88d066a0bc057aded1e6c07171e091dd87f56ffd4a906
GET /www/images/9c6355bcf96815c755fbba83f9fd8f64.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 May 2024 10:14:13 GMT
content-type: image/jpeg
content-length: 17173
cache-control: max-age=86400
cf-bgj: h2pri
etag: "642af881-4315"
expires: Sun, 05 May 2024 20:07:26 GMT
last-modified: Mon, 03 Apr 2023 16:02:09 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 50806
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eff65b2ce7abc2-CPH
X-Firefox-Spdy: h2
|
|
| gishejuy.com/400/7406589 | 139.45.197.242 | | 82 kB |
IP139.45.197.242:0
CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typegzip compressed data, max speed, from Unix Hashc57e57c35ce2bafb58a03703a1862012 5395cb05383e8761d7031c7943517ae92e2bbfcb 057a42cc93ca9a8a67308641e7e2f6a657efcada95bc8147eb26cbc3be1658be
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /400/7406589 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:07 GMT
content-type: application/javascript
x-trace-id: c768b7458c11d5d2935ffc610c656e06
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=030053c3eeeb46b0e55969fa4b78f301; expires=Mon, 05 May 2025 10:14:07 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | | 16 kB |
URL fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:0
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 04 May 2024 09:28:37 GMT
expires: Sun, 04 May 2025 09:28:37 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 89136
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| gishejuy.com/500/7406589?excludes=19845928&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 0 B |
URL GET HTTP/2gishejuy.com/500/7406589?excludes=19845928&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /500/7406589?excludes=19845928&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:13 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/8fe3c6098f18e4106a620cf6727dd52b.png | 104.22.32.172 | 200 OK | 71 kB |
URL GET HTTP/2offerimage.com/www/images/8fe3c6098f18e4106a620cf6727dd52b.png IP104.22.32.172:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subjectofferimage.com Fingerprint5C:87:DE:3A:1B:66:15:11:B1:75:B6:AC:AF:F9:A6:EF:5E:7F:80:72 ValidityFri, 05 Apr 2024 23:50:04 GMT - Thu, 04 Jul 2024 23:50:03 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash8fe3c6098f18e4106a620cf6727dd52b 9f43a274821bff164f83166e89db3b5559b8d88f a8487a46e41b96730b6c16da957ff9260e0a4f7123dd491f2674a5299a31da2e
GET /www/images/8fe3c6098f18e4106a620cf6727dd52b.png HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 05 May 2024 10:14:13 GMT
content-type: image/png
content-length: 70563
last-modified: Wed, 20 Sep 2023 16:50:05 GMT
etag: "650b22bd-113a3"
expires: Sun, 05 May 2024 19:44:38 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: HIT
age: 52175
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eff65cbf56abc2-CPH
X-Firefox-Spdy: h2
|
|
| cameesse.net/15?rnd=713471987&z=7406590&var=&varid=0&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A7.106%2C%22location%22%3A%22https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D | 139.45.197.242 | 204 No Content | 0 B |
URL GET HTTP/2cameesse.net/15?rnd=713471987&z=7406590&var=&varid=0&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A7.106%2C%22location%22%3A%22https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /15?rnd=713471987&z=7406590&var=&varid=0&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A7.106%2C%22location%22%3A%22https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: scm=1; OAID=0080537b3c674ae5ffa697e92cc4227b; oaidts=1714904047
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 05 May 2024 10:14:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 3b1704ae7013ffb91b32cb175058d717
access-control-expose-headers: X-Sc
set-cookie: OAID=0080537b3c674ae5ffa697e92cc4227b; expires=Mon, 05 May 2025 10:14:15 GMT; secure; SameSite=None
oaidts=1714904047; expires=Mon, 05 May 2025 10:14:15 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| gishejuy.com/500/7406589?excludes=19845928&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 14 kB |
URL GET HTTP/2gishejuy.com/500/7406589?excludes=19845928&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typegzip compressed data, max speed, from Unix Hashcdc1ba61d5c833243d0c535b2157a58b 91791ba123fff5cfd8713d2738e75cd8cb7625fc 13da8d2e0c419df14ca1391b00ba02df6609e32cf967f509a35e060fb9640529
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /500/7406589?excludes=19845928&oaid=0080537b3c674ae5ffa697e92cc4227b&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: OAID=0080537b3c674ae5ffa697e92cc4227b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:13 GMT
content-type: application/javascript
x-trace-id: a96aee1b38c506bbd9fb34c1f20b2b28
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://anonzip.com
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
set-cookie: OAID=0080537b3c674ae5ffa697e92cc4227b; expires=Mon, 05 May 2025 10:14:13 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gishejuy.com/impression/G0tH3S0oNZxJ7ZHA73j_6hmgLTvR9fGqkbP9Ea3mpwMO502yYWEvXgRkeoFQIE79yfJxSwCJPWqM2cSXOsoEZoJf_xyAqG6lpfIQ9dEKoBwH14toxJai9eQ2efjnzyEsoJlSvqPy8C_tkHE-Mkwt6U8GANKuBWfcNLWE4JYcF7z66TuqqW47pMiiWwUVyRL7jhdYSBwN-NWipyj9JML-x8X-UP4NQXAP-_JW0G7VTCtlL7qSrnbMToYFrS6Q6k8mrNZnOFlU0qXg4zrlSk6wNoODLf070qy5mNduGeEWUABt6CxhKJwd7UbrMc88A1FF8ChJJ5nshtovjZW4RMh3ZgmeCBZxOug-nlBPJwjneSUvrHBXYfRb3ZwgPbraQu-Z4DFz2LeRsNq_KJF0TTppVEyNyaOu4kMZK3REeuNPktW6FA2cNIFmHj-3p61JEPfSvV0SQDOxbM_GKGiDVJnrWEs6KYw4EfFLopKaAknzYvVLmbMGDLQR9bYqoTwC7I0L-jmkTOBAlo9YLL1-Q5L00n7ppqK5U2MoJW61RpVXxQAKhrkm5Laf7xJ6AV1XTpxlc73W_y2oVf_F3Acy_A9g_ot9MrdQ0JkEyRM3mgcPkFHtsA-zP4wkCRoLRMmPgQCOaW5-66draiXuH2IKl4Sr6SC9aMmBTELm6LSPOf9Ak6qPquYAtiZkaqyVcl3UsZf79nYwmo9JapiZ4bhPbbBD6rVi3hCO-jBwLeQVYHg66aextG77BZKTTIDrNrHnJJKGWOeg8eQ9P7c8oBsdFcQzdm-tdfQdfCBubv9siYYOgSsDXZkVhbpb_VKKn80=?_z=7406589&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.242 | 200 OK | 43 B |
URL GET HTTP/2gishejuy.com/impression/G0tH3S0oNZxJ7ZHA73j_6hmgLTvR9fGqkbP9Ea3mpwMO502yYWEvXgRkeoFQIE79yfJxSwCJPWqM2cSXOsoEZoJf_xyAqG6lpfIQ9dEKoBwH14toxJai9eQ2efjnzyEsoJlSvqPy8C_tkHE-Mkwt6U8GANKuBWfcNLWE4JYcF7z66TuqqW47pMiiWwUVyRL7jhdYSBwN-NWipyj9JML-x8X-UP4NQXAP-_JW0G7VTCtlL7qSrnbMToYFrS6Q6k8mrNZnOFlU0qXg4zrlSk6wNoODLf070qy5mNduGeEWUABt6CxhKJwd7UbrMc88A1FF8ChJJ5nshtovjZW4RMh3ZgmeCBZxOug-nlBPJwjneSUvrHBXYfRb3ZwgPbraQu-Z4DFz2LeRsNq_KJF0TTppVEyNyaOu4kMZK3REeuNPktW6FA2cNIFmHj-3p61JEPfSvV0SQDOxbM_GKGiDVJnrWEs6KYw4EfFLopKaAknzYvVLmbMGDLQR9bYqoTwC7I0L-jmkTOBAlo9YLL1-Q5L00n7ppqK5U2MoJW61RpVXxQAKhrkm5Laf7xJ6AV1XTpxlc73W_y2oVf_F3Acy_A9g_ot9MrdQ0JkEyRM3mgcPkFHtsA-zP4wkCRoLRMmPgQCOaW5-66draiXuH2IKl4Sr6SC9aMmBTELm6LSPOf9Ak6qPquYAtiZkaqyVcl3UsZf79nYwmo9JapiZ4bhPbbBD6rVi3hCO-jBwLeQVYHg66aextG77BZKTTIDrNrHnJJKGWOeg8eQ9P7c8oBsdFcQzdm-tdfQdfCBubv9siYYOgSsDXZkVhbpb_VKKn80=?_z=7406589&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectgishejuy.com Fingerprint0E:1A:AC:78:15:75:C8:D7:77:E9:9F:1E:8F:A6:05:8C:F6:CA:AC:80 ValidityTue, 02 Apr 2024 05:15:48 GMT - Mon, 01 Jul 2024 05:15:47 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impression/G0tH3S0oNZxJ7ZHA73j_6hmgLTvR9fGqkbP9Ea3mpwMO502yYWEvXgRkeoFQIE79yfJxSwCJPWqM2cSXOsoEZoJf_xyAqG6lpfIQ9dEKoBwH14toxJai9eQ2efjnzyEsoJlSvqPy8C_tkHE-Mkwt6U8GANKuBWfcNLWE4JYcF7z66TuqqW47pMiiWwUVyRL7jhdYSBwN-NWipyj9JML-x8X-UP4NQXAP-_JW0G7VTCtlL7qSrnbMToYFrS6Q6k8mrNZnOFlU0qXg4zrlSk6wNoODLf070qy5mNduGeEWUABt6CxhKJwd7UbrMc88A1FF8ChJJ5nshtovjZW4RMh3ZgmeCBZxOug-nlBPJwjneSUvrHBXYfRb3ZwgPbraQu-Z4DFz2LeRsNq_KJF0TTppVEyNyaOu4kMZK3REeuNPktW6FA2cNIFmHj-3p61JEPfSvV0SQDOxbM_GKGiDVJnrWEs6KYw4EfFLopKaAknzYvVLmbMGDLQR9bYqoTwC7I0L-jmkTOBAlo9YLL1-Q5L00n7ppqK5U2MoJW61RpVXxQAKhrkm5Laf7xJ6AV1XTpxlc73W_y2oVf_F3Acy_A9g_ot9MrdQ0JkEyRM3mgcPkFHtsA-zP4wkCRoLRMmPgQCOaW5-66draiXuH2IKl4Sr6SC9aMmBTELm6LSPOf9Ak6qPquYAtiZkaqyVcl3UsZf79nYwmo9JapiZ4bhPbbBD6rVi3hCO-jBwLeQVYHg66aextG77BZKTTIDrNrHnJJKGWOeg8eQ9P7c8oBsdFcQzdm-tdfQdfCBubv9siYYOgSsDXZkVhbpb_VKKn80=?_z=7406589&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=2&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: gishejuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: OAID=0080537b3c674ae5ffa697e92cc4227b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:15 GMT
content-type: image/gif
content-length: 43
x-trace-id: b0bdac5a6d179faa4ec47047d11761c7
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| tzegilo.com/stattag.js | 104.21.11.245 | 200 OK | 11 kB |
IP104.21.11.245:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subjecttzegilo.com Fingerprint28:2E:D0:DF:04:78:60:5A:D2:5B:1F:EA:59:80:9C:2F:89:C1:9D:D1 ValiditySat, 30 Mar 2024 15:54:48 GMT - Fri, 28 Jun 2024 15:54:47 GMT
File typeJavaScript source, ASCII text, with very long lines (18486) Hash70ebd404c2e1e7bad13998538b56887c 86e57af8ba3cfc2c004da3311835f6b54ba6d848 d71ea61938136a384e4c53c5a7a3c36e68fcc70a68bae691e270987d5d2eb11f
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 10:14:07 GMT
content-type: application/javascript
last-modified: Wed, 07 Feb 2024 12:51:13 GMT
etag: W/"65c37cc1-4ac0"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 70
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zZjOLKhAPVELlmyVz4yp%2Bc7fUgM%2BrrWst%2FFIOyG6ck5dRKHpMdXWFvvHPES07mc%2BdSVeU9tI4yTs2CPaNp2knDZke3Yn9jyhLHQQcuigKk%2BrUHqncy%2FfLtqP6NqYTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87eff63b4d0956c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cameesse.net/15?rnd=713471987&z=7406590&var=&varid=0&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A15.108%2C%22location%22%3A%22https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D | 139.45.197.242 | 204 No Content | 0 B |
URL GET HTTP/2cameesse.net/15?rnd=713471987&z=7406590&var=&varid=0&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A15.108%2C%22location%22%3A%22https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /15?rnd=713471987&z=7406590&var=&varid=0&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A15.108%2C%22location%22%3A%22https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22isIONS%22%3Atrue%7D HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: scm=1; OAID=0080537b3c674ae5ffa697e92cc4227b; oaidts=1714904047
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 05 May 2024 10:14:23 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: bc1f5fe93f58630eb4630a9da4fa435a
access-control-expose-headers: X-Sc
set-cookie: OAID=0080537b3c674ae5ffa697e92cc4227b; expires=Mon, 05 May 2025 10:14:23 GMT; secure; SameSite=None
oaidts=1714904047; expires=Mon, 05 May 2025 10:14:23 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| cameesse.net/11?rnd=3181746705&z=7406590&b=20830638&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 | 139.45.197.242 | | 0 B |
URL cameesse.net/11?rnd=3181746705&z=7406590&b=20830638&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 IP139.45.197.242:0
CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /11?rnd=3181746705&z=7406590&b=20830638&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: scm=1; OAID=0080537b3c674ae5ffa697e92cc4227b; oaidts=1714904047
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:28 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 563b7a1248140c0e9980c07f0e25d6bd
access-control-expose-headers: X-Sc
set-cookie: OAID=0080537b3c674ae5ffa697e92cc4227b; expires=Mon, 05 May 2025 10:14:28 GMT; secure; SameSite=None
oaidts=1714904047; expires=Mon, 05 May 2025 10:14:28 GMT; secure; SameSite=None
oaidvc=1; expires=Mon, 05 May 2025 10:14:28 GMT; secure; SameSite=None
CNT=1_v1_rtk9AQEAAACITQAA; expires=Sun, 05 May 2024 11:14:28 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i | 142.250.74.106 | 200 OK | 37 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i IP142.250.74.106:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (1572) Hashc2b8ea09ec90a66034e1b61bc1f8e5d4 9558953728cacfc3433ba6281c1b4a58fbbc9d51 1c593f4a688585b14c31e71fc64bfaa81d768984cdf182bca40ba8c524582685
GET /css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 May 2024 10:14:06 GMT
date: Sun, 05 May 2024 10:14:06 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700 | 142.250.74.106 | 200 OK | 11 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700 IP142.250.74.106:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
Hash155f53ee6339ba8215c3513f7e89a646 1785d802da7b560dc8af49e5c17627ecc88285a0 859bbc3840ddbfac2cbabd04217077fcab6f31a0e24a9f7ff1a2ee6246ba5319
GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 May 2024 10:14:12 GMT
date: Sun, 05 May 2024 10:14:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| externalde.com/out/xyhkxckud/?ctrl_id=66375bf0a4f80933950195&ctrl_ab=burp&ctrl_ts=1714904048.6757&ctrl_vol_oid=0b046699-9de5-41eb-a62f-5035b56e631b&tg=https://lkbx.me/4KqY7&uid=ws4do4m5l309iq21jdufqhho | 104.21.9.15 | 302 Found | 1.1 kB |
URL GET HTTP/2externalde.com/out/xyhkxckud/?ctrl_id=66375bf0a4f80933950195&ctrl_ab=burp&ctrl_ts=1714904048.6757&ctrl_vol_oid=0b046699-9de5-41eb-a62f-5035b56e631b&tg=https://lkbx.me/4KqY7&uid=ws4do4m5l309iq21jdufqhho IP104.21.9.15:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerGoogle Trust Services LLC Subjectexternalde.com Fingerprint0D:2A:5D:DC:29:15:BD:05:1C:8E:F1:C5:82:D4:C0:5C:D6:A5:AB:58 ValiditySat, 27 Apr 2024 14:00:09 GMT - Fri, 26 Jul 2024 14:00:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /out/xyhkxckud/?ctrl_id=66375bf0a4f80933950195&ctrl_ab=burp&ctrl_ts=1714904048.6757&ctrl_vol_oid=0b046699-9de5-41eb-a62f-5035b56e631b&tg=https://lkbx.me/4KqY7&uid=ws4do4m5l309iq21jdufqhho HTTP/1.1
Host: externalde.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 05 May 2024 10:14:09 GMT
content-type: text/html; charset=UTF-8
location: https://lkbx.me/4KqY7?uid=ws4do4m5l309iq21jdufqhho
referrer-policy: no-referrer
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W5Y%2FdpyZmBG%2FNVwlXv5VNYawVvC7IP8FcaDp52tIrEejns6vY6FK402paadC7pw%2BT8lfA9EFUdU%2FmW%2FaSMlcSF2X70UggzSeol743rQgq%2F9%2FIWs4O1L6%2FUTo91S5tFfoMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eff6415be90b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| veepteero.com/?rb=cA4OLsSX-cNwCXdJir6Wg2ahLRVVbDeh17Q3eh11qIk3Ls_vw19CU4hDQjq1hZIyrcj7Pl5W1CNDQ9EbiL8OGCQ6xXBK9ZHyvK-MtXlTrq8HSGM8PDWK9lSSw-WcObuFLC4nypm8XWFzk0RYCdwgvGgw2OZIA3dISstrB7JrFEyHEuSwGstjq4UgxwpXCeWk5HfHQv1k7nPYD2SuIM9bSGSVmMW9DEpwRYQ6aVcbk29aYZzGA3KsJDUEqbckRijMf9E6sg%3D%3D&request_ab2=0&zoneid=7406588&js_build=iclick-v1.788.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.788.6-auto&navlng=en-US&pnt=0&pnrc=0&bs=64387c0f-02ca-4afc-9c53-973455abbf6b&wasm=1&userId=0080537b3c674ae5ffa697e92cc4227b&m=link | 139.45.197.242 | 200 OK | 2.4 kB |
URL GET HTTP/2veepteero.com/?rb=cA4OLsSX-cNwCXdJir6Wg2ahLRVVbDeh17Q3eh11qIk3Ls_vw19CU4hDQjq1hZIyrcj7Pl5W1CNDQ9EbiL8OGCQ6xXBK9ZHyvK-MtXlTrq8HSGM8PDWK9lSSw-WcObuFLC4nypm8XWFzk0RYCdwgvGgw2OZIA3dISstrB7JrFEyHEuSwGstjq4UgxwpXCeWk5HfHQv1k7nPYD2SuIM9bSGSVmMW9DEpwRYQ6aVcbk29aYZzGA3KsJDUEqbckRijMf9E6sg%3D%3D&request_ab2=0&zoneid=7406588&js_build=iclick-v1.788.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.788.6-auto&navlng=en-US&pnt=0&pnrc=0&bs=64387c0f-02ca-4afc-9c53-973455abbf6b&wasm=1&userId=0080537b3c674ae5ffa697e92cc4227b&m=link IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectveepteero.com Fingerprint13:68:56:48:EC:67:A6:93:BE:E0:36:BC:FA:04:75:6D:6E:D2:C1:91 ValiditySat, 23 Mar 2024 05:18:36 GMT - Fri, 21 Jun 2024 05:18:35 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (2385), with no line terminators Hash88c4c4eb2312459316d9e71d1421dcd4 3f7ec6ce3643cddf5a6d20d8216d143f1de59ab1 25de025332ea38c1e45ab897cb219f598e1a950aa5d306250ed29effc937190e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?rb=cA4OLsSX-cNwCXdJir6Wg2ahLRVVbDeh17Q3eh11qIk3Ls_vw19CU4hDQjq1hZIyrcj7Pl5W1CNDQ9EbiL8OGCQ6xXBK9ZHyvK-MtXlTrq8HSGM8PDWK9lSSw-WcObuFLC4nypm8XWFzk0RYCdwgvGgw2OZIA3dISstrB7JrFEyHEuSwGstjq4UgxwpXCeWk5HfHQv1k7nPYD2SuIM9bSGSVmMW9DEpwRYQ6aVcbk29aYZzGA3KsJDUEqbckRijMf9E6sg%3D%3D&request_ab2=0&zoneid=7406588&js_build=iclick-v1.788.6-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=0&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.788.6-auto&navlng=en-US&pnt=0&pnrc=0&bs=64387c0f-02ca-4afc-9c53-973455abbf6b&wasm=1&userId=0080537b3c674ae5ffa697e92cc4227b&m=link HTTP/1.1
Host: veepteero.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:07 GMT
content-type: application/json
x-trace-id: 912655b2e79f02a7c11d2598e3241911
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0080537b3c674ae5ffa697e92cc4227b; expires=Mon, 05 May 2025 10:14:07 GMT; path=/; secure; SameSite=None
oaidts=1714904047; expires=Mon, 05 May 2025 10:14:07 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sun, 12 May 2024 10:14:07 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cameesse.net/11?rnd=3181746705&z=7406590&b=20830638&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=80 | 139.45.197.242 | 200 OK | 0 B |
URL GET HTTP/2cameesse.net/11?rnd=3181746705&z=7406590&b=20830638&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=80 IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /11?rnd=3181746705&z=7406590&b=20830638&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=wK2vYAorTCGBbAaqvd8f_t0HH1lec697r6YD3iq0TwxWkhkr5GCVPkVAEja3I_FU2iNPi33VuZ5KNefdjAwL-rE5Rh71FtrcmzsH0HY0q8Y_yy6U6T5hI_4bfVDk-29-awEGWWUnCYC9ZmoH-wDGKkmrF81epO2adfXlGb92lz_N1MXV-J_Sz38FMyTz-Z3boP2qTftSHTnyr9zZC7XKGqd7JJp9kJ8DD3KwouWXHMebLGcbRx2A597pWA7M4WvgSGQK_eIbl6JNikd5QtSF0LZj9wT0n_6dKh9LBLPJSTJXdA43hF-fqa3V1kIo96vPAnWLfelTNDYZwAtiynMxFZF9d_vx98IDgwM99QH7SN25GpEBvvKabKFFrlt1PIf4L5TWs0LX5WnmdCHxuF5-o4R9HKY5biHttULx8ctM2rgEIcdHmsBrsGpAPj-dq8gutnSX3a2Emw2ZWCsmHaatj0OkWHR-QsLKgROZ6Iaiz5mRnO2zG89tljjUptKay52sAEhf6x-3UjeKcJDhHKbPMZMSmo9tc29wK7ygzthlx_IwSfZRQYVCP7Khg-g6mwN4YJrDBMP8gZjHL5wb08iKzFgp9PcO4q5rjvDDB5PZ6JDP3oZC&ruid=47f79cc5-48e3-4aa7-b4de-f15d2d7270d1&subid=810928959647657984&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=0&sah=1024&drf=&hil=1&ist=0&ot=80 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: scm=1; OAID=0080537b3c674ae5ffa697e92cc4227b; oaidts=1714904047
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:08 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://anonzip.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 1a7ce46f6dcfaf93a8e596443b5d87dc
access-control-expose-headers: X-Sc
set-cookie: OAID=0080537b3c674ae5ffa697e92cc4227b; expires=Mon, 05 May 2025 10:14:08 GMT; secure; SameSite=None
oaidts=1714904047; expires=Mon, 05 May 2025 10:14:08 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| moonoafy.net/pfe/current/universal.min.js?v=3.1.504 | 139.45.197.250 | 200 OK | 90 kB |
URL GET HTTP/2moonoafy.net/pfe/current/universal.min.js?v=3.1.504 IP139.45.197.250:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectmoonoafy.net Fingerprint17:AD:95:C9:DA:29:B4:0A:55:33:11:0A:74:DF:AF:4D:05:13:AC:A0 ValidityFri, 29 Mar 2024 05:18:37 GMT - Thu, 27 Jun 2024 05:18:36 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash4caad44ecc6a13eba45b63ed7cf9e387 e67dfe90bebd5447495d8fe962d03e55f6d13071 66f95b5eb4bf3dc3a13643e3e6776b18a2b15e0b881328e2ee012c73e679ad00
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pfe/current/universal.min.js?v=3.1.504 HTTP/1.1
Host: moonoafy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://anonzip.com/
Origin: https://anonzip.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:07 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:48:53 GMT
etag: W/"662a3515-15efa"
access-control-allow-origin: https://anonzip.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| aistekso.net/impression/H467ayUW62IJLEDiUv6wZOn4DyeYOiMR6iHYTMOfxfKJFFrLzWhZTzM1KyrMN__kwRsAsFJItIFWth3wNqiKIHBeD6HDIqr3OakK-svKSkv_TXcH0AXlUmDZM0FMH5TYgbkQmd7uXkH7WCi-t3bz6jVPYvX4BoxVNlsh4C9jjBccfLRvb50hcYxbnQydQ-QXnDxLlKmFet1Fh_8D7X1VLlR-qsR5gQmZih69uZ7HVzV3c2zlc1iTWXgAnZiA-ERg1bthrZ4fWIT7suiUhx0xRLKMQt575XtWkXpZYFcxcqXHTaZm6C-VcrmAebkhZp95KxUvfkN3LNTztX-zna8M2EhJkDecFq9de1L8_olM4LOmafUzZTknXurvUhLm_QnJ73mLCyY6woEpzwxbNd0ndxPXMib8T9e_oDTh0nPfIYmkLhXlNIJjMW-H7oGmFsOr1KuB50Ld--X78EWjxEOhz6MKFNhIhmC3RnSH8NaSRUS3RkFnpOaggwupoNcvOt-W4vew0jT_L9tW4x7-wp1zV7JmoqAdHlLS5ISe5GGsa216XCGmcj-zwIBQgc58uxWaQXQvj07eb0QTbMWuChIBIx8hGr2-Dy0fXX5Ce11RelyzpjSFEsadqmU_suDuy4KgKLjk68YFJo7fHOcqDgrZwm8BcFuHBY7sHm7CEMuQ0v2hBbo2yoArp8Wl-nOBUbvH5zRM53PERea0wbsMzz5FLFZfU6K1HbsZvD4gW0ccMNGEM6i5n7GDAy0o-B1c2R2U-l9ilrouYeg1Hislx3CZGq9aag-fQcIoernQy6bT1t-1A2gVzzhZylXewwo=?_z=7406591&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 | 139.45.197.244 | 200 OK | 43 B |
URL GET HTTP/2aistekso.net/impression/H467ayUW62IJLEDiUv6wZOn4DyeYOiMR6iHYTMOfxfKJFFrLzWhZTzM1KyrMN__kwRsAsFJItIFWth3wNqiKIHBeD6HDIqr3OakK-svKSkv_TXcH0AXlUmDZM0FMH5TYgbkQmd7uXkH7WCi-t3bz6jVPYvX4BoxVNlsh4C9jjBccfLRvb50hcYxbnQydQ-QXnDxLlKmFet1Fh_8D7X1VLlR-qsR5gQmZih69uZ7HVzV3c2zlc1iTWXgAnZiA-ERg1bthrZ4fWIT7suiUhx0xRLKMQt575XtWkXpZYFcxcqXHTaZm6C-VcrmAebkhZp95KxUvfkN3LNTztX-zna8M2EhJkDecFq9de1L8_olM4LOmafUzZTknXurvUhLm_QnJ73mLCyY6woEpzwxbNd0ndxPXMib8T9e_oDTh0nPfIYmkLhXlNIJjMW-H7oGmFsOr1KuB50Ld--X78EWjxEOhz6MKFNhIhmC3RnSH8NaSRUS3RkFnpOaggwupoNcvOt-W4vew0jT_L9tW4x7-wp1zV7JmoqAdHlLS5ISe5GGsa216XCGmcj-zwIBQgc58uxWaQXQvj07eb0QTbMWuChIBIx8hGr2-Dy0fXX5Ce11RelyzpjSFEsadqmU_suDuy4KgKLjk68YFJo7fHOcqDgrZwm8BcFuHBY7sHm7CEMuQ0v2hBbo2yoArp8Wl-nOBUbvH5zRM53PERea0wbsMzz5FLFZfU6K1HbsZvD4gW0ccMNGEM6i5n7GDAy0o-B1c2R2U-l9ilrouYeg1Hislx3CZGq9aag-fQcIoernQy6bT1t-1A2gVzzhZylXewwo=?_z=7406591&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 IP139.45.197.244:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectaistekso.net Fingerprint3E:A5:CE:35:F4:D9:45:6B:A1:3B:2E:9C:B3:9E:78:4D:8A:4B:51:BB ValiditySun, 24 Mar 2024 05:08:27 GMT - Sat, 22 Jun 2024 05:08:26 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impression/H467ayUW62IJLEDiUv6wZOn4DyeYOiMR6iHYTMOfxfKJFFrLzWhZTzM1KyrMN__kwRsAsFJItIFWth3wNqiKIHBeD6HDIqr3OakK-svKSkv_TXcH0AXlUmDZM0FMH5TYgbkQmd7uXkH7WCi-t3bz6jVPYvX4BoxVNlsh4C9jjBccfLRvb50hcYxbnQydQ-QXnDxLlKmFet1Fh_8D7X1VLlR-qsR5gQmZih69uZ7HVzV3c2zlc1iTWXgAnZiA-ERg1bthrZ4fWIT7suiUhx0xRLKMQt575XtWkXpZYFcxcqXHTaZm6C-VcrmAebkhZp95KxUvfkN3LNTztX-zna8M2EhJkDecFq9de1L8_olM4LOmafUzZTknXurvUhLm_QnJ73mLCyY6woEpzwxbNd0ndxPXMib8T9e_oDTh0nPfIYmkLhXlNIJjMW-H7oGmFsOr1KuB50Ld--X78EWjxEOhz6MKFNhIhmC3RnSH8NaSRUS3RkFnpOaggwupoNcvOt-W4vew0jT_L9tW4x7-wp1zV7JmoqAdHlLS5ISe5GGsa216XCGmcj-zwIBQgc58uxWaQXQvj07eb0QTbMWuChIBIx8hGr2-Dy0fXX5Ce11RelyzpjSFEsadqmU_suDuy4KgKLjk68YFJo7fHOcqDgrZwm8BcFuHBY7sHm7CEMuQ0v2hBbo2yoArp8Wl-nOBUbvH5zRM53PERea0wbsMzz5FLFZfU6K1HbsZvD4gW0ccMNGEM6i5n7GDAy0o-B1c2R2U-l9ilrouYeg1Hislx3CZGq9aag-fQcIoernQy6bT1t-1A2gVzzhZylXewwo=?_z=7406591&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&pl=https%3A%2F%2Fanonzip.com%2F2C0j%2FLittle_Life_E-made.zip&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&tzofs=0&btz=UTC&bto=0&js_build=8&sw_version=v1.337.0 HTTP/1.1
Host: aistekso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Cookie: OAID=0080537b3c674ae5ffa697e92cc4227b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:12 GMT
content-type: image/gif
content-length: 43
x-trace-id: 50a7ae78296ef3b713b4dde1d951f5f3
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| cameesse.net/1?z=7406590 | 139.45.197.242 | 200 OK | 43 kB |
IP139.45.197.242:443
Requested byhttps://anonzip.com/2C0j/Little_Life_E-made.zip CertificateIssuerLet's Encrypt Subjectcameesse.net Fingerprint40:09:71:B1:17:F8:74:15:9B:3D:0A:95:73:15:74:D6:05:A5:5B:44 ValidityFri, 22 Mar 2024 19:24:17 GMT - Thu, 20 Jun 2024 19:24:16 GMT
File typeJavaScript source, ASCII text, with very long lines (42427) Hash2167599a3b485a654fb70e32c19ad449 3c75bd3f905510ea54c2be874399662f12159a6b 1afc4fd40622de94373f2f28906394cb1a4718aa1fedb938fd824b4babbb9ed9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1?z=7406590 HTTP/1.1
Host: cameesse.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anonzip.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 10:14:07 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 1e83e9154d8916ab946e526da86d752e
access-control-expose-headers: X-Sc
x-sc: WitvUYNfTDMyweyaNUtTSfd8YnoUcQIZOMZaj2a1Wi6NNQZmUK0vbtX1mWdNdrBAT_9VoYsl461ZmZ8LQXQ7RTk_m9g=
set-cookie: scm=1; expires=Mon, 05 May 2025 10:14:07 GMT; secure; SameSite=None
OAID=0400532239f445b1e7f1daa13661ba62; expires=Mon, 05 May 2025 10:14:07 GMT; secure; SameSite=None
oaidts=1714904047; expires=Mon, 05 May 2025 10:14:07 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
0.0.0.0